@tklengyel@discuss.systems, no longer on Twitter
Joined September 2014
- Tweets2.1K
- Following885
- Followers1.7K
- Likes4.4K
Tamas K Lengyel retweeted
We've just merged support for QUIC and HTTP/3 - @ManuelMeitinger's GSoC project - into @mitmproxy's main branch! 🚀
I didn't know glitch swing is a thing! Some awesome tunes for your enjoyment youtu.be/Pu0Y-DfqwPQ?list=RD…
Tamas K Lengyel retweeted
Next year @intel_owl will participate again for the Google Summer of Code!
Don't know what it is and how to get involved? Check the video below!
#gsoc #opensource
youtube.com/watch?v=7jD2tChh…
Tamas K Lengyel retweeted
I have no idea if anyone from Twitter follows me - probably not, because why would they. Anyhow, I have something to share. One of the interesting presentations I've seen at google was titled 'Don't be a hero'.
Tamas K Lengyel retweeted
Come join a great team of students, faculty, and researchers at an amazing location in the center of Europe and hack some cool stuff! 🐝🐝🐝 Group page: hexhive.epfl.ch/
Mathias Payer is looking for #PhD students. Find out more about @gannimo's #research hexhive.epfl.ch and our world-leading @EPFL #EDIC #computerscience PhD program: go.epfl.ch/phd-edic
Tamas K Lengyel retweeted
SharedMemUtils - A simple tool to automatically find vulnerabilities in shared memory objects (commonly used for IPC in Windows services)
This tool immediately uncovered potential exploitation routes in both Nvidia and Dell Audio services on my system.
x86matthew.com/view_post?id=…
Tamas K Lengyel retweeted
Awesome slides for a very technical topic and by far the best explanation I've seen of how the Linux eBPF verifier internals work. Thanks for sharing @shunghsiyu
Peeking into the BPF Verifier’s source code is challenging but rewarding
presented at @coscup @daininduyuanma
#ebpf #bpf #kernel
docs.google.com/presentation…
Tamas K Lengyel retweeted
KMSAN (github.com/google/kmsan) got merged into Linus' tree today: github.com/torvalds/linux/co…, fingers crossed to see it in v6.1
KMSAN helped find 300+ bugs in various kernel subsystems, and will certainly help find more.
Tamas K Lengyel retweeted
linux-syscall-support is a very useful single-header C library that I don't see mentioned often: chromium.googlesource.com/li…
You can use it to make direct syscalls without a libc - useful for writing compact exploits or shellcode, without resorting to hand-written assembly.
Tamas K Lengyel retweeted
"Symbolic Execution the Swiss-Knife of the Reverse
Engineer Toolbox", a talk by @RobinDavid1 presented at the @kleesymex 2022 workshop. Triton under the hood ❤️. Looks like there is also a teasing about a new DSE fuzzer... 👀
triton-library.github.io/fil…
Tamas K Lengyel retweeted
Always a great read:
dolosgroup.io/blog/2021/7/9/…
“We took a locked down FDE laptop, sniffed the BitLocker decryption key coming out of the TPM, backdoored a virtualized image, and used its VPN auto-connect feature to attack the internal corporate network.”
Tamas K Lengyel retweeted
Curious about exploiting VMs or memory bugs in a safe language? Read my new blog post, where I attack Firecracker, AWS' VMM written in Rust. Learn about the various layers of virtualization + the attack surface, and how design decisions impact security.
graplsecurity.com/post/attac…
Tamas K Lengyel retweeted
New blog post is live! In which I download 4 TB of Python packages containing native x86-64 libraries and see how many of them use -ffast-math, potentially altering floating point behavior in any program unlucky enough to load them! moyix.blogspot.com/2022/09/s…
Tamas K Lengyel retweeted
A list of recent conference materials:
BlackHat - no videos, but slides
blackhat.com/us-22/briefings…
BSidesLV
youtube.com/channel/UCpNGmlj…
Defcon
youtube.com/user/DEFCONConfe…
Troopers
youtube.com/user/TROOPERScon
ARE41
m.youtube.com/c/defconswitze…
SANS ransomware summit
m.youtube.com/playlist?list=…
Tamas K Lengyel retweeted
I'm thrilled to announce that "Half-Double: Hammering From the Next Row Over" is accepted at USENIX Security'22. The paper presents Half-Double and demonstrates a Half-Double-based end-to-end exploit on commodity systems protected by ECC and TRR.
Paper: andreaskogler.com/papers/hal…
Tamas K Lengyel retweeted
One time I tried to create a list<map<int>>, and my syntax errors caused the dead to walk among the living. Such things are clearly unfortunate.
According to download.lenovo.com/pccbbs/m… "Starting in 2022 for Secured-core PCs it is a Microsoft requirement for the 3rd Party
Certificate to be disabled by default" /cc @dwizzzleMSFT, is this true?
Quick blog post about Lenovo shipping with user-hostile firmware defaults: mjg59.dreamwidth.org/59931.h…