Spinda 🐲🦊🏳️🌈🏳️⚧️
@spinda.net
Computer scientist & firewall dragon. Did a PhD on making web browsers less broken. Into browser innards, niche programming languages, reverse-engineering, unfiction, 3D printing & fabrication, …
⚧️ she/they • 🩷💛💙 • ♾️
🌍 San Francisco
➡️ https://spinda.net
⚧️ she/they • 🩷💛💙 • ♾️
🌍 San Francisco
➡️ https://spinda.net
« 𝑈𝑛 𝑗𝑜𝑢𝑟 𝑗𝑒 𝑠𝑒𝑟𝑎𝑖 𝑑𝑒 𝑟𝑒𝑡𝑜𝑢𝑟 𝑝𝑟𝑒̀𝑠 𝑑𝑒 𝑡𝑜𝑖. »
I can't believe forums.unfiction.com is up again after 8 years, even as an archive! I was 13 when I made my account and ran my first game back in 2009. I have a PhD now and a "real" job, but I miss telling stories with everyone who was there.
I can't believe forums.unfiction.com is up again after 8 years, even as an archive! I was 13 when I made my account and ran my first game back in 2009. I have a PhD now and a "real" job, but I miss telling stories with everyone who was there.
November 11, 2025 at 8:33 AM
« 𝑈𝑛 𝑗𝑜𝑢𝑟 𝑗𝑒 𝑠𝑒𝑟𝑎𝑖 𝑑𝑒 𝑟𝑒𝑡𝑜𝑢𝑟 𝑝𝑟𝑒̀𝑠 𝑑𝑒 𝑡𝑜𝑖. »
I can't believe forums.unfiction.com is up again after 8 years, even as an archive! I was 13 when I made my account and ran my first game back in 2009. I have a PhD now and a "real" job, but I miss telling stories with everyone who was there.
I can't believe forums.unfiction.com is up again after 8 years, even as an archive! I was 13 when I made my account and ran my first game back in 2009. I have a PhD now and a "real" job, but I miss telling stories with everyone who was there.
TIL any apps using Firebase Auth for login won't work on rooted Android devices. It's not even to protect the apps, if this error is to be believed - it's the Firebase SDK protecting itself from apps that aren't paying for Auth!
Guess I gotta figure out how one bypasses Play Integrity in 2025...
Guess I gotta figure out how one bypasses Play Integrity in 2025...
![FirebaseAuth
Invoking original failure callbacks after phone verification failure for [REDACTED] error - This app is not authorized to use Firebase Authentication. Please verify that the correct package name, SHA-1, and SHA-256 are configured in the Firebase Console.
[ Invalid app info in play_integrity_token ]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:pypoumh5amfwkm267spgn64c/bafkreihszlepwehmhe64w74qzgl45xsjaf7bvesb5qdjrwf5uwsqrqjp6m@jpeg)
October 28, 2025 at 2:05 AM
TIL any apps using Firebase Auth for login won't work on rooted Android devices. It's not even to protect the apps, if this error is to be believed - it's the Firebase SDK protecting itself from apps that aren't paying for Auth!
Guess I gotta figure out how one bypasses Play Integrity in 2025...
Guess I gotta figure out how one bypasses Play Integrity in 2025...
The Invisible Man comic book has a variant with an invisible cover.
October 17, 2025 at 7:55 PM
The Invisible Man comic book has a variant with an invisible cover.
I can't believe this worked. DB9 connectors won't mate? Just unscrew the hex standoffs and pretend they're screws!
October 16, 2025 at 5:54 AM
I can't believe this worked. DB9 connectors won't mate? Just unscrew the hex standoffs and pretend they're screws!
Took the wrong train and ended up at my old stop for what used to be the Mozilla SF office. Really sad seeing it without the big Firefox obelisk out front. I remember Google was already trying to take over the building back then; looks like they succeeded :(
September 25, 2025 at 6:55 PM
Took the wrong train and ended up at my old stop for what used to be the Mozilla SF office. Really sad seeing it without the big Firefox obelisk out front. I remember Google was already trying to take over the building back then; looks like they succeeded :(
The top post on the mattress subreddit is one of my favorite posts ever. "Not only is there nothing even close to a suggested list of mattresses, I can now give you 30 reasons why that list would be impossible to create."
September 11, 2025 at 10:03 AM
The top post on the mattress subreddit is one of my favorite posts ever. "Not only is there nothing even close to a suggested list of mattresses, I can now give you 30 reasons why that list would be impossible to create."
I wonder if this is an SEO game. They charge extra for the tiers with "text link on supporters page", and these links aren't set to nofollow or anything. Fascinating business model for a FOSS project if so.
August 23, 2025 at 10:00 PM
I wonder if this is an SEO game. They charge extra for the tiers with "text link on supporters page", and these links aren't set to nofollow or anything. Fascinating business model for a FOSS project if so.
Why is DataTables, a JavaScript lib for making <table>s sortable, sponsored mostly by personal injury lawyers?
August 23, 2025 at 9:55 PM
Why is DataTables, a JavaScript lib for making <table>s sortable, sponsored mostly by personal injury lawyers?
We can actually see how they test the Alarmo because they left the factory test image on the internal storage.
October 18, 2024 at 7:22 AM
We can actually see how they test the Alarmo because they left the factory test image on the internal storage.
Dumped out eMMC on the Nintendo Alarmo! Running the dump a second time to verify.
It's a FAT32 file system, here's the structure! Unfortunately everything in contents/ is encrypted. Working on decryption...
It's a FAT32 file system, here's the structure! Unfortunately everything in contents/ is encrypted. Working on decryption...
October 16, 2024 at 11:36 PM
Dumped out eMMC on the Nintendo Alarmo! Running the dump a second time to verify.
