/author.jpg

fortitool: cracking FortiOS firmware end to end, and a key nobody had

I own an FWF-60E and I’ve spent a good chunk of time pulling its firmware apart to see what’s actually in there. FortiOS doesn’t do casual encryption. The whole .out file sits under an outer XOR layer, and the filesystem image buried inside that has its own second scheme, which has changed shape several times across versions. None of this is exactly secret. Researchers have been chipping away at it for years. But every writeup solves one slice and then leaves you to stitch the rest together on your own.

Tax the chips, before the models

In 1930, with the world sliding into the Depression, John Maynard Keynes sat down and wrote something wildly optimistic. The essay was called Economic Possibilities for our Grandchildren, and the bet at the center of it was simple: machines were getting good enough, fast enough, that within a hundred years the economic problem would basically be solved. His grandchildren, he figured, would work about fifteen hours a week. The rest of the time they’d spend on life. Art, friends, leisure, the stuff you actually remember.

America's $38.8 Trillion Gamble

The US national debt is $38.8 trillion. Up until now, GDP growth has been just enough to service the interest and keep the lights on. It’s been teetering on the edge of the Japan scenario: either shrink the economy to pay it down, or print money and hope everyone else keeps buying your currency. The petrodollar arrangement, where Gulf states price oil in USD, has been doing the heavy lifting. Arab nations park their money in American assets, America gets to run deficits that would bankrupt any other country.

An Analysis of S3-Compatible Object Storage Providers

The Amazon Simple Storage Service (S3) API has become the de facto industry standard for object storage, creating a robust ecosystem of tools, SDKs, and services built around its interface.1 This has spurred the emergence of numerous “S3-compatible” storage providers, each offering a unique value proposition. However, the term “S3-compatible” represents a wide spectrum of functionality, ranging from near-perfect replication of core data operations to significant deficiencies in advanced management and security features. This report provides a detailed comparative analysis of leading S3-compatible providers—Cloudflare R2, Hetzner Object Storage, Vultr Object Storage, and DigitalOcean Spaces—benchmarked against the comprehensive capabilities of AWS S3.