Viewing profile — landr0id

Comments like these are why, even if Fil-C has cool technical accomplishments, I find it hard to speak positively about it. You unfortunately seem to forgo all nuance and push disi…

>you must go through a system provided shared library rather than make syscalls directly Just to add to this, on Windows for example you're really only supposed to invoke syscalls …

I still don't think that does anything regarding use-after-frees, only double-frees. Here's the code: https://codeberg.org/ziglang/zig/src/commit/e44e927d33d37c44... The closest ca…

>The DebugAllocator catches use-after-free (at least on page-level) To clarify, is that to say that you have to use the `std.heap.page_allocator` as its backing allocator?

>ReleaseSafe catches use-after-free errors through runtime checks which panic if the program tries to use freed memory. I don't know Zig so maybe they know something I don't, but I…

For the Nomad: The caps slightly rotate. If you look at them from the side profile, they are also all varying heights. I found enough variance in the physical layout of keys that I…

If anyone is looking at this thinking it looks pretty and wants to check out Work Louder's keyboards, let me save you the time. Their keyboards must be made by designers who do not…

Big fan of nextest and this is my first time seeing this site. I'll be real I feel a bit ridiculous commenting this but you might want to consider rephrasing this: >Treat tests as …

Yeah my bad for not defining it. "Extra-Sensory Perception", basically as you said I believe is the most common feature -- but in general I think encompasses cheats that generally …

I wonder how often wall hacks are actually used in high-level competitive play by cheaters vs ESP. ESP seems like the better route to avoid manual review flagging suspicious activi…

I suppose they did make their work public after all :) Thank you for pulling up the references.

Not to take away from the authors' work, but this was actually the approach taken by some engineers while Spectre / Meltdown were still under embargo. Not sure if they ever mention…

I didn't really mind the fn keys being there. I rarely use function keys unless I'm RDP'd to a Windows machine. What drove me crazy though was the escape key. They later added the …

GPU memory/shaders/etc. isn't protected by MTE or PAC. They said "data-only", so I guess GPU commands could fit into this description.

Static analysis tools + MCP server + a debugger with an MCP server makes reverse engineering incredibly easy and low-cost. I wrote a blog post about this recently: https://landaire…

They exploited a linear stack buffer overflow. Not a write-what-where or arb write. A linear stack buffer overflow in 2026! There are at least two distinct failures there: 1. No st…

Ask yourself why Mythos was so easily able to develop a remote STACK buffer overflow vulnerability.

>Last I read, ASLR is a good thing to have, but overall is usually not difficult to defeat. For local attackers there may be easier avenues to leak the ASLR slide, but for remote a…

FreeBSD didn’t have user land ASLR until 2019 and, amongst other mitigations, still doesn’t have kASLR. It’s not a serious operating system for people who care about security. If y…

Mythos hacked the site, wrote, and published the article

Their GUI system (GPUI) is not very mature for use outside of Zed. GPUI is basically a UI framework in the truest sense: a framework for building UI... frameworks/components. It ha…

https://www.iroh.computer/sendme Iroh's protocol can figure out if the devices are on the same LAN and avoid going over the internet. It can work without a discovery server too -- …

They wrote something that allowed them to virtualize Git -- can't remember the name of that. But it basically hydrated files on-demand when accessed in the filesystem. The problem …

>At the same time, the larger tech companies (Meta and Google, specifically) ended up building off of hg and not git because (at the time, especially) git cannot scale up to their …

Part of the idea behind stacked PRs is to keep your commits focused and with isolated changes that are meaningful. A stacked PR allows you to construct a sequence of PRs in a way t…