IRC log for #neo900 on 20140523

00:51.41*** join/#neo900 mordac_ (~mordac_@c-24-6-219-139.hsd1.ca.comcast.net)
01:18.30*** join/#neo900 dos1 (~dos1@pinkiedb.com)
01:18.38*** join/#neo900 dos11 (~dos@unaffiliated/dos1)
01:19.08*** join/#neo900 dos11 (~dos@unaffiliated/dos1)
01:26.21*** join/#neo900 dos1 (~dos1@pinkiedb.com)
01:28.43*** join/#neo900 dos1 (~dos1@pinkiedb.com)
01:29.30*** join/#neo900 dos1 (~dos1@pinkiedb.com)
01:33.29*** join/#neo900 dos1 (~dos1@unaffiliated/dos1)
01:59.16*** join/#neo900 ddark_ (~ddark@188.120.138.60)
02:14.23*** join/#neo900 nicksydney (~quassel@140.137-50-210.dynamic.dsl.syd.iprimus.net.au)
02:20.19*** join/#neo900 chainsawbike (~chainsawb@unaffiliated/chainsawbike)
05:31.08*** join/#neo900 nicksydney (~quassel@140.137-50-210.dynamic.dsl.syd.iprimus.net.au)
05:37.14*** part/#neo900 freemangordon (~ivo@46.249.74.23)
05:37.34*** join/#neo900 freemangordon (~ivo@46.249.74.23)
05:55.57*** join/#neo900 Fortuona (~Fortuona@2001:638:208:fd5f:31c5:dfd3:a572:f240)
06:12.27*** join/#neo900 sixwheeledbeast (~paul@2a01:348:6:860a:39da:8964:d21f:2c26)
07:41.19*** join/#neo900 Kabouik (~quassel@147.99.218.243)
08:17.01*** join/#neo900 parmegv (~parmegv@ma.sdf.org)
08:22.42parmegvhey people! I cannot use duckduckgo nor google to search a string in the irc logger: https://encrypted.google.com/search?hl=en&q=site%3Ahttp%3A%2F%2Finfobot.rikers.org%2F%2523neo900%2F%20phoronix yields no result!
08:23.35parmegvI wanted to know if there has been any comparison between new900 and fairphone, in terms of "fair trade" ideas
08:24.06*** join/#neo900 remarc (~sequantz@194.11.24.44)
08:24.47parmegvI've seen that Golden Delicious Computers is from Germany, but I don't know if they're targetting an ethical audience or not
08:28.03parmegvha, reading http://projects.goldelico.com/p/openphoenux/downloads/get/OpenPhoenux.pdf, on page 6 it says "hardware production near to
08:28.06parmegvusers (Europe) under fair labour
08:28.08parmegvconditions"
08:28.32parmegvthat's good news
08:38.19*** join/#neo900 che1 (~che@p5B07380F.dip0.t-ipconnect.de)
08:48.13*** join/#neo900 xes (~xes@unaffiliated/xes)
08:52.36*** join/#neo900 edgar2 (~edgar2@84-230-8-29.elisa-mobile.fi)
09:09.46*** join/#neo900 Fortuona (~Fortuona@2001:638:208:fd5f:b0b9:908f:809e:671)
10:15.54DocScrutinizer05that's about as "fair" as it gets, even for fairphone
10:17.04DocScrutinizer05I consider fairphone more of a propaganda concept and for that it's fine. Their environmental dedication however is futile
10:45.21*** join/#neo900 mvaenskae (~mvaenskae@unaffiliated/mvaenskae)
11:31.46parmegvDocScrutinizer05: they have published how they've chosen their supplier, and also their "requirements"
11:32.21parmegvI don't know how could I prove they're being dishonest, although I also think a bit like you
11:36.27DocScrutinizer05they are not dishonest, they simply emphasize their efforts to do "green" electronics, but there's no such thing like "green electronics", you can't build your own chips with coltan you dug up in your bavarian garden
11:37.40DocScrutinizer05it's a bit like claiming you're doing something for environment by using plastic bags that are 100mm shorter than usual
11:37.53DocScrutinizer0510mm
11:38.36DocScrutinizer05by re-using the N900 cases we probably do more for environment than greenphone with their "fair sourcing"
11:41.23DocScrutinizer05in my book greenphone is a great PR concept to create more awareness for the problems in compulsive hightech planned obsolescence and dumping prices, but it doesn't change a single aspect of what's really happening, their percentage of really "green" components is maybe 2% in their phone
11:42.31DocScrutinizer05similar to the green mouse, which has a case of wood instead of PVC or whatever, but the whole electronics inside is same toxic crap as with any arbitrary other mouse
11:44.04parmegvwhat I care the most is about fair incomes for workers, do you have an opinion on that?
11:44.08parmegvbtw, what's your book?
