Niklas B

research @dfsec_com - @[email protected]

[Niklas B @_niklasb]

We at @dfsec_com are currently looking for a senior Linux kernel researcher, feel free to DM if you’re curious :)

[Niklas B @_niklasb]

@zeddotdev I‘m confused, multi-root/repo projects on both local and remote hosts were already supported before - and it is still not possible to work across a mix of local and remote folders. what is actually new with regards to „multiple repos“?

[sparkey @iBSparkes]

Our newest @dfsec_com blog post is live, thanks to @tomitokics from @df_forensics for putting this together :-)

https://t.co/JoJfTOOXzV

[Dataflow Security @dfsec_com]

Our new blog post is live: https://t.co/8bikPTaZfn

[Niklas B @_niklasb]

DMs were apparently disabled, but fixed now

[Niklas B @_niklasb]

We at @dfsec_com are currently looking for a senior Linux kernel researcher, feel free to DM if you’re curious :)

[Niklas B @_niklasb]

@ETenal7 @dfsec_com yes, and DMs are open now, not sure why it was misconfigured

[Niklas B @_niklasb]

We at @dfsec_com are currently looking for a senior Linux kernel researcher, feel free to DM if you’re curious :)

[Niklas B @_niklasb]

AKA natural language CodeQL - it feels like the Code Browser approach from the blog post may be applicable here as a general concept

[Niklas B @_niklasb]

This is very cool work. Since I’m not super familiar with the domain, is there any published work around code understanding/querying? Is context size a limiting factor here for non trivial code bases?

[Ivan Fratric 💙💛 @ifsecure]

New Project Zero blog post by Sergei Glazunov and Mark Brand: Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models https://t.co/txvkXH5oCC

[Niklas B @_niklasb]

@SinSinology @watchtowrcyber Congrats!

[Niklas B @_niklasb]

@mistymntncop @maxpl0it surely they got rid of that after e10s

[Niklas B @_niklasb]

Pwn2Own lineup looks very impressive this year, good luck to everyone!

[Niklas B @_niklasb]

Software transactional memory is probably the one thing I miss the most from my Haskell developer times. IMO it is the most intuitive way to write concurrent code by far. It‘s wild to see it implemented in such a complex context as C++, amazing effort

[Filip Jerzy Pizło @filpizlo]

I wrote a blog post about C++ transactional memory. https://t.co/e17S8MgxMn

[Niklas B @_niklasb]

@m40282845 @adhsec yeah that’s for sure, WPA and unencrypted networks are rejected, question is what else

[Niklas B @_niklasb]

Are there any details known about what makes a WiFi “unsafe to join” according to iOS Lockdown Mode and thus causes disconnects on each sleep/wake cycle of the phone? Seems like WPA support and TKIM are two such properties, but there are likely more.

[Niklas B @_niklasb]

@adhsec do you know what DoH servers iOS uses? I would assume it just uses normal DNS as provided by DHCP

[Niklas B @_niklasb]

@adhsec encrypted DNS? as in DoH/DoT?

[Niklas B @_niklasb]

I really wish Lockdown Mode had more granular settings

[Niklas B @_niklasb]

@jduck @5aelo @farazsth98 @adhsec @silviocesare @mboehme_ again, there is no bug here and the compiler produces correct output. FATAL is surely noreturn. UB is introduced in some unrelated place

[Niklas B @_niklasb]

@jduck @5aelo @farazsth98 @adhsec @silviocesare @mboehme_ There was/is no actual issue/bug in the code (the switch is exhaustive), what is being considered here are just ideas to nudge the compiler to reliably produce a compilation output that has the intended security properties (which are a superset of those provided by C++ itself)

[Niklas B @_niklasb]

@5aelo @jduck @farazsth98 @adhsec @silviocesare @mboehme_ But of course you are likely heavily relying on this specific compiler behavior in countless other places in a similar fashion anyway

[Niklas B @_niklasb]

@5aelo @jduck @farazsth98 @adhsec @silviocesare @mboehme_ I see, so I assume the “sound” combination is where you tell the compiler that the value can be out of range (via `: int`), AND you make the switch exhaustive even in that case via an UNREACHABLE default case …