| YouTube[EN] | https://www.youtube.com/@GynvaelEN |
| YouTube[PL] | https://www.youtube.com/@GynvaelColdwind |
| Blog | https://gynvael.coldwind.pl |
| https://twitter.com/gynvael |
RE: https://infosec.exchange/@PagedOut/116362415442678434
This article (recommended if you're learning RE!) reminded me of a GOATed FPGA bistream reversing task from Google CTF (GPURTL by Robin), where the key to solving it for me was observing the pattern of changing bits in FPGA's registers. The pattern itself was enough to pinpont the exact algorithm.
@liveoverflow made a video about this task: https://www.youtube.com/watch?v=3ac9HAsfV8c
My second article in Paged Out! #8 was about the architecture of the terminal emulator on Linux - it's a really obvious thing until you start digging into details, as usual.
Web viewer: https://pagedout.institute/webview.php?issue=8&page=43&article=Linux+terminal+emulator+architecture
PDF download: https://pagedout.institute/?page=issues.php
My article in newest Paged Out! about everyone's favorite Python party trick:
https://pagedout.institute/webview.php?issue=8&page=63&article=Trying+to+demo+Python%27s+is
#python #goingtoapythonprogrammersparty #pythonprogramminglanguagethemedparty #whatispythonsis
Pwndbg 2026.02.18 is out! Enhance your GDB or LLDB experience!
We visualize branches in nearpc, synchronize your decompiler (IDA/Binja/Ghidra) via decomp2dbg, annotate stack variabless from debug info or decompiler, support new Linux kernel debugging commands - for tracing SLUB allocs/frees or dumping tasks information.
See what's changed in: https://github.com/pwndbg/pwndbg/releases/tag/2026.02.18
Want Pwndbg to keep moving fast, or, having us give a talk about it? Sponsor us: https://github.com/sponsors/pwndbg/
Paged Out! #8 is out! https://pagedout.institute/ @PagedOut
In "An AWKward Modem" (p. 28), I demonstrate how to write a tiny modem in 5 lines of AWK and shift it into the near-ultrasonic range. 🔊
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
Disconnect3d
Nicolas Seriot
Kevin Beaumont
Ken Shirriff