luch

20 ms·

91.
by luch 8y ago
Their scripting engine is probably the worst programming language I have encountered (perl is readable by comparison). That's why I was really extatic when Windbg devs introduced a standard script engine, only to learn later on that wa
92.
by luch 8y ago
Exactly if you're disrupting existing power structures either by "overpaying" employees (see recent PSG football leaks) or unfairly cutting costs (Uber/Taxis or Airbnb/Hotels), you're going to make enemies of a
93.
by luch 8y ago
Although tax "dumping" is infuriating, it's not the major problem within the EU (look at Delaware tax code vs the rest of the states, and USA is doing fine economically speaking). The real issue for the EU is the lack of fina
94.
by luch 8y ago
in French "travail" is the word describing a paid work, and it has the same Latin root as "torture".
95.
by luch 8y ago
Well you know, security is a compromise. It's all about raising the bar for attackers while not penalizing too much regular users.
96.
by luch 8y ago
Not terribly terrified. At best it seem to be a Medium IL to SYSTEM. In other words a slightly better UAC bypass than most, but I don't think you can use it to escape from a browser sandbox for example.
97.
by luch 8y ago
certifications are plentiful in the infosec sector. They absolutely do not solve the hiring problem.
98.
by luch 8y ago
That's literally the reason I subscribe to a newspaper in my country. Even though I hardly read an article they write, I want to make sure they still exists the day someone need to break out a watergate-like story.
99.
by luch 9y ago
I used Github Pages which are Jekyll sites hosted by Github, which is sufficient for my needs and has a wealth of online documentation. If it's for blogging, you can also take a look at Blogger, half the programming & security blog
100.
by luch 9y ago
You should take a look at QubesOS : https://www.qubes-os.org . Each application starts in a VM in order to isolate them from each other. The only issue is that QubesOS rely on paravirtualization (it's a Xen hypervisor undern
101.
by luch 9y ago
a new Windows version with no direct upgrade path and breaking backward compatibility with Win32 ? Good luck getting devs and enterprise IT on it. Project Centennial is an amazing piece of virtualization but it has its caveats ( https:&#x2F
102.
by luch 9y ago
You should : even if I consider Powershell pretty alien as a language (coming from an old time Windows dev), Cmdlet is vastly superior to other various argument parsing tooling (optparse, argparse, argv, etc.) I've used in the past.
103.
by luch 9y ago
Using machine learning for ad blocking suffers from the same issue malware detection has : your "environment" will actively try to game your detection system, which can greatly hinders the learning phase. I'm not entirely sur
104.
by luch 9y ago
I think the problem is technical rather than commercial : https://github.com/avast-tl/retdec/issues/9 . x86_64 have calling conventions (namingly __fastcall) which are more inconvenient to decode than x86 _cde
105.
by luch 9y ago
Moreover, the builds are delivered over HTTP and the .whl are not signed ...
106.
Api-min-win dll resolution(lucasg.github.io)
2 points by luch 9y ago|0 comments
107.
by luch 9y ago
the guy in the video has created a bunch of "osx sysinternals" tools for this exact purpose : https://objective-see.com/products.html .
108.
by luch 9y ago
Everyone who think they are safe using macOS should see this presentation : https://www.youtube.com/watch?v=q7VZtCUphgg Patrick Wardle has reversed the C2 com protocol and found it had "advanced" capabilities (rem
109.
Writing an offline docset for Powershell documentation(lucasg.github.io)
2 points by luch 9y ago|0 comments
110.
by luch 9y ago
You can even wrap native Win32 code in a CLR dll : https://msdn.microsoft.com/en-us/library/ms235281.aspx The binding is a bit funky (lots of `ref` and `gcnew` keywords sprayed here and there) but it works.
111.
by luch 9y ago
halvar flake (Google P0 security guy) talk a bit about it in the last Black Hat Asia : https://www.youtube.com/watch?v=JCa3PBt4r-k . Basically he says that even Google is puny (in terms of production units) in front of Intel
112.
by luch 9y ago
(author here) by type comments your mean this : https://www.python.org/dev/peps/pep-0484/#type-comments ? I haven't seen them used anywhere, but that's an okay solution I guess. NB : by the way, lov
113.
Porting a historic Python2 module to Python3(lucasg.github.io)
153 points by luch 9y ago|114 comments
114.
by luch 9y ago
Most of moderns RCE POCs lift off a scripting engine (VBS for Office, Javascript for browsers, ActiveX for Flash, etc..) in order to facilitate exploitation. The only ones which does not use a script engine are POC exploiting a "networ
115.
by luch 9y ago
As a side-note, Internet Archive is starting to ignore robots.txt rules for this exact reason : https://blog.archive.org/2017/04/17/robots-txt-meant-for-sea...
116.
Renaming a Win32 executable to main.exe launch the Xbox DVR popup(lucasg.github.io)
4 points by luch 10y ago|0 comments
117.
by luch 10y ago
Pax/Grsecurity fork probably has it for some time, but not mainline tree (i.e "torvalds" linux).
118.
by luch 10y ago
I'm pretty sure I've heard some peoples describe CERT/CIRST centers as "web firemen".
119.
by luch 10y ago
Senseye really looks like "Cantor.Dust" ( https://www.youtube.com/watch?v=4bM3Gut1hIk ). I wonder if c.d. has been an inspiration for it.
120.
by luch 10y ago
I've used this module for upgrading a python2-only lib : https://pypi.python.org/pypi/future . Basically it allow you to write Python 3 code that will run on Python 2 interpreter (bar from using advanced features

More ›