Lilbits: DIY Raspberry Pi 400 with 8GB RAM, Raspberry Pi OS update, and OnePlus Nord Pac-Man Edition

A hardware hacker figured out how to double the RAM on a Raspberry Pi 400 the hard way (because there is no easy way). Speaking of Raspberry Pi, the folks behind the official OS for the single-board computer have released a new build that’s based on Debian 11 Bullsye. Meanwhile OnePlus is teasing a new […]

The post Lilbits: DIY Raspberry Pi 400 with 8GB RAM, Raspberry Pi OS update, and OnePlus Nord Pac-Man Edition appeared first on Liliputing.

A hardware hacker figured out how to double the RAM on a Raspberry Pi 400 the hard way (because there is no easy way). Speaking of Raspberry Pi, the folks behind the official OS for the single-board computer have released a new build that’s based on Debian 11 Bullsye.

Meanwhile OnePlus is teasing a new special edition, Pac-Man themed smartphone and real-world reviews of Razer’s Zephyr face mask (the one with RGB lighting effects and active cooling fans) are starting to appear… and they’re not great.

Here’s a roundup of recent tech news from around the web.

I built a Raspberry Pi 400 with 8GB of RAM [u/pi800]

Unlike most Raspberry Pi devices, the Raspberry Pi 400 computer-in-a-keyboard comes in just one configuration: it has a 1.8 GHz quad-core ARM Cortex-A72 processor, 4GB of RAM, and a microSD card for storage. Want more RAM? There’s no official way to get any… but unofficially? One hardware hacker made a DIY 8GB model by transplanting the memory from a Raspberry Pi Compute Module (which requires a steady hand, some special tools, and a lot of patience. reddit.com

Bullseye – the new version of Raspberry Pi OS [Raspberry Pi]

Raspberry Pi OS is now based on Debian 11 Bullseye (it had been based on Debian 10 Buster up until now). Among other things, the desktop now uses GTK+ version 3, a new window manager called mutter, a new notification manager in the taskbar, and more.

Introducing the OnePlus Nord 2 x PAC-MAN Edition [OnePlus]

The OnePlus Nord 2 x PAC-MAN edition phone is coming soon for £499 with MTK Dimensity 1200, 12GB RAM, 256GB storage, and a glow-in-the-dark, Pac-Man inspired back cover with a maze design and customized OxygenOS user interface. Unfortunately nowhere in this announcement does OnePlus actually show us what the phone will look like.

But if you’re in Europe or India, you can try to win one by playing an online game of Pac-Man and shooting for a high score. And if you’re not in one of those countries, you can still play… you just can’t win. 

Review: I wore Razer’s Zephyr N95 mask for two weeks so you don’t have to [Ars Technica]

Razer’s high-tech Zephyr face mask has garnered a lot of attention this year. Unfortunately now that it’s available, @arstechnica found that it’s heavy, noisy (because of the fans) and not all that comfortable for long-term use. Maybe v2 will be better?

Sam Machkovech / Ars Technica

Keep up on the latest headlines by following Liliputing on Twitter and Facebook and follow @LinuxSmartphone on Twitter and Facebook for the latest news on open source mobile phones.

The post Lilbits: DIY Raspberry Pi 400 with 8GB RAM, Raspberry Pi OS update, and OnePlus Nord Pac-Man Edition appeared first on Liliputing.

Hacking group says it has found encryption keys needed to unlock the PS5

Fail0verflow announcement suggests a private exploit to expose system’s secure kernel.

Decrypting the PS5 kernel doesn't involve opening the hardware like this, but it still serves as a good visual metaphor for how the system is now being "exposed."

Enlarge / Decrypting the PS5 kernel doesn't involve opening the hardware like this, but it still serves as a good visual metaphor for how the system is now being "exposed." (credit: Sony / YouTube)

Hacking group Fail0verflow announced Sunday evening that it had obtained the encryption "root keys" for the PlayStation 5, an important first step in any effort to unlock the system and allow users to run homebrew software.

