Viewing profile — adr_

I think Google already publicly disclosed the code to trigger this vulnerability: https://chromium.googlesource.com/v8/v8/+/fd29e246f65a7cee13...

For my part, I loved the long form, in-depth post, and I learned a lot. I'll admit breaking it up visually with some diagrams or photos is tempting (maybe a photo of your serial se…

Clang 11 hasn't been released yet, right?

Hydrolysis is chemical breakdown via reaction with water. This is electrolysis. But it's a popsci article, so they put that in the subtitle. "Splitting" makes sense to people who d…

https://code.google.com/p/google-security-research/issues/li... They haven't published Cisco bugs, but they do have a pretty broad scope.

This sounds basically the same as: http://lcamtuf.blogspot.com.au/2014/03/messing-around-with-d...

It is a fun mental exercise. I love this stuff, and that's the motivation. I once wrote an emulator for a 4 bit microprocessor in Befunge (a 2D esoteric programming language). Then…

Unsigned integer overflow is defined. I agree that the carry flag shouldn't be exposed directly, but the ability to express "add and check for overflow" would be useful and allow f…

If the NSA is working with Intel, they're not going to bother with an RNG... The processor is the most trusted part of the computer security model - why would you choose bad random…

Absolutely agreed, I just thought it was a bit of an expensive suggestion for someone thinking about getting back into the hobby.

I wouldn't call it more verbose. AT&T: sub $0x8,%rbx callq *%rax mov (%rbx),%rax Intel: sub rbx, 0x8 call rax mov rax, [rbx] Intel can be written with: mov rax, QWORD PTR [rbx] But…

For a mere US$1129...

This is a bad answer, but when I'm on Linux, I use objdump and gdb for most of my reversing. They don't really compare to IDA, though. xxd is fine for hex editing, especially in th…

I wrote an actual libc-free "Hello World" program for Linux: http://codepad.org/rUckf7jR It should work as 32-bit or 64-bit and compile with clang or gcc. It compiles to about 11 a…

I've forgotten when I learned this stuff. Recently, I've been teaching people who have been programming for years how to reverse engineer. It's surprising how much trouble they hav…

try:print(lambda x:eval(x)if all(i in'0123456789.*/+-'for i in x)else'syntax error')(raw_input()) except:print'error'

The approach of prompting the user "Do you want to call this number?" is far simpler and safer. After all, you could probably use tel: links or tel: redirects or something if the f…

I just went on a journey through the remains of gopherspace. Thank you :)

BCD is not a bad idea... It's not great, you can pack arbitrary precision values more tightly, and you rarely need to display them (even when you do, the screen is slower than the …

They really are decimating their workforce. Ouch.