neitsa
Joined 1 year ago
Karma
14
Submissions
14
Member since
Jan 9
Security Researcher
View on Hacker NewsRecent submissions
Comment · 1 month ago
While I really do appreciate having multiple choices when it comes to tooling I beg to differ when saying that windbg is archaic. As someone who is spending a lot of time with windbg, I think it's fair to say they really put some effort in it: TTD (time travel debugging), JS scriping, Linux core dump support, new type of queries and the data model, new commands, and an upcoming integrated MCP (functionalities \ function names visible in the data model). That being said, there's a lot of baggage for such an old software and there are definitely some pain points.
But as said, I like to have a choice (I sometimes use x64dbg for example), so the more, the merrier!
I'll definitely give yours a try. Good luck for the beta and the release!
Comment · 1 month ago
This reminds me of this video [0] of Maria João Pires, who realized that she had prepared the wrong concerto while on stage, being visibly shocked and panicked (and the conductor telling her that there would be no problems as she knows the piece very well). She apparently played the piece perfectly.
Comment · 3 months ago
The OSSF (Open Source Security Foundation) has a nice guide on how to become a CNA [0]. It's pretty involved though.
[0] https://github.com/ossf/wg-vulnerability-disclosures/blob/ma...
Comment · 4 months ago
I use Qiling [0] (built on top of Unicorn) sometimes for this kind of things (it can take application snapshots, that you can restore; and you can also use something similar to x86/x86-64 memory hardware breakpoints too). Might fit what you want, although it can sometimes be in a pain in the rear to set up...
Comment · 9 months ago
> Using the stars as a reference, Maskelyne’s team found that the plumb lines on either side of the mountain pointed just 0.0152 degrees apart.
I'm really interested in knowing how they could get such a precise measurement (even accounting for errors), especially in the field (outdoor). There's no figure depicting the apparatus they used, I wonder how it looked like.
Sometimes, I just ponder at how ignorant I am. If I was tasked with the same assignment, I'd definitely fail and this was performed 250 ago!
Comment · 1 year ago
In the search box, input "ISS" and filter by perigee (min: 380; max: 500). You should see the name of one of the modules of the ISS, such as "ISS (Zarya)" [0] or "ISS (Nauka)" [1]. If you can't find it on the visualisation at first, you can get its current location at https://isstracker.pl/en .
[0] https://en.wikipedia.org/wiki/Zarya_(ISS_module) [1] https://en.wikipedia.org/wiki/Nauka_(ISS_module)
Comment · 1 year ago
Would have been better to link to the repo [1] directly.
The repository contains the materials of a class, so without attending the class or having a rather strong pre-existing knowledge about hypervisors on x86-x64, the material is going to be very hard to follow.
From my PoV, there are definitely better (as in, explained with a lot more details) tutorials online on how to start your hypervisor from scratch which I'd recommend before trying to understand this one (which has some really nice peculiarities such as Fuzzing UEFI with code coverage).
Comment · 1 year ago
omg... I feel like an idiot. Don't know why I didn't see that. Thanks a lot!
Comment · 1 year ago
Thanks a lot! I love programming games. I'm just writing a simple client in python, and when sending a HELP packet, I'm receiving a packet with byte 0x82 as the header, which if I'm not mistaken is packet type 0x10 (0x82 >> 3 = 0x10), rather than 2. Am I missing something?
Sending HELP packet (5 bytes):
OFFS DUMP ASCII
0000 00 58 52 32 4B .XR2K
Receiving response...
OFFS DUMP ASCII
0000 82 58 52 32 4B 96 23 53 - 50 41 43 45 20 54 45 52 .XR2K.#SPACE TER
...Comment · 1 year ago
archive: https://archive.ph/ZQLj5
Comment · 1 year ago
Not sure if it would fit the definition of a restaurant we have today but a thermopolium was a shop where you would buy food. I'm not sure how widespread the concept was, though.