# COTM April (2023-04)

**URL:** <https://forum.dmz.rs/t/cotm-april-2023-04/121>\
**Category:** Curiosities of the Month\
**Created:** [April 10, 2023, 10:52pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121 "2023-04-10T22:52:32Z")\
**Posts on this page:** 14\
**Page:** 2

<div class="post-metadata">

**Author:** ![venmo](https://forum.dmz.rs/user_avatar/forum.dmz.rs/venmo/32/445_2.png) [@venmo](https://forum.dmz.rs/u/venmo)\
**Post date:** [April 19, 2023, 2:50pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/21 "2023-04-19T14:50:46Z")

</div>

da naglasim, pogledajte kako je implemnitran zanimljivo taj chat, koristi neki stari refresh meta tag, znaci real time bez js-a

---

<div class="post-metadata">

**Author:** ![fram3d](https://forum.dmz.rs/user_avatar/forum.dmz.rs/fram3d/32/1858_2.png) [@fram3d](https://forum.dmz.rs/u/fram3d)\
**Post date:** [April 19, 2023, 5:43pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/22 "2023-04-19T17:43:09Z")

</div>

Citao malo na libreboot-ovom [sajtu](https://libreboot.org/faq.html#what-other-firmware-exists-outside-of-libreboot) faq i tek sad vidim da ima protokol ([DMA](https://en.wikipedia.org/wiki/Direct_memory_access)) kojim druge komponente racunara imaju direktan pristup RAM memoriji. Ispostavlja se da hard diskovi imaju potpuno funkcionalne arm racunare u sebi kojim mogu da citaju stvari iz RAM memorije, kao sto su kljucevi, i da ih pisu na skrivene particije na hard disku. Znaci cak iako ti CPU nikada ne pokrene maliciozan kod, ni iz BIOS-a ni sistema, idalje sam hard disk moze da te zezne da ti ne dozvoli da sifrujes disk, zatim kad ga neko zapleni mozda moze da ti procita sve podatke, ako im je proizvodjac ostavio backdoor.

Imaju i neki linkovi sa librebootovog sajta o nekim hakovima hard diska i micro sd kartica (ssd).

Interesantno svakako i ovako, da mozes mozda da pokrenes kod na svom hard disku.

HDD hacking: [https://spritesmods.com/?art=hddhack](https://spritesmods.com/?art=hddhack)

MicroSD hacking: [https://www.bunniestudios.com/blog/?p=3554](https://www.bunniestudios.com/blog/?p=3554)

---

<div class="post-metadata">

**Author:** ![\_il](https://forum.dmz.rs/user_avatar/forum.dmz.rs/_il/32/144_2.png) [@\_il](https://forum.dmz.rs/u/_il)\
**Post date:** [April 19, 2023, 8:20pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/23 "2023-04-19T20:20:41Z")

</div>

Mi smo na faksu na jednom izbornom predmetu ucili o DMA ako se sjecam kako treba. Poenta je da se specijalizovanim cipovima moze skinuto load sa procesora i south bridge-a, inace bi tipa transferi fajlova bili dosta manje efikasni. Toliko sam znao, nisam znao da se mehanizam moze iskoristiti maliciozno.

---

<div class="post-metadata">

**Author:** ![predmijat](https://forum.dmz.rs/user_avatar/forum.dmz.rs/predmijat/32/232_2.png) [@predmijat](https://forum.dmz.rs/u/predmijat)\
**Post date:** [April 20, 2023, 12:57pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/24 "2023-04-20T12:57:47Z")

</div>

ovo deluje kao da ce biti zanimljivo svima:

[https://pagedout.institute/](https://pagedout.institute/)

Paged Out! is a free experimental (one article == one page) technical magazine\*\* about programming (especially programming tricks!), [hacking](https://en.wikipedia.org/wiki/Hacker), [security hacking](https://en.wikipedia.org/wiki/Security_hacker), retro computers, modern computers, electronics, demoscene, and other similar topics.

---

<div class="post-metadata">

**Author:** ![venmo](https://forum.dmz.rs/user_avatar/forum.dmz.rs/venmo/32/445_2.png) [@venmo](https://forum.dmz.rs/u/venmo)\
**Post date:** [April 21, 2023, 10:34am UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/25 "2023-04-21T10:34:51Z")

</div>

kritike gpg-a

> **[Latacora - The PGP Problem](https://latacora.micro.blog/2019/07/16/the-pgp-problem.html)**
>
> Cryptography engineers have been tearing their hair out over PGP’s deficiencies for (literally) decades. When other kinds of engineers get wind of this, they’re shocked. PGP is bad? Why do people keep telling me to use PGP? The answer is that they...

> **[What’s the matter with PGP?](https://blog.cryptographyengineering.com/2014/08/13/whats-matter-with-pgp/)**
>
> Last Thursday, Yahoo announced their plans to support end-to-end encryption using a fork of Google’s end-to-end email extension. This is a Big Deal. With providers like Google and Yahoo onboa…

---

<div class="post-metadata">

**Author:** ![\_il](https://forum.dmz.rs/user_avatar/forum.dmz.rs/_il/32/144_2.png) [@\_il](https://forum.dmz.rs/u/_il)\
**Post date:** [April 21, 2023, 2:12pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/26 "2023-04-21T14:12:21Z")

</div>

[![](https://forum.dmz.rs/uploads/default/original/1X/0f48d469a82d432f3afeebb3183986cfe03d4f32.jpeg "The Mechanical Integrator - a machine that does calculus") ](https://www.youtube.com/watch?v=s-y_lnzWQjk)

