frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them

https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/
334•speckx•2h ago•93 comments

Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets

https://github.com/sterlingcrispin/nothing-ever-happens
289•m-hodges•4h ago•122 comments

The Future of Everything Is Lies, I Guess: Safety

https://aphyr.com/posts/417-the-future-of-everything-is-lies-i-guess-safety
214•aphyr•4h ago•105 comments

How to make Firefox builds 17% faster

https://blog.farre.se/posts/2026/04/10/caching-webidl-codegen/
55•mbitsnbites•1h ago•0 comments

Building a CLI for All of Cloudflare

https://blog.cloudflare.com/cf-cli-local-explorer/
192•soheilpro•4h ago•50 comments

Servo is now available on crates.io

https://servo.org/blog/2026/04/13/servo-0.1.0-release/
345•ffin•8h ago•120 comments

An Introduction to Obsidian

https://bryanhogan.com/blog/obsidian-introduction
23•bryanhogan•2d ago•2 comments

Show HN: Ithihāsas – a character explorer for Hindu epics, built in a few hours

https://www.ithihasas.in
38•cvrajeesh•1h ago•9 comments

Visualizing CPU Pipelining (2024)

https://timmastny.com/blog/visualizing-cpu-pipelining/
20•flipacholas•2h ago•5 comments

Tracking down a 25% Regression on LLVM RISC-V

https://blog.kaving.me/blog/tracking-down-a-25-regression-on-llvm-risc-v/
62•luu•1d ago•14 comments

MEMS Array Chip Can Project Video the Size of a Grain of Sand

https://spectrum.ieee.org/mems-photonics
57•bookofjoe•6h ago•26 comments

All elementary functions from a single binary operator

https://arxiv.org/abs/2603.21852
756•pizza•18h ago•229 comments

Make Tmux Pretty and Usable (2024)

https://hamvocke.com/blog/a-guide-to-customizing-your-tmux-conf/
243•speckx•5h ago•169 comments

Microsoft isn't removing Copilot from Windows 11, it's just renaming it

https://www.neowin.net/opinions/microsoft-isnt-removing-copilot-from-windows-11-its-just-renaming...
264•bundie•6h ago•173 comments

Just Enough Chimera Linux

https://www.dwarmstrong.org/chimera-install-zfs/
3•speckx•51m ago•0 comments

Initial mainline video capture and camera support for Rockchip RK3588

https://www.collabora.com/news-and-blog/news-and-events/mainline-video-capture-and-camera-support...
59•mfilion•7h ago•14 comments

The Looming College-Enrollment Death Spiral

https://www.theatlantic.com/ideas/2026/04/college-enrollment-demographic-cliff/686750/
27•JumpCrisscross•1h ago•14 comments

B-trees and database indexes (2024)

https://planetscale.com/blog/btrees-and-database-indexes
21•tosh•3h ago•7 comments

Google has the same AI adoption curve as John Deere

https://twitter.com/i/status/2043747998740689171
15•andsoitis•35m ago•10 comments

US appeals court declares 158-year-old home distilling ban unconstitutional

https://nypost.com/2026/04/11/us-news/us-appeals-court-declares-158-year-old-home-distilling-ban-...
266•t-3•6h ago•197 comments

Michigan 'digital age' bills pulled after privacy concerns raised

https://www.thecentersquare.com/michigan/article_7ca4e268-4a68-42fb-9042-f9d8604ebd7f.html
187•iamnothere•8h ago•96 comments

Who's Been Impersonating This ProPublica Reporter?

https://www.propublica.org/article/impersonating-propublica-reporter
78•hn_acker•4h ago•1 comments

DIY Soft Drinks

https://blinry.org/diy-soft-drinks/
671•_Microft•1d ago•198 comments

Taking on CUDA with ROCm: 'One Step After Another'

https://www.eetimes.com/taking-on-cuda-with-rocm-one-step-after-another/
251•mindcrime•21h ago•186 comments

