guidovranken

13 ms·

91.
OpenWRT remote code execution via MITM due to bug in package manager(lists.infradead.org)
89 points by guidovranken 7y ago|29 comments
92.
by guidovranken 7y ago
Context: This is an anticipated vulnerability reported to Microsoft by the NSA, patched today as part of patch Tuesday. Related thread: https://news.ycombinator.com/item?id=22039481
93.
Windows CryptoAPI Spoofing Vulnerability(portal.msrc.microsoft.com)
32 points by guidovranken 7y ago|7 comments
94.
by guidovranken 7y ago
Nice! One application could be distributed fuzzing, where anyone can partake in fuzzing important software (eg. OpenSSL) by just running a web page in their browser. Native binaries are less suited for this because adequate sandboxing is ha
95.
by guidovranken 7y ago
I've posted this once before but it failed to get traction. I'm reposting this with the permission of HN admins. In a nutshell: This open-source project provides a framework for fuzzing cryptographic libraries. It can find both me
96.
Show HN: Differential Fuzzing of Cryptographic Libraries(guidovranken.com)
84 points by guidovranken 7y ago|12 comments
97.
by guidovranken 7y ago
I don't write a lot of Go but I have fuzzed a reasonable amount of it. One of the most common types of bugs I encounter are slice out-of-bounds errors. In Go, this invariably leads to immediate program termination (panic). Especially p
98.
Show HN: Differential Fuzzing of Cryptographic Libraries(guidovranken.com)
3 points by guidovranken 7y ago|0 comments
99.
by guidovranken 8y ago
Some people use Protobufs to solve this, but when I work with C++, I use a class that takes a (data, size) as an input (to its constructor), and implements an overridable Get<T> method. So you can do: auto s = datasource.Get<std::s
100.
by guidovranken 8y ago
I don't want to hijack the thread subject but here are my thoughts on the usefulness of fuzzing of safe languages. Even in the absence of memory corruption bugs there is a subclass of bugs that can emerge in any general-purpose languag
101.
by guidovranken 8y ago
Go software can exhibit a variety of denial-of-service bugs such as slice out-of-bounds access (since there is no try/catch mechanism, this leads to a panic), excessive allocations, excessive computation/timeout (consider "fo
102.
by guidovranken 8y ago
> master/PhD theses: sorry. It’s probably hopeless if it’s pre-2000. If you have a university proxy, you may be able to get a copy off ProQuest. Otherwise, you need full university ILL services, and even that might not be enough (a
103.
by guidovranken 8y ago
The article makes many lofty claims about how knowledge must be free, but how can books continue to be put out if you disincentivize the authors? What's in it for them? Had I been an expert on a niche technical or academic subject in t
104.
by guidovranken 8y ago
Fuzzers are extremely underused. Even in large, mature projects, a fuzzer being part of the source tree is much more an exception than the rule. Once you've done it a few times, it takes only 5 minutes to write a basic fuzzer for a fun
105.
by guidovranken 8y ago
Years ago I wrote an emulator for the Intel 8086 processor in C++. It's deceivingly difficult because the instruction encoding is complex and the emulation of each instruction has to have a very high fidelity. In a sense, software at t
106.
by guidovranken 8y ago
It seems like a news group dump. Compare http://computer-programming-forum.com/80-microsoft-visual-c-... https://groups.google.com/forum/#!search/%22Don$27t$20want$2... Wayback Machine earliest sn
107.
by guidovranken 8y ago
ARM mbed TLS [1], Amazon S2N [2], nginx [3] have a super consistent code style throughout and are prime examples of how C application programming should be done (in my opinion). [1] https://github.com/ARMmbed/mbedtls [
108.
by guidovranken 8y ago
I spend a lot of time looking for bugs in cryptocurrency code. In spite of this finding, I'd say that Bitcoin Core is among the safest cryptocurrency applications. The average random C/C++ open source project suffers from far more
109.
by guidovranken 8y ago
I've been a paying Spotify subscriber since 2010. Slowly I've grown dissatisfied with their service. They killed the instant notifications of new album releases of bands that you follow. They replaced it with a weekly 'Releas
110.
VrankenFuzz – a multi-sensor, multi-generator mutational fuzz testing engine [pdf](guidovranken.files.wordpress.com)
28 points by guidovranken 8y ago|3 comments
111.
by guidovranken 8y ago
Precisely because the FOSS community is so worried about this acquisition, there is a lot to win for them, and if they manage to keep improving Github in the perception of its users, that is a trust and PR victory that would be difficult to
112.
by guidovranken 8y ago
So a lot of people mention GitLab as an alternative. Would anyone with experience with that platform care to chime in and list some pros & cons compared to Github?
113.
by guidovranken 8y ago
Couldn't they just have taken the BoringSSL bignum code and written some wrapper code for it?
114.
by guidovranken 9y ago
It's not different for encrypted data that obscures the content but not its size. I've written before about how you can sometimes infer the size of a password in a HTML form submitted over an otherwise fully secure, correctly impl
115.
Security audit of SoftEther VPN finds 11 security vulnerabilities(guidovranken.wordpress.com)
1 points by guidovranken 9y ago|0 comments
116.
by guidovranken 9y ago
I've been wondering whether it could be possible to create a formal language through which one is capable of expressing ideas and facts about the world around us rather than values and variables as is the case for programming language.
117.
LibFuzzer-gv: new techniques for dramatically faster fuzzing(guidovranken.wordpress.com)
2 points by guidovranken 9y ago|0 comments
118.
Important security vulnerabilities in OpenVPN(guidovranken.wordpress.com)
266 points by guidovranken 9y ago|93 comments
119.
by guidovranken 9y ago
OpenSSL is rather inscrutable. They've actually been doing great work on the code and I'd say it's pretty secure now. But the documentation is still a mess. I recently had to resort to inferring the correct way to do somethin
120.
Rpcbomb: remote rpcbind denial-of-service and patches(guidovranken.wordpress.com)
2 points by guidovranken 9y ago|0 comments

More ›