September 27-30 - Sailathon 24 in Prague

karry · 6 September 2024 10:57

My ideas for the topics to hack:

Camera2 api improvements - I just love photography and low-level hacking. Camera2 api will allow to get better photo results and enable all cameras on newer Sony devices. But it may be too low-level for some participants and I am not familiar with current development state.
Navigation improvements in OSM Scout - as author of this app I would really love to improve navigation instructions. There is plenty of sub-tasks, like better text 2 speech conversion, machine-learning model for generating pedestrian routing instructions, testing framework, form for gather feedback…

pherjung · 6 September 2024 14:02

Depending how many participants we are, couldn’t we add various topic? One for expert and other one for beginners.

vlagged · 7 September 2024 22:07

Just figured out why I fly 27 and back 30. It’s because I didn’t found flights Thursday and respectively Tuesdays from/to Bucharest (I went through plane searching again to remember that). You people can do better though and be there 27 first hour till late 30 last hour!

vlagged · 7 September 2024 22:22

Good ideas!
I’ll share a bit of mines. While I usually spend a couple of minutes every day on sailfish problems, nothing beats being able to focus for a whole day or two, or more!

Camera2 API improvements I have already in a hackish way added noise reduction and edge detection control. And preserving exposure was a mega hack. Maybe these quirks can be controlled by the user somehow (Advanced cam?). Or more could be added. This might require meddling with gstreamer which is like an enterprise framework done in gobject, but again, whole day focus might help. Or I could try to fix video recording…
Sailfish browser - this is not gecko-dev, that would require many more days. but things like implementing notifications and permissions for them, or opening background tabs as someone suggested, in saiflfish-browser itself, could be doable
qtcreator development - there may be a couple of things that could be added to Sailfish IDE. One is Rust support. Other is, just some wizards to create PWA-like apps, based on e.g. fbjail or hydrogen apps blueprint. (I would have liked to be able to contribute to sfdk but I don’t see it anywhere OSS - support for future ARM laptops would’ve been cool but I don’t own one)
Flashing SailfishOS installer/wizard, like I hear ubports installer could do. This would require some pristine devices to break to test, but otherwise it’s just some GUI for automating some scripting I would say.
harbour-sailslack improvement could be one item. Though not open as a server, at least they offer APIs as opposed to other enterprise chat services. @danvratil has started some refactoring a while ago, before going unreachable. Maybe that can be continued. Or re-written in rust:) - did I say I want to learn rust?

noch · 8 September 2024 17:24

we need a really working xmpp client.

dino, perhaps, or gajim. i know both are gtk based. then maybe hackathon people can port gtk to sailfish?

or maybe default address book xmpp client can be improved to handle omemo?

but it has no mucs anyway.

so dino would be ideal.

Obikawa · 8 September 2024 18:01

What do you think about my idea to have me start “re-implementation” of Sailfish OS as an instance of Guix System?

I have written enough personal system definitions to feel confident with a more challenging project. Having direct conversations would greatly accelerate acquisition of Sailfish-specific information required to pull this off.

poetaster · 9 September 2024 14:13

I’d like to come, but I’m a bit cash careful at the moment. What are people doing for accommodation? If i can’t do the whole tour, I’ll try to be there for Friday afternoon to Sunday afternoon.

poetaster · 9 September 2024 15:36

Ok, I’m in. I’ll arrive Thursday evening.

MikeB · 9 September 2024 16:51

Looking forward to attending, will be there for Saturday and most of Sunday. I’d be a bit more on the beginner side of things. I have been working on a somewhat basic Dropbox client if this is of interest also.

poetaster · 9 September 2024 18:59

@ron282 has put a lot of effort into kaidan SailKaidan | OpenRepos.net — Community Repository System I’ve done a bit of work (library foo and building on obs) but have’nt had the time to go deeper. it’s an idea.

poetaster · 9 September 2024 19:02

both @vlagged and @karry have mentioned camera2 api. I think it’s one of those that has a broad application and makes sense to tackle. But, I thought the work on hydrogen last year was stellar, too! So, I’m open to see if I can help (beside fix all the bugs in my own foo

nephros · 10 September 2024 05:59

I have been toying with running pipewire/wireplumber in parallel to pulseaudio on SFOS.

Maybe something could be hacked around in that area, to improve standardized video interfaces, and support for ported apps which need PW instead of PA.

In the long run, mozilla/browser could benefit from that too (ESR 10x+).

poetaster · 10 September 2024 10:22

I have to admit I’ve been a bit skeptikal ™, but I’m still trying to discern what gives with my Jackd setup running with pulse shims and pipewire being there. I wasn’t clear what role pipewire is playing …

I only have some idea of pipewire and audio. What do you mean by standardized video interfaces? Do you mean for media stream consumers?

Having support for pipewire has been requested a number of times and it’d be interesting to see what actually depends on it. All the audio stuff I want to do is ‘lower level’ or ridiculous (supercollider). Did you have some example apps that might benefit in mind?

nephros · 10 September 2024 12:46

I must say I’m neither fan nor expert on PW.

But PW basically aims to do for audio and video what PA did for audio. I.e. manage sources, sinks and processing in between.

Wrt. the browser, there is some mozilla ESR (or rather, Firefox 116) which started supporting PW for video streaming/conferencing, i.e. camera and mike access.

