Paged Out!

Paged Out! Deeply technical zine. And it's free.

All of our issues are now chilling together in the 100k+ downloads club 🎉🥳. Thank you for reading and sharing them!
You can find all of them here: pagedout.institute?page=issues....

pagedout.institute ← we've just released Paged Out! zine Issue #7
pagedout.institute/download/Pag... ← direct link
lulu.com/search?page=... ← prints for zine collectors
pagedout.institute/download/Pag... ← issue wallpaper
Enjoy!

Please please please share to spread the news - thank you!

We are slowly nearing the required 50 articles. There is still time to submit yours and be published in #7. We are waiting for it at articles@pagedout.institute! Please don't wait until the last second :)
Paged Out! #7 is scheduled for mid-September (this might still change).

💻 From screen to shelf 📚
Paged Out! Issue #6 is now available in print-on-demand.
Feel the paper between your fingers beside your rig.
📖✨ Order yours today: pagedout.institute?page=buy.php
#PagedOut #TechZine #PrintOnDemand

Want a behind-the-scenes scoop? Here's an interview with Gynvael on the making of Paged Out! :)
[EN] adwersarz.pl/behind-the-s...
[PL] adwersarz.pl/kulisy-tworz...
P.S. CFP for Issue #7 is open, help us make it by writing and submitting your article!

Paged Out! Deeply technical zine. And it's free.

Issue #6 has overtaken Issue #5 in download count.

Do you want to show the older sibling some love?
Or make the younger one shine even more?

Both can be downloaded pagedout.institute?page=issues....
Let’s see if the victory will be solidified or if it was only temporary.

Paged Out! #6 has arrived! And it's jam-packed with content!
You can download it here:
pagedout.institute?page=issues....

Issue #4 just joined the 100K downloads club! Thank you!
pagedout.institute

We’ve surpassed 50 entries! Now onto the next stage: finalization!
No worries, if you are writing something for us, you have 10 days to still make it into this issue. After that, all submissions will likely go to Issue #7 :)

Hi, a reminder - soft deadline for Issue #6 is February 1st :) There is still time to send an article our way!

Issue #2 joined the 'over 100K downloads' club. All thanks to you!
Now Issue #4 is applying for a membership there, and it's not far from getting in :)

Want to help? Tell your friends about us!
pagedout.institute

Issue #5 surpassed 50K downloads, and Issue #2 is real close to 100K downloads!
Thank you for the love you show our zine!
pagedout.institute

And a little reminder that CFP for Issue #6 is open and the soft deadline is February 1 - there is still time to be a part of it :)

(please re-post for reach - thank you!)
Learned a cool new Linux trick? Know an interesting quirk in a network protocol? Or have something else to share?

Write a 1-page article for the #6 issue of Paged Out! :)
pagedout.institute?page=cfp.php

Soft deadline is Feb 1st.

Doyensec - Web and Mobile Application Security Experts Doyensec provides expert-level Web and Mobile Application Security Services.

We are very happy and grateful to have Doyensec as our long-term sponsor! @doyensec.bsky.social
doyensec.com

Paged Out! Issue #5 is out now!
pagedout.institute?page=issues....
Happy reading!

As we are gathering articles for Issue #5, we want to help you answer a very important question.

CPU vulnerabilities are fun! Here's yet another article by Reno Robert to explain a different CPU timing issue – this time it's the TagBleed attack applied both to inner-VM and hypervisor ASLR leaks!

Leaking Host KASLR from Guest VMs Using Tagged TLB

Article Highlight #14 - check it out in Paged Out! #4 page 58
pagedout.institute/download/Pag...

The article by Gynvael is about curious Python VM implementation quirks. It is also an epic drama about broken expectations and wisdom learned the hard way. Worth the read for all low-level and Python enthusiasts – test how deep your Python knowledge is!

Apparently I didn't understand cPython's INPLACE_ADD and then someone stole it!
Article Highlight #13 - check it out in Paged Out! #4 page 24
pagedout.institute/download/Pag...

A great primer to the jungle of details that the backdoor resulting from the XZ supply chain compromise left behind.

XZ Outbreak (CVE-2024-3094)

Article Highlight #12 - check it out in Paged Out! #4 page 64
pagedout.institute/download/Pag...

Yes yes, a GPU has so many compute units that do all these shader calculations. But what if we replaced a GPU with a lot of humans? Inigo Quilez did just that!

Human Shader
Article Highlight #11 - check it out in Paged Out! #4 page 12
pagedout.institute/download/Pag...

Sometimes you just want to run x86-64 shellcode in Python. What is that? You never do? That's weird. Anyway, in this article, Gynvael & Łukasz present two(ish) ways to do it!

Python runs shellcode

Article Highlight #10 - check it out in Paged Out! #4 page 6
pagedout.institute/download/Pag...

You should buy an Atari ST. Why you ask? We'll let Sébastien LARNAC / STS explain!

Why You Should Get An ATARI ST In 2024!
Article Highlight #9 - check it out in Paged Out! #4 page 13
pagedout.institute/download/Pag...

Binary polyglots are amazing, aren't they? Here's a bplist-protobuf polyglot recipe by Shai Shapira, so that you can serialize your data in two different ways at the same time!

BPPB: A bplist-protobuf polyglot recipe

Article Highlight #8 - check it out in Paged Out! #4 page 17
pagedout.institute/download/Pag...

If you're just getting into the hardware side of computers and you're trying to wrap your head around the low-level concept of how a "bus" works, check out this article by Wojciech Kochański on the cool design of a CAN bus and its anti-collision trick!

How collisions are avoided in a multi-master CAN bus?

Article Highlight #7 - check it out in Paged Out! #4 page 19
pagedout.institute/download/Pag...

Issue #4 is out - enjoy!
pagedout.institute?page=issues....
Please share and tell your friends!

To solve a CTF challenge, sometimes you need surgical precision. And sometimes you just need brute force! Check out the way ckrielle solved a rev-eng challenge by a character-pair brute force and automated GDB state inspection!

Wrapping GDB with Python to Easily Capture Flags

Article Highlight #6 - check it out in Paged Out! #3 page 46
pagedout.institute/download/Pag...

We're finalizing Issue #4. To have your article/art published in it, you have to submit it NOW (and by now, we mean by Sunday :)) Submissions past that day will go to Issue #5

New to Kubernetes? Katarzyna’s article explains its very basic concepts in an easy-to-comprehend way!

How to explain Kubernetes to 10-year-olds?
Article Highlight #5 - check it out in Paged Out! #3 page 58
pagedout.institute/download/Pag...

Ever wanted to make your own keyboard but did not know where to start? The process seemed to complicated or stressful? You’re in luck, cause this article by 0x17 makes it seem easy! Give it a try!

Build your own keyboard
Article Highlight #4 - check it out in Paged Out! #3 page 12
pagedout.institute/download/Pag...

Blue Screen of Death is blue. But it doesn't have to be! It doesn't have to have a sad emoticon either. Join David Kaplan on an adventure to make the BSOD a bit more happy! Your system may still crash, but at least it will do so in a cheerful way.

BSOD colour change trick

Article Highlight #3 - check it out in Paged Out! #3 page 45
pagedout.institute/download/Pag...