The tweeted announcement includes an image of what appears to be the PS5's decrypted firmware files, highlighting code that references the system's "secure loader." Analyzing that decrypted firmware could let Fail0verflow (or other hackers) reverse engineer the code and create custom firmware with the ability to load homebrew PS5 software (signed by those same symmetric keys to get the PS5 to recognize them as authentic).

Extracting the PS5's system software and installing a replacement both require some sort of exploit that provides read and/or write access to the PS5's usually secure kernel. Fail0verflow's post does not detail the exploit the group used, but the tweet says the keys were "obtained from software," suggesting the keys didn't need to make any modifications to the hardware itself.

Read 5 remaining paragraphs | Comments

Linux Smartphone News Roundup: New postmarketOS, Manjaro, Nemo, and Sailfish OS builds, Phosh 0.14, and more

There’s been a lot of activity in the mobile Linux space recently, and it’s been a while since I’ve done a Linux Smartphone News Roundup, so let’s take a look at some recent developments from the folks working to make free and open source software alternatives to Android and iOS. Phosh 0.14 released [Phosh] Phosh […]

The post Linux Smartphone News Roundup: New postmarketOS, Manjaro, Nemo, and Sailfish OS builds, Phosh 0.14, and more appeared first on Liliputing.

There’s been a lot of activity in the mobile Linux space recently, and it’s been a while since I’ve done a Linux Smartphone News Roundup, so let’s take a look at some recent developments from the folks working to make free and open source software alternatives to Android and iOS.

Phosh 0.14 released [Phosh]

Phosh is a mobile-friendly user shell for mobile Linux distributions. Originally developed by Purism for the Librem 5 smartphone, it’s also been ported to a number of mobile Linux distros for the PinePhone and other compatible smartphones. This build brings seek buttons to the media player widget, support for automatically pausing the media player when headphones are unplugged, launch splash support, and a WiFi hotspot mode indicator in the status bar, along with a bunch of bug fixes and other changes. 

Manjaro ARM Beta 18 with Phosh released for the PinePhone [ManjaroLinux]

The Manjaro team are some of the most prolific developers of Pinephone-compatible operating systems, with regular releases of new builds featuring the Plasma Mobile and Phosh user interfaces. This new Phosh release includes the Linux 5.14.17 kernel, Phosh 0.14 user interface, GNOME 40.5, and more. 

postmarketOS Release: v21.06 Service Pack 4 [postmarketOS]

The developers of postmarketOS also have a new release featuring Phosh 0.14 user interface. This latest update to the stable channel of postmarketOS also brings a feature-complete multi-factor authentication app, an improved modem helper daemon, and more. This will be the last service pack for postmarketOS v21.06, with the next stable release expected to be v21.12, which should launch in December. 

postmarketOS + mainline for the OnePlus 5/5T! [TuxPhones]

While the PinePhone and Librem 5 get a lot of attention, developers at postmarketOS have been doing a lot of work to bring mainline Linux support to older phones that originally shipped with Android. There has been quite a bit of success with phones featuring Qualcomm Snapdragon 845 processors, but now there’s a near-mainline Linux build of postmarketOS for the Snapdragon 835-powered OnePlus 5 series as well. it’s still a work in progress – the display, touch input, and WiFi and Bluetooth are working, but mobile data, phone calls, and SMS are not. Neither is the camera or audio. But development is off to an impressive start. 

OnePlus 5T running postmarketOS (via @deathmist)

postmarketOS Cheat Sheet [@braam_martijn]

Want to try postmarketOS, but unsure how to do things like install or remove applications, start or stop services, or install the operating system? Developer Martijn Braam’s 1-page cheat sheet might help. 

Nemomobile in November/2021 [Jozef Mlich]

Nemo Mobile version 0.6 was released recently, with a new boot splash screen, updated device lock, and updated audio and Bluetooth functions. There’s also support for using a mouse with Nemo, and there’s initial support for running the operating system on the PineTab tablet from Pine64. 

PinePhone Pro & keyboard units are shipping to developers [@JustineSmithies]

The PinePhone Pro is a $399 smartphone with higher-performance hardware than the original $150 PinePhone, but in order to make sure that users can get the most out of that hardware, Pine64 is shipping the phone to developers before making it available to the general public in early 2022.

