gynvael

8 ms·

61.
by gynvael 2y ago
Hey, PO!'s lead here. It's not available yet, but we're working on making it available via some digital print services like lulu.com. There's no definitive timeline for this, but we're pushing to make it happen befo
62.
Tragedy of low-level exploitation (So you want to make a career in exploit dev?)(gynvael.coldwind.pl)
4 points by gynvael 2y ago|2 comments
63.
by gynvael 2y ago
TL;DR of a long post: "So to not bury the lead, the problem is that low-level exploitation is rarely needed in cybersecurity, and jobs where one works mostly on low-level exploitation are few and far between. Furthermore, these jobs ar
64.
The Windows Registry Adventure (Google Project Zero / J00ru)(googleprojectzero.blogspot.com)
2 points by gynvael 2y ago|0 comments
65.
by gynvael 3y ago
Ah yeah, I remember this with Hugi or other diskmags. Let me think about this, it might be an interesting direction :)
66.
by gynvael 3y ago
Web view is planned, but we're not there yet. That said... you do realize, that web view (browser) has equally huge attack surface as PDFs do, right? And a lot of PDF viewers are either sandboxed (Chrome PDF viewer, Adobe Reader) or ev
67.
by gynvael 3y ago
Yes (with a lot of small print)! Good news is that we're already chatting with two print houses about printing around 1k copies (test print basically). The plan is to give these away on various events / conferences, or to local co
68.
by gynvael 3y ago
True for us all...
69.
by gynvael 4y ago
Not saying it's interesting (in the terms of a real world application), but it technically is an 0-day ;)
70.
by gynvael 4y ago
This is true, though I need to add the missing phrase - "CTF challenges typically do not involve zero days" in real world software . They do however strictly involve zero days in software created for the purpose of the CTF - that
71.
by gynvael 4y ago
Basically the first 50 countries were easy using whatever methods. The next 50 were doable. But then the struggle really began and some teams started getting desperate/creative I guess. Note that I'm using 50 as a random example n
72.
by gynvael 4y ago
Sorry about that. I added a paragraph after the first one in the blog post. I didn't expect the blog post to travel beyond the CTF community.
73.
by gynvael 4y ago
There is some overlap, but only some. In general CTF problems are limited in the sense that they need to be solvable withing the tournament time frame (usually 48h), and also the process is simpler - you don't have to be quiet, you gra
74.
by gynvael 4y ago
Also the pandemic happened. In the later years we were playing mostly to go to offline finals. And the pandemic meant no offline finals.
75.
by gynvael 7y ago
Oh. I admit to not have expected that answer ;)
76.
by gynvael 7y ago
Haha sorry, that's totally my fault. I hired 5 different artists to design the page decorations, and they delivered cool and interesting assets. But then I decided this doesn't really align with my vision and decided to do the dec
77.
by gynvael 7y ago
Yes please :) All the details are here: https://pagedout.institute/?page=writing.php - technicalities / topics accepted https://pagedout.institute/?page=cfp.php - process
78.
by gynvael 7y ago
Thanks for the feedback - that's an interesting note :) I don't think we could speed up releases at this point, but once we have a steady inflow of articles and all the DTP scripts finalized I'll revisit this idea.
79.
by gynvael 7y ago
Sorry, that's one thing we probably cannot fix - the whole idea is that the laying out of the articles is done by authors (not us - the publisher) and the authors have (almost) full control over it. This means that while we can recomme
80.
by gynvael 7y ago
yesenadam now I'm curious - what browser are you using? Sounds like something that might be used on AmigaOS or sth?
81.
by gynvael 7y ago
This is a good point, which I gave quite a lot of thought when trying to decide the format. But in the end I decided to go for paper-size to have a fix space limitation - sadly this has the consequence of not being readable on a phone. Whil
82.
by gynvael 7y ago
Uhm, that's actually not true at all - if you enter the main page of the website, the very fist sentence says: `Paged Out! is a new experimental (one article == one page) free magazine about programming (especially programming tricks!)
83.
by gynvael 7y ago
It's an interesting point. For classical ZIPs I actually disagree that it's needed. And then again I do agree for some other potential compression algorithms :) In case of ZIPs: an implementation can look through the Central Direc
84.
by gynvael 7y ago
No. This ZIP bomb workings rely on two important facts: 1. ZIP archive has multiple files. 2. ZIP is an "index+pointers" based format (meaning the Central Directory index of archive files is basically a table of pointers - or rath
85.
Open-sourcing Sandboxed API(security.googleblog.com)
158 points by gynvael 8y ago|15 comments