David Mirza Ahmad

@Subgraph OS developer.

[subgraph @subgraph]

We are at #ZeroNights in Saint Petersburg.

[subgraph @subgraph]

We're working on the future of Subgraph OS. Citadel, available soon in early release, is where we start. https://t.co/TYq85vlmTo

[David Mirza Ahmad @attractr]

time for focus, bbl

[Stephen A. Ridley @s7ephen]

Been making my way through this over the last few weeks of travel....and holy sh*t this book is a home run @billpollock ! huge props (and thanks) to @veorq for a much needed book.

[David Mirza Ahmad @attractr]

@jason_vandor Yeah, I know, it is indeed very bad that I haven’t fixed that yet. Will do sometime tomorrow.

[David Mirza Ahmad @attractr]

@subgraph Now that we have clean dev builds from a pristine release branch, I am going to attempt making both packages byte for byte reproducible, then we drop into our repo. @fluffypony, I think your project can use some of this. Be back later with success.

[David Mirza Ahmad @attractr]

Monero & Monero GUI now builds w/pbuilder in chroot along w/other @subgraph debs. Much cleaner. Now we just need reproducible builds :)

[David Mirza Ahmad @attractr]

@fluffypony @subgraph I rolled a couple of packages for SGOS for the last release. Not perfect, but works OK, based on your build script. More info here: https://t.co/hpH2MxLwb1

[argp @_argp]

Smashing the stack for fun and profit anniversary (8 Nov 1996)!

jmp offset-to-call; pop ...; call offset-to-pop; "/bin/sh"

https://t.co/kzrNaYtHp3

[David Mirza Ahmad @attractr]

@anthonytowry Sometimes you get one shot, sometimes not. There is a lot of mastery in dealing with that, and other constraints in real world exploitation.

[David Mirza Ahmad @attractr]

@anthonytowry Effort applied to improve reliability, reduce detection, etc. A good exploit useful for being instructive is a lot more than vuln itself.

[David Mirza Ahmad @attractr]

@anthonytowry The “why” is most important part. In my opinion: novelty of exploitation technique, combination of circumstances used in exploit, clarity

[David Mirza Ahmad @attractr]

If that is “encrypting the Internet”, nothing means anything anymore. https://t.co/MxQE9AzBOe

[David Mirza Ahmad @attractr]

@loremgibson Right, that’s why I asked.

[David Mirza Ahmad @attractr]

Does this exist? Curated “best exploits of all time” collection spanning bug classes, for those interested in self-study. If not, I’ll make

[World Economic Forum @Davos]

China has developed a rice that grows in seawater https://t.co/w5xJUYDbrZ

[Juliano Rizzo @julianor]

🤦🏿‍♂️🤦🏿‍♂️🤦🏿‍♂️Parity multisig wallet (SC) bug "means that currently no funds can be moved" Decentralization revolution suspended, again. https://t.co/Ior8Bapzc7

[David Mirza Ahmad @attractr]

@bruces Your account is locked. Can I cap this & tweet from @subgraph? It’s a nice succinctly expressed opinion I agree w/, think worthy of sharing.

[David Mirza Ahmad @attractr]

@fluffypony @subgraph Yeah, saw the issue 👍🏼