withzombies

10 ms·

61.
by withzombies 5y ago
It re-enables third-party scripts that were disabled when mikrotik updated the authentication algorithm with routerOS 6.45.1 (August 2019). A1. From a cryptography perspective it's a little bonkers but nothing is glaringly wrong. A2. T
62.
by withzombies 5y ago
Yeah, I specifically mentioned interactive disassemblers here. There are only a few that let you fix up and annotate the disassembly or decompilation and they're leaps and bounds above the ones that don't.
63.
by withzombies 5y ago
Thanks and you're absolutely right. It turns out tricks for reverse engineering to understand software help when you just want to understand software without reverse engineering also.
64.
An opinionated guide on how to reverse engineer software(margin.re)
375 points by withzombies 5y ago|44 comments
65.
Cryptocurrency expert pleads guilty to conspiring to help NK dodge sanctions(washingtonpost.com)
14 points by withzombies 5y ago|0 comments
66.
by withzombies 5y ago
Bug fixes and performance improvements is often code for "frequent releases help us on the app store". The Apple App Store also lets you clear out past reviews with new releases. You'll notice that some super popular apps hav
67.
by withzombies 6y ago
Any site that does ad blocker detection
68.
by withzombies 6y ago
It's not possible to side-load iOS apps and still get push notifications. Also, Apple doesn't allow you to distribute applications outside of the app store (unless you violate the terms of your enterprise developer account).
69.
Revisiting 2000 cuts using Binary Ninja’s new decompiler(blog.trailofbits.com)
1 points by withzombies 6y ago|0 comments
70.
iVerify, an app that tells you if you're hacked(blog.trailofbits.com)
20 points by withzombies 7y ago|3 comments
71.
by withzombies 7y ago
ARM64 is what Intel would design if they learned from the lessons of x86 and got a chance to restart.
72.
by withzombies 7y ago
ARM64 (aka AArch64) is the best version of x86 yet. It's clean, very little warts, they learned from their mistakes with ARMv7/Thumb2 (specifically the IT instruction). It helps that Apple controls the whole ecosystem and could se
73.
by withzombies 7y ago
You don't need to modify the kernel or iBoot on disk to inject a patched OS (or malware). redsn0w didn't, it would boot over dfu every time. It's totally possible to rootkit a phone and have it reboot just fine (with the root
74.
by withzombies 7y ago
Algo can be used to configure WireGuard also: https://github.com/trailofbits/algo It automatically handles server provisioning, creating users, and can also generate QR codes.
75.
by withzombies 8y ago
A software QA engineer walks into a bar. He orders a beer. Orders 0 beers. Orders 99999999999 beers. Orders a lizard. Orders -1 beers. First real customer walks in and asks where the bathroom is. The bar bursts into flames, killing everyone
76.
by withzombies 8y ago
I've made a lifetime total of $2500 on bug bounties. I find them pretty interesting as a distraction from my main job but I don't see how they can compete. Most platforms seem to run these private invite-only hackathons where the
77.
by withzombies 8y ago
Now no one will be perfect! I wonder if they'll calibrate the scores against past 10.0 performances
78.
by withzombies 8y ago
NSA's Rob Joyce is presenting GHIDRA, a reverse-engineering tool developed by the NSA. They're apparently making it free to the public. I wonder if it'll be open source. It should be public domain software but if the NSA used
79.
Come Get Your Free NSA Reverse Engineering Tool R(rsaconference.com)
10 points by withzombies 8y ago|1 comments
80.
by withzombies 8y ago
Describing Weird Machines to non-practitioners is almost as hard of a problem as actually finding them. I think Sophia did a good job explaining them and laying out a path to automatically identify them.
81.
by withzombies 8y ago
I've been thinking about this problem for a few weeks now and I'm not certain you can safely upgrade any deployed contract. I know a lot of dApp developers want to be more agile with their deployments but you shouldn't be cha
82.
by withzombies 8y ago
Have you checked out DeepState ( https://github.com/trailofbits/deepstate ), it's a symbolic unit testing framework that has an interface similar to google test.
83.
by withzombies 9y ago
It's true, but there's a few tools out there to help now, such as tis-interpreter ( https://github.com/TrustInSoft/tis-interpreter )
84.
by withzombies 9y ago
Webkit's Web Template Framework https://github.com/WebKit/webkit/tree/master/Source/WTF/wtf
85.
by withzombies 9y ago
Yes, most airports print the gates on the boarding passes. A handful (mostly ATL) just give up, because they can't reliably predict the gate until 30 minutes before boarding.
86.
by withzombies 9y ago
For this year's DEFCON CTF, the organizers decided to break all existing tooling by making a custom architecture with 9-bit bytes, 27-bit words, and middle-endian integers. I was able to make a [Binary Ninja]( https://binary.
87.
An extra bit of analysis for Clemency(blog.trailofbits.com)
27 points by withzombies 9y ago|4 comments
88.
by withzombies 10y ago
I trust Digital Ocean much more than I trust PrivateInternetAccess. I also don't want to be associated with the other traffic going through PIA or similar VPNs.
89.
by withzombies 10y ago
I don't understand why everyone is up in arms about the ESC key getting replaced. It's still there (by holding the Fn key), but even better: now your vim session can have a custom touchbar interface that makes some of the more obs
90.
by withzombies 10y ago
The blog post by the team that did the port (Trail of Bits), mentions that it uses wmi and shims the data into osquery. https://blog.trailofbits.com/2016/09/27/windows-network-secu...

More ›