Danny Quist

[Danny Quist @chamewco]

@NASAJPL No tickets were actually available

[Danny Quist @chamewco]

@NASAJPL Is this even a real event? Seems like it was a bot farming exercise. We were on exactly at 9am, and we are still in queues waiting for tickets.

[Danny Quist @chamewco]

@0x30n Attendance seemed way down. More Zyn for us!

[Danny Quist @chamewco]

If you need to DM please use something reliable like LinkedIn. Notifications here are unreliable and largely advertising

[Robel Campbell @RobelCampbell]

Regarding CVE-2024-38063 IPV6 RCE in Windows...

After reading RFCs about optional headers in IPv6 packets, I managed to create POC to cause a crash. The bug check in this case isn't too detailed, but essentially the underflow creates a large value used in a loop which eventually write data out of bounds and causes a crash.

I imagine this can be weaponized using heap massaging techniques and corrupting adjacent objects in the heap.

As many have already stated before, this can easily be mitigated by applying the latest patches or disabling IPv6 (which is enabled by default).

[Danny Quist @chamewco]

@tvidas @brdskggs doing my part too

[Danny Quist @chamewco]

Great engineering from Chester @raceface604 These met the asphalt at 60mph when my bike fell off the rack. Good work team, you saved my bike from a lot more damage

[Danny Quist @chamewco]

@tvidas @BrianRPhillips @HackingDave @PhillipWylie @_wald0 @RachelTobac @Ben0xA @RayRedacted @TimMedin @strandjs @halvarflake @v3rtig0 @rossjanderson @Evil_Mog @RGB_Lights @taviso @joegrand @Zardus thanks, the feeling is mutual

[Cristina Cifuentes @criscifuentes]

Very excited to share that I will be giving a keynote speech at REcon, where I will be looking back on 30 years of decompilation from my own experience. Join me in celebrating 🎉 this milestone achievement! #REcon #decompilation #keynotespeaker

[Danny Quist @chamewco]

Feedback is key, don't miss this opportunity

[USENIX WOOT Conference on Offensive Technologies @wootsecurity]

Do you work on cool attack or other offensive research (Black Hat/DEF CON type of work)? 🥷 Consider submitting your research to the WOOT practitioner track to get valuable feedback from an amazing PC 😍 and reach a wider audience 🎤!
https://t.co/iNUquaAmQE

[Danny Quist @OpenMalware]

BianLian toolchain reverse engineering, analysis of the target and more. It was amazing to be part of the team writing this report https://t.co/Yz1LtjVo7h

[Danny Quist @chamewco]

@rj_chap @MakeItHackin I am alive

[Brendan Dolan-Gavitt @moyix]

I'm confused by some of the mistakes the decompilation makes. I would have thought it would be easy to learn that it should copy the name of the function into the output, but it almost never does.

[Danny Quist @chamewco]

@0x30n It happens to us all :)

[LESDCAN @lesdcan]

LESD Board Member Dr. Tara Armstead regarding the equity work, "We see where we fall short and we want to make improvements so that we do not have drastic issues in the future."

[Danny Quist @chamewco]

@taylorseely95 The person who you quoted here *is* a subscriber and values your work

[Danny Quist @chamewco]

@BondtechAB Just ordered the @BondtechAB LGX. After my latest struggle to rebuild the #Voron afterburner clockwork. The LGX directly replaces it! Thanks for making it fit perfectly!

[Danny Quist @chamewco]

@0x30n @dwizzzleMSFT Definitely!

[Danny Quist @chamewco]

@0x30n @dwizzzleMSFT The stages of Kinesis are: 1. WTF 2. Ok I can type english again 3. Coding is painful 4. I'm grooving 5. How does a normal keyboard work again?

[Danny Quist @chamewco]

@CDPROJEKTRED Can we talk about the unreleased Witcher 3 content yet? Your fans demand more