Remote

Jan-Willem Markus

@jwrm22@hsnl.social

mastodon 4.6.8+glitch

My name is Jan-Willem. My formal education is in electronics, and I currently work in hardware security. I've got a large interest in all types of security, from physical to chips, and hardware to general infosec.

This Mastodon profile is for post random things about myself and my life and my hobby projects. Sometimes I make stuff from metal, other days I print stuff in plastics. As a lockpicker, I'm part of The Open Organisation of Lockpickers (@Toool@hsnl.social), of which I'm currently the president.

93 Followers

134 Following

46 Posts

Joined January 27, 2025

Jan-Willem Markus @jwrm22@hsnl.social

· 1w ago

Hi Fediverse, I'm looking for a wearable heart rate monitor and possibly a step counter. Just for logging throughout the day, and getting access the data so I can create graphs at the end of the week. These devices are not too difficult to find, but most need an app and the data is store on a server somewhere. Which wearables would you recommend for offline, or minimal exposure use? It should be fairy trivial to have these devices log to internal memory, and read it out once in a while. But the companies want access to the data, and limit what you can do with the device yourself.

1

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2w ago

Yesterday I was at the NHC CTF, and was not planning to compete. Halfway, I looked at a few challenges, anyway. One was a jigsaw puzzle of a QR code. And through understanding QR codes and logic the options could be reduced from ~1k to an bruteforcible 4. Today, I've been deep into QR code creation, and thinking about what other QR code puzzles are possible. Combine QR with Sudoku and I found QR nanograms. Nanograms are ideal as most are pure logic. So my challenge was to understand which information can be remove to still allow the puzzle to be solved with the Wiki on QR codes. (dark module, timing patterns, and symmetry) I don't yet have a puzzle for you, but it is definitely possible.

2

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 3w ago

Learning to model simple things in CAD and bringing them to live is a very useful superpower. This project went from annoyance to a solution in about an hour.

I'm using an Ikea Hejne in a wet room, but the legs of the cabinet are sometimes in shower water. This raiser hopefully solves this, and if not, I'll design and print a couple more.

3

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 1mo ago

Replying to

This runway is open for hiking and cycling as it is no longer used, out of bird season, atleast. However, stopping half way to eat dinner is odd enough to attract attention of guards. Maybe they didn't like me taking a selfie. As I type this, I regret not having waved (to the guards, that is).

3

3

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

Replying to

re: hot take

3

2

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 8mo ago

Replying to

@yschaeff@fosstodon.org Got it. No more bananas and lasers in the secured premises.

20

0

1

0

Jan-Willem Markus @jwrm22@hsnl.social

· 1mo ago

Replying to

@lfisk@infosec.exchange I can imagine, luckily we have places which are made for walking and plenty of people doing so. I was 'stuck' inside all day, and just needed to be outside. Sometimes I choose to drive to get closer to nature, first. This runway just opened up for this season, and with 3.5 km round trip, it's quite a nice walk, be it a bit boring. As for the guards, they didn't say much. Just made sure I wasn't a threat. I guess.

1

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 3mo ago

Replying to

@dascandy@infosec.exchange @whitequark@social.treehouse.systems From reading the forums, the Linux app is free where the Microsoft app was not. The license thus reads to me as 'Please don't undercut me by using the free Linux app on Windows.' However, it may be legacy as the Windows app seems no longer to be available.

3

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

Replying to

@lokjo@mapstodon.space Clothes and many similar products don't come with information on their environmental costs. I'd be more willing to chose wisely if they came with this information. The 2.700 L seems a bit off for human consumption in 2.5 years. As drinking, maybe. At the water use in the Netherlands, 120L a day, not even a month.

2

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 4mo ago

Replying to

@0xabad1dea@infosec.exchange I came to the same conclusion after reading the PR. I understand why you want to put stuff out of scope if it is distracting in the conversation, but there are better ways to phrase it :)

5

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 3mo ago

Replying to

@rogerb@mastodon.scot @KatCopseyGreens@mastodon.social Having to replace the important hardware bits every three years is in itself unsustainable. While we may never get the land back, at least the use and pollution has to end after the bubble bursts.

2

0

1

0

Jan-Willem Markus @jwrm22@hsnl.social

· 3mo ago

I wish more of the effort of LLM was put towards making search better. As in when I search for 'high voltage DC power supply', it should understand I'm not looking for 'high precision AC power supply' or 'high power something'. From there we can have it learn component families, give equivalent suggestions, and near neighbors. And no, I don't want to 'chat' with an LLM assistant.

