Tamas K Lengyel

@[email protected], no longer on Twitter

[Maximilian Hils @maximilianhils]

We've just merged support for QUIC and HTTP/3 - @ManuelMeitinger's GSoC project - into @mitmproxy's main branch! 🚀

[Tamas K Lengyel @tklengyel]

I didn't know glitch swing is a thing! Some awesome tunes for your enjoyment https://t.co/bZ4XZqbTYV

[Matteo Lodi @matte_lodi]

Next year @intel_owl will participate again for the Google Summer of Code!

Don't know what it is and how to get involved? Check the video below!

#gsoc #opensource
https://t.co/n3HUErlBAV

[Michal Melewski @carste1n]

I have no idea if anyone from Twitter follows me - probably not, because why would they. Anyhow, I have something to share. One of the interesting presentations I've seen at google was titled 'Don't be a hero'.

[Tamas K Lengyel @tklengyel]

@richinseattle @NSA_CSDirector @RGB_Lights I don't think you are the target audience. I bet the goal is to try to appear fresh and cool so they can hire more people fresh out of college for their grind.

[Mathias Payer @gannimo]

Come join a great team of students, faculty, and researchers at an amazing location in the center of Europe and hack some cool stuff! 🐝🐝🐝 Group page: https://t.co/oChKJlk0QJ

[x86matthew @x86matthew]

SharedMemUtils - A simple tool to automatically find vulnerabilities in shared memory objects (commonly used for IPC in Windows services)

This tool immediately uncovered potential exploitation routes in both Nvidia and Dell Audio services on my system.

https://t.co/fOBs1FuSzB

[Richard Johnson @richinseattle]

Awesome slides for a very technical topic and by far the best explanation I've seen of how the Linux eBPF verifier internals work. Thanks for sharing @shunghsiyu

[0xGlider @0xGlider]

KMSAN (https://t.co/2hiZXNqZjU) got merged into Linus' tree today: https://t.co/cHVKX6RI5O, fingers crossed to see it in v6.1

KMSAN helped find 300+ bugs in various kernel subsystems, and will certainly help find more.

[Tamas K Lengyel @tklengyel]

@danvet @Ivyl There is a wiki for this stuff?!

[Tamas K Lengyel @tklengyel]

@mboehme_ printk("here");

[Marc-André Moreau @awakecoding]

@markrussinovich https://t.co/i02SdXnN4z

[David Buchanan does not tweet anymore @David3141593]

linux-syscall-support is a very useful single-header C library that I don't see mentioned often: https://t.co/nnIUlrCOta

You can use it to make direct syscalls without a libc - useful for writing compact exploits or shellcode, without resorting to hand-written assembly.

[Marcel Böhme👨‍🔬 @mboehme_]

Average day in the lab.

[Tamas K Lengyel @tklengyel]

@maximilianhils Congrats!

[The Triton library @qb_triton]

"Symbolic Execution the Swiss-Knife of the Reverse
Engineer Toolbox", a talk by @RobinDavid1 presented at the @kleesymex 2022 workshop. Triton under the hood ❤️. Looks like there is also a teasing about a new DSE fuzzer... 👀

https://t.co/Uv71cAVLIA

[raptor @0xdea]

Always a great read:

https://t.co/LjZsWJqinZ

“We took a locked down FDE laptop, sniffed the BitLocker decryption key coming out of the TPM, backdoored a virtualized image, and used its VPN auto-connect feature to attack the internal corporate network.”

[chompie @chompie1337]

Curious about exploiting VMs or memory bugs in a safe language? Read my new blog post, where I attack Firecracker, AWS' VMM written in Rust. Learn about the various layers of virtualization + the attack surface, and how design decisions impact security.
https://t.co/FNN7JjeRce

[Brendan Dolan-Gavitt @moyix]

New blog post is live! In which I download 4 TB of Python packages containing native x86-64 libraries and see how many of them use -ffast-math, potentially altering floating point behavior in any program unlucky enough to load them! https://t.co/Klu5ErZLy2

[candid wueest 🇨🇭 @mylaocoon]

A list of recent conference materials:
BlackHat - no videos, but slides
https://t.co/IKrAVA0bBC

BSidesLV
https://t.co/A03Mp6tDMl

Defcon
https://t.co/sAT1cSa8fd

Troopers
https://t.co/YUfKqxCaSQ

ARE41
https://t.co/UN977kxPSv

SANS ransomware summit
https://t.co/LKejsxQwYG