David Grootwassink

[David Grootwassink @iamgroot34695]

@elonmusk If it is a "non-government organization", funding from the government should be stopped immediately.

[David Grootwassink @iamgroot34695]

@TonyHinchcliffe You dumb shit. You probably just cost the election.

[Stephan Berger @malmoeb]

New blog post: bedevil: Dynamic Linker Patching
https://t.co/wmjKqhJydf

bedevil (bdvl) is an LD_PRELOAD rootkit. The group Muddled Libra used bedevil to target VMware vCenter servers in 2024, according to Palo Alto’s Unit42 Blog.

The rootkit comes with a nifty feature called Dynamic Linker Patching.

This topic is interesting from both a red- and blue-team perspective, primarily because the LD_PRELOAD technique has been well-known for many years. Most detection tools and scripts are typically capable of identifying a shared library path in the https://t.co/iDfcjF87Bt.preload file or detecting a non-empty LD_PRELOAD environment variable.

However, patching the dynamic linker provides attackers with significant advantages for stealth while simultaneously creating new challenges for defenders attempting to identify such intrusions.

In this blog post, we will conduct an in-depth analysis of the patching technique used by the bedevil rootkit, exploring how it works and the advantages that dynamic linker patching offers to attackers.

[David Grootwassink @iamgroot34695]

@guypbenson Good thing that progressives are so tolerant.

[David Grootwassink @iamgroot34695]

@elonmusk All I can add is you get what you vote for.

[David Grootwassink @iamgroot34695]

@alex_avoigt And you know that China never publishes disinformation.

[David Grootwassink @iamgroot34695]

@elonmusk Yes, but there will be no consequences.

[David Grootwassink @iamgroot34695]

@amuse One can only hope.

[David Grootwassink @iamgroot34695]

@RozenbergTomer @cb_doge Do you even see your self-contradictory statement? "Managed" free speech is not free speech.

[David Grootwassink @iamgroot34695]

@bennyjohnson Happy to say she is my congresswoman.

[David Grootwassink @iamgroot34695]

@libsoftiktok What is that?

[David Grootwassink @iamgroot34695]

@OliLondonTV Are they really prepared for this:

https://t.co/ytBmNlA8xA)%20and%202.7%25%20by%20other

[David Grootwassink @iamgroot34695]

@WIRED Didn't it used to be drought a couple of years ago?

[David Grootwassink @iamgroot34695]

@PierrePoilievre

Saw this YouTube short and though it needed to be here.

https://t.co/4sJAREOirQ

[David Grootwassink @iamgroot34695]

@LaurenWitzkeDE Spirit or Frontier?

[David Grootwassink @iamgroot34695]

@Enezator He forgot to toss the open flame into the van as it drove off.

[David Grootwassink @iamgroot34695]

@lporiginalg Import the third world, expect third world behavior.

[David Grootwassink @iamgroot34695]

@ianmiles When you import the third world, expect third world behavior.

[David Grootwassink @iamgroot34695]

@InternetH0F And people wonder why the "Red Pill" movement started.

[David Grootwassink @iamgroot34695]

@elonmusk What could possibly go wrong?