11:44.36DocScrutinizer05true, the case is "green" (not evaluating how much of non-green resources been used up to produce that wooden case), but does that realy make a difference for the environment, given the case is probably ~3% of the total amount of resource usage footprint of such mouse
11:45.12DocScrutinizer05"my book" == my opinion, my point of view
11:45.27parmegvah, ok
11:45.40DocScrutinizer05I have a pretty clear idea about fair income: mine is waaaay too low right now
11:45.54DocScrutinizer05and that's honest, not sarcastic
11:47.16parmegvI think that fairphone is doing a god job there
11:47.33DocScrutinizer05we're producing at Munich/Bavaria/Germany and the fab charges normal prices for that. We can't do anything about chips and components, we need to buy them where we can get them. And we all (4 guys of Neo900 team) don't see any fair income right now
11:48.19parmegvoh, you're not being paid? I thought donations are for you too
11:49.13DocScrutinizer05yes, that's the plan, so from next month on I _must_ pay me a monthly fee at the level of a trainee or somesuch
11:49.28parmegvgood news for you then :)
11:50.11DocScrutinizer05not really, when I would do a regular job as coder monkey at an arbitrary company around here, I'd earn more for sure
11:50.58parmegvoh yes, for sure, but you're enjoying much more with this, instead of being a code monkey ;)
11:51.01DocScrutinizer05this project is born from love and enthusiasm for the N900 and GTA02/04
11:51.14DocScrutinizer05and *free* linux on our phones
11:52.13parmegvand regarding chips and components... perhaps you could talk to fairphone and other companies trying to leverage the ethical standards, and join forces
11:53.13DocScrutinizer05for now my ballance is pretty much a negatibe one: expenses in the 1000 to 3000 EUR, plus a 9 months I wasn't really able to do any other works thanks to managing Neo900 and thus my work didn't pay me bagels during that time
11:53.54parmegvDocScrutinizer05: you could freelance while managing this
11:54.11DocScrutinizer05no, we won't talk to fairphone, we have no evangelist attitude, and they don't have any resources we could exploit for Neo900
11:54.32DocScrutinizer05parmegv: sorry?
11:55.35parmegvI didn't want to look agressive, perhaps my sentence was too short
11:57.12parmegvit was just a suggestion, to enjoy your work without suffering from low income
11:57.25DocScrutinizer05I don't understand
11:57.30parmegvbut nvm, I shouldn't have said anything like that, it's your personal life
11:57.45DocScrutinizer05I'm freelancer basically for whole my professional lifetime
11:58.39parmegvthen great, you can spend time on this!
11:59.11DocScrutinizer05and when I say "I wasn't really able to do any other works" then that's because e.g. I've not found the time to leave my flat since last weekend, sitting in front of PC 20h per day
11:59.35DocScrutinizer05I think there's some sort of misconception at your end
11:59.59parmegvyes, but I already understood
12:02.09DocScrutinizer05re GreenPhone: we easily could do mega advertisement "We are even MORE green than GreenPhone" but we're not interested in that
12:03.26DocScrutinizer05as already stated GreenPhone is marketing an idea and an ideology, but they don't really sell any new product, their hardware is not any "greener" than ours
12:04.02DocScrutinizer05they just "take care" about that aspect. Well, we would do as well, when we'd see a way this would result in *any* change
12:05.05DocScrutinizer05we're using exactly the same chips and resistors and capacitors they use too. And our manufacturing is exclusively in Munich/Bavaria
12:05.55parmegvit's your choice, but I think that as well as Libre Software is a good choice for society and people make efforts to make them know, this is also a good choice and people clearly need to hear about this
12:06.07DocScrutinizer05but they tried to find the "greenest" chips, and pestered chip manufacturers about it, which is a good thing but sth we don't want to do
12:06.14parmegvbut again, you'll have your reasons not to "evangelize"
12:07.09DocScrutinizer05well, we also won't fund a political party despite it would be "the right thing to do"
12:07.32DocScrutinizer05it's just not my profession
12:07.53parmegvaha, yes, I understand that last statement
12:08.22parmegvthanks for your convo, I have to leave, I'll stay here to read and/or write!
12:08.31parmegvbye!
12:08.36DocScrutinizer05I'm an EE, not a marketing and spindoctor crack that could run a second "GreenPhone campaign"
12:09.14DocScrutinizer05bye, thanks for your interest and suggestions! :-)
12:12.45DocScrutinizer05my "political" statement is by building hardware that can last 10 years, is re-using existing components wherever reasonable, and clearly blocks the whole big brother evil tendencies as much as possible, and particularly on the latter we're best you can get *anywhere*
12:13.59DocScrutinizer05I also think I'm fostering community by what I'm doing, which also has its political aspects
12:17.30DocScrutinizer05then there are less conceptual aspects like me helping at least a 50 N900 users to fix their broken USB, so a 50 new whyPhones or whatever didn't get produced and discarded after 2 years
12:20.18DocScrutinizer05but regarding what GreenPhone aims at, I only can support that idea by looking into their results and buying any green parts they found or managed manufacturers to build. Of course we're doing this, but so far their results regarding that are close to zilch
12:33.52*** join/#neo900 mvaenskae (~mvaenskae@unaffiliated/mvaenskae)
12:35.08*** join/#neo900 freemangordon_ (~ivo@85-118-92-26.mtel.net)
12:35.35*** join/#neo900 freemangordon_ (~ivo@85-118-92-26.mtel.net)
13:05.31FIQdc
13:06.13FIQDocScrutinizer05: isn't fairphone also a lot about social sustainable development as much as environmental?
