Kampet

CTF player with ssh@uzl + Infobahn | he/him

[Kampet @KampetL]

@terawhiz You made it haha

[Kampet @KampetL]

@skate702 @AlyiiNaa Wünsch euch alles Beste für eure neue Wohnung!

[Kampet @KampetL]

@LiveOverflow Reminds me of this: https://t.co/CRRaKwVajg

[Kampet @KampetL]

@big_polar_bear2 Very excited.

[Kampet @KampetL]

@h0mbre_ Lets fcking go 😭. Crossing my fingers for you

[Kampet @KampetL]

@eligaultney @0xsee4 @LiveOverflow Yeah definitely. Im not assuming that it will have a major impact either. But im open to be proven wrong.

[Kampet @KampetL]

@eligaultney @0xsee4 @LiveOverflow The issue is fixed afaik. But sure, malware has access to the things you are looking at right.

But this does not invalidate the fact that Recalls has the capability to make something persistent which wouldve been lost the next day. At least this is my understanding of it.

[Kampet @KampetL]

@eligaultney @0xsee4 @LiveOverflow Im sorry for you if they store it in plaintext

[Kampet @KampetL]

@eligaultney @0xsee4 @LiveOverflow otherwise only be stored in the RAM 2/2.

[Kampet @KampetL]

@eligaultney @0xsee4 @LiveOverflow Can you explain how credit card information would get stored persistently on my PC for an attacker to exfiltrate it?
(Assuming that I dont just store them in a text file on my own)
Im not in the hype either but I can see how Recall "permanently" stores data which would 1/2

[Kampet @KampetL]

@h0mbre_ What does `fc` mean here?:)

Is `fc/s` equivalent to executions/second? This would confuse me since I remember from a past of your tweets that Lucid was sadly slow due to Bochs. (Atleast thats what I remember!)

Or have there been any greater improvements I've missed?:)

[Kampet @KampetL]

@c0nrad_jr Wishing you best of luck on the way! See ya!

[Gildásio Júnior @gildasi0]

Always remember to take into account how the binary was built. I was trying to exploit a simple format string bug using positional parameters but this was not working, until @KampetL remember me this. GLIBC doesn´t care about this rule, while MUSL does.

[Kampet @KampetL]

@VespGames @Crexpain Ich weiß nicht, auf welchem Planeten du bisher gelebt hast, aber eklige Männer liefen auch schon vorher in Frauenumkleiden, um sie dort zu belästigen. Dafür muss kein Mann seinen Geschlechtseintrag umändern lassen.

[Kampet @KampetL]

@ballsplate @compux72 @__Manu_War__ @lyq_sqsp Can you elaborate how "making exploitation harder" is not a security measure? Would you consider a lock also not a security measure since "it takes more time to steal the bike"?

[Kampet @KampetL]

@compux72 @ballsplate @__Manu_War__ @lyq_sqsp It is a problem since preventing unprivileged users from knowing these addresses cuts attack surface for kernel exploits which requires knowledge about the memory layout.

But there are still other ways to bypass this randomization besides the stated technique.

[c0m0r1 @c0m0r1]

I'm speechless

[Kampet @KampetL]

@c0m0r1 You got to be fcking kidding me 💀 how wasnt this made public earlier?

[Kampet @KampetL]

@Kartmenois @Jana_n_n Aber du würdest ja hoffentlich auch nach einem "Nein, ich möchte nicht" aufhören? 😬 wäre ja sonst etwas aufdringlich

[Kampet @KampetL]

@Kartmenois @Jana_n_n Denkst du wirklich, dass der Ruhe geben würde nach einem Grund?😅