Aleks

The hell is GhidraLite? Somebody is having fun , wonder what it serves you if you visit from a different OS. Bad google.

Did anyone get you this air quality monitor as a gift? I wanted to have it log the data, but didn’t quite trust it with internet access. I dug around a bit, got a root shell and untethered it. Read the writeup: https://blog.29b.net/dispatches/cgs2_decloud/

You get a lot of those happy new year email that you ignore , but this one from WHOI is just amazing https://www.whoi.edu/campaign/why-the-ocean/

Did anyone get you this air quality monitor as a gift? I wanted to have it log the data, but didn’t quite trust it with internet access. I dug around a bit, got a root shell and untethered it. Read the writeup: https://blog.29b.net/dispatches/cgs2_decloud/

Attended a darkroom workshop recently. Analog photoshop. Slightly different technique each time to get the desired effect.

Have you seen the sizes of their cars? A tiny duck isn’t going to impress anybody!

It’s a somewhat rare medium format film camera that is compact but a bit clunky to use due to its folding design. One of the side effects is that it is difficult to use regular filters so I made slim ones that snap in.

Designed slim filters for Fuji GF670 that you can leave on the camera when folded. https://blog.29b.net/dispatches/gf670_filters/

Must have a lot of hard drives/SSDs too!

Sigh, a domain hosting a small website for the last 20 years expired. I've forgotten about it for so long that it actually brought up some fun memories. Cheers to all the folks around it, wherever you are!

Attending USENIX Security for the first timehow do academic conferences work? In Seattle till Sunday.

Wong Kar-wai’s movies always keep me completely enthralled while watching them and then afterwards i can never remember the plot for some reason. I’m just soaking up the atmosphere. But this one stuck, plot and atmosphere.

A Borges story about a guy who gets AI to summarize all the world’s information for him, and then summarize the summary, until the AI has the whole world summarized into a single word. He sits alone at his desk, staring at the word, repeating it endlessly, certain he is experiencing everything

Join us for a deep dive into how Cisco Talos uncovered two critical vulnerabilities in the AsIO3.sys driver powering ASUS Armory Crate: blog.talosintelligence.com/decrement-by...

The book Building a Debugger, featuring a robot designing a complex debugging machine on a drafting board

The book placed in front of a tortie cat

Building a Debugger is now officially released!

It guides you through building a whole native x64 debugger from scratch, dispelling all the magic and teaching you a ton about operating systems as it goes.

Even if you don't care about building a debugger, you can read it to your cat.

DWARF as a Shared Reverse Engineering Format This blog post introduces a new API in LIEF to create DWARF files

[Blog Post] New high-level API in LIEF that allows the
creation of DWARF files. Additionally, I present two plugins designed to export
program information from Ghidra and BinaryNinja into a DWARF file.

lief.re/blog/2025-05...

(Bonus: DWARF file detailing my reverse engineering work on DroidGuard)

Sebastião Salgado died, most amazing photographer among other things. Go find and watch “Salt of the Earth” https://youtu.be/aQ-My45meeo?si=hRPjKaG0zmNO9BUs

Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!

Collaborative reverse engineering is hard not because the tools aren’t right, but because it’s difficult for you to transfer knowledge and insights gained while reverse engineering. Structs and function names are important but connecting the dots is crucial. How do you do this effectively?

Did you know that you can get archived audio lectures from Internet Archive as podcasts in whatever podcatcher you use? Like https://archive.org/details/the-real-world-of-technology

Utterly disappointing, not at all what i expected by the title! Doesn’t even acknowledge prior works of Discordians!
It’s all about SRE and making complex chaotic systems more resilient to failure. With a bunch of first-hand experience from big corps who have their shit together!

Star Of India!

Digital vs film X-ray . Film offers higher resolution and better dynamic range with the same settings, but slightly longer exposure time (and more tedious image acquisition). Comes in handy when it comes to tiny electronics. Images of an Abbott Lingo continuous glucose monitor.

Not funny in the least , smh

Main question when that happens is how big is your scrollback buffer.

Lock screen with handwritten notation suggesting to use CVE-2025-24200 to go further

Unrestrict the restricted mode for USB on iPhone. A first analysis @citizenlab.ca #CVE-2025-24200 👉 blog.quarkslab.com/first-analys...

Crazy day at work and I don’t care that I’ve posted this before; I need cheering up.

So here’s a mosaic of a rabbit driving a chariot pulled by ducks.

Good day to you all.

Small praise for modern compilers - A case of Ubuntu printing vulnerability that wasn’t During an earlier investigation of the macOS printing subsystem, IPP-USB protocol caught our attention. We decided to take a look at how other operating systems handle the same functionality.

Almost forgot about this. Found a funny bug in CUPS ecosystem, but we wanted to cut developers some slack after all the drama a couple of months ago https://blog.talosintelligence.com/small-praise-for-modern-compilers-a-case-of-ubuntu-printing-vulnerability-that-wasnt/

an image of decompiled C code from a device firmware

I’m RE early boot code of this device. It has a factory testing/debug mode triggered by holding a button combo while powering it on. I see the code, but don’t have an exact memory map to find the correct button sequence! And there's 12 buttons, too much for brute force...