blog.leafsr.com

c-skills.blogspot.com

C-skills: July 2014

http://c-skills.blogspot.com/2014_07_01_archive.html

Monday, July 7, 2014. Lets have a look on how our traffic is XKey-scored and whether. Its done with efficiency. Seems to be some kind of mangled-C , just like. A lot of C/C -based languages exist for big/parallel. CUDA or other parallelizing extensions). Given that, DB. Is obviously some kind of nested std: map. Apparently of a derived. Type, as can be seen by the apply(). Member which is not part of a STL map. Its probably not a multimap. Either, as denoted. Assignments are not possible. It gets to DB["...

c-skills.blogspot.com

C-skills: lophttpd fucks the POODLE

http://c-skills.blogspot.com/2014/10/lophttpd-fucks-poodle.html

Thursday, October 30, 2014. Lophttpd fucks the POODLE. Not just because they are ugly but also because lophttpd. Never was affected by POODLE, since SSLv3. Disabled for a reason in favor of TLSv1. I think about dropping. Too and just allowing TLSv1.1. To my knowledge lophttpd. Is also the first webserver. I also added SO REUSEPORT. Support today, since Google. That when handling c10k, their processes. Are un-evenly distributed across the cores (what the hell. Are they doing there? Only happen when the.

c-skills.blogspot.com

C-skills: troubleshooter trickery

http://c-skills.blogspot.com/2015/03/troubleshooter-trickery.html

Wednesday, March 25, 2015. Demo of SELinux disable on a Fedora 21 default desktop. A full writeup can be found here. Subscribe to: Post Comments (Atom). Jeffrey carr on cyberwar. My dear Mr. Esser. A Sun Engineer's blog. Xorl %eax, %eax. Miguel de Icaza's blog. Disclaimer: This is my personal and private weblog. The views expressed on this website/weblog are mine alone and do not necessarily reflect the views of my employer. View my complete profile.

c-skills.blogspot.com

C-skills: December 2014

http://c-skills.blogspot.com/2014_12_01_archive.html

Friday, December 19, 2014. QI for the win. Now that we officially know that 3G can be broken and that. It makes sense to place particular (passive) hardware on the. Roof top of embassies (the cellar is already stuffed with. Torture equipment and you have better gain at the roof),. Here was correct. In particular the. Last paragraph should be repeated, as you can start sending. Before the victim packet is even close to the. Target if you just captured the SYN packet on air. Thursday, December 11, 2014.

c-skills.blogspot.com

C-skills: C++11 bailout trickery

http://c-skills.blogspot.com/2015/04/c11-bailout-trickery.html

Thursday, April 23, 2015. C 11 bailout trickery. Is someone C 11 guru enough to make a statement whether. The following C 11 code is correct? Whats happening on line 24, as the lambda should not. Harvest the memory structures (scope? To me, everything looks OK. If thats the case, it would ease. Cleanup routines on error returns from functions. Please leave a comment. For the arrays s you could instead use:. Unique ptr s[1000];. Std: fstream file{/etc/passwd, ios base: in};. April 23, 2015 at 8:30 AM.

c-skills.blogspot.com

C-skills: May 2015

http://c-skills.blogspot.com/2015_05_01_archive.html

Thursday, May 21, 2015. Now, that the TURMOIL slides make sense. I adjusted my own. Projects. The good news is that I always used to generate. Unique DH params (I wonder so many ppl apparently didnt -. There is no real benefit to use hard coded values, except to Eve! In my projects during or before build. So it should be. Quite hard for a N. Dversary to break that. I removed 512 and 1024 bit DH params. Support and use 2048bit instead. opmsg. 2048bit (and higher), but the default was 1024. So I changed.

c-skills.blogspot.com

C-skills: January 2015

http://c-skills.blogspot.com/2015_01_01_archive.html

Thursday, January 8, 2015. In the last post I promised to stop threat analyzing. So here. Is some dev again which I already started developing back. In 2014 and where I finally found some time to finish. Its a small U2F stack. With the APDU framing code based. On Googles U2F reference code. After reviewing a lot of other. I found this reference code comprehensive enough to. Be usable for myself and for PAM code. It also builds on Darwin, but I didnt have time to test it. Subscribe to: Posts (Atom).

c-skills.blogspot.com

C-skills: sshttp tproxy trickery

http://c-skills.blogspot.com/2014/12/sshttp-tproxy-trickery.html

Thursday, December 11, 2014. To allow muxing of HTTP(S)/SSH. To whole subnets. Until recently, the setup was. Per single host. Now you can run it via -T. Gateway and Layer5-switch your whole internal net. Just found your sshttp project on github and just wanted to ask if you are aware of sslh. January 29, 2015 at 3:21 AM. Yep If I remember correctly. Sshl ported the transparent support. After sshttp came up with it. January 29, 2015 at 4:01 AM. Subscribe to: Post Comments (Atom). Jeffrey carr on cyberwar.

em386.blogspot.com

EM_386: Practical Malware Analysis Review

http://em386.blogspot.com/2012/04/practical-malware-analysis-review.html

The Leaf SR blog. Thursday, April 12, 2012. Practical Malware Analysis Review. I recently finished my review copy of 'Practical Malware Analysis'. I enjoyed this book for a few reasons. Each chapter concludes with some simple questions/labs to test your knowledge and give you a chance at some hands on experience related to the content you just read. If you analyze malware for a living or are just looking to understand how software reverse engineering works then you won't regret buying this book.

em386.blogspot.com

EM_386: January 2009

http://em386.blogspot.com/2009_01_01_archive.html

The Leaf SR blog. Thursday, January 08, 2009. It's been awhile since I have posted. This blog is up to almost 500 subscribers somehow. I posted a new project. It's still beta quality and there are definitely a few bugs. I hope you find it useful. Update: Posted Leaf-0.0.10.tar.gz at http:/ leaf-re.googlecode.com It now uses udis86. Lots of work still to do, but its a start. Subscribe to: Posts (Atom). My name is Chris Rohlf. This blog is dead. I now blog at Leaf SR.