Aleks

Must have a lot of hard drives/SSDs too!

Sigh, a domain hosting a small website for the last 20 years expired. I've forgotten about it for so long that it actually brought up some fun memories. Cheers to all the folks around it, wherever you are!

Attending USENIX Security for the first timehow do academic conferences work? In Seattle till Sunday.

Wong Kar-wai’s movies always keep me completely enthralled while watching them and then afterwards i can never remember the plot for some reason. I’m just soaking up the atmosphere. But this one stuck, plot and atmosphere.

A Borges story about a guy who gets AI to summarize all the world’s information for him, and then summarize the summary, until the AI has the whole world summarized into a single word. He sits alone at his desk, staring at the word, repeating it endlessly, certain he is experiencing everything

Join us for a deep dive into how Cisco Talos uncovered two critical vulnerabilities in the AsIO3.sys driver powering ASUS Armory Crate: blog.talosintelligence.com/decrement-by...

The book Building a Debugger, featuring a robot designing a complex debugging machine on a drafting board

The book placed in front of a tortie cat

Building a Debugger is now officially released!

It guides you through building a whole native x64 debugger from scratch, dispelling all the magic and teaching you a ton about operating systems as it goes.

Even if you don't care about building a debugger, you can read it to your cat.

DWARF as a Shared Reverse Engineering Format This blog post introduces a new API in LIEF to create DWARF files

[Blog Post] New high-level API in LIEF that allows the
creation of DWARF files. Additionally, I present two plugins designed to export
program information from Ghidra and BinaryNinja into a DWARF file.

lief.re/blog/2025-05...

(Bonus: DWARF file detailing my reverse engineering work on DroidGuard)

Sebastião Salgado died, most amazing photographer among other things. Go find and watch “Salt of the Earth” https://youtu.be/aQ-My45meeo?si=hRPjKaG0zmNO9BUs

Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!

Collaborative reverse engineering is hard not because the tools aren’t right, but because it’s difficult for you to transfer knowledge and insights gained while reverse engineering. Structs and function names are important but connecting the dots is crucial. How do you do this effectively?

Did you know that you can get archived audio lectures from Internet Archive as podcasts in whatever podcatcher you use? Like https://archive.org/details/the-real-world-of-technology

Utterly disappointing, not at all what i expected by the title! Doesn’t even acknowledge prior works of Discordians!
It’s all about SRE and making complex chaotic systems more resilient to failure. With a bunch of first-hand experience from big corps who have their shit together!

Star Of India!

Digital vs film X-ray . Film offers higher resolution and better dynamic range with the same settings, but slightly longer exposure time (and more tedious image acquisition). Comes in handy when it comes to tiny electronics. Images of an Abbott Lingo continuous glucose monitor.

Not funny in the least , smh

Main question when that happens is how big is your scrollback buffer.

Lock screen with handwritten notation suggesting to use CVE-2025-24200 to go further

Unrestrict the restricted mode for USB on iPhone. A first analysis @citizenlab.ca #CVE-2025-24200 👉 blog.quarkslab.com/first-analys...

Crazy day at work and I don’t care that I’ve posted this before; I need cheering up.

So here’s a mosaic of a rabbit driving a chariot pulled by ducks.

Good day to you all.

Small praise for modern compilers - A case of Ubuntu printing vulnerability that wasn’t During an earlier investigation of the macOS printing subsystem, IPP-USB protocol caught our attention. We decided to take a look at how other operating systems handle the same functionality.

Almost forgot about this. Found a funny bug in CUPS ecosystem, but we wanted to cut developers some slack after all the drama a couple of months ago https://blog.talosintelligence.com/small-praise-for-modern-compilers-a-case-of-ubuntu-printing-vulnerability-that-wasnt/

an image of decompiled C code from a device firmware

I’m RE early boot code of this device. It has a factory testing/debug mode triggered by holding a button combo while powering it on. I see the code, but don’t have an exact memory map to find the correct button sequence! And there's 12 buttons, too much for brute force...

https://youtu.be/A1gxy11d0N0?si=dBt4hjrX5hCG3Y6j my favorite weather man

Finished Watt’s “Echopraxia” and watched Herzog’s “Theater Of Thought “ in the same day and have a hard time distinguishing which theme about consciousness was covered in which. Recommend both.

I’m a bit of a tall ship nerd and got to see this extraordinary one in Hamburg. Peking is a 4 masted barque. The last of the flying P-liners, immortalized in Irving Johnson’s famed “Around the Cape Horn” film (linked). “The main course sail weights 3 tones when dry. “ youtu.be/gYgl6a-XJ8U?...

Cowboy hat unusual for Hamburg? Clearly you haven’t seen Dennis Hopper in Wim Wenders’ “The American Friend”. Say hi if you see me at #38C3 !

@buherator.bsky.social

PEKING – SHMH

Looks like German Port museum is closed these days, but does nobody know if you can at least see Peking from somewhat upclose ? www.shmh.de/ausstellunge...

Slides are up objectivebythesea.org/v7/talks/OBT...

What I liked about it in particular was showing the progression from "this is hard to pull off the first time" to "here's how to do it on the cheap" once you know the parameters.