Law enforcement agencies in the United States and Europe today announced Operation Endgame , a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed “the largest ever operation against botnets,” the international effort is being billed as…
One weird hobby of mine is reasonable properties of cryptographic schemes that nobody promised they do or don’t have. Whether that’s invisible salamanders or binding through shared secr…
In this post, we will look at how the security of the AES-GCM mode of operation can be completely compromised when a nonce is reused.
What are escape sequences
My computer on the net
Today we learn that Pavel Durov, founder of the popular messaging app Telegram, has been arrested as his private jet landed in France. Early indications are that the arrest stems from Telegram̵…
A post by Eshel Yaron with details and advice about a long standing arbitrary code execution vulnerability in Emacs
When it comes to designing secure protocols, I have a principle that goes like this: if you have to perform any cryptographic operation before verifying the MAC on a message you’ve received, it will somehow inevitably lead to doom.
Lineage OS is based on the Android Open-Source Project, whose primary maintainer is Google. To what extent can it be considered Google-free?
I had another instance of my Apple ID mysteriously being locked. First, my iPhone wanted me to enter the password again, which I thought was the “normal” thing it has done every few months, almost since I got it. But after doing so it said that my account was locked.
SQLite does not do checksums by default. Disk corruptions go silently unnoticed.
Much like a previous talk of mine at Chaos Computer Congress this blog post is a direct write-up of a talk, if you prefer to consume this kind of content in video form you can watch the video here:
Providing security research and red team techniques
We're all a bunch of chimps in a cage
These days, I am developing an alarm app called ‘SuperAlarm’. To ensure a user is awake, SuperAlarm can be turned off only after a user completes a mission(e.g., taking a picture...
a blog about exploring reverse engineering, hypervisor development and software programming.
Dmitry.GR: Wireless picture frames that run for years on batteries
Code level discussion of web scraping, gray hat automation, growth hacking and bounty hunting
Collection of side projects, conference talks and blog posts experimenting with frontend technologies and human-computer interaction
I will use this place to relate my geeky adventures in the world of gnu/linux, bsd, the internets, and other important things like windows managers and pretty colors. Basically, it's a place to expose and share with the world things I do on my computer.
When writing code, you can call any function as long as it’s public, and similarly, you can access any object’s public properties or methods. Usually, access to code is all or none – a piece of code can be either public or private. Lately, I’ve been thinking about ways to implement more fine-grained access controls…
Before I got into reverse engineering, executables always seemed like black magic to me. I always wondered how stuff worked under the hood, and how binary code is represented inside .exe files, and how hard it is to modify this ‘compiled code’ without access to the original source code.
You receive a message. Now either you will be victim or not. Your knowledge, attention and moral compass will decide where you will end up.
Yesterday I discovered a deluge of recent fake customer reviews for a number of top paid apps in the United States Mac App Store. (Each country has its own version of the App Store with separate reviews.) I've now checked the reviews for all of the current top 40 paid apps in the Mac App Store, and 8 of those apps…
Ah. Orange Spain has had their /12 (and likely others) broken by (what appears to be) someone breaking into their RIPE account and making RPKI ROA's to somewher...
Inspiration of how we can use PDF as an attack vector and perform multiple attacks with huge subsequences to the victim.
