SCHiM

15 ms·

121.
by SCHiM 6y ago
After 18 allocations on the backend allocator LFH will kick in. The LFH will randomize returned chunks of the same size, doesn't matter if they were freed in the meantime or not. That makes it hard to exploit, you need to groom the hea
122.
by SCHiM 6y ago
I'm quite impressed with Windows 10's userland heap randomization. I never do any work on Linux, and especially not in the kernel. But maybe the authors can take some inspiration from the work there? https://www.blackha
123.
by SCHiM 6y ago
If you can break this scheme you can steal billions of dollars worth of currencies right now. If that is not independently audited by all evil hackers out there I don't know what is :)
124.
by SCHiM 6y ago
In simple terms. The currencies, and related technologies al deal with the problem of transferring of money/services between parties where no centralized trust/power exists. This is, in the words of their proponents to prevent abu
125.
by SCHiM 6y ago
I don't see how that's a nihilist attitude. It's the truth. At this point in time, and since the rise of the internet, no computer system has been completely secure. Things will change for the better over time, but not if we
126.
by SCHiM 6y ago
The beginning of the article, coupled with what I know of security testing triggered my PR-fluff detectors. The problem with these automated "agents", just call them scanners, is that they only test for known threats. Just as your
127.
by SCHiM 6y ago
Well, you almost need to be claiming that. If you claim otherwise the energy requirements are truly stupendous. That doesn't event mention that the energy must be green by necessity. Another commenters on this site (can't find the
128.
Ransomware Prohibition(gru.gq)
2 points by SCHiM 6y ago|0 comments
129.
by SCHiM 6y ago
Indeed. This is what the people at less wrong mean when they talk about "semantic stop signs". Words to make you stop thinking, and accept the argument as given: "Some people are dominant destructive bosses because of genetic
130.
by SCHiM 6y ago
What you say is untrue. Black hats have done things on this scale for as long as this scale has existed. RATs, malware, spam, ransomware, scareware, worms, all this existed in the largest scale possible before the advent of crypto currency.
131.
by SCHiM 6y ago
I think in this case there's enough blackhats in this world that do this for fun. Don't think cryptocurrency changes anything.
132.
by SCHiM 6y ago
This still exists! COM serves as the foundation of modern windows apps you currently see on Windows 10 (WinRT). And still actively developed in its form as WinRT. COM sadly has a number of unfortunate characteristics though: it's quite
133.
by SCHiM 6y ago
Isn't there also observational data that disfavors MOND? I remember it had something to do with galaxies colliding and the dark matter staying behind or something along those lines.
134.
by SCHiM 6y ago
But that's why the energy density matters. For every KG of material mined you get more bang for buck.
135.
by SCHiM 6y ago
I certainly wouldn't want to debug this ball of mud if there were no log statements, no :) But, I think we're depending on different programs in our workflow. I much prefer a logfile with statements that focus on what I want to in
136.
by SCHiM 6y ago
And how about highly congested multi threaded programs? I've got a program with log statements like that all over the place. Since stepping through it with a debugger would not even be possible. My IDE takes care of hiding the debug st
137.
by SCHiM 6y ago
I work as a professional pentester. This question is difficult for both sides. The business often gets in my way with budgets. I can spend it all on some strange behavior that I detect in the application. I like to spend my time like that.
138.
by SCHiM 6y ago
I'm solidly in 'that' crowd. The is _so_ much churn and worthless changes in the JS ecosystem. AFAIK it's the only ecosystem that has this much churn, which proves that it's not necessary. My best example of this is
139.
by SCHiM 6y ago
KPP is not considered a security boundary. That means, in Windows security jargon, that it's a feature that helps security. But not something that you or anyone else should consider a fail proof solution, or even something that would r
140.
by SCHiM 6y ago
Indeed. And as GP said. If you force your adversary to take more precautions you're driving up the cost, increase the time it takes for them to perform operations, makes them need more experienced/educated personnel, more procedur
141.
by SCHiM 6y ago
The argument is more nuanced than that. It's not about "making information more accessible". The problem is that the social media architecture as it is, is optimizing for engagement by any means necessary. That's how the
142.
by SCHiM 6y ago
You can't have it both ways. Either you're a democracy and the citizens are responsible for the actions of their government, or you're not. You can't hand-wave that away with "our democracy just works slowly" o
143.
by SCHiM 6y ago
It was the gchq that hacked european institutions way back in 2012(?). And then Belgacom of course.
144.
by SCHiM 6y ago
That wrap around is very often even a security vulnerability. The common usage pattern in low level C is: if (attacker_size == 0) return SizeError; char* string_buffer = malloc(attacker_size+1); // oops, string_buffer c
145.
by SCHiM 6y ago
As someone who's been on de developing side of memory corruption exploits, ASLR is effective in several scenarios. It raises the bar considerably when exploiting a remote system. Without ASLR, DEP is worthless, since reliable tools exi
146.
by SCHiM 6y ago
Well it's a direct market, customer service is king. The sellers cannot really move their 'brand' from one market to another. An opportunist could reserve their username on another market, and users know that anyone could be
147.
by SCHiM 6y ago
Having drugs sent to you is not proof that you bought them. I mean, it'd be too easy to blackmail someone if I could just send you a 'package' and then drop a tip @OurFriendsInBlue, no? That said, if you keep getting busted w
148.
by SCHiM 6y ago
My opinion is that they are. There's another argument to be had that the essay touches on as well in the end: developers don't need to know the ins-and-outs of each and every vulnerability class. It's just not feasible if we
149.
by SCHiM 6y ago
Windows runs on millions of devices. An absolutely core pillar of Windows is COM and the most recent versions have only added to that foundation with WinRT. If anything is pure OOP it's COM. And although it has a deserved reputation fo
150.
by SCHiM 6y ago
Unrelated to the article. If you want to play with various algorithms in your browser you can go here: https://github.com/gchq/cyberchef

More ›