I guess for SFOS that would mean a plugin in droidmedia(?), libhybris(?) which can function as PW a/v source(s).
There could also be a PW plugin for the Lipstick API to get video frames, so desktop sharing/streaming can be done.

vige · 10 September 2024 12:55

It’s not the easiest area to work on, but the sources for sfdk are there: sailfish-qtcreator/src/tools/sfdk at master · sailfishos/sailfish-qtcreator · GitHub

rubdos · 10 September 2024 14:13

FWIW, I’m prepping Whisperfish to start implementing and integrating voice calls (and possibly video calls). But if there’s a big project that everyone will be hacking on together, I could join in there too. I just had it in my head that voice would work when I get on the plane back

Still have to get permission to be away from the uni for those few days, but I don’t think that’ll be an issue.

poetaster · 10 September 2024 15:17

Hah! Given your notes for the build and understanding of the tunnel set up, you THE domain expert in these parts. Sucks to be you

Obikawa · 10 September 2024 17:06

Regarding Pipewire, I would like to share my perspective as a user.

Setting Pulseaudio for my needs (like audio effects to boost bass and add crosfeed) required editing configuration files to fine tune hardware parameters of the audio pipeline, and it never felt quite right, with occasional glitches and crashes. Once I installed Pipewire, I was good to go with audio effects. I never had to touch any hardware controls. It just works. Amazingly, the Pulseaudio compatibility inherits this property, and every audio stream is perfect in all circumstances but CPU overload. And even then, recovery is painless. The worst I had to do was restart my game, usually the buffers clean up themselves.

Regarding the Guix idea, I need to ask a more direct question, as I see no conversation around it.

Among the people attending the event, are there developers who know stuff like “where to get the correct kernel sources” and “how to set up the phone bootloader“? The point of me going is to have direct conversations of this nature.

jozef.macko · 10 September 2024 17:25

Hello, everyone, i will be happy that could be integrate some very secure and usefull patch directly into operating system SailfishOS, i meaning two patch like:

1.) hardened malloc used example in GrapheneOS

2.) PaX ASLR kernel security

https://wiki.gentoo.org/wiki/Hardened/PaX_Quickstart

github.com

hardenedlinux/grsecurity-101-tutorials/blob/master/kernel_mitigation.md

# PaX/Grsecurity --> KSPP --> AOSP kernel: Linux kernel mitigation checklist( WIP)

We should treat security as a whole, just like the combination of PaX/Grsecurity features/code hardening build up a defense-in-depth solution for Linux kernel, which is a core infrastructre we are highly rely on. [PaX/Grsecurity](http://grsecurity.net/) is a set of security hardening specific patch that brings the linux kernel security into another level. It's a great value to make all FLOSS community getting benefit from it. [KSPP( Kernel self protection project)](http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project) was started in Nov 2015 after [a disclosure](http://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/) about linux kernel security. This is the 1st time the public had chance to know that linux kernel security might endanger the mobile platform( Android) and IoT devices. KSSP has been trying to port features/code hardening from PaX/Grsecurity to Linux upstream. Bad guys wouldn't like to see it happen, but it will, a part of it at least;-) KSPP is quite important to Android dev/user community,  because AOSP kernel security is highly rely on how KSPP goes. [Tor community started a secure Android ROM project](https://blog.torproject.org/blog/mission-improbable-hardening-android-security-and-privacy) is called [Mission Improbable](https://github.com/mikeperry-tor/mission-improbable/blob/master/README.md) based on CopperheadOS lately, which is a good starting point. KSPP matters to our security and privacy is inevitable. I'd like to see more features of PaX/Grsecurity lands in vanilla linux and AOSP kernel and more importantly, give PaX/Grsecurity the credits they deserved.

Thanks to PaX team/Spender, they guys initiated the ALPHA philosophical ideas and implementations of defensive mitigation of system security. PaX/Grsecurity may not be the OMEGA in this field, but I'm damn sure they are the fuc* ALPHA.  Also thanks to Kees Cook( not like rockstars from PROJECTZERO, he's a hidden hero), Daniel Micay( awesome contributor of AOSP kernel and interesting work of libc hardening; And, [CopperheadOS may be the only ROM](https://gist.github.com/thestinger/8b3c3467a3e88bc26fa7848a2064fa47)[**DO NOT INCLUDE PRIVATE CONSULTING SOLUTION**] trying that hard to protect individual's privacy and digital asset.) and other contributors for FLOSS security.

Before you dive into the devils, plz go get a cup of cofee or green tea and think what the hell is/isn't security..........
------------------------------------------------------------------
## Security is NOT:

* Security is NOT installing a firewall ..
* Security is NOT a Product or Service .. ( by Schneier, Bruce )
* Security is Not a Product; It's a Process .. ( by Schneier, Bruce )
* A Security Audit is NOT "running a port scan and turning things off" ..


## Security is:

* Security is "Can you still continue to work productively/safely, without compounding the security breach"
* Security is only as good as your "weakest link"

This file has been truncated. show original

If will be possible i mean that SailfishOS will be most secure operating system used on mobile devices.

Thanks in advance for your response and your comments on that.

Jozef

poetaster · 11 September 2024 09:40

Well, yes and no. @vlagged has certainly done porting and I’ve read all the hadk documentation, but I avoid the kernel work. For a couple of day hackathon, I think it’s a bit too deep dive.