mytummyhertz

5 ms·

1.
by mytummyhertz 10y ago
i actually realized that the original fix to the int overflow was UB, not tim. as usual, tim gets all the credit ;) (i mean, he did send the email)
2.
by mytummyhertz 10y ago
shameless self plug: https://www.nccgroup.trust/us/about-us/newsroom-and-events/b... allows you to run AFL on arbitrary VMs. so far we've used it to find some Linux vulnerabilities, and are starting to f
3.
by mytummyhertz 10y ago
i've actually used AFL to find some input parsing bugs in Perl, Python, and Ruby. Perl was the team who fixed them the fastest. none of the teams (rightly) considered these particularly high impact.
4.
by mytummyhertz 10y ago
NCC = matasano + iSec + intrepidus group :D
5.
by mytummyhertz 10y ago
checkout the details of the project, the idea is that you can run AFL on arbitrary VMs (like your rails VM)! just need to have your test cases, your userland harness, and the addresses to monitor for "panics"
6.
Project Triforce: Run AFL on Everything(nccgroup.trust)
72 points by mytummyhertz 10y ago|16 comments
7.
by mytummyhertz 10y ago
awesome! glad to hear :D
8.
by mytummyhertz 10y ago
yup, everything here was disclosed previously
9.
by mytummyhertz 10y ago
:D
10.
by mytummyhertz 10y ago
that's a weird way to spell hilarious edit: (original comment this was in reply to said 'that's an unfortunate username')
11.
by mytummyhertz 10y ago
author here. hi world!
12.
by mytummyhertz 12y ago
$100 to the first person to calculate the expected probability of a checkmate
13.
by mytummyhertz 12y ago
am i the only one who thinks the std::transform version is LESS readable than the for loop?
14.
by mytummyhertz 13y ago
anyone have writeups for any of these CVE's?
15.
by mytummyhertz 13y ago
so does this mean .length() is also now O(n) ?
16.
by mytummyhertz 13y ago
unless they are implementing this for fake email addresses, this is TERRIBLE! it makes it super simple to enumerate valid email addresses. patch it to fetch the images on valid+invalid email addresses, then we'll talk
17.
by mytummyhertz 13y ago
wow
18.
by mytummyhertz 13y ago
http://xkcd.com/1240/ that is all
19.
by mytummyhertz 14y ago
has anyone who knows what they're talking about looked this over? if its correct, it seems like its a pretty huge result
20.
Polynomial time solution for an NPC problem on a quantum computer(arxiv.org)
1 points by mytummyhertz 14y ago|1 comments
21.
Multiple 0-days in DarkComet RAT(matasano.com)
1 points by mytummyhertz 14y ago|0 comments