Viewing profile — danvittegleo

this is the first thing I list in the readme of the repo "For fun only. This is a proof-of-concept exploring what's possible..."

AWS CloudShell gives you a free Linux environment with ~1GB of persistent home storage in each region. I wondered: what if you could stitch a bunch of these together into a single …

Absolutely - there are plenty of more cost-effective, cloud-agnostic ways to build something like this. This is just an experiment to explore Lambda networking and push it beyond i…

Like most things with AWS, it’s tricky to pin down exactly - and it’ll probably cost more than you’d expect once you factor in Lambda invocations, GB-seconds of execution time, S3 …

I did toy around with Tailscale initially trying to get it to spin up as an exit node but wasn't able to get that functional. I did manage to get Tailscale Funnel to work as the tu…

Revisited an old experiment of mine ( https://github.com/dan-v/awslambdaproxy ): can AWS Lambda functions work as network proxies? This time using UDP NAT hole punching + QUIC tunn…

It scales amazingly well with the number of cores you throw at it. Definitely the 3950x would work great.

I investigated EBS snapshot as an option, but there were two problems. 1) cost as i mentioned initially - for just AOSP source tree alone you are looking at > 250GB and at a cost o…

In order to limit costs, everything is pulled from source on each build and there is nothing cached. This strategy takes advantage of the fact that AWS doesn't charge for ingress t…

Yes, building AOSP requires a fairly powerful machine (at least to do it quickly): https://source.android.com/setup/build/requirements . It's definitely possible to do on a local m…

With rattlesnakeos-stack, it uses spot instances and defaults to a c5.4xlarge which takes about 7-8 hours to build AOSP and Chromium (for an up to date webview) and equates to abou…

CalyxOS is an awesome project. I have worked with the lead developer a bit over the past few years and it's been such a pleasure. We share some bits of code between our projects he…

Running it with pypy sped it up quite a bit and got it far enough to figure out the remaining portion of the URL.

For anyone interested in doing their own customizable builds of AOSP for Pixel devices check out: https://github.com/dan-v/rattlesnakeos-stack . This doesn't have any of the securi…

Agreed. For anyone interested in doing their own monthly signed AOSP builds for Pixel phones with OTA updates, take a look at a project that I built that fully automates the proces…

For those that prefer algo, there is an open issue to add Pi-Hole ( https://github.com/trailofbits/algo/issues/1258 ) and in my fork I've added Pi-Hole support: https://github.com/…

Ha, you definitely have some years on me, but I can appreciate that perspective :)

If you are looking to maintain a secure device similar to stock Android without google services, a Pixel phone with verified boot using your own signing keys, latest AOSP, and up t…

For sure. I'd love to have this script be able to run standalone as a local build process that would be portable across platforms and only run the AWS specific bits if you passed a…

Right now if a spot instance terminates mid-build it doesn't attempt to save any progress. I do have an open item to at least alert users that this has happened though ( https://gi…

If you were looking to just do something similar but running on another platform, knowledge of Go isn't required. The core build process is a shell script, which just has some vari…

I actually recently added a feature to search for the cheapest spot instance price across a number of different regions. Right now for example the cheapest price for the instance t…

I made an alternative to CopperheadOS after it fell apart for those interested: https://github.com/dan-v/rattlesnakeos-stack . Rather than providing random binaries of an OS to ins…

I haven't spent much time looking at this part of the project as my phone isn't supported but it does look really neat. On my next phone upgrade I will probably investigate.

Agreed that if lower level hardware is compromised it doesn't matter what you run on top of it, and RattlesnakeOS doesn't protect from that other than keeping components up to date…