maldev

18 ms·

151.
by maldev 4y ago
Oh nice, I didn't know that about office, it makes sense though. I don't work for Microsoft and mainly work in the Antivirus space, so I only occasionally hear stories from friends about their internal stuff. When I said driver de
152.
by maldev 4y ago
There's multiple frameworks which give bullet proof memory usages and other fixes through annotations. The most common being https://learn.microsoft.com/en-us/cpp/code-quality/understan... . People just
153.
by maldev 4y ago
Is that not what your computer arch class was? In mine we had to write every mips instruction and what it did, from memory, on pencil and paper. And that was the "Final" along with some demorgans.
154.
by maldev 4y ago
Unironically the NASM docs are AMAZING for this, and by far the best. https://www.nasm.us/xdoc/2.15.05/html/nasmdoc0.html . For example for 64bit windows https://www.nasm.us/xdoc/2.15.05&
155.
by maldev 4y ago
I feel like it also depends on the position. I have a buddy with a philosophy degree from a Ivy League, who wants to "Learn to code". Even with experience I see him getting into a high technical systems programming job very low wi
156.
by maldev 4y ago
VBS's role is to mirror the kernel and wall it off through a hypervisor. So your kernel/usermode can't access the secure version. This basically lets it compare the "secure" kernel and the regular kernel structures.
157.
by maldev 4y ago
Ya, you can look at the bugcheck codes and see the mechanism that does this. Since patchguard will always throw that bugcheck code, I think it's 0x109? It just does random scans and sees if it matches, it's nothing fancy. Even wit
158.
by maldev 4y ago
Awesome! So that did work. But when trying to do 1024 bytes it doesn't zero it out. Do you happen to know what the cutoff is? I think my coworker is gonna open it up in ida, so will update back if we figure it out. EDIT: We seem to onl
159.
by maldev 4y ago
It would be nice if they were able to emulate some of the more security focused interviews I've had. It consists of sitting in a room, and just a discussion about random things. For example, say an operating systems final, where it con
160.
by maldev 4y ago
This is awesome! Me and a few friends were planning a trip, but their old policy was really confusing and I couldn't find good guidance on it, most of it contradictory. Hopefully they see a big boost, I imagine their hospitality sector
161.
by maldev 4y ago
I know the apple documents note this for the release. But we spent a bit today at work trying to do it, and we couldn't build a test case. Has anyone actually tested this? The kernel already has their own tagging system which poisons t
162.
by maldev 4y ago
Yes, when someone acts like a complete idiot and acts with such bad faith, I always respond the same. The person wasn't here for intellectual discussion, he led with a downvote of my original post and posted that "UMMMM AKTUALLY&q
163.
by maldev 4y ago
Fences are meant for serializing. Although the intel documentation says CPUID, you use a fence there. This should be obvious, as if you know what a fence is, you know they're entire purpose is serialization. I'll put what the manu
164.
by maldev 4y ago
Honestly just to prove how wrong you are and what you're saying is blatant misinformation, i'll correct you, since I don't think you're talking in good faith, or have any idea what you're saying. Regarding fences, I
165.
by maldev 4y ago
It's actually really easy. Traditional threading has a very obvious design pattern, where if someone isn't doing this you can be sure there's an issue. TL;DR, if you don't have a "getter/setter" you'r
166.
by maldev 4y ago
Good for him. Mozilla has drastically changed from what it used to be a decade ago. And it's nice that people are forking their old products and actually getting work done with them, without the orgs toxic culture. Hopefully someone, o
167.
by maldev 4y ago
I've been thinking of doing the same with the M40. I'm more interested in learning and time isn't really an issue, mainly just running big models. Is water cooling that important? Is it great for a prosumer looking to run mod
168.
by maldev 4y ago
You need to choose a domain. Find software and libraries in that domain and then work off of that. "Modern C++" can mean alot of things. Most people conflate this with the STD library, but alot of people don't use that. Core
169.
by maldev 4y ago
This is pretty cool, one of the killer features that windows has had with Hyper-V that is really creaming QEMU/KVM. You could probably try getting some support from a vendor like Red Hat, as something like this in the Linux Kernel is a
170.
by maldev 4y ago
https://wiki.sei.cmu.edu/confluence/display/c/MEM12-C.+Consi... Here's a copy of the CERT C standard. The site you linked is incorrect. If you google GOTO error handling. Or any of the sort it will come
171.
by maldev 4y ago
Yep, this is why in Vulnerability Research one of the main ways of finding bugs is concolic execution (Looking at logic for error cases). Memory safety is pretty easy to catch if you arn't a clown and use good coding patterns. Logic is
172.
by maldev 4y ago
CERT C is a really good standard and book. But there's really no reason to read a book. It's very simple if you follow these steps. Step 1. NO CONSTANT NUMBERS! All constants should be a define macro or a constant. This will allow
173.
by maldev 4y ago
The unpaid labor part especially hits home with me. I have a REALLY niche background and have tons of notes and blogs about it. I'm in the process of becoming a lecturer since I love helping out. But it feels like i'm doing free w
174.
by maldev 4y ago
Yep, it's a real threat to security, whistleblowers and even an organizations cyber security posture. I'll post a few strings which is enough for a state like North Korea to lock someone up for life. For example by just running st
175.
by maldev 4y ago
That's good for the path. But there's still concern with the filenames being there, along with being mapped to specific functions. Filenames can be relatively unique and makes signature matching extremely easy. So it can still cau
176.
by maldev 4y ago
The only path in a C++ release build is the PDB or debug information. This can be removed with a compiler flag. The only other indicator is a timestamp, which again can be modified with a compiler flag. Using CI/CD can still give foren
177.
by maldev 4y ago
Yes, you can verify that it doesn't work by looking at godbolt. Here's a very simple example. https://godbolt.org/z/sqW8xcGEc . For some reason everyone seems to suggest that when it's a currently open (
178.
by maldev 4y ago
Rust is really bad for security. It puts debug strings and full source file paths inside binaries. It's been a bug for over 5 years that's been reported and there's been no progress. Nobody talks about this wild dataleakage.
179.
by maldev 4y ago
Definitely agree with you. Blazor is absolutely amazing and makes development extremely fast. Makes me wonder if people commenting have even tried it.
180.
by maldev 4y ago
As others have said, GWT was really groundbreaking, but it ended up making codebases turn to mush really fast. I would look into Blazor if I were you. It lets you use C# with javascript to make not only webapps, but apps on pretty much any

More ›