domenukk

9 ms·

1.
Show HN: Md-tmpl - Strongly typed Markdown templates(github.com)
1 points by domenukk 3mo ago|0 comments
2.
The Cscript Style Guide – CScript is the standard C(github.com)
25 points by domenukk 8mo ago|11 comments
3.
Deploying Rust in Existing Firmware Codebases(security.googleblog.com)
4 points by domenukk 2y ago|0 comments
4.
by domenukk 4y ago
There is also cargo make which, at least in rust land, serves a similar purpose. https://github.com/sagiegurari/cargo-make I ended up using it over just because it felt easier to use cross platform, and toml seemed lik
5.
by domenukk 4y ago
FWIW, ArrayList is a List, backed by Arrays. So List would have been the more Java/Zig way to name it (also Python, etc.)
6.
FitM, the Fuzzer in the Middle, fuzzes client and server at the same time(github.com)
3 points by domenukk 4y ago|0 comments
7.
FirmWire is a full-system baseband firmware emulation platform(github.com)
2 points by domenukk 5y ago|0 comments
8.
by domenukk 5y ago
I've seen projects like this in the past - either you have skilled people and use a strict CSP from the start, or the footguns of dynamiically crafting objects ultimately leads to a bunch of XSS that (probably) wouldn't have happe
9.
Fuzzing101 with LibAFL – Part IV: Fuzzing LibTIFF(epi052.gitlab.io)
2 points by domenukk 5y ago|0 comments
10.
FirmWire: Transparent Dynamic Analysis for Cellular Baseband Firmware [pdf](hernan.de)
2 points by domenukk 5y ago|0 comments
11.
Smart Contract VM Bugs via Differential Fuzzing [pdf](raw.githubusercontent.com)
2 points by domenukk 5y ago|0 comments
12.
by domenukk 5y ago
It runs an Android userspace on the host kernel, inside a container
13.
by domenukk 5y ago
What about flutter apps?
14.
by domenukk 5y ago
To be fair, a trait gets you 98% there. It can have default implementations for most functions, you just overwrite the ones you want to change. You'll still need to declare the underlying struct though, so a bit of extra code
15.
LibAFL, the Fuzzer Library(github.com)
3 points by domenukk 5y ago|0 comments
16.
by domenukk 5y ago
Machine in the Middle or Malice in the Middle are better options imho
17.
by domenukk 6y ago
There is afl-rs https://github.com/rust-fuzz/afl.rs also we're working on a fuzzing library that's completely written in rust right now, stay tuned :)
18.
by domenukk 6y ago
Why not have multiple with different strengths for different users, though? Honggfuzz is also really good. That being said, most distributions replace afl with afl++ these days.
19.
by domenukk 6y ago
Maintainer here, happy to hear that! Doing our best :) Even Google's own OSS Fuzz switched to afl++ recently ( https://google.github.io/oss-fuzz/ )
20.
by domenukk 6y ago
And that solves double frees through ___?
21.
by domenukk 6y ago
The pie chart's legend in this post is sorted largest number to smallest number, if that helps. Or as table: Buffer overread: 22 Buffer overflow: 20 Use After Free: 4 Double Free: 3 NULL mistake: 2
22.
by domenukk 6y ago
And exploits
23.
Camera Fingerprinting Authentication Revisited(usenix.org)
2 points by domenukk 6y ago|0 comments
24.
Emptyfuscator – Obfuscate JavaScript to Invisibility(dmnk.co)
1 points by domenukk 6y ago|0 comments
25.
by domenukk 6y ago
Bitwarden supports faceunlock -> all apps with pin support face unlock. Solved.
26.
by domenukk 6y ago
Yes, LTE makes heavy use of ASN.1, too - the parsers are an interesting target indeed (and some of the fuzzed ones referred to in the paper are such parsers). Although these days, ASN.1 usually get auto-generated so the attack vector is not
27.
BaseSAFE: Baseband SAnitized Fuzzing Through Emulation(arxiv.org)
41 points by domenukk 6y ago|6 comments
28.
by domenukk 7y ago
Tried to set up a Kubernetes cluster with IPv6 the other day. These hipster tools don't care about IPv6 :(
29.
Unicorefuzz: Fuzzing the Kernel Using AFL-Unicorn(github.com)
1 points by domenukk 7y ago|0 comments
30.
by domenukk 7y ago
PSA: In VIM ctrl-c does the same as ESC. No need to remap of you relearn.

More ›