slosars.me · member

Anthony “Tony” Slosar

Lab Manager, the device library 3 October 2026

The lab's agents read the maker's own manual before the web

Every device in the lab has its official manuals, firmware and security notices kept on the lab's main machine, readable when the internet is down.

  • Every file comes over HTTPS from its vendor's own domains, 16 vendors and 53 allowed hosts, and a redirect off that list is refused.
  • The SHA-256 hash of each of the 77 files is recorded, and a file that fails its vendor's published checksum is never stored.
  • Each agent reads only the devices it works with, and reads them here before the web.

Everything is fetched again every 30 days and any changed file is reported, and building the library found two machines behind on their BIOS.

Every library file comes from its vendor and is checked Files flow from 16 vendors' own domains, 53 allowlisted hosts, over HTTPS with every redirect checked, into a fetch step that records each file's SHA-256 hash and enforces any checksum the vendor publishes, and into the store: 77 files of 948 megabytes and 60 pages kept as links. Beneath, a refresh every 30 days reports any changed file, the store is mirrored hourly to the firewall's internal disk, and each of three agents reads only the devices it uses. Measured on 2026-10-03. 01 VENDORS 16 vendors' own domains 53 hosts on the allowlist 02 FETCH HTTPS only, and every redirect hop checked SHA-256 recorded for every file 4 match the vendor's own checksum 03 STORE 77 files, 948 MB 60 pages kept as links REFRESH 30 days a changed file is reported, not trusted READERS 3 agents each reads only the devices it works with CHECKED 5 checks, hourly and a mirror to the firewall's own disk Measured on 2026-10-03