Post from 2026-11-10 14:55:59

In the age of LLMs security by obscurity no longer works: my friends at Silent Signal recovered the PVV algorithm used by #IBMi to check objects moved across machines. Now it's possible* to restore programs that read/write objects of other users, incl. QSECOFR:

https://blog.silentsignal.eu/2026/11/10/Beyond-the-compiler-Making-IBM-i-run-modified-native-code-PVV/

* You need privs to restore, digital signatures shouldn't be enforced and we still need a good way to leak target object addresses.
permalink | main