2

0

3

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

Replying to

As I was curious, I've written out the ones I could think of. As with names of snow, you have to be a bit loose with the definitions. opening (using a key), lockpicking, keypicking, single pin picking, reverse picking, raise to shear, raking, zipping, waltering, bitch picking, bumping, impressioning, foil-impressioning, self-impressioning, dialing (a safe lock combo), dialing (a discdetainer lock), setting, decoding (various), manipulating, bypassing, (padlock) shimming, (shearline) shimming, exploiting, programming, rapping, drilling, milling, vandalising, outsourcing, locksmithing,

4

0

2

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

Replying to

@lfisk@infosec.exchange I've not had a TV, and don't necessarily need one. But there are industrial ones without any of the smarts, which may be a good option for us.

1

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

Replying to

@whitequark@social.treehouse.systems Thanks for making it available. I'll start by asking my network, as someone got to have one lying around.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

Replying to

@lfisk@infosec.exchange I also trust my monitors for as far as I can throw them. The Gamer Nexus story is unique as LG chose to install malicious software through Microsoft update.

1

3

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

RE: https://mastodon.murkworks.net/@moira/116944488366439982 Smart TV's are mostly spy devices these days. Watching you, watching Netflix. From the thread, I see people suggesting that you either should run different operating system, don't buy this specific brand, or run these devices offline. While it is good that you've found a workaround, the general consumer does not know the difference between software and firmware, neither are they experts in network engineering. These company practices should be condemned, no matter if you can make it work. Furthermore, I see a lot of misconceptions of how Smart TV work (out of video scope). In short, TVs have a secure enclave with Widevine DRM crypto. Meaning you can only watch the latest series in the best quality for as long as the device is trusted. Disconnecting it from the web, or otherwise messing with it, may not have a positive effect on this trust.

Quoting

@moira@mastodon.murkworks.net

Okay, LISTEN UP DO NOT BUY LG. Not ANYTHING LG. Not only are they actively spying on you, not only have they updated their TOS to include requiring you to NOTIFY GUESTS ABOUT WIRETAPPING LAW, on Windows they're pushing ADWARE through WINDOWS UPDATE along with their monitor drivers - including on OLD monitors. Gamers Nexus has all the deets: https://www.youtube.com/watch?v=Q9uefFYe6bM DO NOT BUY LG PRODUCTS. GN had a three-year-old monitor get an "update" that was adware. It wasn't even part of their investigation. It just happened to come in while they were investigating. DO NOT BUY LG PRODUCTS. #adware #spyware #surveillance #fascism #LG #FuckLG #DoNotBuy #boycott

Open quoted post

mastodon.murkworks.net

Solarbird :flag_cascadia:: "Okay, LISTEN UP DO NOT BUY LG. Not ANYTHING LG.…" - Mastodon

1

6

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

Replying to

@lokjo@mapstodon.space I prefer to be able to look at a map without my GPS on, and like not be bothered by applications. But this can easily be a toggle, and I may not even mind the request once as long as it respects my decision. Gmaps doesn't.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 3mo ago

Replying to

@ChristophBuck@mastodon.world @QasimRashid@mastodon.social I've searched at it as well, and it reads as a tunnel filled with explosives. Enough to level the neighborhood.

1

0

1

0

Jan-Willem Markus @jwrm22@hsnl.social

· 7mo ago

Replying to

@revspace Depends on your target group. Do you want humans or LLMs to show up for the event?

4

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 6mo ago

Replying to

@hermithive A few more detail pictures of the vault door hinges and the emergency ventilation. Do let me know if this is interesting, or what you would like to see pictures of. The vault was locked open, and don't expect to get to see the internals of the door.

3

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

I've had a variable energy contract for a while now. Even when I don't always use it as efficient, I like it over paying a flat fee. The energy market is a commodity, when more is produced and less is used, prices go down. Sometimes the prices go way in the red, which is quite exciting.
I've screengrabbed the with and without tax graphs, which go deep in the red for a few hours.

2

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

@ShiitakeToast@beige.party @davep@infosec.exchange Sorry, we didn't know what you mean with a 'Lawyer with', so no legal representation for you.

2

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

I'm at a tech event on embedded systems. While it is good to see trends, there does not seem to be much news. Better modules, higher precision measurements, but nothing shocking or revolutionary. The community has learned a few new words, including quantum, AI, and security, but can't yet define it. Quite adorable, but also frustrating.

