110 Followers
146 Following
258 Posts
Malware Analyst, Reverse Engineer, Software Developer, Mathematician, Teacher, Podcaster, send cat pics
Websitehttps://www.wallenborn.net
Podcasthttps://armchairinvestigators.de
Reversing Classeshttps://mal.re

LLMs now do the busywork of finding amazing vulnerabilities for everyone willing to spend the tokens.

But hacking still isn't dead:

  • We haven't at all solved the underlying problems which come with writing and shipping code.

  • You still need to understand what you're looking at and what you are operating.

  • The LLM platforms themselves are a exquisite target for hacking^Wcreative use of the technology.

  • Now when everyone can pull a CVE or two out of thin silicon and a few kWh of electricity the art of hacking might need adopt and maybe reshape a little but at its core the mind- and skillset will stay as relevant as it always was.

    In that sense: keep hacking, keep exploring, break some stuff.

    @DaveMWilburn my understanding of mquery is a bit of a different use case: you can index a large set of files and then can get hits for a given YARA rules fast.

    MalShare on the other hand had a set of YARA rules and scanned all incoming files with them. The challenge was stability: YARA does some crazy stuff to be fast in the generic case and performance sometimes tanks in very special cases. And a project like MalShare will ultimately find those cases (and did).

    I can't tell you how much you should watch this video if you like the moon, or astronomy, or just space.

    Hank Green put together a half-hour video "Explaining the Most Important Artemis II Photos". It's a very different feel from his usual videos. He uses a calm, conversational tone, and he doesn't appear on screen. Instead, he shows us pictures from space and explains why they're remarkable.

    100% worth your time if you like space at all.

    https://www.youtube.com/watch?v=oaXRREHVkHo

    #space #Artemis #Moon

    Explaining the Most Important Artemis II Photos

    YouTube
    @Irishmasms absolutely also for that. Basically for anything you want to share with other researchers. We are not doing anything with the file except for hosting :-)

    I think this wasn't mentioned on the Fediverse yet, so here we go: https://malshare.com is back up! If you've never heard of it: It's an openly developed and cost-free malware repository. As a resarcher, you can register an account and upload and download malware samples to share with other researchers. You only need an email address (feel free to use a throw-away). This sadly became necesarry btw to avoid abuse.

    Anyway, we've been hard at work to discuss scope (and reduce it), did some spring cleaning, and automate as much as possible.

    A couple of changes:
    * CI/CD via github actions
    * got rid of YARA scanning
    * allowed URL submissions
    * got the daily digest working again

    Esp. not scanning with YARA anymore was a hard decision. Because without that, it's really just SHA256s. But it's surprisingly hard to run YARA at scale. And in the end, we figured: before there's no MalShare, let's have one without YARA.

    We also centralized all issue tracking on https://github.com/Malshare/MalShare/issues. There were issues over 4 years old. We've addressed a couple and the plan is to not let it come to this in the future. Speaking of: please reach out if you want to get involved, we are not that many people and can use any help. There's also donation options to cover hosting cost (we have a lot of malware...).

    Claude: "OK, I can see clearly now."
    Me: "The rain is gone?"

    @G33KatWork I've been wanting to switch away from Fusion far many years now. But every time I try, the alternatives are so different that I can't get anything done.

    Is FreeCAD cool? I think last time, I tried OpenSCAD.

    @xabean I know that I'm quite active and do a lot of things but I'm also very aware of burnout and it's early warning signs and *knocksonwood* I think I can dodge that bullet.

    But this is a good segue: I would call myself quite organized, you know GTD, todo lists, checkmarks, weekly reviews, that kind of stuff. And this always helped me a lot setting expectations for myself which IMHO is in important part of avoiding burning yourself out. Because in the end the time you invest into doing $thing is pretty much a zero-sum game: anything you do takes away from you doing something else.

    I am a bit extrem in that regard even: if someone tells me they "didn't find the time to do X", it translates to "X wasn't important enough" in my head. That's fine ofc because everyone has different priorities. But it will also mean that I will probably never find the 4-8 hours to write up a post about $thing. Or to phrase it differently: publishing a blog post about $thing is just not important enough for me. And this will lead to "then simply don't do it" from your message.

    On the "half-finished post" though: I am a firm believer in prototyping and "putting stuff out there" asap. So one could say I really don't discount my audience, the opposite actually: you'd sometimes need to go through quite a lot of raw-ness.

    And to circle back to the beginning of your post: I am interested in the "you problem" here. Otherwise, I wouldn't have asked my initial question. You know, I could have written a blog post instead ;-).

    Can we maybe leave the meta-discussion for a sec: what part of AI usage do you (personally) hate? I assess the time save of letting AI generate the text of a post minimal, so certainly wouldn't do that. But there's online research one can automate, review passes, spell checking, todo lists for topics to write about, motivational things like coming up with a challenge/timetable, that kind of stuff. Some of that is probably so invisible to the content consumer, that you wouldn't care but others things (like reviewing for example) would. Feel free to be an entitled jerk :-).

    @xabean I'm sorry that this triggers you. I am happy to compile a list of stuff I would write about (it would just take some time). I was trying to avoid this allegation by giving a very concrete example (the form letter thing, which is also not very haxxor, none of that stuff is BTW) but that didn't seem to have helped.

    Can you express what the problem with the vibe is? Is it about the "ask for permission"-aspect of my post? (https://ideophone.org/dont-seek-permission-center-values/ is a great piece on that topic IMHO). Or to even dig deeper a bit: what do you mean with vibe exactly here? Because for my definition of "vibe" you basically called me weird and I would like to believe of myself that I am not ;-).

    Don’t seek permission, center values

    When you're enamoured of a technology and someone points out important ethical challenges, a typical reflex is to seek permission:…

    The Ideophone

    I wouldn't necessarily call it a treasure trove but I have a bunch of raw notes on all kinds of technical topics. Some of those are quite obscure and at least at the time I couldn't find any other source on the open web documenting that stuff. Generating form letters in Word on Windows from a web app via protocol handlers and PowerShell — to give an example from to top of my head.

    I also run a blog at https://ntf.sh with some friends. So I do have a self-hosted established way of publishing this kind of stuff. And finally, like everyone on the planet, I have limited time. Assuming that I'll simply not publish any of this without help from AI, what does my bubble here think I should do? (I know some of you are quite opposed to using AI for content production).

    Also happy to hear alternative solutions as responses here! But just publishing those notes (as is or with some light manual editing) is not an option: They might contain specifics I can't talk about publicly and are also just too much written in my "brain language" to be comprehensible by anyone else.

    ✍️ Start the Slop Machine
    66.7%
    :blobwizard: Keep your Secrets
    33.3%
    Poll ended at .
    nullteilerfrei – zurückgleiten bitte