kyleomalley
Joined 9 years ago
Joined 9 years ago
I probably use Reddit 1/10 as much as I used to as well. Kind of sad seeing Reddit going down the enshitification path that seems like most software and apps tend to do.
I’ve tested most of them (from historical archives) and have automated testing any new CA certificates that show up in CT.
I’m calling the check “luggage code entropy” (1 byte).
It was a mistake to trust so many root CAs and misapply the same level of trust where clearly it is impossible to independently verify and most of the accountability is smoke and mirrors. We need to be asking “why” here, the stated reason needs to be much more than “because webtrust audit” and “we recorded the entire operational process for key material handling on YouTube with this open source implementation of key ceremony tooling and have underwritten the strength of the private key with a few $mm dollars, to be paid out to the rest of the roots for the shared reputational damage to the entire ecosystem should we fuck up (intentional or otherwise).
I expect if enough of these stop working, the site will too.
From my prospective, the outputs of a bot aren’t the interesting bits, it’s the input prompt that should warrant more attention.
Harness example: https://github.com/evilsocket/audit
On the west coast of the US, there is a consortium of independent networks that are likely to merge (to some degree, TBD). https://www.wcmesh.com/
I'm in SoCal right now and while this network is impressive, the Cascade network is really really awesome (I was able to use it first hand last week!). https://cascadiamesh.org/
One of the challenges that remains unsolved is how local networks are forming around non-default-for-the-region settings and making those well know or obvious to new users.
Take away from the map from analyzer.letsmesh.com for today is that ohio is extremely overrepresented, why? This weekend is Hamvention!
Interesting links:
- https://analyzer.wcmesh.com/#/map (Local SoCal mesh
- https://www.localmesh.nl/en/ (Netherlands based network)
- [1] https://bostonme.sh/docs/MeshCore/meshcore-collisions/
- [2] https://nodakmesh.org/blog/2026-03-06-repeater-firmware-v1140Since primarily interested in FT8 and MeshCore here in the local SoCal MC region (wcmesh.com) I put together a Pure-Golang implementation to combine both modes into the same GUI client. The FT8 modem might be the only functional Golang decoder right now, unsure, but it’s entirely open source and here:
https://github.com/kyleomalley/nocordhf
The workflow releases cross compiled for MacOS (notarized), Windows, Linux and uses Fyne for the UI.
In the future, I plan to add other more interesting modes like JS8Call and VeraHF modes, FT4 etc.
Im going to take all of the data and use it for a corpus for training and see if I can get a small model built that can run easily on mac arm64
The /lib/ golang FT8 library is not yet complete and struggles with around 15% of the decodes that WSTJX will get at very low signal to noise ratios (-18 to -25). But otherwise matches at around 85%.
If you have an newer ICOM or Yaesu radio and use MacOS, you can simply just run the program, configure your callsign and LOTW logins and you are off. Every logged QSO goes into a standard ADIF file that gets signed/uploaded automatically and DXCC grid tracking can be enabled on the map overlay.
The waterfall scope overlay is my favorite feature though as you can live watch decodes and quickly cross reference what you see, get magnified view of a decode and do QRZ lookups etc directly on the waterfall.