The last couple of days I worked with @tmr232 to bring binaries to his @cfgbot.

Here's my script to export CFG's in DOT and JSON formats from #Ghidra:

https://github.com/v-p-b/ghidra-graph-export

I also exported the latest Microsoft Defender and openssl binaries:

https://github.com/v-p-b/ghidra-function-graph-datasets

... so you can enjoy Absolute Units like:

https://tmr232.github.io/function-graph-overview/render/?graph=https://gist.githubusercontent.com/v-p-b/67d63235089a02888d0bb0159181534a/raw/2799461034b0c0d6fff2051868d56370962965eb/netvm_emulate.json

Like and subscribe:

https://mastodon.social/@cfgbot
https://bsky.app/profile/cfgbot.bsky.social

Arrrgh does anyone have a recommendation for a hugo theme that is very very simple (no sass or npm etc), text-centric, responsive, and accessible? I am trying to move off Wordpress for this site:

https://frameshiftconsulting.com/

Project: openssl-static-gcc-dwarf 3.4.0
File: openssl
Address: 0058b000

EC_POINT_is_at_infinity

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F0058b000.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F0058b000.json&colors=light

Following my live stream yesterday to introduce the basics of the PDF file format, I will stream live in 7 hours on the risks of information leaks in PDF document, based on in-the-wild examples and hand-written PoCs.
The pace was nice and chill - see you there! https://www.youtube.com/live/hncHOnppwl8?si=yfWEeTbiXgoHbp-D

Project: mpengine-x64-pdb 1.1.24090.11
File: mpengine.dll
Address: 75a3d13a8

GetVolumeGuid

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a3d13a8.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a3d13a8.json&colors=light

Project: mpengine-x64-pdb 1.1.24090.11
File: mpengine.dll
Address: 75ac7c698

Add

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75ac7c698.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75ac7c698.json&colors=light

my name is `adduser`
and my brother's `useradd`
one of us is good
and one of us is bad!

which of us is which?
there is no way to know
we change names sometimes
to keep you on your toes!

FuuuUUUuuuck Cancer.
Just learned that Amit Yoran has passed.
He was a friend, and a long-time supporter of @SecurityBSidesGlobal from the early days of NetWitness through his leadership at Tenable.
Fuckity fuck fuck, would y'all stop dying and shit? Please?

I still don't get GPU accelerated terminal emulators.

I just git added a directory of >100k files in a non-accelerated terminal and I didn't even notice the combined lag of terminal prints **and** git tree updates in the background. I only noticed the change was this large because GitHub complained!

and i dont even drink anymore!

Good news: I'm drinking Port wine
Bad news: Haven't reached the Ballmer Peak

I was forwarded this screenshot and it just is living rent free in my head right now.

As part of the 20th anniversary of the BBS Documentary's release, I've ripped the 3 DVDs that were included in the project and have them hosted at Internet Archive. These ISO files can be played in the VLC player like DVDs, and include all bonus features, subtitles, director's commentary, etc.

https://archive.org/details/BBS_Documentary_DVD_Set

I read a paper book about a subject yesterday and it was ✨amazing✨ 10/10 would recommend trying books.

They look kinda like this emoji you might have seen: 📖

At no point did the book scold me because I have a whole-house ad blocker.

At no point did the book invite me to set up an account to continue reading.

At the end of the book, it simply ended, without immediately showing me additional, less relevant books.

Books. On paper! Who knew?

KernelSnitch: Side-Channel Attacks on Kernel Data Structures

Paper by Lukas Maar et al. about using a timing side-channel for leaking addresses of exploitation-relevant kernel structures.

https://lukasmaar.github.io/papers/ndss25-kernelsnitch.pdf

The stream will be live soon at https://youtube.com/live/q6KgFezu8tw?feature=share

btw (on arm64)

Hyper-V from Windows 11 version 22H2/23H2 works without (and does not use) VHE

From version 24H2 onwards VHE is mandatory. Those releases also have ARMv8.1-A atomics and RCpc from ARMv8.3-A as required.

[RSS] The Alder Lake SHLX Anomaly

https://tavianator.com/2025/shlx.html

"It seems like SHLX performs differently depending on how the shift count register is initialized. If you use a 64-bit instruction with an immediate, performance is slow."

[RSS] Cross Cache Attack CheetSheet

https://u1f383.github.io/linux/2025/01/03/cross-cache-attack-cheatsheet.html