13:06.31FIQfrom what I've seen, they did quite well on that regard, but you're probably right about the environmental issues though
13:07.07mvaenskaefairphone? i didn't know phones grew on trees
13:18.17mvaenskaethe idea about a fair phone is very nice _but_ that is neither economical nor possible
13:18.32mvaenskaecreating chips is a very dirty procedure
13:28.31DocScrutinizer05exactly
13:29.20mvaenskaealso the pcbs are done using acids iirc and usually the products created by that are not very healthy
13:29.26DocScrutinizer05and no tiny manufacturer like fairphone or Neo900 is going to force the chip makers into tidying up that dirty process
13:30.28DocScrutinizer05well, since our PCBs are built in Germany, I'm confident that those acids are properly recycled. The copper is too valuable to, to discard the acid with dissolved copper in it
13:30.35mvaenskaeDocScrutinizer05: even if wanted it cannot be cleaned up by much as the silicon wafer creation is so complex these days that a particle of dust can destroy thousands of possible chips
13:30.43*** join/#neo900 freemangordon_ (~ivo@85-118-92-26.mtel.net)
13:30.54DocScrutinizer05yes, I know
13:31.26mvaenskaei was extremely impressed hearing upon chip manufacturing as a short sidenote in a chemistry lecture
13:31.46mvaenskaealso, great news getting another person aboard the neo900 :)
13:32.03DocScrutinizer05and nothing fairphone can do about it. Also the cltan sources and other rare earth are where they are and the west is happy when china sells enough of that stuff to us so we *can* build chips at all
13:32.12DocScrutinizer05coltan*
13:32.14mvaenskaeand i liked seeing the presentation of the current development on the neo900, much appreciated
13:32.55DocScrutinizer05not like we could force china to not make a mess out of the rare earth digging in their own country
13:33.18mvaenskaei assume the big chip on the video where dos called the phone back and forth was the modem?
13:33.34DocScrutinizer05yep
13:33.53DocScrutinizer05PHS8
13:34.50mvaenskaethe chip is really large, would there be even enough room for 2 modems?
13:35.12DocScrutinizer05it's a module, but anyway. Hardly enough room for two of them
13:35.41DocScrutinizer05well, they would "just fit" but honestly, that gets nasty
13:36.51DocScrutinizer05I also can't see anybody willing to pay the additional 200+ bucks for such a device with 2 modem modules
13:37.24mvaenskaewell, would allow people to get regional lte and world wide umts :)
13:37.33DocScrutinizer05let alone trouble with RF design
13:38.08mvaenskaetrue, if i was smart enough i would try solving it but nah... i can hardly work with any electrical circuits
13:38.48DocScrutinizer05I'd be *really* intersted in internal circuitry of the Cinterion P*S8, I *guess* it's using tunable wide range filters, so the supported bands are just a question of firmware
13:39.28mvaenskaemosst likely firmware, companies usually pay for software licenses these days not hardware
13:39.55DocScrutinizer05I mean, when such module is supporting e.g. 1800/1900 GSM, then why wouldn't it be able to support UMTS on same frequencies
13:40.58mvaenskaeexactly, the hardware for 2g 1800/1900 is there but not for 3g? you gotta be kidding
13:41.12DocScrutinizer05I even suspect they have *one* filter (or two, for UL and DL) and those are tunable to any frequency between at least 1800 and 2500
13:41.38mvaenskaewell, time for you guys to RE it ;)
13:41.52DocScrutinizer05they might use a separate circuitry for the 800MHz range maybe
13:42.04mvaenskaeif i had the knowledge i would most definitly give it a try
13:42.09DocScrutinizer05yep, I'm planning to eventually disassemble one of those modules
13:42.09mvaenskaemakes a nice hack
13:42.27DocScrutinizer05alas we can't hack the module hw nor firmware
13:42.40mvaenskaeone cannot update the firmware?
13:43.01DocScrutinizer05yes, you can, but you can't change it. Much like a tivoized smartphone
13:43.20DocScrutinizer05signed by cryptokeys
13:43.34DocScrutinizer05chenge one byte and it doesn't flash anymore
13:43.38DocScrutinizer05change
13:44.22DocScrutinizer05in that regard it's exactly like the arbitrary average android phone, just for some reason
13:44.47DocScrutinizer05and unlike those phones you cannot root it
13:45.02DocScrutinizer05at least no exploit known so far
13:45.17DocScrutinizer05doesn't mean there's none, but just not known (yet)
13:45.43mvaenskaeint getRandomNumber() { return 4; }
13:45.45DocScrutinizer05and industry meanwhile learned to protect their stuff and do signature and crypto right
13:45.50mvaenskaethat can always happen ;)
13:46.49DocScrutinizer05sure, you always *might* find unsealed development images that allow you to flash arbitrary other stuff then since you can hack those dev imgs
13:47.05DocScrutinizer05eventually, and for *some* types of modem
13:47.38DocScrutinizer05or manufacturer even forgot or omitted sealing of the productive firmware, like happened for calypso
13:48.01mvaenskaefrmware sealing?
13:48.34DocScrutinizer05but honestly, all that is mega botring stuff as long as you don't have the docs needed to understand what those 50MB of firmware are *doing*
13:49.13DocScrutinizer05so you could apply reasonable meaningful hacks, beyond "I changed "Cinterion" string to "You're pwnd"
13:49.59mvaenskaeDocScrutinizer05: so what most android devs do?
