ammar2

5 ms·

1.
by ammar2 1mo ago
The Xbox does not use AMD's Platform Security Processor, they have their own custom controller on die with Microsoft hardware and their own custom BootROM. This custom security processor actually has its own bit of RAM entirely in the
2.
by ammar2 1mo ago
Not sure if it opens up that much on them as far as their security processors go. Modern consoles already treat DRAM as completely untrusted (an attacker could just sit on the DRAM bus and sniff/issue requests there). The Xbox One for
3.
by ammar2 2mo ago
Of note, even that 97% of original code that is now "safe in the rust sense" could violate invariants through safe blocks that cause memory-safety issues. I can't say exactly how the LLM-ported Rust code made use of unsafe bu
4.
by ammar2 3mo ago
If you feel like increasing your power as per your post, this is a somewhat decent first LLVM issue, take a look at WebAssemblyCFGStackify.cpp :) llvm/test/CodeGen/WebAssembly/cfg-stackify-eh.ll and friends are existing
5.
by ammar2 3mo ago
Not sure if it's a stated goal somewhere official but there's been plenty of fixes of the years moving stuff to be deterministic, e.g https://github.com/llvm/llvm-project/commit/cdbde3aacc1260a7...
6.
by ammar2 3mo ago
The PS5 also runs apps (games/browser) under a hypervisor. There was a hypervisor escape though coupled with webkit as an entrypoint: * https://ps5dev.github.io/ps5-wiki/hypervisor * https://github.com&
7.
by ammar2 4mo ago
> GitHub runs a great program on HackerOne I agree, for the record here's my HackerOne profile https://hackerone.com/ammar2/hacktivity?type=user Just for context, that 2023 bug was initially reported to GitHub&
8.
by ammar2 4mo ago
heh, a friend actually pointed out a typo on a first draft and said "maybe you shouldn't fix it to show it's not LLM written".
9.
by ammar2 4mo ago
It's not just based on that, if you read the linked report from 2023 ( https://blog.ammaraskar.com/vscode-rce/ ), I had a bug with the exact same impact of token exfiltration (It did need one additional click on the
10.
by ammar2 4mo ago
Update as of 3rd June: Microsoft has fixed this with a stopgap fix by adding a confirmation when opening notebooks in web VSCode and not allowing trusted publisher to be skipped by commands ( https://github.com/microsoft&#x2
11.
by ammar2 4mo ago
You cannot, it doesn't go through the regular OAuth flow. GitHub just automatically grants it a token.
12.
by ammar2 4mo ago
1 and 2 are correct, take a look at the PoC repo here: https://github.com/ammaraskar/github-dev-token-steal-poc/tre... We can try to just put a `my-extension/extension.js` for the most direct execution but th
13.
by ammar2 4mo ago
Thank you, that's a very kind comment. I have no interest in selling these vulnerabilities or sitting on them. At the same time, it feels really bad to have a vendor disrespect the hours it can take to make a proof-of-concept by just p
14.
by ammar2 4mo ago
> instead of clout I'm catching up on the infosec twitter side but it seems like it was even worse. A lot of people have the same story as me in 2023 of "they silently patch the bug and don't even credit you" which re
15.
by ammar2 4mo ago
> it'd be awesome if the in-browser IDE launched with a temporary per-repo permission scope That's actually exactly what they do for codespaces. The token only has read/write on the repo you activated for the codespace [1]
16.
1-Click GitHub Token Stealing via a VSCode Bug(blog.ammaraskar.com)
660 points by ammar2 4mo ago|101 comments
17.
by ammar2 4mo ago
Also, the Github enterprise code is "obfuscated" but it uses a trivially reversible method just meant to be a minor roadblock. After you get past that you get the full ruby source code, no minification or anything. For a while the
18.
by ammar2 4mo ago
Aah, the newlines were the thing I was missing. That makes sense then.
19.
by ammar2 4mo ago
PEPs aren't necessarily just for language changes, e.g https://peps.python.org/pep-0436/ which is largely a CPython implementation detail.
20.
by ammar2 4mo ago
Could you elaborate on this bit on why Github's secret masking doesn't work here: > GitHub Actions' built-in secret masker matches registered values as exact substrings. When the exception message is rendered by Symfony Co
21.
by ammar2 5mo ago
> (and agents) Ironically, agents have the exact same class of problem.
22.
by ammar2 1y ago
> Microsoft would fork it within hours I haven't trudged through Chromium's commit statistics but has Microsoft been upstreaming many contributions? I'm skeptical that they are ready to take on the full brunt of Chromium m
23.
by ammar2 1y ago
Glad this feature is built into most modern operating systems these days. For MacOS (Sequoia+) you can just forget the network and reconnect to get a new MAC address [1]. Android's documentation for if it decides to generate a new addr
24.
by ammar2 1y ago
> it includes instructions for stack manipulation, binary operations Your example contains some integer arithmetic, I'm curious if you've implemented any other Python data types like floats/strings/tuples yet. If you
25.
by ammar2 1y ago
Aah, neat! Yeah, piggy-backing off pypy's work here would probably make the most sense. It'll also be interesting to see how OP deals with things like dictionaries and lists.
26.
by ammar2 1y ago
> I'd prefer to move forward based on clear use cases Taking the concrete example of the `struct` module as a use-case, I'm curious if you have a plan for it and similar modules. The tricky part of course is that it is implemen
27.
by ammar2 1y ago
What you're proposing is reminiscent of Keybase's account verification system. You make a post or equivalent on each platform with cryptographic proof that it's you. (e.g here's mine for GitHub https://gist.g
28.
by ammar2 1y ago
Oh whoops, that's right. I totally missed that.
29.
by ammar2 1y ago
Edit: Analyzed the wrong thing earlier. This depends on the Python version, but if it has the specializing interpreter changes, the `COMPARE_OP` comparing the integers there is probably hitting a specialized `_COMPARE_OP_INT` [1]. This spec
30.
by ammar2 2y ago
That would be awesome! My airport is KPDK (sadly it doesn't have a good liveatc stream for its ATIS frequency). I did collect a bunch of ATIS recordings and hand-transcribed ground-truth data for it a while ago. I can put it up if that

More ›