A focused reverse‑engineering project that reconstructs the firmware, boot chain, and update protocol for the M‑VAVE FM‑1 pocket synthesizer. It identifies the platform as a JieLi AC791N/WL82 SoC with a pi32v2 CPU and XIP flash mapped at 0x02000000, and characterizes the synth engine as a six‑operator FM core derived from Dexed/msfa. Work includes a hardware and memory architecture overview, static disassembly and function classification (two independent V13 analysis pipelines), a detailed trace of the device OTA loader and finish gate, captured USB‑MIDI framing and session flow, and a decompiled Windows updater state machine. The embedded JL‑BR22 string is flagged as library nomenclature rather than reliable chip ID. No replacement firmware or custom image builders are included on the main line; an experimental branch preserves earlier custom firmware work.
Practical artifacts and tooling are provided to reproduce analysis: Ghidra scripts, extraction and classification pipelines, firmware images, and a Linux USB‑MIDI client with offline tests. The safety verdict is explicit: the update protocol is not a demonstrated recovery mechanism - single‑bank flash has no confirmed ROM recovery, rollback, or safe interrupted‑write behavior, and a debug‑surface audit found no factory recovery entry. The repository documents external references, checked‑in third‑party utilities (jl‑misctools, jl‑uboot‑tool), and pointers to the AC791N/WL82 SDK used for corroboration.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Sextortion blackmail involving an AI-generated woman led a man to take his own life. The case underscores the dangers of AI-enabled online harassment and blackmail. (rnz.co.nz)
Ubuntu 26.10 drops support for /boot on Btrfs, XFS, and ZFS filesystems when Secure Boot is enabled to improve security. The change only affects the boot process, with full support for these filesystems available after booting, and users can stick with Ubuntu 26.04 LTS for full GRUB functionality. (omgubuntu.co.uk)
A grove of about 200 American chestnut trees in Mason County faces potential destruction for a new data center. Conservationists and developers are in dispute over the site boundaries and the fate of the trees. (gadgetreview.com)
A UPS worker missed an important security email, which resulted in China gaining access to F-35 aircraft parts. The incident raises concerns about security protocols and employee oversight at logistics companies. (bloomberg.com)
McDonald's is facing a lawsuit over an AI tool that suggests prices to its US franchisees. The lawsuit alleges the AI tool may be unfair or anti-competitive. (apnews.com)
Amazon's 'About You' section uses shopping data to make highly specific guesses about customers, such as physical traits and personal habits. These inferences include assumptions about flat buttocks, plant care skills, and relationships with pets. (theverge.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.