evilJazz

Chief Executive Code Vandal at of QuasarMX, Certified Qt Specialist, 8-bit kid, Metalhead
Blackmailing the Universe since 1980

[evilJazz @evilJazz]

QuasarMX 2.4 is available now for Android, SailfishOS, Windows, Debian / Raspbian, Ubuntu, Harmattan & Symbian:
Changelog: https://t.co/vMb8Ll71hS
Download: https://t.co/1jVuamK17r

The Jolla Store installation issue has been resolved.

[evilJazz @evilJazz]

@Retrojournal_de @LarryJones Baujahr 80, überall Haken dran

[evilJazz @evilJazz]

@plankers Everybody asking "Why?" must be new to bitter fs.

[evilJazz @evilJazz]

@choehau_ara XFS obviously. Certainly not bitter FS.

[evilJazz @evilJazz]

@msimoni Interesting! I wonder if Carracho and Hotline drew some inspiration from the UI. They are very similar.

[evilJazz @evilJazz]

@nexxeln or as I call it BITTER FS
This crap has eaten data on three devices.
xfs maximalist here. LOL

[evilJazz @evilJazz]

@gospaceport Sorta. More like whole house "UPS". 65 kWh battery.

[Last.fm @lastfm]

So this happened.

[Josef Prusa @josefprusa]

😳😳 So I procrastinated and did a quick check on the AGPL license compliance of the other big Chinese players slicers... Why did I even do it? 😔

❌ FlashForge FlashStudio (Orca-Flashforge)
- FlashNetwork binary blob networking.
❌ ElegooSlicer
- agora_rtm_sdk binary blob networking.
❌ AnycubicSlicerNext
- libbambu_networking and second unknown networking binary???
❌ CrealityPrint
- libbambu_networking and binary blob cr_tpms without source.

What is more interesting is that AnycubicSlicerNext and CrealityPrint both fetch libbambu_networking.

Creality downloads libbambu_networking binary blob for Bambu users, but doesn't check for any signatures, just runs whatever the server (they don't control) provide ☠️ I think that's CWE-494? 😬 cr_tpms is a binary blob without corresponding source code violating AGPL.
Also in the light of recent days... Will they get a C&D for the libbambu use?

At first AnycubicSlicerNext looks like it's actually using libbambu_networking. But after looking at the binary it seems like their releases have sneaky unknown cloud_sdk and telemetry baked in somewhere in the build process, without any mention in the public repo? 😳 This needs a bit more time.

What is up with the closed source black box networking obsession? You can do it easily with open source libraries, don't deal with licensing and don't risk bad PR and liabilities. Just why? Technical negligence or regulatory requirements?

[evilJazz @evilJazz]

@gus33000 Yeah, and enclosure and PSU cost you another leg.
I recently bought a ThinkCentre M720q (6 core i5 / 8 GB) for 150 Euro and it is so much better. PCIe slot, NVMe slot, Wifi, SATA, all in a tiny box. Added the PCIe adapter and an old eSATA PCIe card. It is now my off-site backup.

[evilJazz @evilJazz]

@Tono_Ken3 Welcome!
https://t.co/7nrXOlFEP9

[evilJazz @evilJazz]

Almost final form

[evilJazz @evilJazz]

Normalize Perl again.

[evilJazz @evilJazz]

Thank you! I did a mini-analysis of the network plugin and communications back when I got my X1E:
https://t.co/QVZujT7ST0

Bambu never again. Should have bought that Prusa instead. Put that on a t-shirt.

[Josef Prusa @josefprusa]

BambuStudio has been violating PrusaSlicer AGPL license since their fork, with the same networking binary black box in question today. Why are they willing to burn the goodwill over it?
There's something most have sensed but never seen it all in one place, the five-law framework China built between 2017 and 2023 ⤵️

So maybe their hand is forced as their "network" is too valuable already? Each law on its own, interesting, okay... Read them together, and add any Chinese company with big reach to the mix you get the complete picture.

1) National Intelligence Law (2017)
All organizations and citizens must "support, assist, and cooperate" with intelligence work. The same law makes it illegal to disclose that cooperation happened. Cooperation is mandatory, and silence about it is mandatory too.

2) Cryptography Law (2020)
Commercial encryption must be state-approved and state-reviewed. When authorities request it, companies must provide decryption keys or plaintext. The state on both sides of that equation is the same one.

3) Data Security Law (2021)
Article 2 gives the state extraterritorial reach over data that touches Chinese national security or public interests. So EU/US data hosting does nothing to make it safe, because jurisdiction follows the company, not the server location.

4) Counter-Espionage Law revision (2023)
The general definition of espionage was expanded to cover "documents, data, materials, or items related to national security and interests." Industrial data is one of the intended targets since the revision.

5) Network Product Security Vulnerability regulation (2021)
Any company or researcher that discovers a software vulnerability must report it to MIIT within 48 hours. From there it flows to CNNVD (China National Vulnerability Database of Information Security), operated by the 13th Bureau of the Ministry of State Security. Microsoft's threat intelligence team documented Chinese state-hacker zero-day usage rising after this took effect. Shows the willingness to use the “tools” China built.

Together they describe a system with no neutral exits. Cooperation is required, encryption is real but the spare keys live at the ministry, jurisdiction follows the company across borders, industrial data is in scope, and discovered vulnerabilities flow to an intelligence agency 😬

3D printing became strategic for China in 2020 and joined the “Made in China 2025” plan soon after. Why does 3D printing matter so much? 1/x

[evilJazz @evilJazz]

Hey @BambulabGlobal
GET REKT!
https://t.co/VmVQNcKnDE

[evilJazz @evilJazz]

@SnazzyLabs Installing new firmware for age verification? 🤣

[evilJazz @evilJazz]

@ActionRetro1 Ah, the dev zero distro!

[evilJazz @evilJazz]

@softwincn Now discharged the battery in a controlled manner. Got really warm and puffed up even more.
This is fucking garbage. Last GPD device for me.

[evilJazz @evilJazz]

The battery in my GPD Pocket 2 puffed up, less than a year old. Sub-par quality. This is now a fire hazard.
These batteries are virtually impossible to get here in Europe. Let's see how GPD does RMA... /cc @softwincn and yes, I already mailed [email protected].

[evilJazz @evilJazz]

@softwincn Another puffed up GPD battery. This time GPD Win Max 2 (2023). That makes it the 5th GPD device I own where the battery puffed up and becomes a fire hazard.

You guys really need to get the charger limit figured out!!!!
I really wonder how many users have this happen.

[evilJazz @evilJazz]

@CEOofFuggy Also, the XOrg server was released 22 years ago. You might want to check your math. The spec was just called X11 before, XFree86 being the relevant implementation of the time.

[evilJazz @evilJazz]

@CEOofFuggy Windows received multi monitor support with 98 and it was crap back then. I only used it to debug DirectX stuff on the second monitor. Shit crashed left and right and I had to reboot constantly.
But Xinerama had trouble with refresh rates? As if that was the issue back then