sicelo- | Vajb: i had 'some' success getting people over to telegram .. my family particularly. but after some time they started to use it less & less ... but at least it still keeps me in touch with my most immediate family and is sufficient for our needs | 00:01 |
---|---|---|
*** cpt_nemo has quit IRC | 00:04 | |
*** erstazi has quit IRC | 00:13 | |
bencoh | aaa123: what are those "kernel settings"? | 00:14 |
aaa123 | I think kernel power settings | 00:15 |
bencoh | do you use kernel-config? | 00:16 |
aaa123 | i'll provide a screenshot in a minute | 00:16 |
bencoh | oh and, does it boot or does it crash? | 00:17 |
aaa123 | or not, the error message is not showing now | 00:18 |
aaa123 | as far as I know I've installed the kernel power, I also have nokia kernel icon in the menu so it is installed, but uname -r says this is standard kernel | 00:19 |
bencoh | errr | 00:20 |
bencoh | maybe you only installed the -image package | 00:20 |
aaa123 | sometimes it crashes, can't determine why, but normally it boot and work | 00:20 |
aaa123 | maybe I should do it again, it was long time ago and now it's time to clean up the mess :) | 00:21 |
bencoh | make sure you have a backup and/or know how to use rescueOS :) | 00:21 |
bencoh | (and/or loading a kernel using flasher) | 00:22 |
aaa123 | i'd prefer not bricking it ... | 00:23 |
bencoh | usb works? | 00:23 |
bencoh | if yes then you should be fine | 00:23 |
aaa123 | everything works, but my experience with linux and n900 is like "if you could brick it - don't touch it, you will" | 00:25 |
bencoh | haha | 00:25 |
bencoh | well you won't brick it in the strict sense - since you'll always be able to restore or reinstall | 00:26 |
aaa123 | what about bringing nokia kernel from menu icon ? | 00:26 |
bencoh | I have no idea what this icon is | 00:26 |
aaa123 | in the middle http://s27.postimg.org/cvhkte6lf/Screenshot_20161229_232840.png | 00:29 |
bencoh | still no idea what this is supposed to be | 00:30 |
*** erstazi has joined #maemo | 00:30 | |
aaa123 | "this program will restore original Nokia kernel and uninstall package Linux kernel for power user [...]" | 00:31 |
*** Pali has quit IRC | 00:58 | |
*** geaaru has quit IRC | 01:34 | |
*** aaa123 has quit IRC | 01:41 | |
*** shentey has joined #maemo | 02:00 | |
*** florian has quit IRC | 02:41 | |
*** shentey has quit IRC | 02:59 | |
*** cyphase has quit IRC | 04:14 | |
*** cyphase has joined #maemo | 04:19 | |
*** cyphase has quit IRC | 04:40 | |
*** cyphase has joined #maemo | 04:45 | |
*** cyphase has quit IRC | 04:48 | |
*** cyphase has joined #maemo | 04:49 | |
*** cyphase has joined #maemo | 04:49 | |
*** cyphase has joined #maemo | 04:50 | |
*** dafox has quit IRC | 05:00 | |
*** cyphase has quit IRC | 05:02 | |
*** cyphase has joined #maemo | 05:07 | |
*** cyphase has quit IRC | 05:32 | |
*** cyphase has joined #maemo | 05:37 | |
*** DocScrutinizer05 has quit IRC | 07:25 | |
*** DocScrutinizer05 has joined #maemo | 07:25 | |
*** at1as has quit IRC | 08:07 | |
*** at1as has joined #maemo | 08:35 | |
*** arcean has joined #maemo | 08:37 | |
*** L29Ah has left #maemo | 09:10 | |
*** L29Ah has joined #maemo | 09:14 | |
*** L29Ah has left #maemo | 09:18 | |
*** L29Ah has joined #maemo | 09:19 | |
*** spinal84 has joined #maemo | 09:21 | |
*** L29Ah has left #maemo | 09:24 | |
*** L29Ah has joined #maemo | 09:25 | |
Vajb | hmm aaa123 is not anymore, but maybe his problem was kernel power reporting that "unexpected reboot detected. Custom kernel settings not loaded" | 10:02 |
Vajb | is not here* | 10:03 |
*** Pali has joined #maemo | 10:06 | |
*** florian has joined #maemo | 10:29 | |
*** KotCzarny has quit IRC | 10:40 | |
*** KotCzarny has joined #maemo | 10:41 | |
*** florian has quit IRC | 10:45 | |
*** florian has joined #maemo | 11:04 | |
*** florian has quit IRC | 11:11 | |
*** krnlyng has quit IRC | 11:19 | |
*** krnlyng has joined #maemo | 11:35 | |
*** chainsawbike has quit IRC | 11:53 | |
*** kerio has quit IRC | 12:13 | |
*** kerio has joined #maemo | 12:13 | |
*** spinal84 has quit IRC | 12:55 | |
*** jon_y has quit IRC | 14:02 | |
*** geaaru has joined #maemo | 14:06 | |
*** cpt_nemo has joined #maemo | 14:13 | |
*** jon_y has joined #maemo | 14:17 | |
*** shentey has joined #maemo | 14:26 | |
Pali | DocScrutinizer05: nokia n900 has 4 GPIOs for eci | 15:06 |
Pali | at least they are named "eci" in stock nokia 2.6.28 kernel | 15:06 |
DocScrutinizer05 | I know | 15:06 |
Pali | and there is configuration /* ECI INT#2 detect connected to mic/bias line */ which is never used | 15:07 |