It's a FAT32 file system, here's the structure! Unfortunately everything in contents/ is encrypted. Working on decryption...
It's a FAT32 file system, here's the structure! Unfortunately everything in contents/ is encrypted. Working on decryption...
Overnight data dumping.
October 15, 2024 at 8:50 AM
Overnight data dumping.
First block of the Nintendo Alarmo's eMMC. Looks like an MBR 👀
October 15, 2024 at 1:16 AM
First block of the Nintendo Alarmo's eMMC. Looks like an MBR 👀
And here's a "hello world" showing code execution on the Nintendo Alarmo! Can dump payloads into RAM and jump to them over SWD. Identified what I believe to be the firmware function responsible for reading blocks of data from the eMMC, so writing a payload to dump it shouldn't be terribly difficult.
October 14, 2024 at 2:12 AM
And here's a "hello world" showing code execution on the Nintendo Alarmo! Can dump payloads into RAM and jump to them over SWD. Identified what I believe to be the firmware function responsible for reading blocks of data from the eMMC, so writing a payload to dump it shouldn't be terribly difficult.
...No, we can absolutely dump the firmware, actually, because all the interesting stuff is on a separate 32MB flash chip mapped higher into memory. Here's a bunch of BMPs from the flash. They're swapped out with data from the eMMC when you change themes.
October 14, 2024 at 2:11 AM
...No, we can absolutely dump the firmware, actually, because all the interesting stuff is on a separate 32MB flash chip mapped higher into memory. Here's a bunch of BMPs from the flash. They're swapped out with data from the eMMC when you change themes.
Read protection is enabled, unfortunately. Can't dump the firmware this way :( Not super surprising, but still a bit disappointing.
October 13, 2024 at 4:30 AM
Read protection is enabled, unfortunately. Can't dump the firmware this way :( Not super surprising, but still a bit disappointing.
SWD pads identified, and they're outputting legitimate-looking data. Progress!
October 13, 2024 at 3:04 AM
SWD pads identified, and they're outputting legitimate-looking data. Progress!
If anyone recognizes this LCD, I would super appreciate a heads up.
October 12, 2024 at 6:43 AM
If anyone recognizes this LCD, I would super appreciate a heads up.
Nintendo Alarmo teardown. Contains:
- STM32H730ZBI6 ARM MCU
- NXP 88W8801-NMD2 Wi-Fi SoC
- THGBMTG5D1LBAIL 4GB eMMC storage
- SC1233A 24GHz radar sensor
Unfortunately I tore the LCD ribbon cable 😅
- STM32H730ZBI6 ARM MCU
- NXP 88W8801-NMD2 Wi-Fi SoC
- THGBMTG5D1LBAIL 4GB eMMC storage
- SC1233A 24GHz radar sensor
Unfortunately I tore the LCD ribbon cable 😅
October 12, 2024 at 6:37 AM
Nintendo Alarmo teardown. Contains:
- STM32H730ZBI6 ARM MCU
- NXP 88W8801-NMD2 Wi-Fi SoC
- THGBMTG5D1LBAIL 4GB eMMC storage
- SC1233A 24GHz radar sensor
Unfortunately I tore the LCD ribbon cable 😅
- STM32H730ZBI6 ARM MCU
- NXP 88W8801-NMD2 Wi-Fi SoC
- THGBMTG5D1LBAIL 4GB eMMC storage
- SC1233A 24GHz radar sensor
Unfortunately I tore the LCD ribbon cable 😅
From the README of an AI-oriented web scraper. That "randomize user agents" and "block client hints" have taken priority over "respect robots.txt" shows what priorities are in play here...
August 17, 2024 at 6:45 AM
From the README of an AI-oriented web scraper. That "randomize user agents" and "block client hints" have taken priority over "respect robots.txt" shows what priorities are in play here...
Why choose Vite or esbuild when you could be using a deprecated JS build system from 11 years ago that talks like The Hulk?
github.com/mbostock/sma...
github.com/mbostock/sma...
August 14, 2024 at 6:36 AM
Why choose Vite or esbuild when you could be using a deprecated JS build system from 11 years ago that talks like The Hulk?
github.com/mbostock/sma...
github.com/mbostock/sma...
Finally got to play Cottage Garden today! I love the little cardboard wheelbarrow it comes with.
August 3, 2024 at 1:28 AM
Finally got to play Cottage Garden today! I love the little cardboard wheelbarrow it comes with.
Oh fun, Microsoft OneDrive has the default ASP.NET error pages turned on in prod.
July 23, 2024 at 12:20 AM
Oh fun, Microsoft OneDrive has the default ASP.NET error pages turned on in prod.
I collect fox photos to use as wallpapers, which I rotate as the seasons change. I've had a lot of comments about them, so I might as well start sharing!
The fox of the moment is "Young Red fox kit (Vulpes vulpes) sitting on the grass", by Roeselien Raimond: www.roeselienraimond.com/red-fox-kits...
The fox of the moment is "Young Red fox kit (Vulpes vulpes) sitting on the grass", by Roeselien Raimond: www.roeselienraimond.com/red-fox-kits...
July 19, 2024 at 9:24 PM
I collect fox photos to use as wallpapers, which I rotate as the seasons change. I've had a lot of comments about them, so I might as well start sharing!
The fox of the moment is "Young Red fox kit (Vulpes vulpes) sitting on the grass", by Roeselien Raimond: www.roeselienraimond.com/red-fox-kits...
The fox of the moment is "Young Red fox kit (Vulpes vulpes) sitting on the grass", by Roeselien Raimond: www.roeselienraimond.com/red-fox-kits...
All set to vote in my first UK election on July 4!
June 18, 2024 at 8:37 PM
All set to vote in my first UK election on July 4!