13:50.20mvaenskaenot to discredit them but very few of them seem to turn out to be true hackers
13:51.44*** join/#neo900 mvaenskae (~mvaenskae@unaffiliated/mvaenskae)
13:55.11DocScrutinizer05I never looked too deep into android. AIUI most of what they do is userland changes
13:56.45DocScrutinizer05and even while android maybe is FOSS allegedly, many phones are locked so you can't simply update to an arbitrary new system version
13:57.10mvaenskaeand if you do, you void your warranty
13:57.13mvaenskaegreat concept
13:57.29DocScrutinizer05dunno what exactly cyanogen mod is doing, and on which hw platforms it (doesn't) work
13:58.19DocScrutinizer05see e.g fruitPhone, you need to exploit a vulnerability in the core system to "root" it
13:59.22DocScrutinizer05well, kinda OT for this channel. Luckily Neo900 has none of all that shite
13:59.35DocScrutinizer05except contained inside modem module
13:59.51DocScrutinizer05and believe me, you don't want to hack the modem
14:00.36mvaenskaeDocScrutinizer05: i was just about to propose that; if you do, you have a slogan "a phone like only the nsa has" :D
14:00.44DocScrutinizer05I worked a year for ST-Ericsson, seen modem firmware for LTE from inside. You do _not_ want to hack that
14:01.01mvaenskaeis it full of goto?
14:01.27DocScrutinizer05not really, though it depends on which modem and which firmware
14:01.42DocScrutinizer05but is has a complecity that exceeds that of e.g. maemo
14:01.49DocScrutinizer05complexity
14:02.09mvaenskaeof the whole OS?
14:02.28DocScrutinizer05there are several *hundreds* of manyears development going just into the firmware
14:02.49DocScrutinizer05not talking about the chip/silicon
14:03.53mvaenskaewow, i didn't expect it to be that much :o
14:04.20DocScrutinizer05firmwares are several dozen or even hundreds of MB size nowadays, and that's without any fancy GUI stuff that eats lots of storage
14:05.26DocScrutinizer05I think the ST-E firmware for NovaThor was several GB of source
14:06.28mvaenskaejust for radio communications?!
14:08.05DocScrutinizer05for radio stack, data, handover, debugging, servicing the interfaces (UART, HSI, USB, whatnot else), battery management, you name it
14:08.30DocScrutinizer05SMS, MMS,
14:08.38DocScrutinizer05GPS
14:08.53DocScrutinizer05GSM, UMTS, LTE
14:09.25DocScrutinizer05AT interpreter (that's a joke somebody could write in a week's work)
14:09.56DocScrutinizer05MIMO, 911, SIM handling
14:10.02DocScrutinizer05addrbook
14:10.08DocScrutinizer05SIMlock
14:10.17mvaenskae:(
14:10.18DocScrutinizer05protection
14:10.24mvaenskaethat's extreme
14:10.44mvaenskaei will _never_ work with modems D:
14:10.52DocScrutinizer05you do *not+ want to hack that unless you got the sources
14:11.40DocScrutinizer05and then all that stuff has to run realtime, so it guarantees data rates of up to 100Mbps
14:12.15che1So I guess there isn't any known source leak?
14:12.30mvaenskaeand they still managed to have that thing work as a tracking device?! holy moly
14:12.45mvaenskaeche1: not without either NSA involvement or a big bucket of cash
14:12.57DocScrutinizer05there's about 20 or more known firmwares that are completely independant of each other, using their own proprietary OS and whatnot
14:12.58che1:(
14:13.38mvaenskaethat's a major case of reinventing the wheel
14:14.30DocScrutinizer05calypso firmware leaked, but that's really stupid one and 10 years old, and it's already some dozen of MB source, nevertheless can do only GSM and not even EDGE
14:15.44DocScrutinizer05but calypso chipset isn't sealed
14:15.48DocScrutinizer05usually
14:16.15DocScrutinizer05so osmocom still using this chipset, and they haven't found an alternative yet
14:16.51mvaenskaei hope there is somewhere some line of gplv3 code in all modems
14:17.03DocScrutinizer05LOL, no way
14:17.20mvaenskaeguess who would jump in a triangle on the roof :D
14:17.28DocScrutinizer05this isn't linux, this is a commercial OS you prolly never heard about
14:17.48mvaenskaewindows special edition of millenium edition?
14:18.51DocScrutinizer05those are typically realtime OS which not even use a MMU and separated addr space
14:20.42DocScrutinizer05see http://en.wikipedia.org/wiki/Operating_System_Embedded
14:21.23DocScrutinizer05>>who at the time was a consultant from ENEA with an assignment at Ericsson<< guess what NovaThor firmware is using
14:22.07*** part/#neo900 freemangordon_ (~ivo@85-118-92-26.mtel.net)
14:24.02DocScrutinizer05well, I have to correct myself, of course there's MMU, but many "processes" are just threads of the kernel itself
14:24.09DocScrutinizer05and share one addr space
14:25.59DocScrutinizer05note that all modern chips have a asymmetrical multicore design
14:26.41DocScrutinizer05NovaThor is said to have two A9 and one M4, plus a number of auxiliary processors
14:28.12DocScrutinizer05the complexity of the modem can easily outperform the complexity of ate application environment of a smartphone
14:28.37DocScrutinizer05s/ ate/ hte/
14:28.41DocScrutinizer05dang
14:31.01DocScrutinizer05actually the usual featurephone tasks (gui and addr book and maybe SMS etc) is easily vanishing in between the gaps of a modem OS
14:32.32DocScrutinizer05and basically that's how all modern android phones work. they don't have a dedicated APE anymore, the whole APE is running on the CPUs of the modem
14:32.42DocScrutinizer05see Jolla
14:33.37DocScrutinizer05and since APE and modem (firmware) share same CPU, they of course also share same RAM, and that creates a vulnerability you CANNOT fix
14:33.50DocScrutinizer05Neo900 doe NOT use this approach
14:34.57DocScrutinizer05when Linux is just a process running in a "VM" as one of many processes inside the modem OS, then how could it ever be safe?