Pali | when eci_sw1 and eci_sw2 are both set to zero | 15:07 |
*** shentey has quit IRC | 15:12 | |
Pali | current mainline kernel does not support that one button n900 headset... | 15:17 |
Pali | I will try to extend mainline rx51.c snd driver to support it | 15:17 |
*** BCMM has joined #maemo | 15:18 | |
DocScrutinizer05 | ShadowJK: Pali: http://paste.opensuse.org/29295440 is a bq27200.sh (partial) log of a calibrate-bq27k.sh run. It's quite strange how the chip doesn't even adjust NAC anymore when it reaches 6% RSOC | 15:27 |
ShadowJK | DocScrutinizer05, it hasn't reached the voltage threshold yet, which is at 3248mV, iirc. | 15:33 |
DocScrutinizer05 | yep | 15:33 |
DocScrutinizer05 | but that it doesn't count down even NAC is pretty strange, never realized that it works that way | 15:34 |
ShadowJK | Yeah it holds it at 6% | 15:34 |
ShadowJK | Eventually it does start counting down from 6% too, but I'm not sure what the conditions for that are | 15:35 |
DocScrutinizer05 | EDV1 ? | 15:35 |
ShadowJK | Might be if the "hidden" counter goes below 0% | 15:36 |
DocScrutinizer05 | hmm | 15:37 |
ShadowJK | although then it's probably also over the learning limit | 15:37 |
DocScrutinizer05 | I *guess* when it really starts counting again then it does that on EDV1=1 and it counts down until 0% | 15:39 |
DocScrutinizer05 | at EDVF it prolly will stall totaly | 15:39 |
DocScrutinizer05 | internal counter (if such thing exists) must be way below 0% now: http://paste.opensuse.org/31660145 | 15:42 |
DocScrutinizer05 | s/internal/hidden/ | 15:42 |
infobot | DocScrutinizer05 meant: hidden counter (if such thing exists) must be way below 0% now: http://paste.opensuse.org/31660145 | 15:42 |
DocScrutinizer05 | I'm surprised about apparent health of that battery, I bought it "used" yesterday and it was flatbat, I suspect it sat in that carton box like that for years | 15:45 |
DocScrutinizer05 | weird is how temperature of device is rising now that bat voltage drops a bit | 15:48 |
*** shentey has joined #maemo | 15:48 | |
DocScrutinizer05 | also current drawn from battery increased from avg 220mA to avg 300mA only by plugging in USB charger while charging *disabled* and 0.0mA drawn from charger | 15:50 |
Pali | yes, you need to wait for EDV1=1 | 15:51 |
DocScrutinizer05 | I bet that's the damn MUSB core, plus ULPI, PHY etc | 15:51 |
freemangordon | Pali: I think we would need yet another input driver | 15:51 |
freemangordon | (re ECI) | 15:52 |
Pali | for snd? | 15:52 |
freemangordon | for eci | 15:52 |
freemangordon | isn;t it supposed to act like kbd? | 15:52 |
Pali | ECI would be hard to implement in state ready for upstream | 15:52 |
Pali | DocScrutinizer05 already did some investigation about ECI protocol | 15:53 |
Pali | but for that one button n900 headset either new input driver is needed, or integration into sound/soc/rx51.c | 15:53 |
freemangordon | I guess upstream will only accept input driver | 15:54 |
Pali | I will try to play with integration into rx51.c | 15:54 |
freemangordon | hmm, maybe I am missing something - why it should be integrated with snd? | 15:54 |
Pali | it needs functions from rx51.c, so either it will be in rx51.c or or rx51 exports funcions | 15:54 |
freemangordon | ah, I see | 15:54 |
Pali | also needed gpios are defined for rx51.c | 15:55 |
freemangordon | maybe rx51.c should create that input driver. I have no idea if upstream will accept that | 15:55 |
Pali | first I need some working code :-) and then I can modify it for upstream | 15:55 |
freemangordon | yeah :) | 15:55 |
freemangordon | Pali: do you have booting maemo with 4.9? | 15:56 |
Pali | no | 15:56 |
Pali | 4.9 is broken | 15:56 |
freemangordon | oh | 15:56 |
Pali | CONFIG_CMDLINE is ignored | 15:56 |
Pali | and also cmdline from bootloader is ignored | 15:56 |
Pali | :D | 15:56 |
freemangordon | but there is a patch already? | 15:56 |
Pali | so no way to specify cmdline | 15:56 |
freemangordon | I saw on the ML | 15:56 |
Pali | there are more patches, but people discuss how to fix it properly | 15:57 |
freemangordon | ah | 15:57 |
Pali | basically CONFIG_CMDLINE was broken for arm since begining | 15:57 |
Pali | also cmdline from bootloader was broken for DT boot from begining | 15:57 |
Pali | and in some specific situation it worked :D | 15:57 |
freemangordon | yep, I read the discussion. But I was under the impression it was decided on how the fix should like | 15:58 |
Pali | some bugs where fixed and cmdline stopped working... | 15:58 |
freemangordon | *look like | 15:58 |
freemangordon | addin the missing node | 15:58 |
Pali | haha, looks like it is not simple | 15:58 |
