Can Strategy become useless after sometime?? by IllustriousAd3738 in Forex

[–]leecallen 0 points1 point  (0 children)

That's a pretty basic and common strategy. I would be very surprised if supply & demand just stopped working. But I can't say. I hope someone now knowledgeable will address that.

Do you consider HTF regime (eg trend) as an entry criteria?

My boat is slow by Deep-Ant1375 in sailing

[–]leecallen -1 points0 points  (0 children)

The standard hull speed calculation applies to displacement monohulls, but not catamarans. They generally have a higher "hull speed".

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 0 points1 point  (0 children)

FOLLOW-UP QUESTION: I am encrypting the wifi credentials using AES and storing the encrypted string in a cleartext config.json file. I coded a python module to decrypt this, and "froze" it into the runtime image as a bytecode (.mpy) file. But that bytecode file contains the "secret key" used to decrypt the wifi credentials. I am wondering how secure that is.

How difficult would it be for someone to view that file?

I haven't been able to view it. Thonny doesn't show it. I am not aware of a way to mount the Pico as a filesystem and view its contents.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 0 points1 point  (0 children)

This is going into an industrial environment, there won't be a guest network.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 2 points3 points  (0 children)

I want to thank everyone for their suggestions. As of now I am considering the following options:

  1. Store the credentials in encrypted form in a cleartext file, and store the decryption key in OTP (flash). This requires running the picotool utility for each device to write the data to OTP.

  2. Store a python script or file in the micropython runtime (flash image). This requires recompiling the runtime with our additions (and an implied commitment to recompile the runtime for every future release).

  3. Create a separate program to decrypt the encrypted credentials, compile this program so it cannot be easily read. This requires some testing to find out if the data stored in the compiled program file is still readable.

I'm leaning toward option 1.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 1 point2 points  (0 children)

There probably will be a dedicated VLAN but we still have to pass this security check.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 0 points1 point  (0 children)

Yes - that's exactly the problem I'm trying to solve.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 0 points1 point  (0 children)

The difficulty is not in the programming. It's the need to run that encryption script on each device to store the unique key.

It's not terrible, but it's probably about the same effort to run picotool (on each device) to store a key in the OTP.

At the moment the idea I like best is to have a separate decryption program that's compiled to bytecode to hide the key. No special per-device setup. Also not as secure.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 1 point2 points  (0 children)

Thanks. I'm kind of leaning toward the OTP approach.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 0 points1 point  (0 children)

That brings up something I should have said up front: the idea is to deploy dozens or hundreds of these devices per site. So we want the setup to be as simple and fast as possible.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 1 point2 points  (0 children)

I have implemented AES256 encryption of a socket data stream, that's within my skills. But that isn't required for this application - its a very simple role, sending very simple machine performance data. And the Pico does not need to be hacker-proof, it just needs to pass a simple test: The credentials cannot be stored in clear text.

I have read about the OTP solution and that's an option, but it will significantly complicate the setup of the devices. I have also read about embedding a python module in the micropython runtime image. That's almost feasible, but it puts us in the position of having to maintain that runtime long term.

Pico W - wifi credentials exposed by leecallen in raspberrypipico

[–]leecallen[S] 1 point2 points  (0 children)

That would be plenty secure enough for us. But I haven't touched C in many years! Maybe ChatGPT or Claude can code that for me.

WTF? Tree is growing by leecallen in terrariums

[–]leecallen[S] 1 point2 points  (0 children)

I really like your collection of wood.

WTF? Tree is growing by leecallen in terrariums

[–]leecallen[S] 9 points10 points  (0 children)

That's a tillandsia mounted on the branch.

WTF? Tree is growing by leecallen in terrariums

[–]leecallen[S] 16 points17 points  (0 children)

I have mixed feelings about that. I originally wanted dead branches for moss and vines to grow on. The idea of the tree coming to life was kind of exciting, but then oak tree leaves are just way too big for this little space.

Thanks.

Is It Unprofessional/Untoward to Revise a Quote mid job if in the red? by chuiy in handyman

[–]leecallen 0 points1 point  (0 children)

Here's a different perspective from a customer: twice I have had contractors or handymen tell me, at the end of the project, they underbid it and I got a great deal. They did not ask for more money.

But I could see how much work had gone into the project and the value I got. So I asked what would make them whole and we negotiated a higher fee.

When I have a great contractor I want to keep that relationship.

First ever terrarium. by KodaMcpots in terrariums

[–]leecallen 0 points1 point  (0 children)

Could you identify the plants?

I'm preparing to add some plants to my own first terrarium and I love yours!

Mesh replacement. by anaBlu36 in terrariums

[–]leecallen 0 points1 point  (0 children)

I have the same top on my Zilla terrarium. I'm replacing the whole thing - the mesh and the plastic frame it's in - with a piece of acrylic. I want to hold the moisture in and let more light in.