@[email protected]

@studied the computer security arts as a PhD student at Dartmouth College.
Thesis @ trying to take over the world @narfindustries

[Ange @angealbertini]

A thread on file abuses:
the typical goal of file abuse is to make space for your foreign data, and optionally put in another header for a different file type if you want a polyglot.

[@[email protected] @bxsays]

Slides for my NorthSec talk "Regions are types, types are policy, and other ramblings" are now available at https://t.co/bdKKRnKPP8 Thanks for the excellent and challenging questions, #nsec20 attendees!

[@[email protected] @bxsays]

@richinseattle @Shiftreduce @epakskape Woops, I missed that, silly Twitter.

For those of you complaining about a 404 on the original link, it was missing a character... https://t.co/GppqS44zMT

[@[email protected] @bxsays]

@Shiftreduce @richinseattle @epakskape From the description, it sounds like an ELF version of Locreate (which is for PE) https://t.co/CUClgK6iwf

[@[email protected] @bxsays]

I tweeted out the wrong link in an earlier tweet -- apologies if you ended up with a copy of my Blackhoodie slides instead 🤪

[@[email protected] @bxsays]

Slides from my @BSidesKnoxville talk "Regions are types, types are policy, and other ramblings" can now be snagged from https://t.co/p3EaHcjPHT

[@[email protected] @bxsays]

@travisgoodspeed @BSidesKnoxville Thanks kindly for preaching the gospel of Regions are Types. @sergeybratus @JulianBangert deserve credit too

[@[email protected] @bxsays]

In-band signalling / Hiding in plain sight

[@[email protected] @bxsays]

Slides from my @_kernelcon_ talk "Bushwhacking your way around a
bootloader" are now available at https://t.co/UjZXw0nrdM

🌽Congrats to @_kernelcon_ for putting together such an excellent inaugural con! 🌽

[@[email protected] @bxsays]

On my way to @_kernelcon_ 🛸 I may or may not be still working on my slides... as is the tradition.

[@[email protected] @bxsays]

@vyrus001 @7ur7l3_61rl @SushiDude @quadling @dinodaizovi @halvarflake @marcmaiffret @natashenka @tqbf @mdowd @taviso *blushes* aw, thanks.

[@[email protected] @bxsays]

@travisgoodspeed I've been bypassing all of that nonsense (with mixed success) by using a mixture of the .incbin assembler directive, ld -e, and objcopy --change-section-address to create a custom ELF

[@[email protected] @bxsays]

@DARPA An interesting flipside to what I champion -- that all data are bytecode

[BSidesNH @BSidesNH]

It's official! The inaugural BSides NH will take place May 18 2019 at Manchester's @SNHU

The CFP is now open! Submit a bio and abstract to [email protected]. Presenters of all experience levels and backgrounds are encouraged to submit.

See you there!

[@[email protected] @bxsays]

Today wind gust speeds on Mt. Washington are literally off the chart... an interesting analog equivalent to an integer overflow. Although it looks more like a buffer overflow...

[Mount Washington Observatory (MWOBS) @MWObs]

It's off the charts! Incredible wind storm ongoing this morning, with a peak gust of 148 mph the highest in over a decade! #category4 #windy #mwobs #mountwashington #presidentialrange https://t.co/nMHp4n6tWt

[@[email protected] @bxsays]

I'm flabbergasted. Also, the moral of the story is: read patents (especially when reversing). This talk is tots worth a watch.

[AndrewMohawk⁽ⁿᵘˡˡ⁾ @AndrewMohawk]

If you haven’t seen @xoreaxeaxeax ’s talk ( God mode unlocked ), do it, it's 5/7, an exceptional speaker that takes hyper complex concepts and can explain it so that normies like me can understand: https://t.co/oXW50hDTUI

[@[email protected] @bxsays]

@WEareTROOPERS @sergeybratus @travisgoodspeed Also from @travisgoodspeed https://t.co/3eegu1spd4

[@[email protected] @bxsays]

"It's not a bus, it's a network"
-- @sergeybratus

[Joe Fitz @securelyfitz]

Nice work @stewartsmith and others.

This is how SoC's are made... gluing not-necessarily-trustworthy IP blocks together over AHB or other 'trusted' links. ASPEED is likely the norm, not the exception.
Details:
https://t.co/xuqatrNmDg

[@[email protected] @bxsays]

@matthew_d_green @thegrugq @scouttle did some interesting research related to this topic. Her discussion of authentication in a clinical medical setting may be of interest -- https://t.co/J5OoJn38Vs

[@[email protected] @bxsays]

It's been an honor to speak at a conference w/ such excellent talks, trainings, and attendees. Thank you .@Blackhoodie_RE.