JohnLeitch

6 ms·

1.
by JohnLeitch 8mo ago
> refrain from setting background colors That's the thing though, setting bg color opens up a lot of options, and constraining to invert is not sufficient in my opinion.
2.
by JohnLeitch 8mo ago
Ah, okay. Thought you were talking about OOB heap write or something.
3.
by JohnLeitch 8mo ago
> though this would be a much more sophisticated exploit and is maybe a bit of a reach. Not necessarily. I have successfully exploited stack buffer overflows in major products despite stack canaries, ASLR, and DEP. It largely depends on
4.
by JohnLeitch 8mo ago
It depends on what mitigations are in place and the arrangement of the stack. Even with stack canaries, having an unfortunate value on the stack e.g. a function pointer can still be quite dangerous if it can be overwritten without hitting a
5.
by JohnLeitch 8mo ago
Assuming you're talking about a heap buffer overrun, it's still possible to exploit for EoP in some cases.
6.
by JohnLeitch 8mo ago
While there's some overlap in methodologies and back-and-forth with various escalations, so-called malware is distinct from software exploits. Malware can be delivered without an exploit and quite often is. Social engineering is highly
7.
by JohnLeitch 8mo ago
I was hit by this. Could RDP into machines using the regular client, but could not access Dev Boxes via Windows App. Getting real sick of the low quality AI slop.
8.
by JohnLeitch 8mo ago
Seems quite predictable given the others in the bug report encountering the same.
9.
by JohnLeitch 8mo ago
For sure. When it's out I'll give it a go.
10.
by JohnLeitch 8mo ago
Thanks for taking the time to respond, and apologies for the contentiousness. I'm a jaded old man suffering from severe LLM fatigue, so I may have come off a bit harsh. Your write-up was a good read, and while I might be critical of yo
11.
by JohnLeitch 8mo ago
The problem is hallucinations. It's incredibly frustrating to have an LLM describe an API or piece of functionality that fulfills all requirements perfectly, only to find it was a hallucination. They are impressive sometimes though. Re
12.
by JohnLeitch 8mo ago
Oh come on, the fact that the author was able to pull this off is surely indicative of some expertise. If the story started had started off with, "I asked the LLM how to capture network traffic," then yeah, what I said would not b
13.
by JohnLeitch 8mo ago
Sure, but that is aside from my original point. If somebody: a) Has the knowledge to run tcpdump or similar from the command line b) Has the ambition to document and publish their effort on the internet c) Has the ability identify and patch
14.
by JohnLeitch 8mo ago
>Is that because wireshark can't do that just from packet captures? Well, not quite. I think it's more that nobody has taken the time to implement it. That's not to say such an implementation would automatically decrypt th
15.
by JohnLeitch 8mo ago
What are you even trying to say? I suppose I'll clarify for you: Yes, I'm confident I could have identified the cause of the mysterious packets quickly. No, I'm not going to go through the motions because I have no particular
16.
by JohnLeitch 8mo ago
Not even remotely accurate. While the dissector is not as mature as I thought and there's no built-in decryption as there is for TLS, that doesn't matter much. Hint: every component of the system is attacker controlled in this sce
17.
by JohnLeitch 8mo ago
Well, I spent a good part of my career reverse engineering network protocols for the purpose of developing exploits against closed source software, so I'm pretty sure I could do this quickly. Not that it matters unless you're goin
18.
by JohnLeitch 8mo ago
What I suggested (mistakenly so, see my revised suggested approach in response to one of your siblings) is the exact opposite of gate keeping.
19.
by JohnLeitch 8mo ago
Interesting, I thought it was possible to decrypt SSH in Wireshark a la TLS, but it seems I'm mistaken. It still would have been my first goto, likely with encryption patched out as you stated. With well documented protocols, it's
20.
by JohnLeitch 8mo ago
The reliance on LLMs is unfortunate. I bet this mystery could gave been solved much quicker by simply looking at the packet capture in Wireshark. The Wireshark dissectors are quite mature, SSH is covered fairly well.
21.
by JohnLeitch 8mo ago
>Current tests suggest it is not likely related to any other known psychedelic compound. For one, the trips it produces are unusually long, commonly lasting 12 to 24 hours, and in some cases even causing hospital stays of up to a week. P
22.
by JohnLeitch 8mo ago
At risk of being called out for my ignorance (I am still new to GPU development and have only limited experience with CUDA), it seems to come down to how appropriate the execution model is to the work e.g. SIMT vs SIMD here.
23.
by JohnLeitch 8mo ago
Without disclosing too much, it was an app that stored text messages.
24.
by JohnLeitch 8mo ago
My brother's now ex-wife learned the hard way about the challenges of soft delete. Too bad about the contents of that SQLite database, but his knowing was for the better.
25.
by JohnLeitch 8mo ago
Maybe things are different now, but I'm on my third year with my current employer, and I found them organically, sending my resume out on Indeed. Admittedly the MS stuff was largely kicked off by contacts, but that's the only inst
26.
by JohnLeitch 8mo ago
This is interesting, but in most cases the challenge is finding a truly exploitable bug. If LLMs can get to the point where they can analyze a codebase and identify vulnerabilities, we're going to see some shit. But as of right now, th
27.
by JohnLeitch 8mo ago
Interesting Microsoft is mentioned as recently dropping degree requirements. First time I worked there as an FTE without a degree was 2012. I don't see this as any sort of turn of events in the industry. It's always been "deg
28.
by JohnLeitch 8mo ago
Writing software that works containerized isn't that bad. A lot of the time, ensuring cross platform support for Linux is enough. And docker is pretty easy to use. Images can be spun up easily, and the orchestration of compose is simpl
29.
by JohnLeitch 8mo ago
>I'm easily getting twice my workload done with AI, and I'm not even leveraging the full extent of the tools. It seems that every person who says this never elaborates on the nature of their work. What exactly are you writing?
30.
by JohnLeitch 8mo ago
What was his role? How did he slow the project down? I ask because quite often, the value of "soft skills" is exaggerated. In almost 20 years of software engineering I have met some of the worst personalities imaginable. Yet, I ca

More ›