The economics of software teams: Why most engineering orgs are flying blind

https://www.viktorcessan.com/the-economics-of-software-teams/
371•kiyanwang•14h ago•232 comments

Bring Back Idiomatic Design (2023)

https://essays.johnloeber.com/p/4-bring-back-idiomatic-design
663•phil294•1d ago•360 comments

Show HN: boringBar – a taskbar-style dock replacement for macOS

https://boringbar.app/
488•a-ve•1d ago•279 comments

Most people can't juggle one ball

https://www.lesswrong.com/posts/jTGbKKGqs5EdyYoRc/most-people-can-t-juggle-one-ball
485•surprisetalk•4d ago•168 comments

We May Be Living Through the Most Consequential Hundred Days in Cyber History

https://ringmast4r.substack.com/p/we-may-be-living-through-the-most
211•laurex•5h ago•128 comments

Android now stops you sharing your location in photos

https://shkspr.mobi/blog/2026/04/android-now-stops-you-sharing-your-location-in-photos/
287•edent•8h ago•257 comments
Open in hackernews

Booting the RP2350 from UART

https://pfister.dev/blog/2025/rp2350-uart-bl.html
89•hugolundin•11mo ago

Comments

vardump•11mo ago
One could also send a binary stub that sets up fast CPU clock speed and decompresses the rest of the firmware at the RP2350 side. Should be even faster.

Just like old C64 decrunchers and Amiga PowerPacker. Or Fabrice Bellard's LZEXE. (Is there anything that guy did NOT write?!)

duskwuff•11mo ago
In principle, you could boot the RP2040 over SWD. It'd be much more difficult to code, but the possibility is there...
flyingcircus3•11mo ago
Are you implying the SWD signals would send the RAM contents every time? If I had to do that, I would first use a logic analyzer like Saleae to capture the SWD signals of a JLink performing the necessary operations to load the image into RAM. Then figure out, from the bytes that get send and received, whatever needs to be parameterized, and where to put the image data itself, perhaps by capturing different scenarios, and seeing what changes. Maybe even look up the SWD spec. You would also need to figure out what kind of back and forth is necessary, what must block waiting for a response. From there, assuming there isn't cryptography involved, it just becomes a matter of providing bytes to a bus in the correct order or timing based on the proper events. Some of those bytes are "canned" and never change. Some of them are parameters that describe some important quantity relevant your specific image. And the rest are your firmware image, probably chunked up with some overhead wrapped around it. I allow for the possibility that SWD is far more complex than I imagine, but this approach works pretty well for figuring out whats going on with SPI or I2C or BLE.
duskwuff•11mo ago
SWD and the associated debug interfaces are all documented by ARM; there's no need to reverse-engineer anything here. See the ADIv5 documentation [1] for a starter.

[1]: https://developer.arm.com/documentation/ihi0031/a

dmitrygr•11mo ago
ADIv6 for RP2350 (!important)
bsder•11mo ago
> I allow for the possibility that SWD is far more complex than I imagine, but this approach works pretty well for figuring out whats going on with SPI or I2C or BLE.

SWD is pretty well documented. I won't claim its simple, but, in my opinion, it's decent at what it does. The RISC-V folks haven't seemed to be able to do better (and, IMO, did quite a bit worse in a few places, actually).

The SWD description at the packet/command level: https://arm-software.github.io/CMSIS-DAP/latest/index.html

There is open source code directly from ARM for it: https://github.com/ARMmbed/DAPLink/tree/main/source/daplink/...

The documentation of the actual wire protocol is also extensive, but a little more scattered: https://developer.arm.com/documentation/ihi0031/a?lang=en https://community.nxp.com/pwmxy87654/attachments/pwmxy87654/...

