kdbg

6 ms·

1.
by kdbg 2mo ago
Its one of the features that is behind a minimum karma requirement. https://github.com/minimaxir/hacker-news-undocumented/blob/m...
2.
by kdbg 1y ago
Only tangentially related but I'm a Canadian but have been on a US Cell provider (AT&T) for over a decade now because its cheaper, especially when I used to spend a lot more time roaming in the US. The number of Canadian companies
3.
by kdbg 2y ago
I'm not a lawyer so maybe I'm misunderstanding something but the plaintiff is Whatsapp, not the journalists. This isn't really about holding NSO Group accountable for hacking journalists at all The fact journalists were compr
4.
by kdbg 2y ago
Author of the site here (though not this specific post). Any chance you could take a screenshot of what your seeing? The other commenter mentioned the contract of comment s in code blocks which I've already noted to fix.
5.
by kdbg 2y ago
curious what type prompting you do on the LLM? I run a markov chain bot in a Twitch chat, has some great moments. I tried using a LLM for awhile, would include recent chat in the prompting but never really got results that came across as te
6.
by kdbg 2y ago
Reminds me a little of a stored XSS I read about last year. https://tttang-com.translate.goog/archive/1880/?_x_tr_sl=aut... Had that same root of not having the mime.types in the container, leading to server-side
7.
by kdbg 2y ago
You can, but maybe not in the "standard" way. Standard way being trying to measure the precise differences between requests. The smaller the difference the more requests are needed to level things out and that just becomes pretty
8.
by kdbg 3y ago
Thanks for this, was trying to wrap my head around it a bit and you broke it down nicely.
9.
by kdbg 3y ago
Binja decompiler is more-or-less fine. Its not as mature as IDA or Ghidra but its not a bad decompiler. Though for me the big selling point on Binja is the Intermediate Languages (ILs). HIgh-level IL is the decompiler but you also get Low-l
10.
by kdbg 3y ago
Pretty sure that price is only for your first year if you sign up with a code/link from one of their creators. The advertised rates are currently $5/month or $50/year.
11.
by kdbg 3y ago
First, just a high-level overview over how it would work as an app/consumer which is not terribly centralized outside of requiring browser support: Passkeys are an open standard, and they basically are just public/private keys wit
12.
by kdbg 4y ago
Its not just historically (atleast if you include IoT/Industrial/Medical devices) Microsoft's "Section 52" (IoT security research group) called out this issue in several allocators used in IoT in April 2021 [0][1].
13.
by kdbg 4y ago
It is, it'll build a few fuzzers hitting different areas[0]. The important function in many of those `.c` files is `FuzzerTestOneInput` which is effectively the entrypoint for a single fuzz test. Taking a look at x509.c[1] which I beli
14.
by kdbg 4y ago
So "pentesting" often kinda defaults to "network pentesting" which is closer to an IT job than a software engineering job and its salary range (in general, as you specialize pay goes up regardless). But there is "ap
15.
by kdbg 4y ago
This is a bit of a common trap, the idea that to do anything you must know everything. When you read writeups you see people just going from some bug to exploit and incorporating obscure bits of knowledge to make it happen. It feels like th
16.
by kdbg 4y ago
Funnily, both ExpressVPN and NordVPN which you call out have been externally audited. NordVPN had the clients audited by VerSprite last year, and their No-log policy audited by PwC in 2018 and 2020. And a bug bounty program on HackerOne. [1
17.
by kdbg 5y ago
https://www.science.org/doi/10.1126/science.abi9069 Unfortunately many parts of this paper are beyond me, but this study does appear to find that community level masking has an impact, but it is a study that used
18.
by kdbg 5y ago
On a whole what I found more interesting here was just the techniques they came across through fuzzing that had some impact. Yes its interesting to see the specific combinations that were impacted, but in the real-world there are so many ot
19.
by kdbg 5y ago
So, disclosure policy is kinda an active discussion within the security community but there is a general move away from coordinated disclosure (aka responsible disclosure) where the vendor and reporter coordinated on disclosing the vulnerab
20.
by kdbg 5y ago
Kinda on a related note I found myself needing to make a bunch of these sorts of scraped feeds. The problem for me was the lack of date parsing support which I sorely needed (and it doesn't appear like this option supports it either) I
21.
by kdbg 5y ago
So kinda a quick summary given the available information that I've seen. Back in August 2020 some research was performed looking at introducing vulnerabilities into the Linux Kernel.[0] The paper indicates that three patches were submi
22.
by kdbg 5y ago
The paper was already withdrawn. https://www-users.cs.umn.edu/~kjlu/papers/withdrawal-letter....
23.
by kdbg 5y ago
I don't think there have been any recent comments from anyone at U.Mn. So, back when the original research (happened last year) the following clarification was offered by Qiushi Wu and Kangjie Lu which atleast paints their research in
24.
“They introduce kernel bugs on purpose”(lore.kernel.org)
3025 points by kdbg 5y ago|1912 comments
25.
by kdbg 6y ago
https://dayzerosec.com - We do a weekly security podcast on exploit development and related topics/research. Its a pretty niche target audience so its unlikely to make money or be any sort of object success. But its self-fu
26.
by kdbg 6y ago
While Phrack has stopped, there is the Paper Feed (no generic link, just have to link to the latest in the feed) http://phrack.org/papers/escaping_from_freebsd_bhyve.html I think one big change these days is just that
27.
by kdbg 6y ago
Are there stats, not that I'm aware of. There might be its just not my area. I am more aware on the exploit development side of things though. The process of going from a bug to a weaponized exploit though is still largely manual. Yes
28.
by kdbg 6y ago
Unfortunately OSCP/PWK is their only course that has that open lab environment to learn through failure. In the other courses the lab is just a server or two running the vulnerable programs covered by the walk through in the course mat
29.
Adventures of Porting MUSL to PS4(dayzerosec.com)
2 points by kdbg 6y ago|1 comments
30.
by kdbg 6y ago
Hey, I'm one of the hosts of the podcast (zi). I co-host with Specter (and sometimes Anti, a friend who works in threat intelligence) and we both do vulnerability research and exploit development. Neither of us are world-renown securit

More ›