[RSS] Symbol Database for Reverse Engineers

https://symbol.exchange/grep?q=apr_

#ReverseEngineering

UVB-76 operator talking with a pirate - YouTube
https://www.youtube.com/watch?v=jKrNyPnTucQ

"Your call is so important to us, we have fired all the humans and replaced them with a terrible automated system that cannot understand you.

Please hold while we pay our executives another bonus for some reason.

Did you know you can use the Internet to discover our website can't answer your question?"

That SAP NetWeaver bug is pretty ouchy:

https://x.com/gothburz/status/1915755189019017411

#sap, #threatintel

IP fragmentation is a still unsolved problem of humankind
https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/007_pffrag.patch.sig

Sent by Remington from Seattle, Washington, U.S.A. on October 16, 1995. https://postcardware.net/?id=27-70

this seems fun
https://www.fixbrowser.org/blog/fixproxy

"Back in 2018, [hyp3rlinx] reported a '.library-ms' File NTLM information disclosure vulnerability [...] this security flaw was finally deemed important by Microsoft and it received CVE-2025-24054"

https://seclists.org/fulldisclosure/2025/Apr/28

Original post:
https://web.archive.org/web/20190106181024/https://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-.LIBRARY-MS-FILETYPE-INFORMATION-DISCLOSURE.txt

It's kinda been raised, but its nuts that (according to Mandiant/M-Trends) in 2025:

- vulnerabilities/exploits are the most frequently observed initial vector;

- the top 4 exploited vulns belong to security vendors.

What are we doing here? 🤯😱

Understanding the classical model for linking series by Raymond Chen

The algorithm:
https://devblogs.microsoft.com/oldnewthing/20130107-00/?p=5633

You can override an LIB with another LIB, and a LIB with an OBJ, but you can’t override an OBJ:
https://devblogs.microsoft.com/oldnewthing/20130109-00/?p=5613

Using the classical model for linking to provide unit test overrides:
https://devblogs.microsoft.com/oldnewthing/20250416-00/?p=111077

“Going to the cloud” can mean renting services/servers that you could get from anywhere. There’s little lock-in. The same four words “going to the cloud” might also mean locking your operations to a specific cloud provider, forever. This difference is vital, yet often ignored: https://berthub.eu/articles/posts/beware-cloud-is-part-of-the-software/

"Intel admits what we all knew: no one is buying AI PCs"

People would rather buy older processors that aren't that much less powerful but way cheaper. The "AI" benefits obviously aren't worth paying for.

https://www.xda-developers.com/intel-admits-what-we-all-knew-no-one-is-buying-ai-pcs/

Today we broke 12k stars on #GitHub remaining #1 on Reverse Engineering there and #1 for, “Reverse Engineering Tutorial” on Google. Thanks again for all of your continued support to help get new folks free training on #ReverseEngineering for everyone! https://github.com/mytechnotalent/Reverse-Engineering

🌪️ Something new is coming to TyphoonPWN 2025!

This year, we’re expanding our scope with LG webOS! If you’ve been researching webOS, this is your moment to earn up to $20,000 for discovering an Unauthenticated Remote Code Execution vulnerability.💰

TyphoonPWN is less than a month away — don’t miss your chance to showcase your skills and get the recognition (and rewards) you deserve. 🏆

Remote participation is fully supported. Register now and secure your spot:
👉 https://typhooncon.com/typhoonpwn-2025/

[RSS] Exploiting Undefined Behavior in C/C++ Programs for Optimization: A Study on the Performance Impact

https://web.ist.utl.pt/nuno.lopes/pubs.php?id=ub-pldi25

[RSS] RomHack 2025 Call for Papers

https://cfp.romhack.io/romhack-2025/

[RSS] Linternals: Exploring The mm Subsystem via mmap [0x02]

https://sam4k.com/linternals-exploring-the-mm-subsystem-part-2/

"How many calories in one gram of Uranium?" from CalorieHealthy.com

In fact the answer varies from Uranium 235 fissile isotope at 34 billion calories/gram all the way down to Natural Uranium in a light water reactor at a diet friendly 100,000,000 calories/gram

If you're dieting, try to switch out the Uranium for Plutonium 238, or Hafnium 178m2 isomer

And definitely no bread!

I need to be very clear, that the push towards "vibe coding" - that is, deliberately deskilling people - is because AI code assistants are an (increasingly expensive) subscription service.

If you know how to code, you can just write Python, C, Java, R, PHP, whatever for free and make things. You may not own the tools of production, but at least you're not renting them.

If you have been deskilled so you only know how to vibe code, you will be paying for that privilege forever.

This also goes, by the way, for researchers who are starting to be convinced they don't need to learn how to be scientists anymore, because "the AI" can just do the science for them. Nope.

Two sisters on our train are taking turns to make up a fairytale about themselves. It involves a castle made of rainbows and gold, and one of them being a dragon. Much better plot than Star Wars sequels too.