Skip to content

Instantly share code, notes, and snippets.

@jdkruzr
jdkruzr / BOOX_SECURITY.md
Created May 4, 2026 05:47
Boox Security Analysis

Boox Palma 2 Pro - Privacy & Telemetry Analysis

Objective

Investigate claims that Onyx Boox devices "spy" on users by analyzing the actual code in Boox system applications. Determine what data is sent to external endpoints (particularly Chinese servers), whether it constitutes benign telemetry or something more concerning.

Device Under Analysis

@jdkruzr
jdkruzr / AIPAPER_FAST_INK.md
Last active April 11, 2026 14:46
Viwoods ink API reference (work in progress)

Viwoods AiPaper — Fast Ink API Guide

Overview

The Viwoods AiPaper uses a WritingSurface overlay composited by SurfaceFlinger to render pen strokes at ~81Hz on the e-ink display. Your app draws into an offscreen Bitmap, then pushes dirty rectangles to the overlay via renderWriting(). The e-ink controller receives these updates directly, bypassing the normal Android View rendering pipeline.

This works from any third-party app — no root, no system signing, no special permissions required.

Requirements

# Service dependencies
REDIS_HOST=redis <-- this should be the name of the redis server you stood up during deployment; it's probably "localhost"!
REDIS_PORT=6379
DB_HOST=db <-- same, but for the database server. it looks like many of your entries in your .env.production are still the default, this should be "localhost" too if you followed the directions
DB_USER= <-- same
DB_NAME= <-- same
DB_PASS= <-- same
DB_PORT=5432
# Federation
package main
import (
"fmt"
"html/template"
"log"
"net/http"
"strings"
"time"
"crypto/md5"