Hacker News: Ristovski

New comment by Ristovski in "Qwen-Image-2.1: Compact, efficient, and unified image creation"

Ristovski — Sun, 20 Sep 2026 16:07:23 +0000

> In midvalues you will see a slight dot pattern.

Is this not simply some sort of watermark instead of an artifact?

New comment by Ristovski in "List, inspect and explore OCI container images, their layers and contents"

Ristovski — Fri, 02 Jan 2026 20:40:57 +0000

A similar tool to this (includes interactive TUI) is https://github.com/wagoodman/dive

New comment by Ristovski in "Sisk – Lightweight .NET Web Framework"

Ristovski — Sat, 31 Aug 2024 19:09:50 +0000

FastEndpoints is nice but they don't seem to plan on supporting NativeAOT anytime soon https://github.com/FastEndpoints/FastEndpoints/issues/565#is....

New comment by Ristovski in "SinkClose flaw impacts AMD EPYC and Ryzen CPUs, helps gain Ring -2 privileges"

Ristovski — Fri, 09 Aug 2024 18:55:22 +0000

For those wondering what the exact attack vector is, the AMD advisory has some details:

> Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. [0]

[0]: https://www.amd.com/en/resources/product-security/bulletin/a...

New comment by Ristovski in "Nvtop: Htop for GPUs"

Ristovski — Wed, 08 May 2024 14:47:51 +0000

> nvtop stands for NVidia TOP, a (h)top like task monitor for NVIDIA GPUs.

The Github repo[0] disagrees: > NVTOP stands for Neat Videocard TOP, a (h)top like task monitor for GPUs and accelerators.

I have been using this on AMD for a long time now.

[0]: https://github.com/Syllo/nvtop

Parmigiano-Reggiano Adopts Edible Microchips to Combat Counterfeiters

Ristovski — Wed, 01 May 2024 21:57:33 +0000

Article URL: https://culturecheesemag.com/blog/parmigiano-reggiano-adopts-edible-microchips-to-combat-counterfeiters/

Comments URL: https://news.ycombinator.com/item?id=40230034

Points: 1

# Comments: 0

New comment by Ristovski in "Qualcomm’s Hexagon DSP, and Now, NPU"

Ristovski — Wed, 04 Oct 2023 23:33:23 +0000

One of the major downsides of the Hexagon DSP is that its near impossible to actually run anything on it unless you somehow get your hands on an unprovisioned/unlocked SoC.

The HLOS (High-level OS) running on the Hexagon requires every "applet" to be signed by either the Qualcomm root cert or the OEMs cert. Usually, every phone has a set of generic Hexagon applets (or "skeleton libs") that are provided and signed by the OEM, which seem to be freely usable to offload some computational work to the DSP (mainly FastCV et al - https://developer.qualcomm.com/sites/default/files/docs/qual...). Those of course come with their own bugs: https://research.checkpoint.com/2021/pwn2own-qualcomm-dsp/

On some older SoCs, you were able to use a TOCTOU (Time of check to time of use) exploit to bypass the signature check by patching the applet loader shim in-memory, once it itself got authenticated: https://github.com/geohot/freethedsp/ (I have personally ported this to the msm8953, and it seems to work)

VanJS (Vanilla JavaScript) – A 1.2kB Reactive UI Framework Without React/JSX

Ristovski — Sat, 13 May 2023 18:53:57 +0000

Article URL: https://vanjs.org/

Comments URL: https://news.ycombinator.com/item?id=35931478

Points: 1

# Comments: 0

iTLB Multihit

Ristovski — Wed, 18 Jan 2023 20:19:26 +0000

Article URL: https://www.tacitosecurity.com/multihit.html

Comments URL: https://news.ycombinator.com/item?id=34432444

Points: 3

# Comments: 0

New comment by Ristovski in "A Zig Diary"

Ristovski — Wed, 11 Jan 2023 13:41:46 +0000

IIRC there is some rudimentary AVR5 support in https://github.com/ZigEmbeddedGroup/microzig (https://github.com/ZigEmbeddedGroup/microzig/blob/main/src/m...)

New comment by Ristovski in "Changing firmware config that doesn't want to be changed"

Ristovski — Sat, 07 Jan 2023 17:45:32 +0000

I believe that should be possible, yes.

Here is an interesting paper about Computrace: https://www.coresecurity.com/sites/default/files/private-fil...

New comment by Ristovski in "Changing firmware config that doesn't want to be changed"

Ristovski — Fri, 06 Jan 2023 15:39:27 +0000

For anyone interested in efivars, I have an old blog post about essentially the same thing but going a bit more in-depth, including how to actually modify the efivar entries: https://ristovski.github.io/posts/inside-insydeh2o/

New comment by Ristovski in "AMD Ryzen 7000 Series performs better with Spectre V2 Mitigations enabled"

Ristovski — Tue, 04 Oct 2022 14:02:01 +0000

An interesting comment made in the Phoronix forums:

> My theory is that fixing the Spectre V2 vulnerability on a hardware level would lead to fundamental architecture changes that AMD is not willing to make, because it may add so much more complexity to the architecture or it may just be too unconvenient. They probably realized that optimizing the code paths that the Linux kernel utilizes on the default mitigations mode is faster, simpler and it may involve less deeper changes, while still being secure.

> As far as I know, pretty much every CPU architecture that implements speculative execution is vulnerable to some version of Spectre, so note that this is not a fundametal flaw of AMD64.

New comment by Ristovski in "Solving my truck’s TPMS sensor problem with the help of an RTL-SDR dongle"

Ristovski — Mon, 22 Aug 2022 17:19:34 +0000

I wonder, do those sensors have some built-in battery that lasts a long time, but ultimately the whole sensor needs to be replaced due to the electronics being potted-in?

Or is it so low power that it can use some sort of piezoelectric/MEMS power source that charges it as the wheel is spinning?

New comment by Ristovski in "Under anesthesia, where do our minds go?"

Ristovski — Wed, 27 Jul 2022 11:26:42 +0000

A similar thing once happened to me as a kid, albeit with a twist. I counted down from 10 quite slowly and opened my eyes once I reached 0 - only for it to be morning.

New comment by Ristovski in "Hello V-Lang"

Ristovski — Sun, 17 Apr 2022 16:57:54 +0000

I am still wondering why Volt, the native desktop client for Slack/Discord et al only supports MacOS when V boasts about cross-platform support and cross-compilation.

New comment by Ristovski in "Show HN: Building biggest online toolbox on web (57 plus tools with a fancy UI)"

Ristovski — Mon, 07 Feb 2022 23:04:50 +0000

This is very useful as well: https://gchq.github.io/CyberChef/ (CyberChef - The Cyber Swiss Army Knife)

New comment by Ristovski in "Ask HN: What are the best and worst command-line interfaces you have used?"

Ristovski — Wed, 24 Nov 2021 19:10:25 +0000

A very handy tool for this is https://www.nongnu.org/atool/

New comment by Ristovski in "Telegram requires third-party clients to show ads"

Ristovski — Wed, 24 Nov 2021 00:04:44 +0000

Title is a bit misleading - this is merely enforcing that developers who create third party Telegram clients include the functionality of showing ads.

New comment by Ristovski in "Emojimix"

Ristovski — Mon, 22 Nov 2021 23:59:33 +0000

They seem to go up to 4 :)

Example: https://github.com/UCYT5040/Google-Sticker-Mashup-Research/b...

Edit: 6: https://github.com/UCYT5040/Google-Sticker-Mashup-Research/b...