Thomas Windmill

Strong (and often wrong) opinions on RE/VR/Cyber.

[Thomas Windmill @ThomasWindmill]

@mmm_ctf_team @PlaidCTF @theori_io @maplebaconctf https://t.co/xRSol3DoMY

[Thomas Windmill @ThomasWindmill]

@trishume @gamozolabs @lunixbochs @Nautilus_CTF We hope to broaden the disciplines that get to flex at quals and finals in the coming years. Sorry we missed the mark for you this year, but I’m glad you had a good time anyway.

[Thomas Windmill @ThomasWindmill]

@perribus @Nautilus_CTF Mostly.

[Thomas Windmill @ThomasWindmill]

The real reason I invited @perribus onto @Nautilus_CTF was the off chance she left food at my house.

[Thomas Windmill @ThomasWindmill]

@perribus @Nautilus_CTF Most aren’t. They’ll be breadcrumbs and croutons tomorrow. But there were a few gems in the middle.

[sergey bratus @sergeybratus]

Log4Shell shows yet again that clouds are full of parsers, and that any input is a program #LangSec [https://t.co/iJZStjEz3o]

[Thomas Windmill @ThomasWindmill]

@gabe_k @perribus Use code morelikeperrisus for an error message about having an invalid promo code.

[Thomas Windmill @ThomasWindmill]

@perribus I think you mean jne. But I don’t know sais quoi. Were they added in some new SSE update?

[Andrew Zonenberg @[email protected] @azonenberg]

For all of the C++ hating C programmers out there looking to ruin someone's day...

"class" and "template", among other things, are legal function/variable/struct names in C. Sprinkle these around and your API can't be called from C++ code!

[Thomas Windmill @ThomasWindmill]

Post DEF CON anxiety fidget

[Thomas Windmill @ThomasWindmill]

@mdowd

[Thomas Windmill @ThomasWindmill]

@elonmusk Add Signal to Tesla cars. Would be pretty slick next to the current SMS integration.

[sergey bratus @sergeybratus]

It was an honor to be interviewed by Rik Farrow for the @USENIX ;login: magazine: https://t.co/zhIjWptl98

[Thomas Windmill @ThomasWindmill]

@daviddiaul @h0mbre_ @gamozolabs @is_eqv @mboehme_ @domenuk Structure aware probably includes grammar based fuzzing. I consider grammar fuzzing to be wholly generative (no seed corpus). Structure aware fuzzing would also include the use of a parser to make “structured” transforms to an existing input corpus. My $0.02.