Pali | and not enough for CONFIG_CMDLINE | 15:59 |
freemangordon | Pali: on the other hand - did you see the video with latest gtk3 h-d? | 15:59 |
Pali | not yet | 15:59 |
freemangordon | it is almost like the real one :D | 15:59 |
freemangordon | wanna link? | 15:59 |
Pali | y! | 16:00 |
freemangordon | just a minute | 16:00 |
DocScrutinizer05 | ((<Pali> ECI would be hard to implement in state ready for upstream)) then something is wrong with upstream | 16:08 |
Pali | DocScrutinizer05: I mean that we need to cleanup nokia's eci code from harmattan kernel | 16:12 |
Pali | cleanup will not be easy | 16:12 |
DocScrutinizer05 | aah, yes | 16:12 |
DocScrutinizer05 | *Nokia's code* may be hard to get upstream | 16:12 |
DocScrutinizer05 | I wondered what might be wrong with upstream to not like ECI concept | 16:14 |
DocScrutinizer05 | ;-) | 16:14 |
DocScrutinizer05 | ShadowJK: http://paste.opensuse.org/17749468 http://paste.opensuse.org/73629256 | 16:18 |
freemangordon | Pali: http://46.249.74.23/allwinner/ | 16:18 |
freemangordon | the video from today, download it, do not try to play it in the browser | 16:18 |
freemangordon | for some reason FF doesn;t like videos recorded by n900 :) | 16:19 |
freemangordon | MoeIcenowy: ^^^ | 16:19 |
DocScrutinizer05 | ShadowJK: LMD 1079 mAh -> Last Measured Discharge: 1264 mAh | 16:19 |
freemangordon | arcean: see the video ^^^ | 16:21 |
MoeIcenowy | freemangodron: chromium also do not like it ;-) | 16:21 |
freemangordon | BTW Facebook doesn;t like n900 videos as well, there are some tags in the container | 16:22 |
freemangordon | something related to geolocation iirc | 16:22 |
DocScrutinizer05 | ((for some reason FF doesn;t like videos recorded by n900 :))) VLC also acts silly | 16:26 |
*** arcean has quit IRC | 16:26 | |
freemangordon | hmm, seems my ISP is actually a good one - 2.5MB/s international upload, nice :) | 16:29 |
freemangordon | that's for ~5 euro per month | 16:30 |
MoeIcenowy | so perfect ;-) | 16:30 |
xes | freemangordon: please excuse my telepathic comment about your conenction | 16:31 |
freemangordon | hmm? :) | 16:31 |
MoeIcenowy | my network connection for ~5 euro per month have even no public IP ;-) | 16:31 |
DocScrutinizer05 | my dl bandwidth on that URL is ~700kB/s and thus only 3/4 of what's needed for streaming | 16:31 |
MoeIcenowy | (although it comes with ipv6 | 16:32 |
freemangordon | DocScrutinizer05: well, there are more monkeys on the branch, so you don;t get the full bandwidth I guess | 16:33 |
KotCzarny | fmg: not a bad price, external static ip too? | 16:33 |
KotCzarny | ahm, no static | 16:33 |
freemangordon | not really static | 16:33 |
freemangordon | but it hasn't changed for the last couple of years | 16:33 |
KotCzarny | :) | 16:33 |
DocScrutinizer05 | well, avg speed now 912KiB/s, still too low for that video to live stream it | 16:34 |
MoeIcenowy | P.S. I don't think current firefox is capable of being run on a 512MB RAM tablet for daily use | 16:34 |
freemangordon | it is not | 16:34 |
MoeIcenowy | 256MB RAM N900 will be even worse | 16:34 |
DocScrutinizer05 | the video is like 3:03, download took >220s | 16:34 |
DocScrutinizer05 | so VLC stopped playback and filled buffer every 10s | 16:35 |
freemangordon | maybe I should record in lower res next time | 16:36 |
MoeIcenowy | yes... | 16:36 |
MoeIcenowy | but when can we get the status menu? ;-) | 16:36 |
freemangordon | MoeIcenowy: I ordered 1GB tablet, got 512MB :). I opened it a couple of days ago - there are 2 empty places on the board - one for DRAM and one for FLASH chip :) | 16:37 |
KotCzarny | MoeIcenowy: i dont think 1gb would be comfortable enough either ;) | 16:37 |
MoeIcenowy | Yes | 16:37 |
MoeIcenowy | we may need a special browser for 256MB RAM | 16:37 |
freemangordon | MoeIcenowy: accordin to android808, status menu should be working a bit, though I didn;t test it | 16:38 |
KotCzarny | few days ago i was playing with self built droid on oppc | 16:38 |
KotCzarny | opipc | 16:38 |
KotCzarny | and caching things in mem would effect in oom kills | 16:38 |
freemangordon | the same goes for hildon-home | 16:38 |
xes | freemangordon: nice progress! | 16:38 |
KotCzarny | unfortunatelly web is memory hungry (big media) nowadays | 16:38 |
freemangordon | MoeIcenowy: besides n900, is there another device with 256? | 16:39 |
freemangordon | xes: ;) | 16:39 |
MoeIcenowy | with ARMv7? I don't know any other with 256MB RAM | 16:39 |
MoeIcenowy | although I have a WIP light-weight development board with 64MB ;-) | 16:39 |
freemangordon | BTW, dillo might have chance | 16:40 |