---

<div class="post-metadata">

**Author:** ![\_il](https://forum.dmz.rs/user_avatar/forum.dmz.rs/_il/32/144_2.png) [@\_il](https://forum.dmz.rs/u/_il)\
**Post date:** [April 21, 2023, 2:13pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/27 "2023-04-21T14:13:57Z")

</div>

Odlican je magazin, ali izgleda da je mrtav, 3 godine nisu nista objavili

---

<div class="post-metadata">

**Author:** ![\_il](https://forum.dmz.rs/user_avatar/forum.dmz.rs/_il/32/144_2.png) [@\_il](https://forum.dmz.rs/u/_il)\
**Post date:** [April 24, 2023, 11:42am UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/28 "2023-04-24T11:42:09Z")

</div>

> **[GitHub - ajeetdsouza/zoxide: A smarter cd command. Supports all major shells.](https://github.com/ajeetdsouza/zoxide)**
>
> A smarter cd command. Supports all major shells. Contribute to ajeetdsouza/zoxide development by creating an account on GitHub.

Alternativa za cd koja pogadja koji direktorij zelite koristeci ‘frecency’ svih direktorija koje koristimo. Ima dosta alatki koje rade ovu istu stvar, ali ova je izgleda trenutno ‘in’, ja sam instalirao sinoc, videcemo koliko je korisno.

Takodje evo izvor za koncept frecency-ja:

> **[Frecency](https://en.wikipedia.org/wiki/Frecency)**
>
> In computing, frecency is any heuristic that combines the frequency and recency into a single measure.
> In its simplest form, the frequency and recency rating can be added to form a frecency rating. The ratings can be found by sorting items by most recent and most frequent respectively. A decayed calculation using logarithms can also be used.
> Some web browsers use frecency to predict the likelihood of revisiting a given web page or reusing a given HTTP cache entry
> "Frecency is a score given to ...

---

<div class="post-metadata">

**Author:** ![venmo](https://forum.dmz.rs/user_avatar/forum.dmz.rs/venmo/32/445_2.png) [@venmo](https://forum.dmz.rs/u/venmo)\
**Post date:** [April 25, 2023, 11:28am UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/29 "2023-04-25T11:28:23Z")

</div>

kad smo kod zinova, evo jedan domaci old school [http://phearless.org/](http://phearless.org/)

---

<div class="post-metadata">

**Author:** ![fram3d](https://forum.dmz.rs/user_avatar/forum.dmz.rs/fram3d/32/1858_2.png) [@fram3d](https://forum.dmz.rs/u/fram3d)\
**Post date:** [April 26, 2023, 2:56pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/30 "2023-04-26T14:56:12Z")

</div>

Nisam ni primetio da su novi racunari podrzani od libreboota, sad ima jos laptopova (neki su noviji i ima ih na kupujemprodajem za oko 100e)

[https://libreboot.org/news/libreboot20230423.html#new-mainboards-now-supported](https://libreboot.org/news/libreboot20230423.html#new-mainboards-now-supported)

“Dell Latitude E6400 (laptop) (GM45, blob-free, flashable entirely in software, no disassembly required!)”

**no disassembly required** - znaci ne moramo ni da ih otvaramo, samo pokrenemo flashrom komandu i to je to

---

<div class="post-metadata">

**Author:** ![eline](https://forum.dmz.rs/user_avatar/forum.dmz.rs/eline/32/250_2.png) [@eline](https://forum.dmz.rs/u/eline)\
**Post date:** [April 27, 2023, 11:28am UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/31 "2023-04-27T11:28:08Z")

</div>

Ajde da probamo, vatreno krstenje LDAP-a…  
Jedan, u najmanju ruku, interesantan esej, jos iz 90-ih, na temu dizajna softvera i samom pristupu, kao i razlikama izmedju dve velike “skole” softvera - MIT i New Jersey.  
[https://www.jwz.org/doc/worse-is-better.html](https://www.jwz.org/doc/worse-is-better.html)

---

<div class="post-metadata">

**Author:** ![\_il](https://forum.dmz.rs/user_avatar/forum.dmz.rs/_il/32/144_2.png) [@\_il](https://forum.dmz.rs/u/_il)\
**Post date:** [April 28, 2023, 11:29am UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/32 "2023-04-28T11:29:22Z")

</div>

Fin sajtic, imaju izvore za svaki primer 🙂  
[Why OpenBSD Rocks](https://why-openbsd.rocks/)

---

<div class="post-metadata">

**Author:** ![venmo](https://forum.dmz.rs/user_avatar/forum.dmz.rs/venmo/32/445_2.png) [@venmo](https://forum.dmz.rs/u/venmo)\
**Post date:** [April 28, 2023, 1:01pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/33 "2023-04-28T13:01:30Z")

</div>

Ima i ovo za openbsd [https://isopenbsdsecu.re/](https://isopenbsdsecu.re/)

---

<div class="post-metadata">

**Author:** ![\_il](https://forum.dmz.rs/user_avatar/forum.dmz.rs/_il/32/144_2.png) [@\_il](https://forum.dmz.rs/u/_il)\
**Post date:** [May 1, 2023, 1:55pm UTC](https://forum.dmz.rs/t/cotm-april-2023-04/121/34 "2023-05-01T13:55:18Z")

</div>



[Previous page](https://forum.dmz.rs/t/cotm-april-2023-04/121.md?page=1)
