moyix

45 ms·

451.
by moyix 10y ago
Equation Group is the name given by AV vendors to a group of attacks thought to be carried out by NSA. This is, apparently, a dump of internal files (mostly exploits and command & control scripts) that someone got ahold of. They're
452.
by moyix 10y ago
Some other twitter accounts to watch: https://twitter.com/pwnallthethings https://twitter.com/msuiche
453.
Equation Group Cyber Weapons Auction(theshadowbrokers.tumblr.com)
224 points by moyix 10y ago|137 comments
454.
by moyix 10y ago
I haven't read it, but I saw it on a friend's bookshelf: https://www.amazon.com/Feynman-Lectures-Computation-Richard-...
455.
by moyix 10y ago
Matthew Green has a very readable yet technical writeup of this attack: http://blog.cryptographyengineering.com/2016/03/attack-of-we...
456.
by moyix 10y ago
Yep. Artem's web page has more information as well: http://dinaburg.org/bitsquatting.html
457.
by moyix 10y ago
I tend to think of Strunk and White like training wheels: eventually you should take them off and break the rules (as George Orwell said in his similarly-maligned "Politics and the English Language", "Break any of these rules
458.
by moyix 10y ago
Cool! Looking forward to it.
459.
by moyix 10y ago
Their main competitor is IDA Pro, which goes for $1129 for its "standard" edition. There is a version of IDA Pro that's only $589, but it supports only 32-bit code.
460.
by moyix 10y ago
You can't buy that version yet, though.
461.
by moyix 10y ago
There is an interesting and critical look at Dweck's work on "growth mindset" here: http://slatestarcodex.com/2015/04/08/no-clarity-around-growt... http://slatestarcodex.com/201
462.
by moyix 10y ago
Yep, this is what I do, except that security papers don't make it to arXiv so I also keep an eye on twitter (I have followed a bunch of academic security people) and a couple subreddits (/r/ReverseEngineering, /r/RE
463.
by moyix 10y ago
Most of the metrics, etc. are not new [1]. The two new things are: 1. Mudge has enough credibility that, at least for now, most security people trust his assessments. 2. He's willing to publicly assign grades, and take all the backlash
464.
by moyix 10y ago
Once a rootkit is installed, it can completely bypass system call monitors in all sorts of ways – communicating with a kernel component via a shared user/kernel memory page, or adding a new device and communicating using custom ioctls,
465.
by moyix 10y ago
You are not wrong. The earliest one I'm aware of is Stephanie Forrest's work from 1997: http://www.cs.unm.edu/~forrest/publications/int_decssc.pdf Though she also had a couple papers in a similar vein st
466.
by moyix 10y ago
There is a lot of confusion surrounding this, which I can hopefully clarify. Wikileaks released a dump of email obtained from a hack of the Turkish ruling party (AKP), which can be found on their main page. It turned out that the source of
467.
by moyix 10y ago
Sorry, I think you misunderstood? I meant hosting provider. If you have to go buy your own hardware then you may as well do precisely what the OP just did.
468.
by moyix 10y ago
Hyper-V doesn't support ARM as far as I know. Also, do you know of a good Xen on ARM host? (honestly asking, would be cool to find one for testing cross-compiled builds)
469.
Fuzzing with AFL is an Art(moyix.blogspot.com)
109 points by moyix 10y ago|7 comments
470.
by moyix 10y ago
We already have some of these issues without open source. People today modify their cars to make them perform better at the expense of violating emissions standards. It's a very tiny number of people that actually end up doing so, and
471.
The Mechanics of Bug Injection with LAVA(moyix.blogspot.com)
1 points by moyix 10y ago|0 comments
472.
The Mechanics of Bug Injection with LAVA(moyix.blogspot.com)
3 points by moyix 10y ago|0 comments
473.
by moyix 10y ago
While I'm in favor of UBI (though preferably after smaller-scale experiments and careful study), this survey of economists about one version of UBI did give me pause: http://www.igmchicago.org/igm-economic-experts-panel
474.
by moyix 10y ago
He achieved full code execution on the device. You can argue that it's not a jailbreak because there wasn't much of a "jail" (checksums, rather than crypto), but I'm not sure what more you would want in terms of cap
475.
Jailbreaking the Microsoft Fitness Band(b0n0n.com)
94 points by moyix 10y ago|21 comments
476.
by moyix 10y ago
Reversible debugging (also known as record and replay) requires making the program behave exactly the same way every time. That way you can "execute backward": at statement n of the program, restart it from the beginning, and st
477.
by moyix 10y ago
If I had to guess it just simplifies the implementation. If you have deterministic load addresses then you can just reload the program on replay. If you have ASLR on, then you need to record where each library/stack/heap is and ar
478.
by moyix 10y ago
Sorry to disappoint, but we're remaining coy on exactly which tools we tested for now – the evaluation was to demonstrate the initial feasibility, rather than to pick on anyone. We'll be releasing the corpora from the paper soon s
479.
by moyix 10y ago
That's a fair point. Originally the title was meant for the entire series, but the motivation piece got too long and I decided to split them up.
480.
by moyix 10y ago
Realism is something we're concerned with! Unfortunately there isn't a well-defined way to say how realistic a synthetic bug is, so we had to come up with our own. The ultimate test of whether the bugs are useful is whether they c

More ›