xes | freemangordon: any plan to use a kernel patched with BFQ and MuQSS? | 16:40 |
MoeIcenowy | we need dillo-touch ;-) | 16:40 |
freemangordon | but it still far from being ready | 16:40 |
freemangordon | xes: no. I don;t even know what MuQSS is :) | 16:41 |
xes | anyway palemoon has some chance to be usable | 16:41 |
freemangordon | MoeIcenowy: that shouldn;t be that hard | 16:41 |
MoeIcenowy | (offtopic) I wonder whether there's any binarys meaningful to run on a Wine on ARM | 16:42 |
freemangordon | once the engine itself is ready | 16:42 |
xes | freemangordon: http://ck-hack.blogspot.com | 16:42 |
DocScrutinizer05 | freemangordon: please don't mix physically implemented RAM with free memory | 16:42 |
freemangordon | DocScrutinizer05: hmm? in what regard? | 16:42 |
MoeIcenowy | DocScrutinizer05: on modern Flash storages, even SD cards, are easily to be worn with swap | 16:42 |
DocScrutinizer05 | IroN900:~# free | 16:43 |
DocScrutinizer05 | total used free shared buffers cached | 16:43 |
DocScrutinizer05 | Mem: 245540 240152 5388 0 20120 55696 | 16:43 |
freemangordon | DocScrutinizer05: so? | 16:43 |
DocScrutinizer05 | so a browser doesn't have a 256MB of memory available on a 256MB RAM device | 16:43 |
freemangordon | sure | 16:43 |
MoeIcenowy | sure | 16:44 |
MoeIcenowy | we all known that ;-) | 16:44 |
DocScrutinizer05 | it seemed like you're ignoring it though :-) | 16:44 |
MoeIcenowy | I think it's a common sense ;-) | 16:44 |
DocScrutinizer05 | going 256->512MB RAM on maemo means like a 10 times the amount of free memory available for browser | 16:45 |
freemangordon | DocScrutinizer05: yes, if it is microb | 16:45 |
freemangordon | if it is FF... makes no difference, it will still lack memory :) | 16:45 |
MoeIcenowy | is it still possible to build a old browser on a new system? ;-) | 16:45 |
freemangordon | sure it is, but what's the point | 16:45 |
freemangordon | even on quad core old JS engine on microb will struggle | 16:46 |
freemangordon | anyone here with jolla phone? | 16:47 |
freemangordon | how's browser memory usage there? | 16:48 |
DocScrutinizer05 | why? | 16:48 |
freemangordon | ^^^ | 16:48 |
DocScrutinizer05 | nfc | 16:48 |
freemangordon | afaik it is qtmozembed | 16:48 |
freemangordon | that would give us a clue on how much can be stripped from gecko in terms of memory usage | 16:48 |
DocScrutinizer05 | it seems I never managed to install a sshd on that device, so sorry I have no access to gather such info | 16:49 |
freemangordon | I mean - modern gecko | 16:49 |
DocScrutinizer05 | tbh I didn't really touch jollaphone for years | 16:50 |
freemangordon | I'll ask on #jollamobile | 16:50 |
DocScrutinizer05 | it's simply no nice experience to touch it | 16:50 |
freemangordon | :) | 16:50 |
DocScrutinizer05 | and fuzzing around with a device I **need to send in for reflash** when I do a little oopsie?!??! really, no way | 16:51 |
freemangordon | what? you can;t flash it? | 16:52 |
DocScrutinizer05 | no | 16:52 |
freemangordon | cuuute | 16:53 |
freemangordon | but,but... why? | 16:53 |
DocScrutinizer05 | Jolla must not provide the sekrit sauce closed blob shit stored for snapdragon modem in the "private" partitions | 16:53 |
freemangordon | MoeIcenowy: do we have any chance for support on that gpu driver stuttering bug? | 16:54 |
freemangordon | ah | 16:54 |
* freemangordon wonders why they didn;t go for omap | 16:54 | |
DocScrutinizer05 | that's what you get from modem integration into SoC, where basicaly modem is DOM0 and linux is only a SOM-U | 16:55 |
DocScrutinizer05 | DOM-U | 16:55 |
freemangordon | mhm | 16:55 |
DocScrutinizer05 | FUUUUUBAAAAR | 16:55 |
DocScrutinizer05 | only good for consumer products for sheep | 16:56 |
DocScrutinizer05 | which alas was Nokia's and now is Jolla's approach to FOSS | 16:56 |
DocScrutinizer05 | to then FOSS means you may use gcc to compile your apps, but sou have to keep your finger out of "THEIR" OS | 16:57 |
DocScrutinizer05 | to them* | 16:57 |
DocScrutinizer05 | started with Aegis, that stinking pile of shit | 16:58 |
DocScrutinizer05 | and it's only a lucky coincidence that we didn't have Aegis on fremantle already | 16:59 |
freemangordon | looks like | 16:59 |
DocScrutinizer05 | they always planned to go that path | 16:59 |
Pali | and that nolo can boot anything :-) | 16:59 |
DocScrutinizer05 | just failed to implement it for fremantle | 16:59 |
DocScrutinizer05 | Pali: that's an immanent part of such TC concept like Aegis | 17:00 |
DocScrutinizer05 | bootloader only boots signed OS, and OS only grants certain permissions to any process | 17:00 |