The big problem with the SWD wire protocol ARM documentation (and everybody who copies it) is that they don't point out the fact that when you go from Write-to-Read the active edge of the clock changes. In SPI-speak, you switch from CPHA=1 to CPHA=0. This makes sense if you stop to think about it for a moment because during debug there is no clock. Consequently, SWD must provide the clock and you switch from "put something on DATA a half phase early->pulse clock to make chip do something with it" to "pulse clock which makes chip put something on Data->read it a half phase later". However, if it has never been pointed out to you before, it's likely to trip you up.

Sigrok (or similar) which can decode SWD properly and a digital signal analyzer (even a cheap $10 one) are your friends.

The only diagrams which seem to resemble scope traces that point this out are on obscure Chinese engineering blogs.

jdbxbdjehe•11mo ago
This is completely unnecessary since SWD is both trivial as well as well documented
duskwuff•11mo ago
Well... I wouldn't call it "trivial". But it is documented.
gadgetoid•11mo ago
We (Pimoroni) actually shipped this technique in PicoVision, used to load the “GPU” firmware (an RP2040 used to offload the HDMI signal generation) at runtime-

https://github.com/pimoroni/picovision/blob/main/drivers/dv_...

no_time•11mo ago
What are the advantages of doing this instead booting it through UART? Speed perhaps?
vardump•11mo ago
I think RP2040 does not support UART booting.
gadgetoid•11mo ago
In theory you wouldn’t even need to load firmware- you could just manipulate the relevant registers directly over SWD for the silliest IO expander.

In our case it was the only choice. I’d say we’d use UART now but the RP2350 can pretty much do it all in one chip.

mschuster91•11mo ago
There's nothing speaking "version 1.0" more than a bunch of stuff just manually soldered as piggyback over other components of the board :D

Thanks for the writeup.

mrheosuper•11mo ago
this is also how some BLE controller boot.
kees99•11mo ago
Some wifi controllers can also boot like that. In particular ESP8089 chip that shipped with some android tablets circa 2012-2014.

Later, Espressif took that chip, modified bootrom to be able to boot from an SPI flash as well, and marketed that variant as "ESP8266". Serial bootloader was kept as a debug/programming interface, and that was inherited to ESP32 and later chips. All of which can boot directly from serial.

bluehex•11mo ago
This is awesome. I've had similar ideas but wasn't able to do any prototyping yet as I only have Pico 2 boards that don't expose the CSn pin in the pinout.

Rather than UART booting every time I thought it might be nice to use UART Boot just as a way to deliver the firmware update to the sub chip - so the UART image you load would just be a program that accepts a larger image (over UART again) and would write to the flash for subsequent boots. I think that would get around the SRAM and boot time downsides the author mentioned. Is there a reason this might not work?

vardump•11mo ago
That requires having a flash chip in the first place. By booting via UART you don't need any flash at all.
zoobab•11mo ago
The CH32V003 has also a UART bootloader, but for some reason there is no open source command line client to do something with it. WCH has a Windows GUI though.
devdri•11mo ago
This is one of the tricks to enable using both QSPI slots for PSRAM instead of the typical FLASH+PSRAM.

This is great for making audio modules, where the firmware is be small and operates on a big audio buffer. Since the biggest available PSRAM chips are 8MB, this combined 16 MB could hold around 3 minutes of mono 16-bit audio, which allows for a very nice multi track looper.

Another way (in case there's no other MCU to help with uart bootstrap) would be to add a logic chip to multiplex the CS line between Flash and the first PSRAM - copy firmware to flash and then switch to using ram.

ThrowawayR2•11mo ago
Are there any off-the-shelf hobbyist boards that expose QSPI CSn (pin 75 on the RP2350B?) and QPI_SD1-3 signals to a header or pin? Doesn't seem like the official Pico 2 or the Adafruit or Pimoroni versions of the Pico 2 expose access to these signals without modifying the board, which most people won't be able to do.
ptorrone•11mo ago
https://www.adafruit.com/product/6000 has the pads for external PSRAM you can connect to the QSPI pins there (pt @ adafruit)