Like any natural geek, I want to access my LAN remotely. If I can't access the hundreds of gigs of pictures of my dog from any device, then this is not a world I want to live in.

Without upgrading to the Starlink Business plan which provides a public IPv4, Starlink uses a CGNAT to share the same IP for a large block of customers. There are consequences to this, such as routinely getting more CAPTCHAs and having your IP blacklisted from some websites (not sure if all Starlink customers are criminals but that's besides the point). The other downside is a home server setup, without resorting to IPv6, and incoming connections to your server.

Scouring eBay late at night rarely leads to good decisions, but sometimes you hit gold. I managed to snag a rare “486-JA” i486DX motherboard with 8MB RAM, shipped all the way from Ukraine. These boards have become almost impossible to find outside the usual recycled junk, and, apparently, the last surviving examples now come with warzone shipping rates attached (joke).

I “accidentally” won an eBay auction for five single board computers, four of which are Raspbery pi’s. By accidentally k mean I bid on an auction and didn’t expect to win. Lo and behold, colour me surprised when I get a notification I now had to pay for my order.

I stumbled upon another series of single board computers capable of running Linux online, the Milk V Duo S. These boards are interesting because they have both an ARM and a RISC V processor.

At first look, the idea of having two CPUs in one board is appealing. The possibility of dedicating one core to real‑time tasks while the other handles a full Linux stack seems like the ultimate design. As I dug into the documentation, it turns out that the board uses a simple switch to choose which core boots. In other words, you can boot either the ARM side or the RISC‑V side, but not run both concurrently. The board in conjunction runs FreeRTOS.

With the inexpensive cost of electronic components online, I am amassing quite a library of modules and parts to build whatever little contraption my silly little brain dreams up. Lately I've been working on a portable GPS unit using an ESP32, with an off the shelf GPS module and 1" OLED screen. 

Quite often I'm in the woods and I know where I am, but I don't know where I want to go. Thus, navigating back home safely is important if I feel like simply walking into the forest alone. I wanted a simple GPS unit where I could calculate distances and display a map of my location, with beacons displaying waypoints and markers.

I’m no stranger to stumbling upon oddities in software, and this time, I found something big—a vulnerability in a popular Shopify app, Loox Reviews that made me raise an eyebrow. Loox, a well-known reviews app that many Shopify merchants use to build credibility with customer feedback. What I found was a critical flaw that could expose sensitive customer data, all because of an insecure direct object reference (IDOR). 
Please note this vulnerability was discovered and fixed in 2023, this blog post is a post-mortem.

I have a habit of diving headfirst into projects that are fun but maybe not super useful. A project I worked on a few months ago  MuStack MicroVM (msmv) —a project that took far more effort than necessary to create something that, in all honesty, I’ll probably never use again. But hey, at least it works, right?

So, What Exactly is msmv?

At its core, MuStack MicroVM is a minimalistic Linux virtual machine build system. Think Docker, but without all the convenience and with way more manual labour involved. It's designed to create lightweight, secure, and isolated virtual machines for testing environments. Perfect if you're someone who enjoys the thrill of complexity, like building a ship in a bottle—but digitally. Plus, I'm a sucker for naming projects with an acronym.

After bricking the last wifi repeater in my last post, I was determined not do that again. At least not intentionally.

This time around, I purchased the same model as before (U13) as well as three more units of a different model, for $10 and $7 CAD respectively. The goal here is to get root access via SSH/telnet and use these devices as general purpose Linux single board computers. With an ethernet port, built in power supply and wifi, these boards are great for single-purpose servers.

New hardware

I have a fixation of buying little electronic trinkets and gadgets on foreign websites for cheap prices. Something about the cost of such little things, and that it takes 3-4 weeks to arrive to my door, provides me with excitement when I visit the post office to pick up my parcels. Lately, I purchased some ESP32 and ESP8266 boards for around $3, and various other programmers and jumper cables for around the same price point. It makes experimenting with a new project fun and inexpensive (great if you like to drop projects after a month too).

In the hot summer we're having out here, I like to sit in my yard and read online tech news and blogs on my phone. Being the hedonistic person I am, I cannot wait 3-4 seconds for a page to load. The wifi coverage at my house is sufficient in doors, but when I go 150 yards away, it can be abysmal.