freemangordon | well, on harmattan there is some thing called "open mode" afaik | 17:00 |
freemangordon | at least | 17:00 |
Pali | which locks your phone | 17:01 |
DocScrutinizer05 | yep | 17:01 |
freemangordon | locks as in? | 17:01 |
Pali | nand is locked to read-only mode | 17:01 |
DocScrutinizer05 | open mode actially means "secure element locked" mode | 17:01 |
Pali | bootloader and CAL | 17:01 |
Pali | and IIRC omap crypto HW too | 17:02 |
DocScrutinizer05 | so you can't even change device lockcode | 17:02 |
freemangordon | I see | 17:02 |
DocScrutinizer05 | Pali: yes, afaik that's correct | 17:02 |
Pali | but n900 has locked AES hw crypto too :-( | 17:02 |
freemangordon | Pali: not really, it is just not unlocked | 17:03 |
DocScrutinizer05 | hmm, not sure about that | 17:03 |
DocScrutinizer05 | or what freemangordon said | 17:03 |
Pali | locked == not unlocked | 17:03 |
freemangordon | this is rather a bug in nolo, than intentional | 17:03 |
DocScrutinizer05 | :nod: | 17:03 |
Pali | and it can be done only in signed x-loader image | 17:03 |
freemangordon | Pali: maybe it is time to crack the keys ;) | 17:04 |
Pali | unless we got signing keys for x-loader aes remains locked | 17:04 |
Pali | cracking aes128? | 17:04 |
DocScrutinizer05 | no, when it's not locked, it can get unlocked aby time until you lock the secure monitor or whatever the name | 17:04 |
Pali | bruteforce is slow | 17:04 |
freemangordon | afaik it is sha1, which is well, considered weak | 17:05 |
Pali | and I do not know any vulnerability in omap3 implementation | 17:05 |
freemangordon | why aes? | 17:05 |
DocScrutinizer05 | as I understand it | 17:05 |
freemangordon | it is not encrypted, just signed | 17:05 |
Pali | I think I read somewhere there parts are encoded by aes128 | 17:05 |
freemangordon | hmm, no, afaik | 17:05 |
Pali | I do not remember details | 17:05 |
freemangordon | all the code is plain, you just hav a signature in the header, iirc | 17:06 |
Pali | but still, generating new valid sha1 signature is not fun! | 17:06 |
DocScrutinizer05 | ~listvalues omappedia | 17:06 |
infobot | Factoid search of 'omappedia' by value returned no results. | 17:06 |
DocScrutinizer05 | ~listvalues omapedia | 17:06 |
infobot | Factoid search of 'omapedia' by value returned no results. | 17:06 |
DocScrutinizer05 | dang | 17:06 |
Pali | it was never documented on omapedia | 17:06 |
DocScrutinizer05 | http://www.droid-developers.org/wiki/Booting_chain | 17:07 |
Pali | something is there: http://wiki.maemo.org/Firmware_hacking | 17:07 |
*** shentey has quit IRC | 17:08 | |
DocScrutinizer05 | http://www.and-developers.com/custom_recovery:mbmloader_replacement_attack no idea if any of that is useful | 17:08 |
Pali | "Buy this domain." | 17:09 |
Pali | http://www.droid-developers.org/wiki/Cryptography | 17:09 |
freemangordon | Pali: yes, droid bootloader is crtypted, n900 is not | 17:10 |
freemangordon | just look in n900 flash images | 17:11 |
DocScrutinizer05 | http://www.omappedia.org/wiki/Bootloader_Project | 17:11 |
freemangordon | nothing crypted there | 17:11 |
DocScrutinizer05 | Note: If you are using an HS (High Security) OMAP device, an extra step is required. First, build x-load.bin using the steps above. Then, download the MShield signing tool and use the commands below. Contact your TI representative to get access to this tool. | 17:13 |
DocScrutinizer05 | # cd mshield-dk-root-folder | 17:13 |
freemangordon | and this signs the image, most probably rsa signature with 1024bit key | 17:15 |
DocScrutinizer05 | :nod: | 17:15 |
DocScrutinizer05 | however it seems non-HS SoC don't need a common signature, they don't need *any* signature? | 17:15 |
DocScrutinizer05 | so I assume they have a different core boot | 17:16 |
freemangordon | so, what we have (most probably) is sha1 hash signed wuth 1024bit key | 17:16 |
freemangordon | which should be close to be breakable | 17:16 |
DocScrutinizer05 | *is* N900 a HS device? | 17:17 |
freemangordon | yes | 17:17 |
DocScrutinizer05 | sorry, I am supposed to be the one to know, but... got headache | 17:17 |
*** spinal84 has joined #maemo | 17:17 | |
Pali | just to note, nobody has found any colision in sha1 yet! | 17:18 |
DocScrutinizer05 | freemangordon: isn't there a sort of "sealing" action executed during boot in xloader, which forbids further config changes to M-Shield? and is our xloader actually doing that sealing? | 17:19 |
Pali | DocScrutinizer05: x-loader is switching cpu to secure mode and then boot nolo | 17:20 |
Pali | once you switch to secure mode, it is not possible to switch back (only reboot or smc instruction) | 17:20 |