14:36.14DocScrutinizer05and "Linus" includes android here, unlike my usual way to distinguish between the two
14:36.20DocScrutinizer05Linux*
14:37.28DocScrutinizer05guess why Jolla can't publish firware to reflash their phone, not even for the linux part of it
14:44.50DocScrutinizer05an OS like ENEA OSE has nothing in common with usual linux or other desktop OS as you know them
14:46.28DocScrutinizer05e.g. almost all memory is "static", since you don't want dynamic memory allocation during runtime, since that causes all sorts of problems in realtime environments
14:46.53DocScrutinizer05almost all processes are "preloaded" during boot time
14:48.43DocScrutinizer05these two points alone are sufficient to change stuff dramatically from what you may be used to, into something that looks rather bizarre to the common developer used to "app" or even kernel development on linux etc
14:50.39*** join/#neo900 mvaenskae_ (~mvaenskae@unaffiliated/mvaenskae)
14:50.45mvaenskae_sorry, just got distracted a bit by some colleagues D:
14:56.20mvaenskaei guess i can understand why modem chips are so expensive though (with the newfound deep insight of how complex they are)
15:11.09DocScrutinizer05I guess the average LTE modem chip has some 2000 to 30000 man years gone to its development before it starts selling and earning money for the company
15:17.33mvaenskaei wonder how that compares to the linux kernel
15:18.04DocScrutinizer05the linux kernel is kind of simple compared to a complete modem firmware
15:19.49mvaenskaei meant in terms of coding time :)
15:24.14DocScrutinizer05analog, probably. Though a lot of 2evolution" went into linux kernel
15:24.21DocScrutinizer05s/2/"/
15:25.48DocScrutinizer05so while writing a linux kernel from scratch nowadays should be significantly less effort than writing a LTE firmware, the kernel nevertheless might have seen more man years of work going into it during the life span of linux
15:26.57DocScrutinizer05in a mere comparison of LOC the kernel loses by magnitudes
15:27.44mvaenskaeoh, wow
15:27.49DocScrutinizer05when you consider LOC proportional to coding time to write those lines, then it's clear
15:28.19DocScrutinizer05kernel is a few MB, while, as mentioned above, NovaThor firmware is several GB
15:29.20DocScrutinizer05no surprise, the firmware is *using* a kernel etc of something like OSE, and then building on top of that
15:30.05mvaenskaeoh, that indeed makes it much larger
15:30.45DocScrutinizer05and I didn't even count the man years in OSE in my above considerations
15:31.19DocScrutinizer05OSE it relatively "simple" compared to an average linux kernel
15:31.27mvaenskaeis "our" lte chip that immense?
15:31.48DocScrutinizer05for sure, I don't see why and how it could be any simpler
15:31.54DocScrutinizer05or smaler
15:38.59mvaenskaei meant is it multiple gigabyte ;)
15:39.30che1If this question is stupid I'm sorry, but as you put it, firmwares conceptually sound more simple to me. The 'few' protocols to handle, you mentioned above, fixed address space, processes loaded at boot, ... (Probably I'm greatly mistaking as I'm less experienced)
15:39.30che1So I wonder if it's the high optimisation that makes them so complex? Or what (else) have I overseen/underestimated?
15:44.38mvaenskaeche1: i assume a large part of the code is debugging related
15:48.35che1In that order of size? And wouldn't it be removed before it's copied to the devices?
15:49.41mvaenskaei assume the gigabyte sizes are sources, not compiled binaries
15:50.01che1Ah, right...
15:51.25mvaenskaeif it was binaries then holy moly would tht chip spy 24/7/365
15:51.34mvaenskaethe nsa would love it
15:57.15che1When you believe some people they already do...
15:59.56mvaenskaethey do it some extend but they are not magic
16:00.32che1Was referring especially to the 24/7/365, but yeah...
16:01.13mvaenskaegive them enough manpower and money and they'll do it
16:01.24mvaenskaebut also they can't beat the maths/physics
16:01.54che1Have you heard about the latest upcoming FB app? Mic on all the time? They don't need more manpower...
16:03.14mvaenskaewell, for me they most certainly need it, not using FB :)
16:03.22mvaenskaeand with the neo900 i can ditch android
16:03.35che1True story...
16:03.42che1:)
16:06.01mvaenskaeand as i am beginning to harden my systems and trying to use more alternative solutions which i can verify by source code checking i can get even more off of the grid
16:06.13*** join/#neo900 mordac__ (~mordac@c-24-6-219-139.hsd1.ca.comcast.net)
16:06.26*** join/#neo900 mordac___ (~mordac_@c-24-6-219-139.hsd1.ca.comcast.net)
16:06.41che1The problem here is: there will still be people running around having their mic on...
