kevinoid

Joined 13 years ago

Karma
305
Submissions
77
Member since
Feb 28
Email: [email protected]

Website: https://kevinlocke.name

GitHub: https://github.com/kevinoid

GitLab: https://gitlab.com/kevinoid

View on Hacker News

Recent submissions

Comment · 4 months ago
A significant effect is through opioid receptor activation, as demonstrated by Williams et al. <https://doi.org/10.1038/s41380-019-0503-4> by blocking the receptor with naltrexone, which attenuated the antisuicidality effects.

The Huberman Lab episode Ketamine: Benefits and Risks for Depression, PTSD & Neuroplasticity <https://www.hubermanlab.com/episode/ketamine-benefits-and-ri...> and the referenced journal articles (including the above) have a lot of detail on it.

Comment · 2 years ago
Location: Bozeman, MT

Remote: Yes

Willing to relocate: No

Technologies: C#, Python, Node.js, MSSQL, ASP.NET WebForms, ASP.NET Core, JavaScript, OpenAPI, Selenium, REST, XML, XSLT, Git, Docker, Ansible, Debian, Bash, POSIX Shell, and many others.

Résumé/CV: https://kevinlocke.name/resume

Email: [email protected]

Hi, I'm Kevin. I'm a generalist senior software engineer and consultant with over a decade of experience with a broad range of technologies, roles, and industries. I graduated magna cum laude with a B.S. in C.S. from Cornell, co-founded Digital Engine Software in 2009, joined early-stage fintech startup Quantpost in 2013, and have been developing and consulting independently since 2016 for a variety of clients, particularly in home health care and construction. Recently I've worked on many backend web sites and services (ASP.NET+MSSQL and MEAN Stack), automation, integration, and synchronization (Selenium+C#, Python, PowerShell), and Linux DevOps (Docker, Ansible, Bash) projects, but I particularly enjoy lower-level embedded and systems programming. I'm a free and open-source software proponent and contributor. I'm looking forward to joining a team doing meaningful work, particularly toward a social good, contributing my expertise, and learning and collaborating with other professionals.

Comment · 2 years ago
This approach sounds similar to Petitboot <http://www.kernel.org/pub/linux/kernel/people/geoff/petitboo...> which is a kexec-based bootloader that I used on the Playstation 3 many years ago. Apparently it now targets many other systems and there is a (dead?) fork for Coreboot <https://github.com/ArthurHeymans/petitboot_for_coreboot>.
Comment · 4 years ago
Comment · 4 years ago
Comment · 4 years ago
Comment · 4 years ago
Comment · 5 years ago
Interesting. If I understand correctly, the "bypass" is https://github.com/coofcookie/Windows11Upgrade/blob/1.0.0/Wi... which is a copy of https://github.com/AveYo/MediaCreationTool.bat/blob/main/MCT... which appears to be intentionally cryptic.

It sets HKLM\SYSTEM\Setup\MoSetup\AllowUpgradesWithUnsupportedTPMOrCPU=1 which is mentioned by Microsoft in https://support.microsoft.com/windows/ways-to-install-window... which seems reasonable.

According to the comment, the rest of the script "uses IFEO to attach to Virtual Disk Service Loader process running during setup, then erases appraiserres.dll [...] it must also do some ping-pong renaming of vdsldr in system32\11" Could anyone explain this in more detail?

Also note, according to https://github.com/AveYo/MediaCreationTool.bat/issues/11 it skips the CPU and TPM checks, but not the Secure Boot checks.

Comment · 5 years ago
Comment · 5 years ago
Agreed. I should have made my post clearer. OpenWrt does not suppport SHA-2 signature hashing or any of the newer key algorithms I mentioned, so you are stuck with RSA+SHA1.
Comment · 5 years ago
I've been running with ssh-rsa disabled for a while (with a config based on https://infosec.mozilla.org/guidelines/openssh#modern-openss... ) and it's been pretty smooth. Support for better algorithms is widespread, with a few exceptions (like bazaar.launchpad.net).

One gotcha: OpenWrt does not enable ECDSA by default[1] and only recently enabled support for ed25519 by default.[2][3] It's available in release candidates for 21.02, but not in current stable releases. So if you're running a stable release you'll need to either add `PubkeyAcceptedKeyTypes +ssh-rsa` to your client ssh_config or use a custom build of OpenWrt with DROPBEAR_ECC or DROPBEAR_ECC_FULL enabled.

[1]: https://bugs.openwrt.org/index.php?do=details&task_id=786

[2]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=d0...

[3]: https://bugs.openwrt.org/index.php?do=details&task_id=3216&s...

[4]: https://bugs.openwrt.org/index.php?do=details&task_id=3452

Comment · 5 years ago
Comment · 5 years ago
Comment · 5 years ago
Comment · 5 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton