"The dance is always danced above the hollow place, above the terrible abyss." -Sparrowhawk

San Diego, CA
sophg.one is maybe the first bootloader unlock for two architectures at once, thanks to #nix sha256(sophgone):
4a3614cc900f3e0bc954ac49ed1836fdad7e291f5fe23b0359b18120ad22e4e6
2
2
204
ai labs use "sandbox" in the game dev sense and not in the linux security sense
Replying to @tomekkorbak
questions: 1. why was the DNS tool able to bypass the sandbox? 2. why 2.5 hours from detection to pausing the run?
28
289
5,377
116,721
mjones (@numinit) retweeted
Excited to announce that I'm launching a new startup, @LilithSemi , together with Sebastian Kraus! 🚀 With Lilith Semi, we're building open-source tools for hardware development and security-critical infrastructure. Our first release is Chock, a security-first harness for AI coding agents. Since 2026, AI agents have become good at tasks beyond simple web development. As companies start dealing with real workflows, enterprises, especially in regulated industries, are becoming more conscious about how they handle sensitive data. I've been dealing with supply chain security for a while, and one thing I've learned is how important it is to work with safe AI harnesses. When you're dealing with sensitive data, the risk simply isn't worth it. That's why Chock sandboxes AI agents in a using standard sandboxing primitives. We're currently working on micro-VMs as the next step. 👉 Check it out: chock.ws And if you're at NixCon 2026 in Kraków, come find us and let's talk. #AISecurity #AIHarness #SupplyChainSecurity #DeveloperTools #OpenSource #NixCon2026
9
13
75
1,479
4a3614cc900f3e0bc954ac49ed1836fdad7e291f5fe23b0359b18120ad22e4e6
10
1,367
"Community-based solutions need contributions of all kinds so everyone can get in where they fit in. Pick the spot that suits your abilities and plug in." (from the @defcon 34 theme) May contain at least one @hintjens quote too 😉
1
3
5
425
Opus 5 guesses at what the Lontium LT8912B drive strength registers do and fixes HDMI output on a badge with a mismatched ground plane. When pressed on why it came up with the magic undocumented values, it says it made them up
2
107
We're well beyond security theater, now it's security WrestleMania
1
90
One minor seam in this plan — and that's on me.
Report: US almost boarded Chinese ship over hallucinated AI arms report arstechnica.com/ai/2026/09/r…
2
91
The amount of esoterica I have discovered in the past few weeks about the Sophgo SG2000 Cortex A53/RISC-V C906/C906L/8051/TPU core complex is astounding. It has been mind bending to attempt to mainline drivers into NixOS on a chip this haunted
1
4
241
I forgot the Chips&Media H.264 IP block, which is basically two cores with their distinct firmware. Oh yeah, and the *IN-PACKAGE* 512 MiB of DDR3, and the fact that the mask ROM brings BL2 up inside the TPU's SRAM prior to DDR init. All in the package in the upper left 🔼
3
94
mjones (@numinit) retweeted
CQDX - Turn Off Spread Spectrum And Overvolt
5
36
If AI companies actually thought Al was existentially dangerous, they would be doing a lot better job with their sandboxes
4
10
322
"let us monitor your activities for you, it's for your own good"
Replying to @sean_from_earth
i won't lie to you, i think open source will be banned before too long after some major disaster. and when the day comes, you'll agree with me. i hope kimi and deepseek etc keep making models but keep them monitored on an api where they should be
2
178
streaming tormentedradio.com over wifi and bluetooth on the nixbadge look ma, no wires!
2
191
Male to male SD adapter (fixed pinout)
3
511
The network setup and ops for this were fun :)
Nix Vegas 2026 and the First Nix CTF nix.vegas/blog/2026/ctf/
2
218
Round 3. Having trouble debugging TrustZone because something is setting SPIDEN (Secure Privilege Invasive Debug ENable), or it's just high by default. RISC-V was easy sauce and is a much more poorly hardened platform :)
2
2
526
s/high/low but yeah
177
Round two (I broke out the RISC-V JTAG but ARM JTAG has an inconvenient pinmux so it's a mess)
5
464