Cole Munz

Embedded and firmware security: kernel drivers, device firmware, and the RF/SDR stack around them. Also the Android apps I ship. This is the build log: what broke, what I tried, what review caught.

2026-10-15
A remote the driver couldn't see
The EMEET C60E's remote zooms the picture, and Linux keeps reporting the old zoom until you unplug the camera. The driver trusts a cache the firmware never tells it to drop.
2026-09-30
The five-minute freeze
Location sharing kept stopping on locked Pixels, and every test I ran said it was fixed. None of those tests ran past five minutes, which is when Chromium freezes a hidden page.
2026-09-30
A relay that doesn't need Cloudflare
Starling's listing said self-hostable. Someone pointed out that meant self-hostable on Cloudflare, and that the listing never said who hosted the default relay. Both got fixed.
2026-09-30
A second place your location goes
Someone wanted Starling to also feed their own Reitti and Home Assistant. Sending the data was easy. Making sure the feature can't be turned against the person holding the phone took the thought.
2026-09-30
Three apps under the clock
A Pixel Fold's outer screen showed Sepia's top bar behind the clock and the camera. Android 15 made every app edge to edge, and three of mine had never noticed.
2026-08-29
SPI with no wire in one direction
A U-Boot binding allowed a bus width of zero and nothing downstream understood what that meant. Two patches later, mainline does.
2026-08-29
An overread GNU cpio didn't have (yet)
A patch got rejected on a correct POSIX argument, which turned out not to be the argument that mattered. Reframing it around malformed input is what got it fixed.
2026-08-10
U-Boot never had a btrfs test
Writing the filesystem tests U-Boot was missing: a reproducer that had to be synthesized byte by byte, a regression the suite caught, and three patches now in mainline.
2026-08-10
Two kernel patches for the Flipper One
A devicetree VBUS fix where my first read was wrong, and a dwc3 gadget fix whose answer had been sitting on the mailing list since 2022.

Apps

hopandhaul cheapest way to travel: fly-then-train planner, click the map
liftmath strength-training math: 1RM, plate loading, Wilks/DOTS/IPF
puzzlepress seven daily puzzle games, no accounts or ads, nothing tracked
translint a linter for translation files, 32 languages on its own site
munzzyy.dev every app on one page, the Android ones too