16:07.08che1You don't (sadly?) controll their devices...
16:09.21mvaenskaethat is true
16:09.39mvaenskaethat is also what bruce said in his talk which i was able to attend
16:10.20mvaenskaethe problem is, more and more people around you are using these solutions and those are then doing the fieldwork
16:10.54mvaenskaeat least i can give myself and others the peace of mind "if i turn off cellular noone knows where we truly are"
16:12.42che1Nothing to add here... :)
16:13.31mvaenskaethere is; this might be the last chance to get such a device, chips are turning more and more into a single non-seperable die
16:13.51mvaenskaeand that gives us no guarantee on what is on and what not
16:53.59DocScrutinizer05~ping
16:53.59infobot~pong
16:57.43DocScrutinizer05mvaenskae: exactly
16:59.05DocScrutinizer05and about FB: ROTFL! I suggested that for Siri, to do all sorts of *really* funny stuff, like listening to people next table that one single microphone couldn't even understand what they say. 8 mics spread across the room *can* do that
17:00.03DocScrutinizer05exact acoustic location of arbitrary events, be it bomb explosions, cars driving by, or airplanes (incl altitude!)
17:00.42DocScrutinizer05there's a DAMN LOT you can do with a few millions of always listening microphones all across the country
17:01.58DocScrutinizer05shoot a gun, 5 s later the alarm not only located your position to the meter but also the direction in which you shoot, and probably even the type of rifle you used and if you hit your target or not
17:02.48DocScrutinizer05they can't _really_ plan to do that!
17:03.51dos1amazing
17:04.06dos1and so scary at the same time...
17:04.48DocScrutinizer05if they do, I'd have to finally build my microwave pulse gun, and spread a small extension to all FB apps that not only enables mic but also _the speaker_ and shouts "aim at here!" when I do my special whistle
17:05.30DocScrutinizer05;-)
17:08.00parmegvDocScrutinizer05: I love this conversation. I'm a Computer Engineer with little knowledge about real Electronics: how could I start learning about all these things? just reading? reading and coding? what to read? what to code?
17:08.01*** join/#neo900 wpwrak (~werner@154-164-231-201.fibertel.com.ar)
17:08.47DocScrutinizer05parmegv: I have no advice how to learn having weird ideas like I do. Maybe you're born with that ;-)
17:09.02parmegvhahaha
17:09.07mvaenskaeparmegv: one important asset is to try and break stuff
17:09.25mvaenskaeand try to think out of the box, think of what stuff cannot do
17:10.07mvaenskaealso reading up on them, surrounding yourself with security experts/following their blogs/websites can help
17:10.12DocScrutinizer05actually long times in my life my "nickname" (though there wasn't such stuff back when) been (translated) "expert for incorrect handling"
17:10.38mvaenskaeone very famous person whom i just met on wednesday and inspired me was bruce schneier
17:10.56mvaenskaehe had a talk here at a local university and i HAD to attend ;)
17:11.06parmegv:)
17:11.28DocScrutinizer05I bet on that (attending)
17:11.42mvaenskaeDocScrutinizer05: i have his talk recorded
17:11.47DocScrutinizer05:-)
17:11.47mvaenskaeon mp3 192kbit/s
17:12.10DocScrutinizer05don't you know this is illegal? ;-)
17:12.13parmegvCurrently I'm freelancong for LEAP, so I'm learning more and more about security :)
17:12.20wpwraknot even lossless ? that's cheap !
17:12.26parmegv*freelancing
17:12.37DocScrutinizer05what's LEAP
17:12.39DocScrutinizer05?
17:12.39mvaenskaeDocScrutinizer05: he used a microphone, it could have been recording all along
17:12.46parmegvleap.se
17:12.54mvaenskaewpwrak: either that or wav and wav uses way too much storage
17:12.58mvaenskaealso makes bad for online sharing
17:13.07mvaenskaeit was roughly 70 minutes
17:13.09parmegvencrypted email, easy vpn
17:13.25DocScrutinizer05btw, may I introduce wpwrak: Werner Almesberger. Hi! And welcome!
17:13.38parmegvIn fact I joined this channel in part because we have similar interests
17:14.03mvaenskaeis Werner the newest member of neo900?
17:14.06DocScrutinizer05yes
17:14.09parmegvwpwrak: welcome yo this beautiful channel
17:14.13wpwrakthat's me, yes
17:14.15parmegv*to
17:14.17wpwrakthanks ! :)
17:14.34parmegvwhat are you going to do in neo900?
17:14.49mvaenskaewpwrak: "welcome aboard" <-- i would want to write that but i am just an enthusiast, not someon working with neo900 ug ;)
17:15.21wpwrakfirst i'll poke around a little, see if i can spot anything immediately suspicious in the design. an extra pair of eyes.