freemangordon | :nod: | 17:21 |
DocScrutinizer05 | that's what I meant, yes | 17:21 |
Pali | and aes needs to be enabled in that x-loader code before switching... | 17:21 |
DocScrutinizer05 | :nod: | 17:21 |
DocScrutinizer05 | secure mode assigns AES hw accel to secure domain, while open mode it's available to userland | 17:21 |
DocScrutinizer05 | afaik | 17:21 |
DocScrutinizer05 | so AES accel is "only available on *non*-HS devices" | 17:22 |
DocScrutinizer05 | while on HS devices (in HS mode) there's still crypto accel but only to monitor | 17:23 |
DocScrutinizer05 | monitor aka smc | 17:23 |
DocScrutinizer05 | the hw is always the same, I am pretty sure about that | 17:24 |
DocScrutinizer05 | basically OMAP implements TZ/M-Shield as an additional addr line which only goes 1 when CPU in smc mode (from a sw exception) | 17:25 |
Pali | I read that TRM and via l3 or l4 firewall you can configure which address space you can access | 17:25 |
Pali | and it is configured to disallow access to aes address space | 17:26 |
Pali | and also disallow access to l3 or l4 firewall | 17:26 |
DocScrutinizer05 | and you can config each hw IP block incl crypto to either have a "public" hw address or a secure domain (secure addr line = 1) hw addr | 17:26 |
DocScrutinizer05 | yes, exactly | 17:26 |
Pali | and firewall is for n900 configured in way that you even cannot read current settings | 17:27 |
DocScrutinizer05 | that TZ stuff is pretty versatile and seemingly implemented in a glitch free way | 17:27 |
Pali | I scanned address space and we have only unlocked sha1 and md5 crypto access | 17:27 |
freemangordon | Pali: what do you need that aes for? | 17:28 |
Pali | currently... nothing :-) | 17:28 |
DocScrutinizer05 | iirc you can config firtually every page in RAM and NAND to be either secure domain or open domain | 17:28 |
Pali | I think l3 or l4 firewall will allows you to do that | 17:29 |
KotCzarny | https://www.engadget.com/2010/03/09/1024-bit-rsa-encryption-cracked-by-carefully-starving-cpu-of-ele/ | 17:29 |
KotCzarny | :) | 17:29 |
Pali | but only if you have unlocked firewall :D which is not on n900 | 17:29 |
DocScrutinizer05 | really every shitty little timer can get configured if it's TZ secure or public | 17:29 |
DocScrutinizer05 | there's a IP block called "mailbox", it's a multiple FIFO to exchange bytes (or words) between CPU cores. You can configure each single FIFO of mailbox to be secure or public | 17:30 |
DocScrutinizer05 | ARM did a proper job with TZ | 17:31 |
DocScrutinizer05 | but (like Aegis) the more versatile the stuff gets, the more complex it gets to correctly configure and set it up. And there *might* be bugs in sw doing the config | 17:33 |
DocScrutinizer05 | first HARM Aegis policy versions allowed modprobe to load unsigned modules, or somesuch | 17:34 |
DocScrutinizer05 | ;-P | 17:34 |
DocScrutinizer05 | similar loopholes might exist in TZ/M-Shiled particular sw implementations | 17:35 |
freemangordon | I've tried to find ppa function that might allow us to tweak the FW, but failed | 17:35 |
DocScrutinizer05 | I recall some hacker exploited a buffer overflow of sorts in a SMC function call | 17:36 |
Pali | yes, but there are two problems: 1) we do not have source code to look for bugs, 2) we even do not have binaries for all and we do not know all algorithms in use | 17:36 |
freemangordon | we have the binaries | 17:36 |
freemangordon | BTW, there is some sort of developer key afaik | 17:36 |
DocScrutinizer05 | o.O | 17:36 |
Pali | and signing program for windows | 17:37 |
freemangordon | if we can only find it :) | 17:37 |
Pali | iirs that key is part of that signing program | 17:37 |
freemangordon | Pali: being windows is not a problem , you have wine nad WV after all | 17:37 |
freemangordon | *VM | 17:37 |
Pali | I doubt that dev key will work on n900 | 17:37 |
freemangordon | Pali: I remember something in CAl referenced it | 17:38 |
freemangordon | *CAL | 17:38 |
Pali | in CAL are some certificates and keys | 17:38 |
Pali | but I have no idea who uses them | 17:38 |
Pali | and how | 17:38 |
freemangordon | and, iirc, one of those is some developer key | 17:39 |
freemangordon | we can use to sign our own ppa, that is executed in secure mode | 17:39 |
Pali | CSST_SDP3430_v2_5_Binary_Release.zip | 17:40 |
Pali | it is that signing program | 17:40 |
freemangordon | yep, have it somewhere | 17:40 |
Pali | http://forum.gsmhosting.com/vbb/f83/nokia-rsa-private-key-195f111a9543a8644e77e1677296ab23-free-1490743/ | 17:40 |
freemangordon | you just need to load the correct keys | 17:40 |
