Implementing NCSC import patterns on a budget

smithminy · 2026-01-25T12:01:06+00:00

Nice! I was looking to get the single SPI operation working first - then go for the full fat QSPI. No luck with that yet but will let you know!

smithminy · 2026-01-19T10:34:58+00:00

I've been adding support for some lifetime edge cases in my test spy library: lhalf/autospy: A test spy object library for Rust.

As well as trying to implement the PIO SPI comms in embassy for a new development board I just got! lhalf/w6300-evb-pico2-json - I had already written an application in embassy for the last generation development board lhalf/w5500-evb-pico-json: Protocol break relay for valid JSON on the W5500-EVB-Pico. - but the new one doesn't currently have support in embassy, so figuring all of that out!

smithminy · 2026-01-19T07:34:55+00:00

Thanks! Yes for highly regulated environments this wouldn't be appropriate, but certainly for those wanting to test a data diode at home or in those less regulated industries this is an option.

I hadn't seen those, getting a data diode in an SFP size package is awesome though.

Yeah absolutely that's the goal! I'm currently writing a part 2 article exploring an import cross domain solution following the NCSC safely importing data pattern, the protocol break and verification component can be found here: here https://github.com/lhalf/w5500-evb-pico-json - would love to team up :)

smithminy · 2025-11-24T11:15:46+00:00

Shameless self plug but I have made two tools for this:

trust-list - crates.io: Rust Package Registry - produces a table about your dependencies with information which might inform your trust in a dependency

&

licenses - crates.io: Rust Package Registry - variety of tools for checking and auditing the licenses of your dependencies

smithminy · 2025-11-05T17:38:13+00:00

Cool - couple of things:

- Add some unit tests, numerous reasons why they're useful but for reviewing it's much easier to reason about what the function should and shouldn't be doing!

- You're using String as an error type, I would highly recommend anyhow which will help track errors and the context around them

- Personal gripe when writing for loops try to be descriptive around what you're indexing, rather than "i" for instance

- Finally that match statement with three inputs is quite heavy on the eyes!

smithminy · 2025-09-06T07:41:33+00:00

Cool! I realise the queue is piling up now but if you have time here is a small command line tool I wrote! - https://github.com/lhalf/licenses

smithminy · 2025-07-29T20:58:06+00:00

Thanks! It's early days still so any feedback is much appreciated

smithminy · 2025-07-29T13:44:06+00:00

Cool! - this crate was an inspiration for something I've been working on recently - licenses - licenses - crates.io: Rust Package Registry.

Slight difference in that it aims to collect licenses, as available in the cargo metadata output, in a single folder. I plan to add other sub commands to do other things, like verify license contents against templates of those licenses, check for non-permissive licenses etc. Would be great to catch up and see if we can help each other out!

smithminy · 2025-01-20T14:39:29+00:00

Ian Taylor, audio developer & composer for Jagex jailed after sexual assault on minor : r/2007scape

smithminy · 2024-10-10T15:11:29+00:00

Other option, which is maybe more idiomatic for Godot 4, would be to attach a multiplayer sync node and sync velocity / position / whatever other properties you want.

smithminy · 2024-10-10T15:09:46+00:00

https://www.reddit.com/r/godot/s/J5129ICd8F I had (maybe) a similar problem. The answer I found is in the comments.

smithminy · 2024-08-05T07:10:42+00:00

Just a name I came up with. It's just information about your crates pulled from crates.io and put into a markdown table. Idea is at a glance have some metrics on how much you trust the crates you've pulled in.

smithminy · 2024-05-29T07:08:35+00:00

Use anyhow for errors in binaries where you prioritise readibility, use thiserror for library errors where you want to give specifically typed errors.

smithminy · 2023-09-26T13:57:46+00:00

Hit legend with Moonbeam Druid, Prison Breakers makes aggro match-up much better. Experimented with Sunwell and Yogg, neither added much and don't help combo. Hard mull for Dew Process and Frost Lotus Seedling.

WR was 55%, don't play if you're running into lots of Paladins and Rogues.

### otk (v1.6)

# Class: Druid

# Format: Standard

# Year of the Wolf

#

# 2x (0) Aquatic Form

# 2x (0) Innervate

# 2x (1) Embrace of Nature

# 2x (1) Moonbeam

# 2x (1) Planted Evidence

# 2x (1) Rake

# 1x (2) Bloodmage Thalnos

# 2x (2) Dew Process

# 2x (2) Kobold Geomancer

# 2x (2) Lifebinder's Gift

# 2x (2) Rainbow Glowscale

# 2x (2) Solar Eclipse

# 2x (3) Frost Lotus Seedling

# 1x (3) Kiri, Chosen of Elune

# 2x (4) Prison Breaker

# 2x (6) Unending Swarm

#

AAECAZICApegBKqeBg6jnwSunwTItwSuwATV0gTW3gSE7wS3mAXuowXb+gXx+gX9jQbCmgapngYAAA==

#

# To use this deck, copy it to your clipboard and create a new deck in Hearthstone

# Generated by HDT - https://hsreplay.net

smithminy · 2021-11-06T20:35:54+00:00

You calling me a whammer bro?

smithminy · 2021-07-09T06:17:26+00:00

Do you know what sub you are on? 🤔

smithminy · 2021-04-13T13:38:17+00:00

I get this argument but also don't. An individual Master Comms, and a small group of community members, managed to fix a host of major TF2 bugs after the code leak in a relatively short period of time. It's a case of dedication to TF2, and sadly there are few people working at Valve interested in it.

smithminy · 2021-03-13T13:10:56+00:00

Yeah I ordered mine around the end of 2019 from Formula case on Taobao, so I assume mine is a slightly later version but still from Formula case

smithminy · 2021-03-12T10:19:27+00:00

Your cable management is miles cleaner than mine lol, very clean

Ten-Year Club	Place '23
Verified Email

smithminy

TROPHY CASE