Viewing profile — adricnet

Ange Albertini's work on collisions is pretty great and he makes lots of example images and illustrations. https://corkami.github.io/ In particular he works on/with the PoC||GTFO t…

Probably so, the Security Onion wiki has some recommendations for affordable taps: https://github.com/Security-Onion-Solutions/security-onion/w...

Thanks for the share this looks great! It aligns quite well with the study (in diagrams and commented assembly) of x86 in POC || GTFO starting in pocorgtfo04.pdf chapter 3 provided…

Thanks for the share. I enjoyed this article and may be able to put some of it to work. I don't quite understand all of the negative responses.

The Nature article and notebooks from a few years back are still pretty good for demos, though everything has updated since then , especially iPython -> Jupyter. https://www.nature…

Over The Wire challenges are awesome. Bandit is very educational and easy to start. Others are quite a bit more challenging.

I do agree. That's actually part of why I called out the language: maintaining balance (as well as not cussing in front of the wrong people) are critical skills for security profes…

The advice is pretty good overall, but the excessive profanity is unprofessional and distracting. It is interesting that he values "SANS" certifications, but not the courses for th…

I found Tobias Klein's _A Bug Hunter's Diary_ to be quite readable and enlightening even if I couldn't follow all of the code. https://nostarch.com/bughunter

This mirror of a Purism blog post to his personal blog looks pretty interesting but I'm having trouble accessing it on homelinux or puri.sm domains due to reputation. Here's G cach…

Thank you for sharing this. It was interesting and a bit sad.

_The Week_ is quite good (US or UK). They have people read many of the things you don't have time to (including _The Economist_ :) ) and pull highlights from them across a broad ra…

This is an interesting and thought-provoking read. Thank you for posting it.

On Android or iOS or did you mean sign a source release ...? My guess is because of potential friction with reproducible building (for Android) and this for iOS: https://github.com…

Yes, but that was consumer / education market gear first (iMac) as I recall. More or less back on topic ... I bought a HP Probook for my on-the-road studies/work last cycle because…

In line with the principle of charity I'd like to point out that your declaration here that network IDS provides only "minor cost savings" is controversial to the point of almost b…

Speaking vaguely on purpose without sources (apologies), the folks who were concerned about weapons targeting a few decades back had no expectation that any part of the greater met…

Ah Inferno! Did anyone make any headway porting/redoing the browser plugin to Mozilla? There were some mumblings about GSoC for that not that long ago.

Only one of them requires readwrite system administrator privileges (eg sudo). apt-cache can be run by any user as it doesn't expose any secret data and can't be used to make chang…

Thanks for sharing this! I could wish for some tool use (gdb) screenshots, though really the inspiration to learn is valuable enough. A next read in this vein might be Bug Hunter's…

Keep please and thank you for working on this! This is much more readable on Android/Chrome Moto G, will try more later.

Neat, thanks for posting! Invisible Secrets [ http://www.east-tec.com/invisiblesecrets/ ] has a mode for this that works quite well on HTML source. Rendering is unchanged and you h…

I saw World Polio Day XKCD Comic, which wasn't the usual extra joke but is certainly accurate and appropriate an ALT tag. Possibly because I have a FireFox extension just for those…

The content is available after it is decrypted in a browser on a single host. If the streams are inspectable by network defenses they can be inspected at much more feasible scale a…

Yes, especially when they seem to affect their applications. Automatic updates are easy (mostly). Healthy software and vulnerability management that doesn't damage productivity nee…