Ryan

@Mizu@infosec.exchange
35 Followers
118 Following
265 Posts

Good and interesting presentation by Joe Bialek:

Pointer Problems – Why We’re Refactoring the Windows Kernel:

https://youtube.com/watch?v=-3jxVIFGuQw

#microsoft #windows #kernelsecurity #programming #kernel

BlueHat 2024: S09: Pointer Problems – Why We’re Refactoring the Windows Kernel

YouTube
XBOW bypasses a MIME-type filter, abusing an OTP icon preview feature in 2FAuth to exploit an SSRF and discover CVE 2024-52598. Affected users should apply the patch and read about all the details in our blog post this Friday.

For anyone looking to adjust their media diet, now’s a great time to consider escaping The Algorithms with RSS. Here are some of the blogs, newsletters, and independent news sites I follow: https://www.mollywhite.net/blogroll/

For feed readers,  I use Inoreader, but there are many other good options.

#RSS #IndependentMedia #blogging

Blogroll

A list of blogs Molly White likes to read.

Molly White
“NDSS 2024 - BAR 2024, Workshop on Binary Analysis Research” https://www.youtube.com/watch?v=1aGFgD69deU #reverseengineering
NDSS 2024 - BAR 2024, Workshop on Binary Analysis Research

YouTube
Congrats to the Capstone team for making it into Wine https://gitlab.winehq.org/wine/wine/-/releases/wine-9.20
Wine 9.20 · wine / wine · GitLab

The Wine development release 9.20 is now available. What's new in this release: Bundled Capstone library for disassembly in WineDbg. More...

GitLab

also see:

something I wrote about responsible fuzzing https://blog.regehr.org/archives/2037

the CVC5 theorem prover's guidelines for people doing fuzzing https://github.com/cvc5/cvc5/wiki/Fuzzing-cvc5

Responsible and Effective Bugfinding – Embedded in Academia

so, it turns out I created a method of producing fully self-contained portable distributions of Python that support arbitrary native modules and don't require recompiling anything https://github.com/whitequark/superlinker?tab=readme-ov-file#python

I accidentally

GitHub - whitequark/superlinker: a tool for reinterpreting ELF executables and shared libraries

a tool for reinterpreting ELF executables and shared libraries - whitequark/superlinker

GitHub

After so much testing with different prompts and models, ended up wording a good query for decompiling with r2ai/decai.

The first screenshot shows the result for: Claude3.5, Gpt4o and Qwen2.5 (local) for a password checking function in Swift.

The second one is from r2ghidra, but GHIDRA/IDA/BN results are at the same level of uselessness

#radare2 #llm #ai #reverseengineering #swift

Nice to see @LukaszOlejnik echo the concerns as to LLMs and GenAI usage in information operations for countries with isolated langauage and cultural background, especially for locally usable GenAI, that we voiced in our report for the CYD campus in early 2023 (https://arxiv.org/abs/2303.12132)
Fundamentals of Generative Large Language Models and Perspectives in Cyber-Defense

Generative Language Models gained significant attention in late 2022 / early 2023, notably with the introduction of models refined to act consistently with users' expectations of interactions with AI (conversational models). Arguably the focal point of public attention has been such a refinement of the GPT3 model -- the ChatGPT and its subsequent integration with auxiliary capabilities, including search as part of Microsoft Bing. Despite extensive prior research invested in their development, their performance and applicability to a range of daily tasks remained unclear and niche. However, their wider utilization without a requirement for technical expertise, made in large part possible through conversational fine-tuning, revealed the extent of their true capabilities in a real-world environment. This has garnered both public excitement for their potential applications and concerns about their capabilities and potential malicious uses. This review aims to provide a brief overview of the history, state of the art, and implications of Generative Language Models in terms of their principles, abilities, limitations, and future prospects -- especially in the context of cyber-defense, with a focus on the Swiss operational environment.

arXiv.org