🦜 Alexander Bakker's Blog
@alexbakker.me@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline!
Brought to you by the RSS Parrot.
---
Personal blog where I occasionally post about my projects, programming and security
Your feed and you don't want it here? Just
e-mail the birb.
Setting up a Site-to-Site VPN between AWS and on-premises VyOS (IPSec & BGP)
https://alexbakker.me/post/setting-up-site-to-site-vpn-to-aws-on-vyos-ipsec-bgp.html
Published: May 5, 2025 00:00
VyOS is an open-source operating system based on Linux that provides
software-based networking. There’s an official
guide
for setting up a Site-to-Site VPN between an on-premises VyOS router and AWS,
but it is fairly outdated, as it was written for VyOS…
Bypassing app lock in Ente Auth
https://alexbakker.me/post/bypassing-app-lock-in-ente-auth.html
Published: November 20, 2024 00:00
A couple of months ago I discovered three issues that allow one to bypass app
lock in Ente Auth. The issues I found aren’t technically interesting and don’t
really deserve a blog post, but since Ente appears to be hesitant to notify
their users about them,…
Parsing Google Authenticator export QR codes
https://alexbakker.me/post/parsing-google-auth-export-qr-code.html
Published: May 23, 2020 11:35
We recently added support
for scanning the new Google Authenticator export QR codes to Aegis
Authenticator. The single token URI format is
well-documented,
but the format of the QR codes displayed in the new export feature of Google
Authenticator is not.…
A mysterious bug in the firmware of Google's Titan M chip (CVE-2019-9465)
https://alexbakker.me/post/mysterious-google-titan-m-bug-cve-2019-9465.html
Published: February 29, 2020 13:00
Starting with the release of the Pixel 3, all of Google’s Pixel Android
smartphones come with the Titan M security chip on board. When I realized the
Pixel 3a XL I purchased also had it, I decided to try to take advantage of it in
an app I work on. It…
Notes on PCI Passthrough on NixOS using QEMU and VFIO
https://alexbakker.me/post/nixos-pci-passthrough-qemu-vfio.html
Published: September 28, 2019 22:30
With the release of the Ryzen 3000 series CPUs, I decided it was finally time to
upgrade from my good old Intel i5 2500K. It served me well for nearly 8 years,
but its age was starting to show. While doing the upgrade, I also wanted to
address the other…
Did cosmic rays break my Linux build?
https://alexbakker.me/post/did-cosmic-rays-break-my-linux-build.html
Published: September 1, 2019 00:00
I think I experienced a random bit flip while updating Linux on one of my
machines today. My laptop was humming along happily during compilation until GCC
suddenly aborted with an error: invalid preprocessing directive #lefine; did
you mean #define?.
…
Insecure seed generation in the Nano Android wallet
https://alexbakker.me/post/insecure-seed-nano-android-wallet.html
Published: July 2, 2018 00:00
On the 21th of June 2018, the release of the new wallet applications for Nano
was announced on
Reddit.
Shortly after that, another
announcement
was made telling users of the Android app to transfer their funds to a wallet
with a seed that was not generated…