dguido

15 ms·

91.
by dguido 8y ago
Hello, I am the original author of Algo. This is 100% correct and I am glad that people understand the goals of the project. Please use Algo to keep communications secure.
92.
by dguido 8y ago
There is an FAQ that addresses "Why not OpenVPN?" including the specific security concerns with it: https://github.com/trailofbits/algo/blob/master/docs/faq.md#...
93.
by dguido 8y ago
Outline is a security disaster, and I strongly recommend against using it. - Shadowsocks is not a VPN, it's a per-application SOCKS proxy. What has Jigsaw done to ensure that packets don't leak outside of the tunnel? All UDP traff
94.
by dguido 8y ago
For reference, here is the part of the blog where the attack is explained: > Putting this all together, if Chuck replaces one of the points Alice and Bob send each other, (x, y), with (x, 0), then Alice or Bob multiplies it by their secr
95.
by dguido 8y ago
Fortnite requires specialized graphics hardware only found in very, very few phones. It will not work on older devices.
96.
by dguido 8y ago
Not entirely true! In order to play Fortnite, you're going to need an up to date phone with modern graphics hardware, and that means it will probably be running Android 8. On Android 8, "install unknown sources" is a per-app
97.
by dguido 8y ago
This might be useful for Algo! It's been a pain in the ass that IKEv2 has been a second class citizen on macOS. https://github.com/trailofbits/algo
98.
by dguido 8y ago
> Can anyone from McSema comment on why it's moved from paid solutions for CFG recovery? Plainly, because radare's CFG recovery is not reliable enough for us to use. It's not a production quality tool when compared to IDA
99.
by dguido 8y ago
It might be a good time to mention that Algo VPN now supports Ubuntu 18.04, many new cloud providers, and soon (days) will have Wireguard support. https://github.com/trailofbits/algo
100.
by dguido 8y ago
FYI AlgoVPN has Wireguard support in a PR right now. It should get merged within a week once it gets more testing: https://github.com/trailofbits/algo/pull/910
101.
by dguido 8y ago
We have a client that may ask us to add that! Please get in touch if you're willing to sponsor that kind of development.
102.
by dguido 8y ago
Trail of Bits has done a study on how large technology companies are increasingly switching to osquery for their endpoint monitoring needs. You can read the results here: https://blog.trailofbits.com/2017/11/09&#x2
103.
by dguido 9y ago
Manticore in the post above uses formal methods to verify contract properties! https://github.com/trailofbits/manticore
104.
by dguido 9y ago
Check out DeepState, a Google Test-like library for easily using symbolic execution in C/C++ apps. It's still very early on but it's already usable! https://github.com/trailofbits/deepstate
105.
by dguido 9y ago
Because "Russian metadata" was not the totality of evidence used to draw the conclusion that it was Russia. It's never just one thing, it's all the things, together. If you want an example of the kind of analytical techn
106.
by dguido 9y ago
No, Linux is qualitatively worse off since it keeps bug-dense code in areas of high privilege with few mitigating controls. Yes, there will be bugs but refusing to properly address that ahead of time by separating and lowering privileges, a
107.
by dguido 9y ago
That's not true, it strongly affects the ability to separate privileges and apply sandboxing. For example, compare Apple's Seatbelt, which was a comparatively light lift to the intrusiveness of SELinux or restricted token sandboxi
108.
by dguido 9y ago
It looks like Apple's implementation diverges substantially from other vendors, and is likely not based on the same stack at all.
109.
by dguido 9y ago
Corollary: Don't try to fix a company with bad culture. You can't change enough of it as a low level employee. Quit, and find somewhere better.
110.
by dguido 9y ago
Easy! Develop software. Don't limit yourself to scripts and small utilities. Work on something substantial, preferably low-level and closely related to the operating system or hardware. If you play CTF, show me the tooling you wrote to
111.
by dguido 9y ago
> But seriously, I got started by writing exploits for long tail web apps. I lovingly refer to this as "clubbing baby seals" and it is overwhelmingly common among younger hackers looking to polish their skills. :-x
112.
by dguido 9y ago
That sucks, and I'm sorry to hear that. I guess we can both agree that firms with such immature views probably don't deserve your resume to begin with.
113.
by dguido 9y ago
I love it when cool teachers sneak projects like these into their classwork. I had a computer architecture class that had labs to write exploits in MIPS assembly. I'd say 19 out of 20 people didn't even know they were exploits whi
114.
by dguido 9y ago
I've only seen people make poor choices and limit their own careers. It's nothing inherent in the field of security that forces people to let their dev skills atrophy while turning into script kiddies or non-technical managers. Yo
115.
by dguido 9y ago
Thanks! I'm glad you found that useful (I'm one of the mods there). /r/netsec is no longer the smaller, more personal community it was when I started as a mod (7 years ago now?). If you're just starting out, one of
116.
by dguido 9y ago
I don't think I agree with this, at all. It depends on what you do in security. If you work as a pentester or network security staff, then you might be trading a career in software development for a career in operations. In that career
117.
by dguido 9y ago
I graduated in 2008. I feel like SFS really caught its stride in the second half of the 2000s. I remember when NSA started making different levels to the CAE certification (Education -> Research -> Operations), and that created a rush
118.
by dguido 9y ago
I had an oppressive computer teacher in high school and I liked to pull pranks. It started out with simple password guessing, then phishing, then trojaned USB autoruns, SAM hash dumping, and password cracking, then some wifi sniffing... I n
119.
by dguido 9y ago
Both AppJailLauncher and AppJailLauncher-rs have a good overview of how to use them in their source code!
120.
by dguido 9y ago
The MpEngine behaves differently on XP vs newer operation systems. It was necessary for both Tavis and Andy (Trail of Bits) to lie to MpEngine to get it to start up properly in loadlibrary and AppJailLauncher, respectively.

More ›