Now the first developer units are starting to arrive, and it looks like Pine64 is also shipping the $50 PinePhone keyboard to developers ahead of general availability of that accessory, which is expected to go on sale this month. 

Manjaro team gets a PinePhone Pro & keyboard too [@ManjaroLinux]

Another real-world photo of a PinePhone Pro and PinePhone Keyboard. 

Sailfish OS 4.3.0 released to Early Access subscribers [Sailfish OS Forum]

The latest version of the Linux-based Sailfish OS brings too many changes to summarize in a paragraph or two, but among other things there are security improvements, bug fixes, sharing menu improvements, you can close the web browser menu with a drag, and Android apps can now open files and web links (Sailfish is a Linux OS with some Android app support, no need for third-party tools like Waydroid). 

You can keep up on the latest mobile Linux news by following @LinuxSmartphone on Twitter and Facebook.

The post Linux Smartphone News Roundup: New postmarketOS, Manjaro, Nemo, and Sailfish OS builds, Phosh 0.14, and more appeared first on Liliputing.

Research Center: Limiting Anonymity Helps to Expose Terrorists (and Pirates)

The International Center for Law and Economics believes that cloud hosting providers and related services should do more to deter illegal activity. Responding to an inquiry from the U.S. Department of Commerce, the research center further notes that anonymous online activity through proxy servers, VPN’s, the Onion network (Tor), and even 8chan, can complicate law enforcement.

From: TF, for the latest news on copyright battles, piracy and more.

anonymous cardMany people see optional anonymity as a key feature of the Internet but increasingly there are calls for stricter identity checks.

Such requirements are not new. In daily life, many people have encountered situations where they have had to prove their identity. When opening a bank account, for example. But online it is rare.

This should change, according to some voices. In recent years copyright holders and industry groups have called for stricter “know your business customer” rules. This effort is starting to pay off in Europe and over in the United States, similar calls are heard.

Earlier this year, then-President Donald Trump signed an executive order that partially addresses this issue. The executive order aims to stop foreign cybercriminals from using US-based Infrastructure as a Service (IaaS) products. Specifically, this can be achieved by requiring such services to properly verify and retain the identities of non-US customers.

The U.S. Department of Commerce is considering how this proposal can be best implemented. To do so, it launched a public consultation requesting various experts and stakeholders for input.

ICLE Chimes In

Last week, the response from The International Center for Law and Economics (ICLE) was published online. This independent bi-partisan research center relies on input from academics and regularly shares its thoughts on important policy debates. That includes the executive cybersecurity order.

According to ICLE, real anonymity is hard to find on the Internet. Using the term “pseudonymous” would be more appropriate. However, certain tools and services definitely make it harder for law enforcement to track down criminals.

VPNs, Tor, and proxy services can be used for good. However, they can also be abused by malicious actors, the research center notes.

“[I]t remains the case that when anonymity is combined with easily accessible tools like virtual private networks, proxy servers, and The Onion Network (Tor), it can tend to confound law enforcement,” they write.

Carefully Calibrated Policy

The overall message of the research center is clear. ICLE believes that, through carefully calibrated policy, IaaS providers can be required to collect and share information that’s sufficient to identify criminals.

This information doesn’t have to be extensive or foolproof. The goal should be to minimize the burden for IaaS providers and their customers while collecting enough information to pinpoint bad actors

“[T]he Department is pursuing a sound policy by instituting KYBC requirements on IaaS providers. Ultimately, the question is not whether to adopt such a policy, but how best to do so,” ICLE writes.

“Understanding that no system will be perfect, and that the vast amount of IaaS providers’ customer relationships should continue relatively unburdened, the Department’s final rules should capture most bad actors by relying on obligations to supply minimal, but sufficient, user information.”

Tor, VPNs, and 8chan

The research center believes that less extreme policy interventions may achieve a great effect. At the same time, however, it also suggests that IaaS products are not the only problem.

ICLE notes that other ‘anonymous’ online services, including 8chan and file-sharing platforms, have been used by terrorists including those involved in the San Diego and Christchurch attacks.