DocScrutinizer05 | hmm, might be a key for BB5 aiui | 17:42 |
DocScrutinizer05 | well, BB5 also has an OMAP iirc | 17:42 |
DocScrutinizer05 | not sure which, though | 17:42 |
xes | ..an interesting document: https://www.uni-oldenburg.de/fileadmin/user_upload/informatik/ag/svs/download/thesis/Reichel_Sebastian.pdf | 17:43 |
freemangordon | easy to be checked, just calculate a signature with that key and compare it with modem firmware signature or nolo signature | 17:43 |
Pali | yes, I read sre's thesis | 17:43 |
*** chainsawbike has joined #maemo | 17:44 | |
DocScrutinizer05 | it's a tad obsolete | 17:53 |
DocScrutinizer05 | (thesis) | 17:53 |
xes | DocScrutinizer05: we too :) | 17:54 |
DocScrutinizer05 | hehe yes | 17:54 |
DocScrutinizer05 | LOL | 17:54 |
DocScrutinizer05 | maemo: kernel: custom - ummm | 17:56 |
DocScrutinizer05 | (Table1.1 | 17:57 |
DocScrutinizer05 | ) | 17:57 |
DocScrutinizer05 | openmoko: kernel: custom - hell no | 17:57 |
DocScrutinizer05 | maemo: userland software: GNU based - if only!! | 17:58 |
DocScrutinizer05 | that's what basically *everybody* seems to get wrong (or *I* always got wrong after an intitial phase where I seem to got it right): maemo KERNEL is FOSS, maemo USERLAND is partially custom, see ~closed | 18:00 |
DocScrutinizer05 | maybe by "custom" he means "not mainlined" (aka upstream?) | 18:02 |
DocScrutinizer05 | but then, _who_ IS upstream? | 18:03 |
DocScrutinizer05 | Linus? | 18:03 |
DocScrutinizer05 | sounds pretty much like a moving phantom target | 18:04 |
DocScrutinizer05 | it seems to me that large parts of IT experts have to more thoroughly adopt the concept/idea of 'middleware', and that a system consists of kernel - middleware/libs - apps | 18:06 |
DocScrutinizer05 | what hurts most in fremantle are the closed middleware blobs, plus the lack of any proper interface/API and functional definitions/descriptions of that middleware | 18:07 |
DocScrutinizer05 | there are a few closed blob apps too, but those would be easy to re-inplement in FOSS if only the middleware APIs would be available | 18:08 |
DocScrutinizer05 | just like the middleware itself would be almost a nobrainer to re-implement if only those APIs... | 18:09 |
DocScrutinizer05 | SpeedEvil had put it in a most precise way years ago, regarding the mess in maemo with that middleware. Alas I can't find the exact wording anymore, but it was like "it's _designed_ in a way to be everything entangled with everything, so you can't take out a single bit without making the whole thing collapse. And no docs at all just to the supposed purpose to ensure it stays like this" | 18:15 |
KotCzarny | sounds like systemd description | 18:16 |
DocScrutinizer05 | yes, it's very similar | 18:17 |
DocScrutinizer05 | just fremantle isn't that monolithic | 18:17 |
DocScrutinizer05 | well, actually systemd also isn't, but it *looks* even more like it was | 18:18 |
Pali | systemd is in one repository and they do not have defined stable api between components | 18:18 |
Pali | maemo has (or had) some stable api between components... | 18:19 |
DocScrutinizer05 | neither did Nokia | 18:19 |
DocScrutinizer05 | well, *some* | 18:19 |
DocScrutinizer05 | many d-bus signals/msgs are not defined at all | 18:19 |
DocScrutinizer05 | many libs are not defined either | 18:20 |
DocScrutinizer05 | see the whole libisi and csd and whatnpt mess | 18:20 |
DocScrutinizer05 | whatnot* | 18:21 |
DocScrutinizer05 | ~closed | 18:21 |
infobot | extra, extra, read all about it, closed is http://wiki.maemo.org/Why_the_closed_packages or https://wiki.maemo.org/Fremantle_closed_packages, or http://elinux.org/N900 | 18:21 |
DocScrutinizer05 | if there were decent APIs, all those closed blobs would be easy to FOSSify | 18:22 |
Pali | yes, some header files are missing... | 18:22 |
DocScrutinizer05 | and a header file is no comprehensive API spec per se yet. A var int x34tz may be specified in .h yet you have no fucking clue how to use it | 18:23 |
Pali | who designed that maemo 5 architecture? | 18:33 |
DocScrutinizer05 | when you have a int status, you need a enum 0: OK, 1: PIN error, 2: No signal etc | 18:34 |
DocScrutinizer05 | Nokia and Colabora plus a few others | 18:34 |
DocScrutinizer05 | and that is the root cause of a lot of problems with FOSSifying stuff it seems, since Colab must not publish source code they made for Nokia as subcontractor, and Nokia doesn't really have the copyright on the source either | 18:38 |
DocScrutinizer05 | https://www.collabora.com/ | 18:41 |
