MadSquirrel

2 Followers
22 Following
22 Posts

I recently had the pleasure of speaking at @REverseConf with Sami Babigeon and I wanted to share the slides and the replay from my talk:

* <https://github.com/quarkslab/conf-presentations/blob/master/Confs/REverse-26/Reverse26.pdf>
* <https://www.youtube.com/watch?v=AKEizmIFLME&list=PLBKkldXXZQhD1hzCkhhMQXjEQ_qWnFtQn>

This talk was about Sighthouse, a project I’ve been working on for the past four years with plenty of ups and downs along the way. The goal of Sighthouse is to help reverse engineers identify third-party library code, with a current focus on firmware analysis, although the overall Sighthouse pipeline could be extended to many other domains.

For more than a year, we had been looking for the right conference to present this work, and honestly we couldn’t have hoped for a better place than RE//verse. It’s a conference organized by reverse engineers, for reverse engineers, and it truly shows.

At a time when some conferences experiment with things like AI-assisted paper reviews (even if GPTZero precise results should not be used to punish or as the final verdict) or AI-driven artistic direction and for who know me you know how like put human in center, RE//verse feels very different. You can feel that the conference is organized with care, with attention, and with heart.

One thing that especially stood out: if this is your first conference, the organizers take the time to run a full rehearsal of your talk, providing thoughtful and constructive feedback to help you deliver the best presentation possible. That level of support is rare and incredibly valuable.

I genuinely hope other conferences will take inspiration from this model.

And if you’re considering submitting a talk next year: I strongly encourage you to apply.

If you glitch one, can you glitch many?
Extracting automotive firmware is a challenge.
@Phil_BARR3TT explains how he bypassed the IDCODE protection in several variants of the RH850 MCU family using both voltage glitching and side-channel analysis ⚡️🚗

https://blog.quarkslab.com/bypassing-debug-password-protection-on-the-rh850-family-using-fault-injection.html

Reverse engineers often spend significant time deciphering third-party libraries within firmware. My talk, scheduled for Friday at 5 PM at Reverse @binaryninja, introduces SightHouse, an open-source initiative aimed at automatically identifying third-party functions to enhance analysis efficiency.

Bose is open-sourcing its old smart speakers instead of bricking them

Link: https://www.theverge.com/news/858501/bose-soundtouch-smart-speakers-open-source
Discussion: https://news.ycombinator.com/item?id=46541892

Bose is open-sourcing its old smart speakers instead of bricking them

Bose is ending cloud support for its SoundTouch speakers, but they’ll remain functional now thanks to an open-source API and local controls.

The Verge
Appel à l'intelligence collective. Je lance une bouteille à la mer pour rédiger un livre blanc collaboratif.
Titre "24h Après"
Synopsis : Les US ont coupé toute connexion à leurs services pour toute l'Europe Qu'est ce qui se passe ? Quel plan de continuité basé sur des solutions open source ?
Mettez ici vos réflexions ;) Merci de votre contribution https://annuel.framapad.org/p/24hapres-aj1r?lang=fr
Tout apport et RT est le bienvenue !
Framapad annuel

New at haikuports, lasermagic 0.1.36, after the first recipe draft by @pulkomandy for this and some pointers found at #repology I was able to complete the package and make it available as an extention for Inkscape.

https://lasermagic.ci-yow.com/

#HaikuOS #haikuports #lasermagic #repology #Inkscape

Et voilà mon stand est prêt au marché de Noël de st Orens de Gameville ! J'y suis jusqu'à 19h.

#artisanat #noel #toulouse #occitanie #lasercut #kamishibai #bois

@mmu_man @denkodama
Oh noooo :,(
@mmu_man @denkodama yes it always the case for python plugin :/
And you can do with a cpp (in this case the plugin is in same memory zone) but it seems really complex and the example in Inkscape repo don’t compile you need to check this mr https://gitlab.com/inkscape/inkscape/-/merge_requests/7606 that should works.
CMake spring clean / fumigation (!7606) · Merge requests · Inkscape / inkscape · GitLab

A veritable spring clean of the build system to remove unused boilerplate and replace it with now-standard CMake ways of doing things. Much breakage expected! (Well, maybe for...

GitLab
@mmu_man @denkodama
If you have an example of input SVG with one that works as output perhaps we can built an Inkscape script to manipulate SVG and transform it. If the last error is a scale error it should be trick to change as xtool would like :D