So anthropic has gone from being loved by the public for not allowing weaponisation of claude models to being the enemy because of their stance on open weight models..
> be me
> macbook air is bricked, needs a reinstall
> no second mac to build a bootable installer
> find a github actions workflow that builds macOS installers for free, no mac required
> perfect.jpg
> trigger a build, artifact is a 17.6GB .dmg.img
> click download
> kb/s
> literal kb/s
> theoretical connection is 10MB/s
> discover artifact lives on azure blob, signed URL expires in 10 min
> write a bash script that resolves the azure SAS url fresh, hands it to aria2c with 16 parallel streams
> 16 connections, still kb/s
> mfw it's a per-IP throttle, not per-connection
> repo author literally has a line in the workflow: "Enable Cloudflare WARP for faster download"
> install Cloudflare WARP on my ubuntu box
> single stream jumps 20KB/s -> 1.6MB/s
> aria2c 16x -> 10MB/s, pinned to my ceiling
> 17.6GB in ~an hour, sha256 matches github's published digest
> oknowweiscooking.webp
> dd it to a USB SSD
> paranoid it won't boot apple silicon because it was built on an intel runner
> boots apple silicon just fine, i was wrong, shut up
> installer runs, reinstall chugs along
> STOPS
> "OS Personalization" PREFLIGHT_PERSONALIZE portioncomplete:0.15000 estimatedtimeremaining:-1
> 70000 log lines of stalled:NO
> the mac can ping apple/com
> it can ping cupertino
> but personalization "no connections witnessed"
> i don't fucking get it
> try to sniff the wifi to see what it's talking to
> can't
> WPA2 isn't a hub, it's a switch, i can't decrypt the mac's traffic as a third client
> feel stupid
> dig into it
> test apple's personalization signing servers from my box
> gs/apple/com -> https 000
> gsp-ssl/apple/com -> https 000
> albert/apple/com -> 403 (works)
> gs/apple/com is the signing server and it's IPv4-ONLY
> my ISP (DIGI, romania) has broken IPv4 routing to apple's 17.0.0.0/8
> ICMP works, IPv6 works, CDN works, the ONE /8 macOS needs to sign firmware is a black hole
> that's why it could "ping cupertino" but personalization silently died
> fix: repoint the mac's IPv4 default gateway from the router to my ubuntu pc
> my pc has IP forwarding + NAT masquerade + Cloudflare WARP
> mac's IPv4 now tunnels through cloudflare, bypassing my ISP's broken path
> watch the signing handshake complete in tcpdump, SYN -> SYN-ACK -> ClientHello -> kilobytes of signed data
> portioncomplete climbs past 0.15
> weactuallydidit.jpg
> STOPS AGAIN at 0.29
> silent on IPv4
> oh
> the mac's IPv6 still goes straight to the router, bypassing my box
> i literally cannot see it
> disable IPv6 on the mac so everything falls back to the working IPv4 path
> it reboots
> flashes the apple logo 4 times
> i'm dying
> it boots
> it works
> 29 hours
> i had to MITM my own home network because my ISP couldn't route to one (1) /8
> the mac is back
> i'm buying a framework
>text still isn't green
Forgot your password? Lost your phone? Can’t get into your account?
You can now use a selfie video to log into your Google Account.
The new feature is easy to use and lets you sign in — even if you forget your password or don’t have your usual phone or laptop — with a quick selfie.