cryptbe

5 ms·

1.
by cryptbe 4mo ago
Oh hey, this is our work! We helped Anthropic analyze and report this bug. For the record, this bug has nothing to do with our recent MIE attack [1] [2], which exploited two different kernel bugs. Our bugs are not fixed yet. [1] https:&#x2
2.
by cryptbe 4mo ago
Nope. Try the PoC on macOS: https://github.com/califio/publications/blob/main/MADBugs/fr... The script downloads and sets up FreeBSD on QEMU, then runs the exploit. The exploit is very smart: https
3.
by cryptbe 4mo ago
You're always super kind to me :)
4.
by cryptbe 4mo ago
Nice to randomly encounter our own work here. Check out our blog post for a fun walkthrough: https://blog.calif.io/p/cve-2026-7270-how-i-get-root-on-free... AI-generated working exploit, write-up and prompts: https:&#
5.
by cryptbe 5mo ago
The feature is enabled by default. You can test it by yourself.
6.
by cryptbe 5mo ago
This is a good title, thanks! There was iTerm2 in the original title, but it overflowed to the subtitle in Substack. I've now updated the blog post.
7.
by cryptbe 5mo ago
Disclosure: I didn't discover the vulnerability. I wrote the blog post. Thanks for releasing a fix! It was surprising that there wasn't an official release, even though the bug impacts otherwise routine, harmless workflows. The pa
8.
by cryptbe 5mo ago
Disclosure: I didn't discover the vulnerability. I wrote the blog post. >The author was able to develop an exploit by prompting an LLM with just the upstream commit Yes, I was able to do this. I believe anyone watching iTerm2's
9.
by cryptbe 6mo ago
>Key point is that Claude did not find the bug it exploits. It found the bug man. You didn't even read the advisory. It was credited to "Nicholas Carlini using Claude, Anthropic".
10.
by cryptbe 6mo ago
>But you would expect running "git status" or "git ls-files" in the unzipped directory to completely pwn your system? Probably not either. That’s fair, but it would be pretty unusual for me to run Git commands in a di
11.
by cryptbe 6mo ago
I think we can agree that Git is at least partly responsible for this issue, if not more. That said, even being aware of that doesn’t necessarily help much in practice. When you’re using Emacs or Vim, you’re not really thinking about Git at
12.
by cryptbe 6mo ago
Yes, likely. And git is not going to fix it. So isn't it fair to expect the editor maintainers to do something about it, to protect their users, no?
13.
by cryptbe 6mo ago
Disclosure: I didn’t discover the bugs, but helped write the blog post. These issues are technically classified as local code execution (AV:L), but they go against a pretty strong user expectation: that opening a file should be safe. In rea
14.
by cryptbe 6mo ago
When I wget a tarball, unzip, and emacs a.txt inside, I don't expect that it'd execute arbitrary commands. I think people should be aware of this risk, especially when it looks like it's not getting fixed. Disclosure: I didn&
15.
The Game of Diophantus(vnhacker.substack.com)
1 points by cryptbe 2y ago|0 comments
16.
by cryptbe 2y ago
Thanks for sharing. I'm one of the co-authors of the blog post. Let me know if you have any questions! tl;dr: We analyzed a LockBit v3 variant, and rediscovered a bug that allows us to decrypt some data without paying the ransom. We al
17.
Privilege Escalation in AWS Elastic Kubernetes Service(blog.calif.io)
3 points by cryptbe 3y ago|0 comments
18.
by cryptbe 6y ago
It really is turned off. Companies like Google get huge fines when they break their promise -- even accidentally.
19.
by cryptbe 6y ago
You can use Google Search and tell Google not to log your search history or use the data for advertising purposes. See my comment [1] for how to turn on these privacy controls. [1] https://news.ycombinator.com/item?id=253832
20.
by cryptbe 6y ago
Google provides decent security/privacy controls, see my comment on how to turn them on [1]. If you have any specific concerns, I'd love to learn more and see if there's anything I can help. [1] https://news.ycombi
21.
by cryptbe 6y ago
If you want to keep using Google services, here are some Google Alternatives Alternatives: 1/ Google Search, YouTube, Maps: visit https://myactivity.google.com/activitycontrols to turn on auto-deletion or turn off sear
22.
Advisory: Security Issues in AWS KMS and AWS Encryption SDKs(vnhacker.blogspot.com)
3 points by cryptbe 6y ago|0 comments
23.
You want to encrypt password hashes(vnhacker.blogspot.com)
11 points by cryptbe 6y ago|0 comments
24.
A history of elliptic curves in tweets(vnhacker.blogspot.com)
11 points by cryptbe 6y ago|0 comments
25.
by cryptbe 6y ago
>Crypto is hard because you don't get quick feedback on whether you are doing well. Well said. If you are to implement a sorting algorithm, you'll know immediately whether it works or is fast enough. Crypto doesn't provide
26.
by cryptbe 6y ago
I wrote this article to encourage people to study the field I love. If I wanted to tell people to back off, why would I bother providing advice, material and telling people to have fun? >Those rules aren't easy to follow, but they a
27.
by cryptbe 6y ago
>I of course agree with all of this, but as someone pretty much at the bottom of the food chain who just wants to encrypt some data, there's often no libraries that safely glue the primitives together in the way that I require. >
28.
by cryptbe 6y ago
I'll tell you next time we meet ;-)
29.
by cryptbe 6y ago
For example, let's look at the IV. Symmetric encryption algorithms usually need an input called the initialization vector (IV), but different algorithms have different requirements. AES-CBC requires unpredictability, but AES-CTR (and A
30.
by cryptbe 6y ago
>Or was it that they were trying to use low level APIs in OpenSSL to create some higher-level cryptosystem they perhaps didn’t fully understand? Yes. They wanted to encrypt some URL parameters with AES-ECB.

More ›