at #38c3 @rdjgr did a pretty good job at explaining the lore of how they scammed me before we ultimately joined forces. make sure to check out the full talk ("Dialing into the Past: RCE via the Fax Machine – Because Why Not?"), great stuff!

[RSS] Reliable system call interception [with seccomp user notify]

https://blog.mggross.com/intercepting-syscalls/

#genuary5 prompt: Isometric art.

It's game of life. History goes down. I've seen a visualization like this last year and wanted to recreate it.

Made with #PyScript:
https://ambv.pyscriptapps.com/genuary-prompt-5/latest/

#genuary2025 #genuary #GenerativeArt #CreativeCoding #WebGL #Python

I have this favorite story about "the first 3D shopping mall" on the Hungarian Internet: it was of course a massive failure, because the minds behind it didn't realize that people are not going to the mall to use escalators (which was precisely modeled in VRML along with corridors, benches, etc).

I think the recent enthusiasm about GenAI-driven voice/video recognition is similar in this aspect: in many cases people would prefer a system *not* involving human(-like) interaction (or using an escalator), it's just we currently don't have better solutions for many tasks. Assuming a speech/video interface is always better than e.g. a bar code reader results in faster horses, not cars.

#GrapheneOS appears to be standing up to UK forensics, in this painful and "unprecedented" case which could see a UK journalist go to jail for not relinquishing the passphrase to his devices. Not only is withholding his basic human right, but he does it to protect his sources, and as ratified in the European Court of Human Rights.

https://www.ilfattoquotidiano.it/in-edicola/articoli/2025/01/02/british-journalist-could-face-years-in-prison-for-refusing-to-hand-over-his-passwords-to-the-police/7822432/

#humanrights #infosec #privacy

@tychotithonus @stf Inverse example :)

Oh hey. Just wanted to let you know today that I am open to hobby/public IC decapping and imaging projects. Boosts and other sharing are always appreciated!

More info here: https://siliconpr0n.org/archive/doku.php?id=infosecdj:start#commissioning_work

#microscopy #reverseengineering #electronics

@tychotithonus I was contemplating the same recently too:

https://infosec.place/notice/Amjet90pSdLoQzLcdE

As @stf pointed out Shibboleths had about the same function throughout the centuries:

https://en.wikipedia.org/wiki/Shibboleth

The last couple of days I worked with @tmr232 to bring binaries to his @cfgbot.

Here's my script to export CFG's in DOT and JSON formats from #Ghidra:

https://github.com/v-p-b/ghidra-graph-export

I also exported the latest Microsoft Defender and openssl binaries:

https://github.com/v-p-b/ghidra-function-graph-datasets

... so you can enjoy Absolute Units like:

https://tmr232.github.io/function-graph-overview/render/?graph=https://gist.githubusercontent.com/v-p-b/67d63235089a02888d0bb0159181534a/raw/2799461034b0c0d6fff2051868d56370962965eb/netvm_emulate.json

Like and subscribe:

https://mastodon.social/@cfgbot
https://bsky.app/profile/cfgbot.bsky.social

Arrrgh does anyone have a recommendation for a hugo theme that is very very simple (no sass or npm etc), text-centric, responsive, and accessible? I am trying to move off Wordpress for this site:

https://frameshiftconsulting.com/

Project: openssl-static-gcc-dwarf 3.4.0
File: openssl
Address: 0058b000

EC_POINT_is_at_infinity

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F0058b000.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F0058b000.json&colors=light

I just timed this with 30k files, git commit took <0.5s total on my non-accelerated terminal.

Following my live stream yesterday to introduce the basics of the PDF file format, I will stream live in 7 hours on the risks of information leaks in PDF document, based on in-the-wild examples and hand-written PoCs.
The pace was nice and chill - see you there! https://www.youtube.com/live/hncHOnppwl8?si=yfWEeTbiXgoHbp-D

Project: mpengine-x64-pdb 1.1.24090.11
File: mpengine.dll
Address: 75a3d13a8

GetVolumeGuid

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a3d13a8.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a3d13a8.json&colors=light

Project: mpengine-x64-pdb 1.1.24090.11
File: mpengine.dll
Address: 75ac7c698

Add

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75ac7c698.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75ac7c698.json&colors=light

my name is `adduser`
and my brother's `useradd`
one of us is good
and one of us is bad!

which of us is which?
there is no way to know
we change names sometimes
to keep you on your toes!

@asrob I just switched to Terminator from urxvt

FuuuUUUuuuck Cancer.
Just learned that Amit Yoran has passed.
He was a friend, and a long-time supporter of @SecurityBSidesGlobal from the early days of NetWitness through his leadership at Tenable.
Fuckity fuck fuck, would y'all stop dying and shit? Please?

@floyd ruby, didn't even know about tawny so thanks!

I still don't get GPU accelerated terminal emulators.

I just git added a directory of >100k files in a non-accelerated terminal and I didn't even notice the combined lag of terminal prints **and** git tree updates in the background. I only noticed the change was this large because GitHub complained!