Ishmael42

Why are we still here? Just to suffer?!

PWN / REV / AI

[Ishmael42 @ishmael42_]

@ParkerRex "Functions that match the original byte for byte" is a measure that makes no sense. For it to be true offsets to plt stubs, rel jumps must be identical across two binaries, which is possible but not scalable since you'll need to write linkerscript entries for each function.

[Ishmael42 @ishmael42_]

@ParkerRex Also optimisations produced by compilers today are different from optimisations used by compilers 20 years ago - same loop can be compiled to different assembly depending on compiler.

[Ishmael42 @ishmael42_]

@sandniko3 @Office2007_Word Ok maybe not a decade, around 5 years ago.

https://t.co/bLp6MSy1aI

[Ishmael42 @ishmael42_]

@sandniko3 @Office2007_Word I'm not sure. I don't recommend being optimistic about it, since the last device this kind of bug worked on release around a decade ago.

But it _should_ be possible, if you reverse engineer the `aboot` partition.

[Ishmael42 @ishmael42_]

@ChShersh it's cool but you lose cursor position and have pray to god C-o takes you back. I usually put the formatting into a command and bind something like <leader>-' to it.

[Andrew Case @attrc]

I am very confused why Anthropic wrote a blog post advertising for cybersecurity teams to switch to GLM!?!?

https://t.co/6Z1BTChDtj

[Control Panel for  @ControlPanelFT]

Hello fellow Firefox users

Yes you can disable it

about:config
browser.nova.enable - set it to false

[Ishmael42 @ishmael42_]

@therealomsec @straceX And a second bool which tells if the key exists

[Dino A. Dai Zovi @dinodaizovi]

In the mid 90's, viable remote exploits were plentiful if you knew how to write them or get them (e.g. subscribe to BUGTRAQ, beg over IRC, etc.). It didn't take all that much to wield a lot of power.

That insecurity status quo was in rough equilibrium until the year 2000 when Internet worms automated exploiting those vulnerabilities across the Internet at scale.

We are right now standing at the precipice of another change in equilibrium like that, but this time based on AI radically democratizing finding vulnerabilities, developing exploits, and using them operationally.

It's your choice whether to play around with p(doom) sophistry or get to work on solving the more realistic near-term problems that we will all face.

[Ishmael42 @ishmael42_]

God rop on xtensa (esp32) is borderline impossible

[Ishmael42 @ishmael42_]

@C2IRIS

[Ohm-I (Oh My) @mcohmi]

In my very first CTF, I didn't make it past the second step. Next year I did the exact same CTF and crushed most of it. I remember my first RE challenge where someone walked me through reading assembly. Unless you create your own model, bringing AI to a CTF makes me laugh at you.

[Ishmael42 @ishmael42_]

@schteppe clangd happily puts new includes above `#define _GNU_SOURCE` 🥀

[Ishmael42 @ishmael42_]

Microsoft fastcall convention on linux? Sure why not 🥀💔!

[DHH @dhh]

Let's see how deep the rabbit hole already goes!

[Ishmael42 @ishmael42_]

@ThePrimeagen .nvim.lua is usually used for project local config like this

[Pelz 🕵🏾‍♂️ @Pelz_Dev]

this is not the life i imagined as a security researcher.

[Ishmael42 @ishmael42_]

@DweeBwae @HostOfMeta Are there any examples of this?

[Tib3rius @0xTib3rius]

Hacktron should have just said their AI went rogue and accidentally made the pull request.

OpenAI would have loved that.

[Disconnect3d @disconnect3d_pl]

New Pwndbg release!

Backward disassembly in context/nearpc, indirect jumps, nearpc -f without debug symbols, stack-vis to visualize stack frames, improved v2p/p2w/pageinfo kernel commands & more!

See: https://t.co/BuroQ8ySoS

Please sponsor us: https://t.co/1KVYKgrpXn !