adr_

7 ms·

1.
Apple Silicon Hardware Secrets: SPRR and Guarded Exception Levels (GXF)(blog.svenpeter.dev)
20 points by adr_ 5y ago|0 comments
2.
Portability Is Reliability(evan.nemerson.com)
63 points by adr_ 5y ago|25 comments
3.
by adr_ 5y ago
I think Google already publicly disclosed the code to trigger this vulnerability: https://chromium.googlesource.com/v8/v8/+/fd29e246f65a7cee13...
4.
by adr_ 6y ago
For my part, I loved the long form, in-depth post, and I learned a lot. I'll admit breaking it up visually with some diagrams or photos is tempting (maybe a photo of your serial setup?) but I felt the explanations were all clear withou
5.
by adr_ 6y ago
Clang 11 hasn't been released yet, right?
6.
by adr_ 7y ago
Hydrolysis is chemical breakdown via reaction with water. This is electrolysis. But it's a popsci article, so they put that in the subtitle. "Splitting" makes sense to people who don't use terms like hydrolysis and elect
7.
by adr_ 12y ago
https://code.google.com/p/google-security-research/issues/li... They haven't published Cisco bugs, but they do have a pretty broad scope.
8.
by adr_ 12y ago
This sounds basically the same as: http://lcamtuf.blogspot.com.au/2014/03/messing-around-with-d...
9.
by adr_ 12y ago
It is a fun mental exercise. I love this stuff, and that's the motivation. I once wrote an emulator for a 4 bit microprocessor in Befunge (a 2D esoteric programming language). Then, I was definitely showing off something that really do
10.
by adr_ 13y ago
Unsigned integer overflow is defined. I agree that the carry flag shouldn't be exposed directly, but the ability to express "add and check for overflow" would be useful and allow for these optimisations where the architecture
11.
by adr_ 13y ago
If the NSA is working with Intel, they're not going to bother with an RNG... The processor is the most trusted part of the computer security model - why would you choose bad random numbers as your attack vector? Relevant talk: Hardware
12.
by adr_ 13y ago
Absolutely agreed, I just thought it was a bit of an expensive suggestion for someone thinking about getting back into the hobby.
13.
by adr_ 13y ago
I wouldn't call it more verbose. AT&T: sub $0x8,%rbx callq *%rax mov (%rbx),%rax Intel: sub rbx, 0x8 call rax mov rax, [rbx] Intel can be written with: mov rax, QWORD PTR [rbx]
14.
by adr_ 13y ago
For a mere US$1129...
15.
by adr_ 13y ago
This is a bad answer, but when I'm on Linux, I use objdump and gdb for most of my reversing. They don't really compare to IDA, though. xxd is fine for hex editing, especially in the context of simple conditional jump changing, although ther
16.
by adr_ 13y ago
I wrote an actual libc-free "Hello World" program for Linux: http://codepad.org/rUckf7jR It should work as 32-bit or 64-bit and compile with clang or gcc. It compiles to about 11 assembly instructions. To produce a fairly small file:
17.
by adr_ 13y ago
I've forgotten when I learned this stuff. Recently, I've been teaching people who have been programming for years how to reverse engineer. It's surprising how much trouble they have grasping trivial operations like "a & a" or "b ^ b", a
18.
by adr_ 14y ago
try:print(lambda x:eval(x)if all(i in'0123456789.*/+-'for i in x)else'syntax error')(raw_input()) except:print'error'
19.
by adr_ 14y ago
The approach of prompting the user "Do you want to call this number?" is far simpler and safer. After all, you could probably use tel: links or tel: redirects or something if the frame didn't work.
20.
by adr_ 14y ago
I just went on a journey through the remains of gopherspace. Thank you :)
21.
by adr_ 14y ago
BCD is not a bad idea... It's not great, you can pack arbitrary precision values more tightly, and you rarely need to display them (even when you do, the screen is slower than the maths), but it's useful for a bunch of things and it's nice
22.
by adr_ 14y ago
They really are decimating their workforce. Ouch.
23.
by adr_ 14y ago
Would you mind using getpass if the "octogit login" command is only given one argument? It'd be cool to be able to use it with other people in the room and without leaving it in the shell history. It would also be nice to know where my pass
24.
by adr_ 15y ago
If the salts are different, it will definitely change. On the other hand, using the same salt twice will change the hash if it's put before the data, but not if it's put after the data. Given an MD5 collision, you can apply a common suffix
25.
by adr_ 15y ago
Using shuf, my favourite, rarely used gnu textutil. shuf /usr/share/dict/words|head -4|tr '\n' ' ';echo
26.
by adr_ 15y ago
I've had a Fасевоок Offіcіal account lying around for a year or so.
27.
by adr_ 15y ago
"DON'T PANIC"
28.
by adr_ 15y ago
Is this a security concern or a usability annoyance?