2

3

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 6mo ago

Replying to

2

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 4mo ago

Replying to

@actinomy@systerserver.town It's a neat idea. Do you think people will randomly connect to it without being directed to it? As in, I rarely scan for networks and wouldn't connect to random ones.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 4mo ago

Replying to

@soph@grrl.me Beside the issues, I'm slightly mad that I missed out on the cheap tokens. As in an ideal world I had the time and energy to learn to work with the tools while it was still cheap.

1

3

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 6mo ago

The natural gas hype didn't live up to its potential, and was in fact a bubble.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 6mo ago

@GossiTheDog@cyberplace.social I've been inverting the news for a while now. It doesn't mess with my head as much anymore. It does clearly show how broken the world is.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 6mo ago

Replying to

@florianoverkamp @hermithive This vault is not all that large, and without ventilation the options are quite limited. It may lend it well for showcasing something artsy, be it all temporary.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 7mo ago

Replying to

@eloy@hsnl.social Het kan nog beter, je zou er een wiki van kunnen maken die makkelijk aan te updaten is en te delen met criminele vriendjes. Maak een datalek data leuk.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 16mo ago

Replying to

@geekmomprojects The video of the Bendy SAO moving, for good measure.

4

1

1

0

Jan-Willem Markus @jwrm22@hsnl.social

· 8mo ago

Replying to

@mvexel@en.osm.town Very cool! I never knew there were so many playgrounds in my neighborhood.

1

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 6mo ago

Replying to

@bas I'm unfamiliar with the product, and was curious. Usually you can find very much anything, be it at an inflated price. A quick search points to Jumbo. https://www.jumbo.com/producten/wereldkeukens,-kruiden,-pasta-en-rijst/aziatische-keuken/indiase-keuken/the-spice-tailor/

The Spice Tailor indiase keuken kopen & bestellen | Jumbo

Op zoek naar The Spice Tailor indiase keuken? Bestel makkelijk en snel bij Jumbo ✓ Altijd lage prijzen ✓ Boodschappen thuisbezorgen of ophalen bij jouw Jumbo winkel.

0

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 2mo ago

Replying to

@whitequark@social.treehouse.systems I love the project, and wish I bought one when I had the chance. What is your timeline on RevD, and do you expect 1vitsquare to make more RevC's?

0

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

Sometimes I find security measures where I don't expect them, in this case in an email client. I knew it protected against receiving executables, but it also blocks large plain text files. While it makes sense, it's such an annoyance when you have a legitimate reason to send the data.

While it feels hacky, the solution seems to be 7z encryption. With the password in the email body for good measure.

0

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 7mo ago

Replying to

@krijnsoeteman @schellevis Mogelijk komt dat meer door het begrijpbaar op te schrijven waardoor het minder exact is. Als in, gegevens (records/platte tekst) waaronder (document nummers van) paspoorten en rijbewijzen. Bij een nieuw abonnement kwam een mannetje met een mobiele scanner op bezoek. Deze scanners checken de echtheid van documenten, maar slaan verder geen kopie op, afaik.

0

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

Replying to

@MakersHour Finding the right projects, and creating the right environment to create cool stuff. Where unfinished projects don't eat, but they take up a lot of mental space.

0

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

Replying to

@mukmantheorigina It's not all bad, but it doesn't match my focus anymore. My niche, security of embedded systems, doesn't have all too many events. Either there are software security events, or electronics events. The combination is rare, strangely. The things which were new to me are high speed IR cameras, and presession GNSS which is (almost) unspoofable.

0

1

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 3mo ago

Replying to

@lfisk@infosec.exchange In some sense, yes. But if a company sells you products, they might as well only show you the things you asked for. I was specifically struggling today with eBay, and other marketplaces where many vendors sell very similar products.

0

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 8mo ago

Replying to on mas.to

@KatyElphinstone@mas.to I don't believe I lack creativity. As an engineer with autism, I'm able to combine solutions in unusual ways. I can get stuck in the iterating, where a solution is rarely good enough. (And believing my solutions to be trivial once they are 'invented')

0

0

0

0

Jan-Willem Markus @jwrm22@hsnl.social

· 5mo ago

Replying to

@CBSstatistiek@social.overheid.nl Natuurlijk betekent lagere inkomsten dat er minder tabak wordt verkocht. (Bij gelijkblijvende of stijgende accijns.) Maar is er ook data of er minder wordt gerookt?

0

1

0

0