Viewing profile — shaded-enmity

Yeah, it's much, MUCH different to have those vistas unfold in front of your eyes at smooth 144 fps while you have control over the movement and everything compared to hyperanalizi…

The nice thing about this is that it's simple and works pretty much in any language so there's very little cognitive strain if you work with multiple languages at the same time.

From your link: > securelevel may no longer be lowered except by init > The list of securelevel's effects may not be comprehensive. So yes, it's a nice sandbox that can help preven…

Aye, I think what you're describing is "security by obscurity" - i.e. the capability is still there, I'm just counting on the attacker not knowing that it is because I've hidden it…

> I believe the concern is that the attackers gain root access on system A but hide their presence/activity - even in the presence of logs to remote, more trusted server B. That's …

How is the vector of persistence of any significance here? At some point the attackers got root access on your system, game over.

Turns out (1) works: #include #include static void begin() __attribute__((constructor)); void begin() { unsetenv("LD_PRELOAD"); } Build with: gcc -shared -fpie -o library.so librar…

This is a nice summary: https://lcamtuf.blogspot.com/2014/10/psa-dont-run-strings-on...

1. Can't the process just scrub LD_PRELOAD from its environment? Linker already done it's job at that point. 2. I'd suggest against using `strings` (let alone with sudo) on attacke…

No it's not fine, this is just another coercion and consolidation of power where it shouldn't belong. Independent entities cannot innovate on their own because now there's a centra…

You still need to implement a CI rule so that I don't just call `set_fs()` without using `preferred_syntax(set_fs)`, don't you?

A simple policy that both set_fs() calls need to happen within the same function body with corresponding CI test based on AST/DWARF inspection would have also prevented it. Do you …

I'm no physicist either, I just like to ask questions :) How does the demon attain the knowledge of what is "fast" and "slow" without continuous observation (and thus interaction) …

How do you build a mechanism that has a perfect knowledge about a system while being part of said system?

This all depends how much product are you expected to produce. Your "don't chop things beforehand" works if you're cooking for 1 or 2, but if you need to cook for 4+ you absolutely…

This looks amazing but I'd appreciate an autoplay button or free walk + look, the scrollwheel monorail handcranking makes the exploration rather frustrating.

I haven't touched this in a long time, but isn't the attack vector essentially the same as in Vortex lvl 4? https://overthewire.org/wargames/vortex/vortex4.html

Defense in depth would disagree that it is fine. I'm pretty sure this vulnerability can go much further if you combine it with, for example, the `https_proxy` environment variable.…

Probably because you'd need a battery to store the energy generated via braking thus eliminating much of the environmental benefit.

My crazy pet theory: computational bandwidth is constant for any spacetime coordinate. According to Bekenstein bound the lower the temperature of the system the cheaper it is to fl…

If you want to learn more how these things work I'd highly suggest going through the PoC||GTFO archive ( https://github.com/angea/pocorgtfo/blob/master/README.md ) and check out en…

In Docker each container process is a child of the Docker daemon process. If you need to apply security patches to the Docker daemon it kills all your running containers.

Both examples look unreadable to me. Just because you can do a lot on a single line doesn't mean you should. all_members = ", ".join(members) all_scores = ", ".join(map(str, scores…

Not really, I'm going to give the worst example of all - Star Citizen (aka Scope Creep The Video Game) - which was IIRC crowdfunded, and according to the wiki page below remains th…

So is this survivorship bias or something else? I don't understand your point. I have a white wall in front of me. If I take a brush and red paint and paint a big red circle on the…