DocScrutinizer05 | https://www.collabora.com/industries/oem.html >> Hardware enablement --- Whether your products are intended to run on ARM or x86, there are always components that require particular attention. The Linux kernel has come a very long way however there is still (and will always be) a need for device drivers and general platform optimizations for your product to shine.<< | 18:44 |
DocScrutinizer05 | and right they are | 18:44 |
DocScrutinizer05 | thus I don't buy the "only mainline" approach, it won't yield optimum results | 18:45 |
DocScrutinizer05 | and actually a generic mainline kernel is bloatware | 18:46 |
KotCzarny | i think mainlining trick ensures that your driver/code wont stop working unexpectedly | 18:47 |
*** xes_ has joined #maemo | 18:47 | |
*** xes has quit IRC | 18:48 | |
*** xes_ is now known as xes | 19:11 | |
DocScrutinizer51 | mv RSOC CSOC mA NAC CACD CACT TTF TTE TEMP | 19:56 |
DocScrutinizer51 | 18:54 4120 99 99 -19 1246 1246 1246 65535 3748 26 NOACT:0 IMIN:0 CI:0 CALIP:0 VDQ:1 EDV1:0 EDVF:0 | 19:56 |
DocScrutinizer51 | 3748 minutes time to empty not bad for roaming device with IRC online, eh? | 19:57 |
DocScrutinizer51 | 'roaming' = not on home WLAN | 19:59 |
*** M4rtinK has joined #maemo | 20:17 | |
Vajb | just a quick hint. Telegram windows desktop ap seems to work fast. Messages appear on maemo pidgin and desktop about the same time. | 20:22 |
*** dafox has joined #maemo | 20:24 | |
*** luke-jr has quit IRC | 20:47 | |
*** luke-jr has joined #maemo | 20:53 | |
*** robink_ has quit IRC | 21:01 | |
*** robink_ has joined #maemo | 21:04 | |
*** Natch has quit IRC | 21:18 | |
sicelo- | Vajb: that's Telegram's selling point .. they say speed :) | 21:28 |
kerio | >telegram | 21:28 |
kerio | please no | 21:28 |
*** at1as has quit IRC | 21:39 | |
*** cyphase has quit IRC | 21:58 | |
*** cyphase has joined #maemo | 22:03 | |
*** at1as has joined #maemo | 22:15 | |
*** Pali has quit IRC | 22:27 | |
Vajb | sicelo-: it sure is fast. And works quite well so far. If only it would integrate as well as yappari. | 22:28 |
*** at1as has quit IRC | 22:33 | |
*** Natch has joined #maemo | 22:51 | |
*** at1as has joined #maemo | 22:55 | |
*** phlixi has quit IRC | 22:59 | |
*** at1as has quit IRC | 23:04 | |
*** phlixi has joined #maemo | 23:05 | |
ceene | i should place a kickstarter to pay me for coding bits for maemo | 23:22 |
ceene | i had a plan for reusing yappari gui as frontend for a qt based telegram librar i found | 23:22 |
ceene | but tbh, i lost interest | 23:22 |
ceene | i even ended up buying an android phone :/ | 23:23 |
ceene | if i got paid to code for maemo i would leave this soul sucking job i have right now | 23:23 |
kerio | ceene: i'd settle for whatsapp web | 23:24 |
kerio | ༼ つ ◕_◕ ༽つ give whatsapp web client | 23:24 |
ceene | kerio: problem is the webapp communicates with the phone app, which is the one doing the communication with whatsapp servers | 23:25 |
kerio | yes | 23:25 |
*** at1as has joined #maemo | 23:25 | |
kerio | i already have whatsapp running | 23:25 |
ceene | so web client means writing a client | 23:25 |
kerio | in android x86_64 | 23:25 |
kerio | on my server | 23:25 |
ceene | you could run web whatsapp on chromium | 23:25 |
kerio | or i could actually keep some ram for the rest of the phone | 23:26 |
ceene | but chrome/chromium on maemo is basically unusable due to low ram | 23:26 |
kerio | whatsapp is a strange IM server | 23:28 |
kerio | where you login by having the server scan a qr code with a webcam | 23:29 |
ceene | you can always vnc to your x86 android | 23:31 |
ceene | that's probably the less error prone way | 23:31 |
ceene | i thought about a software that processes sqlite databases of whatsapp | 23:34 |
ceene | that would allow the writing of a proxy | 23:35 |
kerio | how do you send messages tho | 23:40 |
ceene | good question | 23:41 |
ceene | faking user input | 23:41 |
ceene | sounds troublesomo | 23:41 |
kerio | whatsapp web :3 | 23:42 |
ceene | running android on lxc on maemo | 23:42 |
ceene | i think there's some project to do just that on sailfish | 23:42 |
kerio | no but honestly i want whatsapp web/client way more than whatsapp standalone | 23:42 |
kerio | this whatsapp on the cloud thing is working incredibly well with my lappy | 23:43 |
ceene | chrome it is, then | 23:43 |
kerio | now if only i could run whatsapp in a freebsd jail rather than having to run a full vm :^) | 23:43 |
ceene | until and unless android code is upstreamed to linux kernel... | 23:44 |
ceene | not even under lxc | 23:44 |
*** florian has joined #maemo | 23:59 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!