“In the case of an April 2019 attack on a synagogue in San Diego, for example, the perpetrator allegedly both drew inspiration for the attack from 8chan forums and used the site to advertise his actions and garner more attention from likeminded users.

“The perpetrator of the San Diego attack also used other services that allow anonymous interaction, such as Pastebin and Mediafire. Similar sites offering free, anonymous filesharing are widely available online,” ICLE adds.

Piracy Problems

Anonymity is also abused by copyright infringers. While the research center notes that this isn’t as dramatic as terrorist attacks, services such as VPNs can pose enforcement challenges.

“For instance, LiquidVPN was sued earlier this year for designing and marketing its services as a ‘no-log’ VPN. LiquidVPN promoted its service as enabling use of peer-to-peer networks and pirate-streaming websites with impunity, because the company would be unable to comply with any ISP or rightsholder demands to unmask users.”

These examples could offer policy lessons that can help the Government to shape its anonymity approach in the context of IaaS providers, the researchers write, adding that existing privacy regulations such as Europe’s GDPR should be kept in mind.

MPA Contribution

ICLE is not the only organization to support new regulations. The Motion Picture Association (MPA) also backs the executive order and argued to expand it to other services such as DNS servers, reverse proxies, and cryptocurrency exchanges.

Coincidentally, or perhaps not, the MPA is also a financial contributor to the ICLE. In the latest MPA tax filing we could find online (2018), the movie industry group listed a $200,000 contribution to the research center.

A copy of the International Center for Law’s comments and suggestions in response to the U.S. Department of Commerce consultation is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Biden’s “historic” $65 billion broadband plan approved by Congress

US will spend tens of billions to deploy broadband and offer $30 monthly subsidies.

President Joe Biden speaking at a press conference.

Enlarge / President Joe Biden speaks about the passage of the infrastructure bill during a press conference at the White House on November 6, 2021. (credit: Getty Images | Samuel Corum)

President Biden's $65 billion broadband plan was passed by the House of Representatives on Friday as part of the $1.2 trillion Infrastructure Investment and Jobs Act. While it's not as big as Biden's original broadband plan, the Benton Institute for Broadband & Society called it "the largest US investment in broadband deployment ever."

The biggest portion of the broadband spending is $42.45 billion for a Broadband Equity, Access, and Deployment program that would give subsidies to ISPs that build in unserved areas. Another $14.2 billion goes to an Affordable Connectivity Fund that is essentially a longer-term version of the Emergency Broadband Benefit Program created for the pandemic. Under the new version, subsidies for eligible households will be $30 a month instead of the original $50.

Another broadband provision gives $2.75 billion for digital equity grants to states to "facilitate the adoption of broadband by covered populations in order to provide educational and employment opportunities to those populations." Grants can cover a variety of needs including training, broadband equipment, and "public access computing centers for covered populations through community anchor institutions." Covered populations include low-income households, racial and ethnic minorities, rural residents, veterans, people with disabilities, people with language barriers, and people who are 60 or older.

Read 14 remaining paragraphs | Comments

Disney+ will slash your HDTV’s black bars via IMAX Digital update

Begins with 13 Marvel Studios films—which never previously streamed in “17.1:9” ratios.

Why limit yourself to a 21:9 ratio when select Marvel Studios films were framed (at least in part) in the taller IMAX Digital format? Get ready to see the difference thanks to this week's Disney+ update.

Enlarge / Why limit yourself to a 21:9 ratio when select Marvel Studios films were framed (at least in part) in the taller IMAX Digital format? Get ready to see the difference thanks to this week's Disney+ update. (credit: Aurich Lawson | Getty Images | Disney)

Disney+'s next major app update, coming to all devices later this week, continues the service's latest efforts to please nitpicky A/V obsessors with a new screen ratio format meant to fill more of your HDTV screen in a way that filmmakers originally intended.

"IMAX Digital" is coming to all devices that support Disney+ starting this Friday as part of the service's "Disney+ Day" promotion. This "17.1:9" format will land exclusively on 13 Marvel Studios films to start, and it coincides with the streaming premiere of Shang-Chi and the Legend of the Ten Rings—a film that skipped Disney's experiment with simultaneous launches in theaters and on Disney+ earlier this year.

