Meetups/Infra/2026-07-27

(Preamble:

   = Meetup - Infra =
   https://www.noisebridge.net/wiki/Meetups/Infra
   https://www.noisebridge.net/wiki/Meetups/Infra/2026-..-.. )

2026-07-27 m Meetups/Infra

(TODO summary)

Introductions

• [name] - [background]. [goals for meetup, or interests to explore]

• Loren - backend+data freelancing in the last few years, infrastructure - tonight want to talk about wearable computing update and security & ai recent topics
• Heather - software developer -
• Chinese Man - mostly came to deliver for Erik, self hosting
• Erik - Living the dream, working on opensource mesh VPN; & working on a learning platform, now available in the space
• Elan - Data scientist turned infrastrcture enthusiast, interesting mild post mortem vendorizeor
• Derek - MOOC software running on xeon40,
• Frank - writes software, walkable computing, Xreal Aura android compute box now taking reservations
• Jet - Just saw Adam Savage, found the cave! Riding an scooter-thing; I did kind of vandalize his workshop, * putting up a flyer for us near his place
• Victor - stuff around walkable compute, & ...
• David - do infradstruture
• Kevin - likes computers, writing codes; making gadgets
• Ciara - playing with noise garden; likes self hosting stuff
• Tim - Firmware, robots, server stuff, parametric CAD design. Offgrid solar hosting in apartment! (a roller blader)

Topics & Questions, Discussion, or Coworking

walkable - wearable computing update

background & motivation

• https://zacchae.us/hardware.html

Working group, get hardware together for do/don't shared learning how wearable computing works in a social setting. Is it possible to walk around? https://github.com/mcint/walking-compute-field-guide

USB-c, and what's actually supported Some screens can cast screen out Power issues with hubs People have done the hard work on this; What the goals people have?

Nix packaging on the phone

https://www.noisebridge.net/wiki/User:Mcint/Projects/WalkableCompute/Draft

Are people mostly using phones? Laptops are doable with clam shell mode. possible to gradually upgrade

linux on phones

Victor's pioneering hacking on this

Linux running on mobile phone OnePlus 15 Beefy package, USB display out? Needed pieces, 1) linux kernel, display drivers, most is upstream using android kernel 2) rooted the phone 3) bootloader, minimal boot loader called uboot. uboot to boot mainline kernel

OnePlus 7 Pro w/ display out; ($120 on ebay) maybe the phone to build around for intro (Checking the post market os wiki)

(derek: Is it possible to connect two phones with USB-C?) with effort Complexity around USB devices host mode and device mode Look more into OTG (on the go)

a lot of it is upstream, but you have to find it and weave it all together

it's helpful to clone

• android - to find the
• linux - targeting drivers here, many are upstreamed
• uboot - bootloader -- android has some highly particular handoff parameters -- using uboot

Older XReal models:

• persistent display zero degrees of freedome
• 3 DOF, *can* place the display at a stable angle relative to the viewer
• 6 DOF, maintain angle & position / depth

Not so comfortable on the brain trying to walking around and definitely not riding a bike.

Victor has done this before and the pain points

Yossi / @thatlittlefrog - waveguide optics https://discord.com/channels/720514857094348840/720514857094348843/1528141536494223401

(loren: re-announce the infra notes & communication channels) https://nb.wtf/infra https://nb.wtf/ (infra, infrav - video, infran - notes) Discord - #meetup-infra Zulip - https://noisebridge.zulipchat.com - chat forum / mailing list threading style - for everything.

walkable-compute interested - erik, heather, elan, frank, victor, loren

post-mortem

security & ai recent topics

https://risky.biz/risky-bulletin-a-json-rce-bug-is-about-to-rock-the-java-world/

Elan's personal co project "Wissen" like to keep the CI/CD pipeline green build test linting lints all the things deploys built images ! main branch started going red ! what was it? external dependency. hermetic control plane? comparing hashes, There was a Git Tea Partof the tool chain of Bazel dep has a Git Tea dependency led down a path of the external deps clone them; colocate with CI jobs (Bazel already supports this cache) Problem: recently upgrading that runs on Raspeberry Pi's, (Not a warm cache) In the process of vendorizing discovering the jagged edges.

Back to always green on the main branch. development goes faster with tests.

LLM bugs

a vulnerability was found in which project ? A bug blackmale (bounty). The consensus is that models are good at finding vulns. Zero days.

Hacks, bugs, & disclosures

• Copy Fail
• Dirty Frag
• Dirty COW

• Blind SQL - chain of two hacks, exploit released 10 hours after Wordpress issued updates

• infinite loop in bounds check

• xz - ssh - debian packaging

• • some (edearingly) psychopath was working on postgres preformance testing, was

OpenAI was training a model going through this benchmark

supposedly isolated, the only connection to the world it has is through a package respository cache Artifactory (or similar) -- it finds a zero-day here

starts hacking huggingface, looking for solutions to the Exploit Gym or Cyber gym

HuggingFace attempted to respond using Anthropic Claude models they (HF) were locked out because models, or their guardrails, could not distinguish defender from attacker -- too dual use HF then used open weights models, GLM-5.2(?), to

safeguards for you / not for me. somewhere on the timeline hugging face called the police.

