<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>whitequark</span></a></span> this seems like normal embedded device things</p>

<p>inside of the SquashFS filesystem there is a /rootfs_data.img, which is a UBI image</p>

<p>the squashfs isn&#39;t even in the nested FIT, it&#39;s just appended to it</p><p>are they on crack</p>

<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span> This almost respectable</p>

<p>looking at another ZyXEL router and inside of a top-level Flat Image Tree with the bootloader, kernel, and rootfs (empty), there is, inside the kernel partition, another Flat Image Tree, which has the actual kernel, a Flat Device Tree, and a squashfs</p><p>i... i don&#39;t think this qualifies as &quot;flat&quot; anymore</p>

<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span><br /><span class="h-card" translate="no"><a href="https://mastodon.bsd.cafe/@mms" class="u-url mention">@<span>mms</span></a></span> doesn&#39;t JSON stand for &quot;just sed oriented notation&quot;?</p>

<p><span class="h-card" translate="no"><a href="https://mastodon.social/@whitequark" class="u-url mention">@<span>whitequark</span></a></span><br />CVEs from a perspective that assumes that being as locked down as an Iphone is the only correct security model</p>

<p><span class="h-card" translate="no"><a href="https://chaos.social/@datenwolf" class="u-url mention">@<span>datenwolf</span></a></span> the root filesystems contain basically the same files, built for different architectures</p>

<p><span class="h-card" translate="no"><a href="https://infosec.exchange/@bob_zim" class="u-url mention">@<span>bob_zim</span></a></span> this is just how u-boot works</p>