Here's the full list of IMAX Digital-compatible films coming to Disney+ later this week:

Read 6 remaining paragraphs | Comments

Here’s what the infrastructure bill means for road safety and EVs

The infrastructure bill includes a lot of needed investment in transportation.

After months of roadblocks, Congress unjammed itself long enough to pass an infrastructure bill that should make transportation safer.

Enlarge / After months of roadblocks, Congress unjammed itself long enough to pass an infrastructure bill that should make transportation safer. (credit: Getty Image)

On Friday, the Democratic majority in the House of Representatives passed the Infrastructure Investment and Jobs Act, mirroring an infrastructure bill passed by the Senate earlier this year. This is one of a pair of major policy initiatives from the Biden administration and congressional Democrats—the other being the Build Back Better Act, which (hopefully) includes, among other things, expanded subsidies for electric cars and bikes but which is still being obstructed by special interests in the Senate.

This bill should be signed by US President Joe Biden once Congress gets done with a week's holiday. Although it is very much scaled back from earlier proposals, it still includes $550 billion of new spending. Much of it is transport-related, including $40 billion to repair, replace, and rehabilitate bridges, $39 billion for mass transit modernization and expansion, and $66 billion for passenger and freight rail.

The infrastructure bill also includes plenty of safety-related sections—no bad thing considering the ever-worsening death toll on US roads each year.

Read 16 remaining paragraphs | Comments

Testing shows the Pixel 6 can’t actually do 30 W quick charging

The Pixel 6 takes way longer to charge than the spec sheet would lead you to believe.

The Pixel 6 Pro.

Enlarge / The Pixel 6 Pro. (credit: Ron Amadeo)

The Pixel 6 is Google's most competitive hardware release in a long time, but the company is still behind the curve when it comes to quick charging. OnePlus offers proprietary 65 W quick charging, and Qualcomm's latest charging solution can hit 100 W. Google says the Pixel 6 can be charged at 30 W, which is slower than the best Android phones in its price range.

Our review of the phone noted that the Pixel 6's charging felt slow, but a report from Android Authority's Robert Triggs says that the Pixel 6 doesn't even live up to the modest 30 W claims it makes on the spec sheet. In testing, Triggs could only get the phone to hit peaks of 22 W—and even then, not for very long. In his testing, it took 111 minutes to fully charge the Pixel 6 Pro's 5000 mAh battery from zero to 100 percent, even with the official "30 W" Google adapter (which is not included in the box).

Samsung is a great counter-example. The 5000 mAh Galaxy S21 Ultra can charge from 0 to 100 in 62 minutes—that's 49 minutes faster than the "30 W" Pixel 6—despite Samsung only advertising "25 W" quick charging. Triggs says the Galaxy S21 Ultra actually peaks at 28 W during charging—faster than advertised.

Read 4 remaining paragraphs | Comments

Daily Deals (11-08-2021)

Amazon is offering a free 3-month subscription to its ad-free music streaming service for new customers. Disney+ is offering a 1-month subscription to its video streaming service for $2 (down from the usual $8). And Microsoft is letting new customers pay just $1 for a 3-month Xbox Game Pass for PC membership. Meanwhile Lenovo is […]

The post Daily Deals (11-08-2021) appeared first on Liliputing.

Amazon is offering a free 3-month subscription to its ad-free music streaming service for new customers. Disney+ is offering a 1-month subscription to its video streaming service for $2 (down from the usual $8). And Microsoft is letting new customers pay just $1 for a 3-month Xbox Game Pass for PC membership.

Meanwhile Lenovo is offering one of the best deals I’ve seen to date on a Chrome OS tablet – you can pick up a Lenovo Chromebook 10e tablet with a 10.1 inch display for just $119. Just keep in mind that no keyboard is included at that price.

Here are some of the day’s best deals.

Downloads & Streaming

Tablets & eReaders

Media Streamers

Wireless audio

Storage

Other

The post Daily Deals (11-08-2021) appeared first on Liliputing.