https://apnews.com/article/japan-softbank-son-nvidia-ai-chips-d8a10172850628c317a214280a4d94c9

This article highlights how much control endpoint security vendors have over customer machines, and transitively over companies and maybe even nations:

https://www.huntress.com/blog/rare-look-inside-attacker-operation

You only install this stuff, because you trust the vendor (and their government, etc.). Or not, see Kaspersky vs. US.

#AntiVirus #EDR #HackBack

/me after a chill Sunday with #IDAPython

I'm now basically doing this out of spite.

I'm old enough to remember years ago comrades predicting the inevitable fall of software and services which work just fine today.

@freddy The Machine Spirit only accepts such an invocation if you first offer the sacrifice of debugging.

As a result of working on r4ghidra I set the ambitious goal to create REshare, an exchange format for #ReverseEngineering tools:

https://github.com/v-p-b/reshare/

The code is still in its early days (literally) but the fact that it works with complex, real life binaries tells me that this goal is worth pursuing.

I'm looking for contributors, esp. for #BinaryNinja, #IDA and #radare2 scripting so we can bring all these worlds together!

My talk about integrating #ReverseEngineering tools is to be broadcasted in a couple of hours for #r2con2025:

https://rada.re/con/2025/

I'll release a ton of code and will be around on Discord for questions and comments.

Thanks to @disasmwinnie now you'll lose a bit less hair when testing Oracle Forms:

https://github.com/silentsignal/oracle_forms/pull/3#issuecomment-3434380477

#pentesting

This website just made my day, what a beauty! 😍

https://undocumented.ntinternals.net/

@algernon @tauon

/me trying hard not to antropomorphise the LLM

@gsuberland

@tmr232

@tychotithonus

I combined DEVCORE's CVE-2024-35250 with the CVE-2024-30084 double fetch bug and the Cloud Filter memory trap technique by @tiraniddo to achieve reliable LPE without device requirements on Win10 VMs.

https://scrapco.de/blog/its-a-trap-reliable-exploitation-of-cve-2024-30084.html

@TarkabarkaHolgy

Finally got to the reel-to-reel museum at Keszthely #Hungary, highly recommended!

@arstechnica

Hi, I'm your favorite security vendor, welcome to...