(derek: could TCP packets be tagged as AI with a boolean bit in the packet somewhere?)

The evil bit exists;

(erik knows about a CVE database scraper for coding agent audit assist)

Takeaways

• you have to use LLMs in incident response. CISOs not having fun, up the speed and risk on everything, need good, engineering frameworks, harnesses in place

• you need network egress control -- only really banks do this now

• of course package registry, of external packages -- to support scanning known work, to support rolling back to known good deploys

Derek - is there room in TCP for an AI bit Jet - hhhaaa, there's an IEEE RFC for an Evil bit in TCP - Refrenced from the Evil bit RFC: https://www.rfc-editor.org/info/rfc3675/

let's make a map of the internet of sites dropping traffic with the evil bit set

Google doesn't respect the evil bit (https://en.wikipedia.org/wiki/Evil_bit#:~:text=%22evil=true%22)

I think their whole policy was a warrant canary.

Property-based Testing

@david:

   - Folks thoughts on property-based testing in an LLM world
   - How this interacts with spec-driven-development, 

- how this interacts with model-based testing - how this interacts with formal models

(loren: polis + other topic seeking & polling / feedback system/s)

taking the seed fuzzers will test out new control flows iterating forward security fuzzers look at fine edge cases not great at solving business software bugs

Hypothesis python property testing

DEMO! building a representative state machine global invariance placing strategic assertions

Antithesis built a determinstic VM. (and hosting PWL in SF in recent months/year)

Papers we love (a good place to look for jobs) https://paperswelove.org/ https://luma.com/pwl

https://en.wikipedia.org/wiki/Tony_Hoare https://en.wikipedia.org/wiki/Hoare_logic

Property-based testing, model-based testing--some https://hn.algolia.com/?dateRange=all&page=0&prefix=true&query=property+based+testing&sort=byPopularity&type=all https://github.com/antithesishq/bombadil https://antithesishq.github.io/bombadil/browser/3-specification-language.html#examples https://hypothesis.readthedocs.io/en/latest/ https://hypothesis.readthedocs.io/en/latest/tutorial/index.html https://stevana.github.io/the_sad_state_of_property-based_testing_libraries.html https://hegel.dev/

Action item for the willing, volunteers -- try out property based testing -- ask your llm to do this for you, for your project. Where'd you find it, what do you have your model doing?

There is a type of testing approach what are all the conditional boundaries

NoiseGarden =

Noisegarden is .... Live! we now have production apps hosted on it. noisebridge.donation.net Ciara and Dianel are extremely knowdleabel about distinct parts of the garden there is a reasonable CI/CD (share screen)

https://donate.noisebridge.net/

https://git.noisegarden.nexus/ https://auth.noisegarden.nexus/

we can host git repos configurations have repos goal is to setup so noisegarden is a platform for deployment;

There is a diagram! everything is readable dashboard? A writable path.

Daniel has a Dockerfile with workflow, with env secrets and rootless builder, using "buildah" forgejo has a package repo built by CI then pulled in to the yaml.

For rabbitmq, runnning BeamVM inside a container?

For Postgres, sequence matters but an operator handles it. operators make backups and restore super easy. (semi-stateless)

Rounttable for service request

Derek - OpenEdx MOOC platform, 
Eugene - Agentic Army
Frank - (idk yet)
TJ - Parallel gym
Jet - SearxNG
Victor - nix build reporting
Ciara - federation stuff
Loren - atproto (for internal & ),  auth onboarding - wiki or rest of NB, dev-pi / pypi repo, HedgeDoc / live notes, 
Robert - RSS Feed, live update
Erik - Would like to host a public facing n0 iroh server
Minetest / minecraft server

Polis - social 

Outros

• Eugene -- walkable compute went great - great to get mainline linux & NixOS working on here -- accessing agent army on the fly is great
• Frank - walkabout omputing
• TJ - evil bit sournds cool
• Jet - I will stop harassing adam savage
• Victor - evil bit tcp stuff, will look into -- will visit jet's evil site
• Dave - remain impressed by the work gone into noisegarden
• Ciara - noisegarden is still going, took a long break, it's still going
• Tim - excited to try out new (property) testing methods
• Loren - get an AS peering setup, for dealing with BGP. (hosting Hedgedoc), live notes in wikitext
• Karan - property testing
• Erik - follow up with hosting
• Michael - do research on testing
• Elan - just learned about hydra over the last few weeks; success with build barn, all the major build system; how to integrate nix? remote execution API.. how to leveeerage.
• Derek - Testing, evil bit map generator, getting noisepod podcast gear working with Kevin. Maybe setting up a streaming audio to a service. Applying for a job.
• Kevin - going to triage ~ all 50 hive mapper dash cams that showed up -- Google street view -- $600 device, self-hosted

Lesson or Demo

• Read aloud: clarify for meetup. We are taking notes in a riseup pad (or I am--help appreciated, and links). We have meeting notes posted to the wiki. noisebridge.net, search Infra, or Meetups/Infra. (the Infrastructure page has a disambiguation link.)
• Shell, web services, self-hosting, networking!

For next time

Readings & Exercises

• Readings
• Exercises

Join online

• Try it yourself!
  • Join libera.chat #nb-meetup-infra

https://www.noisebridge.net/wiki/Meetups/Infra