jaybosamiya

A fork of rust-analyzer, called verus-analyzer, provides support for Verus syntax and actions (including new proof-specific actions) https://github.com/verus-lang/verus-analyzer/

This reminds me of a bugfix [1] I added to nmap almost a decade ago, where runtime interaction was previously broken due to interaction with sudo and signal propagation. Was a fun rabbit-hole to figure out why the issue was happening.

[1] https://github.com/nmap/nmap/commit/f2e162d2245679f420b40feb...

I haven't had a chance to mess around with it much, but the coz-profiler [1] uses basically the same idea, but the other way around (i.e., slow down everything else to get a "virtual speedup") which helps quantify what the effect of optimizing some code would be.

I learnt about this tool from Emery Berger's talk [2] on this (at strangeloop), which I highly recommend. Lots of really nice insight, even outside of this tool.

[1] https://github.com/plasma-umass/coz [2] https://www.youtube.com/watch?v=r-TLSBdHe1A

A fun read where the "could you still detect" portion turns out to be a very important plot point: Thrice Upon a Time by James P Hogan (https://www.goodreads.com/book/show/849488.Thrice_Upon_a_Tim...)

Relevant (and super cool) previous work, done by Orange Tsai: https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-Ne...

Hi! Author here. Happy to answer any questions.

Reader mode should be working now. Just tested on mobile Safari.

Hi! It looks like I'd forgotten to update the CSS in one portion, due to this, on medium-sized screens, there was an overlap that occurred. This should be fixed now.

As per the full contest rules (https://www.zerodayinitiative.com/Pwn2Own2019Rules.html):

If more than one contestant registers for a given category, the order of the contestants will be drawn at random. Based on the contestant order, the first contestant will be given an opportunity to attempt to compromise the selected target. If unsuccessful, the next randomly drawn contestant will be given an opportunity. This will continue until a contestant successfully compromises the target. The first contestant to successfully compromise a selected target will win the prize money for that target in that category. After a target has been compromised, the contest for that category is over and no other contestants will participate in the contest for that category (unless Sponsor has offered an additional winner option, which would be announced at the conference if applicable).

Your whitelisting is quite good!

I still haven't been able to do complete code execution yet, but have reasons to believe it might be possible.

Simply using `x1` as input causes it to print "deadbeef11 is not defined". Additionally, parens are allowed, and there is the `=>` arrow syntax for defining functions. Thus, we have a way to define variables, a way to define lambda abstractions, as well as a way to perform applications. Therefore, we have the untyped lambda calculus. This is Turing complete, so I have reason to believe that it should be possible to execute arbitrary code. I just need to find some time to do so :)

Update: `(x1=>x1(x1))(x1=>x1(x1))` gives "Too much recursion" :D

Yep, http://qira.me/

A really nice outline by Prof Frank Pajares, can be found at [0] for people who might want to read through in a hurry. However, I personally would recommend reading the original text itself.

Link(s): [0] https://www.uky.edu/~eushe2/Pajares/Kuhn.html

Slides: https://github.com/xoreaxeaxeax/sandsifter/blob/master/refer...

Related GitHub project (sandsifter): https://github.com/xoreaxeaxeax/sandsifter

Whitepaper: https://github.com/xoreaxeaxeax/sandsifter/blob/master/refer...

*securedorg

The RE101 and RE102 courses are created and run by Amanda Rousseau (Malware Unicorn), and she is amazing for giving back to the community constantly. I would definitely recommend following her on Twitter : https://twitter.com/malwareunicorn

The reason I bring all of this up, is since your typo "securedog" reminded me of (coincidentally) @malwareunicorn's 2 dogs : Malware Research Dog, and RE Pup. Absolutely adorable dogs :)

Yep, adding that option thing would be great. This could be done similar to the way giphy implements it at the moment. Also, guggy.com/slack doesn't seem to be working at the moment (along with the about page itself)

Might I point you to this extremely short story: The Last Question, by Isaac Asimov [1]

The reason I bring this up is because of the "always"

Link(s): [1] http://multivax.com/last_question.html

Related discussion: https://news.ycombinator.com/item?id=13713480

The Wikipedia page [1] for Lambda calculus is also a great read (even for those who don't know anything about it before).

[1] https://en.wikipedia.org/wiki/Lambda_calculus

Additive and multiplicative can be moved between through exponentiation or logarithms. After that, yeah, using the Radon transform seems like a great idea.

My goal for 2017 is to get a _lot_ better at the fields of reverse engineering and vulnerability discovery (as well as showing PoC).

The plan of action: keep at it by attacking more wargames and CTF (capture the flag) contests. Also, I should probably try to consider bug bounties, to be able to orient the skills to real world problems as well.

Related website [1] to this paper.

Also, I would suggest looking into Tien-Tsin Wong's other works [2] as well. A lot of great ideas and papers there.

[1] https://appsrv.cse.cuhk.edu.hk/~ttwong/papers/asciiart/ascii... [2] https://appsrv.cse.cuhk.edu.hk/~ttwong/publication-favorite....

If you read the source of the website, it has a

document.addEventListener('keydown', function(event) { ... })

Basically, press any key on your keyboard on the website, and it'll work.

Foremost is also extremely useful for the same purpose, and I've found it more useful at least in my work during CTFs

https://en.wikipedia.org/wiki/Foremost_%28software%29

A `sudo apt-get install foremost` works on Ubuntu to install it, IIRC

A nice explanation here: https://unix.stackexchange.com/questions/17903/is-cal-broken...

Links to part 1 and 2:

http://www.elischiff.com/blog/2016/4/12/do-almost-anything

http://www.elischiff.com/blog/2016/4/20/do-almost-anything-i...

Obligatory reference to Douglas Adam's "The Hitchhiker's Guide to the Galaxy"

https://en.wikipedia.org/wiki/The_Hitchhiker's_Guide_to_the_...

The existence of the Babel Fish would make such questions much much simpler.

Not specifically "software" but this piece of Haskell code is the most beautiful code I've ever seen:

    quicksort [] = []
    quicksort (x:xs) = quicksort [y|y<-xs,y<x] ++ [x] ++ quicksort [y|y<-xs,y>=x]

More specifically "10" is a prime in all prime bases.

This is an excellent book written by Michael Nielsen. I had tried to learn neural nets earlier, but either found the descriptions too simplistic to come up with a clear understanding, or too complicated. IMHO, in this book, the right learning curve exists, and dare I say, trains up our biological neurons at the optimal learning rate :)

Phillip Guo, the creator of this software is also the author of a very nice book called The Ph.D. Grind. I would definitely recommend reading it. http://www.pgbovine.net/PhD-memoir.htm