17:15.46wpwraklater on, i may make the production testing process
17:15.49DocScrutinizer05which is always extremely appreciated
17:15.58mvaenskaewell, i gotta go now home but i'll be back in a moment, wlan-ap :)
17:16.59DocScrutinizer05damn, I again missed to go shopping
17:18.13DocScrutinizer05waves
17:18.16DocScrutinizer05bbl
17:18.30DocScrutinizer05wpwrak: a bit of backscroll
17:18.47DocScrutinizer05[2014-05-23 Fri 18:01:54] <che1> Have you heard about the latest upcoming FB app? Mic on all the time? They don't need more manpower...
17:19.24DocScrutinizer05[2014-05-23 Fri 18:59:04] <DocScrutinizer05> and about FB: ROTFL! I suggested that for Siri, to do all sorts of *really* funny stuff, like listening to people next table that one single microphone couldn't even understand what they say. 8 mics spread across the room *can* do that. shoot a gun, 5 s later the alarm not only located your position to the meter but also the direction in which you shoot, and probably even the type of rifle you
17:19.25DocScrutinizer05used and if you hit your target or not
17:19.58DocScrutinizer05I guess I even chatted with you about that topic, no?
17:20.00wpwrak(mic on) add a FIR-capable low-power camera and total control is yours :)
17:20.05dos1DocScrutinizer05 is posting after "bbl" - he'll be there for next few hours until he decides to go "afk" again and repeats the story ;)
17:20.28DocScrutinizer05dos1: ssssh! that's secret!
17:20.35DocScrutinizer05o/
17:25.52*** join/#neo900 mvaenskae (~mvaenskae@unaffiliated/mvaenskae)
17:26.00mvaenskaeand back :)
17:26.22mvaenskaewpwrak: you better make videos of the testing process =p
17:27.44wpwrakyou mean, per device ? :)
17:27.50mvaenskaeDocScrutinizer05: also, how would it be illegal to record a public presentation?
17:28.52mvaenskaewpwrak: per function that works and is accompanied by a cool flashy outcome, like firecrackers!
17:29.58wpwrakthere's sparks and smoke -> "it works". hmm :)
17:30.37mvaenskaeyes!
17:30.56mvaenskaeactually, could you guys implement a killswitch for the memory system?
17:31.18mvaenskaelike me pressing a button and pooof, crispy chips
17:32.08DocScrutinizer05we're trying hard to NOT inmplement any such killswitches
17:32.16mvaenskae:(
17:32.56mvaenskaeit would make a great show and might work in emergencies as a flash/smoke grenade though D:
17:32.57DocScrutinizer05risk of those getting triggered by accident or by a rogueware is way too high
17:33.43mvaenskaewait, you're trying not to... is there something i should know of? =p
17:33.49wpwrakthere's an easier approach. all you need is a screwdriver and a cat. 1) open device to get access to the keyboard. 2) rub cat. 3) discharge into exposed contacts in device. 4) repeat a few times.
17:34.04DocScrutinizer05and at least where I live, it's even illegal to sell or possess such stuff without special permission
17:34.14mvaenskaewpwrak: my cat is quarter a globe away D:
17:34.17wpwrakthis should produce some cat-a-strophic memory loss
17:34.27mvaenskaeDocScrutinizer05: wät?!
17:34.50wpwrakthe germans are serious about not allowing pets in apartments :)
17:35.04dos1:D
17:35.08mvaenskaehow does that need special permission? Ö.ö
17:35.42DocScrutinizer05any explosives of any kind not allowed to sell without special type approval and permission
17:35.54mvaenskaedos1: btw, nice videos on the prototype!
17:36.06mvaenskaeDocScrutinizer05: no need for explosives, just some extra volts
17:37.05dos1mvaenskae: thanks! not the last ones for sure :)
17:37.12DocScrutinizer05extra volts are a poor "killswitch"
17:38.17DocScrutinizer05when you really want to phyically destroy the data, you better do it right or it's a big scum
17:38.34mvaenskaeDocScrutinizer05: why wouldn;t the volts work?
17:38.46mvaenskaedos1: that's the spirit :)
17:39.01DocScrutinizer05because the only burn out a very limited area of the chip, while leaving the storage cells intact
17:39.52DocScrutinizer05that's like deleting the partition table on a HDD, though on a more hw level
17:40.11DocScrutinizer05it can get fixed "easily" when somebody really wants your data
17:40.41mvaenskae:(
17:40.42DocScrutinizer05a simple "erase all" command would work better than "some volts extra"
17:40.52mvaenskaeoh... interesting
17:41.19mvaenskaei didn't realize that
17:43.29mvaenskaewell, it was worth a shot ;)
17:43.31DocScrutinizer05get a properly encrypted filesystem, which has a linked list of mutually depending keys for encryption, so when deleting one sector/block you can't decode any of the whole content
17:46.11mvaenskaeluks?
