infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

/cc @molly0xfff
this post | permalink

No camel can perish on the Hungarian internet

https://translate.kagi.com/https://telex.hu/after/2024/11/29/teveclub-nevelde-jatekok-juhasz-balazs-illovszky-viktor

#neopets #sunday

this post | permalink

In other news, enough RE tool dev for today…

this post | permalink

It is just natural that in #Ghidra #Sleigh “The [operator] identifier must appear in the [bit pattern section] as if it were a term in a sequence of constraints but without the operator and right-hand side of the constraint.”, see section 7.4.3:

https://scrapco.de/ghidra_docs/GhidraDocs/languages/html/sleigh_constructors.html

But it seems, you can’t use the identifier in the display of the instruction if it’s part of a constraint.

Error: “wrong type (should be family) in pattern equation”

Why is that?!

(Workaround: define an alias token for the same bits and use that in display)

this post | permalink

If a #Ghidra build throws an error similar to:

“No IP found for $slaspec in module: $dir”

You have to extend the certification.manifest file in $dir.

this post | permalink

If you use #vim to edit #Ghidra sources, beware that some build scripts try to handle all files in a directory, so .swp’s can cause build errors.

#ProTIp

(Neovim stores swap files under your config directory by default, so the situation is better there)

this post | permalink
[RSS] Assessing the attack complexity of a race condition security vulnerability

https://devblogs.microsoft.com/oldnewthing/20241129-00/?p=110588
this post | permalink
@FenTiger @hrefna I think it's more about the side you won't debug. A typical dev won't debug a compiler or a CPU. They will debug their team's code.
this post | permalink
SoK: Prudent Evaluation Practices for #Fuzzing

https://arxiv.org/pdf/2405.10220

#frombsky
this post | permalink

Here’s how stupid me got his bot banned from Bsky:

  • I accidentally commited a debug raise that caused my script to exit with error
  • The systemd unit running the script was configured with Restart=always, because I usually just copy these configs :P
  • Turns out, systemd restarts services really fast on failed status

On the plus side Bsky’s API errors are pretty informative about what went wrong and when the ban will be lifted. Unfortunately because of that stupid raise I lost the logs of why the first failures (before the ban) happened :/

Moral?

this post | permalink
Next Page