Omarchy has launched a new team called Omarchy Dragon to bring Linux support to Qualcomm Snapdragon laptops. Five engineers are working on enabling core functionality like sleep, video playback, and firmware updates across Surface, Lenovo, HP, and ASUS Snapdragon devices, with plans to push improvements upstream to benefit other ARM platforms.
ThinkNode M9 units shipped with infected MicroSD cards containing a worm virus that exploits Windows Autorun features. The virus remains dormant on the card and poses no risk to the device itself, but can infect Windows PCs if activated. Affected customers can replace their device, remove the virus manually, or request a refund.
A new category of pocket-sized e-ink readers has emerged in 2026, led by Xteink's X3 and X4 models, competing not with traditional e-readers but with smartphones by offering distraction-free reading during brief moments like checkout lines. These devices use magnetic phone-case attachment and stripped-down designs to optimize for quick reading sessions rather than hours of use, though some manufacturers like Xteink have begun restricting custom firmware despite community expectations for openness.
PortButler is a macOS tool for sending files to devices via serial connection without network access. It supports multiple transfer protocols (XMODEM, YMODEM, ZMODEM, and a custom base64-text method), includes timestamped logging for boot diagnostics, and can pace data transmission to prevent buffer overruns.
A researcher discovered two security vulnerabilities in the ESP32-C6's Wi-Fi stack through binary analysis: a remote pre-association heap overflow in beacon reconstruction and a missing bounds check in hardware-accelerated AES-GCM. Both were reported to Espressif under coordinated disclosure, fixed in ESP-IDF, but received no CVE or advisory, highlighting challenges in securing proprietary closed-source connectivity firmware across the industry.
FeeTech's STS3215 servo has factory-default ID=1, making it impossible to distinguish multiple servos on a daisy-chained bus. Engineers discovered a race condition vulnerability that allows selective targeting of individual servos, enabling ID assignment without disconnection. They developed utilities for servo diagnostics, repair, and rapid recalibration during arm assembly.
DroidPutter is an open-source tool that enables Android phones to run Cardputer apps on an ESP32-S3 microcontroller via USB OTG. Apps are built on demand from GitHub, flashed wirelessly from the phone, and mirrored to the phone's display while using the phone's keyboard, GPS, and screen as the Cardputer's interface.
A multi-year project to develop custom firmware (SMK) for the NuPhy Air60 keyboard has progressed from initial reverse engineering to a stable, multi-device implementation. The developer created associated tools including sinowisp for flashing and hidra for browser-based programming, expanding support across various keyboards and microcontrollers while overcoming challenges like wireless protocol documentation and 8051 architecture constraints.
Rockbox and Doom have been successfully ported to run on iPod nano 3rd generation devices. The port is currently under review, with some flash models not yet supported.
A developer integrated NAM A2-Lite, a compact neural amp model, directly into an iRig HD X audio interface by repurposing its NXP Cortex-M7 microcontroller. The guitar signal now runs through amp modeling on the device itself at 48 kHz, eliminating the need for external computers while maintaining real-time performance within tight memory and processing constraints.
EchoMuse is an open-source firmware replacement for Amazon Echo Dot 2nd Generation that transforms it into a local Home Assistant voice assistant and media player, featuring wake word detection, music playback, Bluetooth proxy capabilities, and a fleet management dashboard—all without cloud connectivity or telemetry.
Cody Ho and Niklas built a fully OpenGL ES 3.0 compliant GPU driver for Apple's M4 Mac Mini and MacBook Neo in about one month by reverse engineering the AGX firmware ABI and user-space components using a hypervisor. The driver achieves high performance, running Minecraft at 200fps and supporting WebGL in browsers, and involved clean-room development techniques without accessing Apple binaries.
A developer describes successfully running a NES emulator on a Xiaomi Mi Band 4 fitness tracker by discovering a buffer overflow vulnerability in the device's resource decompression code, allowing arbitrary code execution through a specially crafted firmware update sent over Bluetooth.
A researcher demonstrates how electromagnetic fault injection (EMFI) attacks, previously considered lab-grade, are now accessible to hobbyists using budget hardware like the FaultyCat clone (~30€). The article details improvements to EMFI tooling, including custom injection probes and modified firmware, making hardware attacks feasible with limited resources.
A technical guide for installing Armbian Linux on the ZTE B860H set-top box using a microSD card and HDMI boot dongle. The process involves flashing an Armbian image and U-Boot bootloader to the microSD card, then booting the device without requiring prior root access.
A developer replaced postmarketOS with Ubuntu on a Lenovo IdeaPad Duet Chromebook after a failed system update, attempting a weekend firmware hacking project to get Ubuntu running on the ARM64 tablet by swapping the rootfs partition.
MCUHex is a browser-based tool for flashing and debugging STM32 microcontrollers over SWD without requiring IDE installation. Users install a lightweight tray app that bridges their browser to a debug probe, enabling firmware flashing, live variable monitoring, and source-level debugging directly from a web interface.
A reader troubleshoots display bugs on a cheap Xteink X3 e-ink device running CrossPoint firmware, discovering issues with greyscale rendering and ghosting artifacts, then investigating mysterious vertical stripes that appear in images but not in the source files.
A 386 PC emulator firmware for the RP2350 microcontroller enables full i386 CPU emulation with DOS, Windows, and Linux support via VGA/HDMI output, SD card storage, and multiple input methods. The project supports various RP2350-based boards and provides runtime configuration for memory, CPU generation, sound devices, and disk image management.
Binbows 98 is a bootable disc image that emulates Windows 98 aesthetics and functionality, featuring an animated boot splash, recovery console with command history, and real access to the boot volume's file system. The 3.5 megabyte image boots directly from firmware and provides a nostalgic experience of 1990s computing with genuine DOS-like commands while clarifying which features are authentic versus humorous.