17:46.25mvaenskaespeaking of, i met the dev as well on the same day the bruce schneier talk was :D
17:46.30mvaenskaethe dev of luks
17:46.32DocScrutinizer05or even better: use really stron encryption 2k bits or more, and store the (8 chars-)encrypted full length key on a fixed block on NAND
17:47.01mvaenskaebest day ever, the icing on the cake was the signature of bruce schneier on my lemote yeeloong :D
17:47.07DocScrutinizer05then your kill switch would just be erasure of that single NAND block
17:47.11mvaenskaeanyways, bus arriving at station, brb
17:50.19DocScrutinizer05btw this whole encryption thing is part of what I'm planning to offer as a special high-security OS for Neo900 - eventually
17:51.24DocScrutinizer05along with proper ZRTP based SIP and VPN, sandboxed browser and a few other thing
17:51.32DocScrutinizer05s
17:52.01DocScrutinizer05such OS obviously doesn't come for free
17:53.14DocScrutinizer05I will offer it as a service, incl the internet side infra supporting it
17:54.27DocScrutinizer05secure net based storage. Update service and repo that doesn't offer any apps that might have security threats, etc
17:54.33*** join/#neo900 mvaenskae (~mvaenskae@unaffiliated/mvaenskae)
17:54.56mvaenskaeand /home :)
17:57.09mvaenskaeDocScrutinizer05: so we are not using plausible deniability but destructive methods from the looks
17:59.05DocScrutinizer05where's plausible deniability in fried chips?
18:00.29mvaenskaetrue, very true, but sometimes it might just get "stolen"
18:00.44DocScrutinizer05plausible deniability is a property of encrypted fs, when you can't tell from looking at the encrypted fs if there's something stored inside or not
18:00.44mvaenskaeand analysis will surely reveal such a sector, wouldn't it?
18:05.01DocScrutinizer05what sector?
18:06.05mvaenskaewell, there needs to be some space reserved for such a sector and method for managing it (deletion, usage)
18:06.21mvaenskaeand that in an unencrypted state
18:08.13DocScrutinizer05the NAND borne encryption key? you could have 10 of then, on 10 different NAND locations, and each single one of them decrypts an actually existing cryptfs embedded and coexisting on the one encrypted partition, So depending on first digit of your password you enter, you see one of 10 alternative filesystems coexisting on device. Who's going to tell which of them never had any data, which is fake, and which is the true one?
18:08.49mvaenskaeinteresting proposal
18:09.02mvaenskaei like that idea
18:10.38DocScrutinizer05and of course 5 of the 10 possible digits might point to a NAND sector that doesn't store *any* valid encryption key. Who's going to tell if it ever had one and if that been the one for the true cryptfs with the protected content?
18:11.28DocScrutinizer05perfect deniability accomplished
18:13.01mvaenskaehow are the cryptFS' managed? are they overlapping or of given size in terms of the partition?
18:13.38DocScrutinizer05to go even further, you can set up your 2killswitch" in a way so it would start with the true key sector, but decrement pointer when triggered, so next time you trigger it, it erases one of the bogus encryption key sectors. Nobody can tell if you already triggered it or not
18:14.58mvaenskaethis is getting complicated
18:15.56DocScrutinizer05obviously the true one needs to have marked as used the blocks inside crypt partition that are used by the other fake filesystems. The fake filesystems however (when existing) can mark as free / used whatever they like
18:17.08DocScrutinizer05mind you: from outside you can't tell if a block is used or not, that's a mandatory property of a proper cryptfs
18:19.37DocScrutinizer05and there's nothing complicated in an app that when started erased block 10800 in NAND and then changes own pointwer to 10700. Next invocation it erases 10700 and changes own pointer to 10600. ASO
18:20.39mvaenskaeand what happens if the pointer is 00000?
18:22.20DocScrutinizer05create files with random names and one block size on 10100, 10200 ... 10900, and place your true encryption key (of course itself being encrypted by your password) into 10800. Place similar keys but pointing to fake cryptfs into the other blocks
18:22.51DocScrutinizer05huh? the pointer isn't supposed to go down to anything like 00000
18:24.17DocScrutinizer05of course the pointer in the killswitch is a threat then, since it +might* point to the right key
18:25.14DocScrutinizer05but then the killswitch itself most likely living inside your encrypted filesystem, so nobody could reach it after it triggered
18:26.01DocScrutinizer05in the fake filesystems you would have other killswitches that point to their according NAND sector. So no need the killswitch decrements own pointer
18:26.09DocScrutinizer05sorry, I'm afk now
18:27.35DocScrutinizer05and of course the killswitch doesn't simply erase the NAND based key, but replaces it with one that points to a fake fs
18:30.00DocScrutinizer05so you have 10 fake and one true fs on your crypt partition, and you have 9 fake and one true key in 10 NAND sectors. after triggering the killswitch you got 10 fake and no true key in NAND
18:31.12DocScrutinizer05nobody can tell if you have 2 or 4 or 7 or 10 fs on cryptpart. And nobody can tell if or not you triggered killswitch
18:32.13DocScrutinizer05you can memorize passwords for 1 or 2 or all of the fake fs, it doesn't matter
18:32.57DocScrutinizer05plausible deniability, nobody can know if you hd one more password than the one you tell them when forced to
18:33.04DocScrutinizer05had*
18:34.07DocScrutinizer05you need to know ONE fake password at least, so you can state it's the one and only and _true_ password
18:35.05DocScrutinizer05of course you even can have multiple _true_ filesystems in use, each with its own password
18:35.11DocScrutinizer05cya
19:19.56*** join/#neo900 mordac_ (~mordac_@68-27-229-89.pools.spcsdns.net)
19:47.29*** join/#neo900 mordac_ (~mordac_@216.253.193.158)
20:51.05*** join/#neo900 archtimmy (~archtimmy@unaffiliated/archtimmy)
21:03.25*** join/#neo900 xes (~xes@unaffiliated/xes)

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.