Collaborate Disseminate
When assigning priority for a bug, we had an internal discussion whether in C++ deleting an object more than once can result in code execution if the pointer to object can be corrupted. For the objects having virtual destruct… Continue reading Can deleting a non-inherited object more than once be exploited for code execution?
Python is a versatile, powerful language but sometimes it’s not the best choice, especially if you’re doing work in embedded systems with limited memory. Sometimes you can get away with MicroPython for these cases, but the best language is likely C or assembly. If you’re really stubborn, like [amirgon], and …read more
During my summer at Trail of Bits, I took full advantage of the latest C++ language features to build a new SQLite wrapper from scratch that is easy to use, lightweight, high performant, and concurrency friendly—all in under 750 lines of code.
Th… Continue reading Wrapper’s Delight
I caught this post on the The Surprising Number Of Programmers Who Can’t Program from the Hacker News RSS feed. Said post links to another, classic post on the same subject and you should read both before continuing. Back? Great! Let’s dig … Continue reading Polyglot FizzBuzz in R (Plus: “Why Can’t Johnny Code?”)
One of recent CVEs particularly 2019-13615 related to VLC media player, attracted my attention because of the developer reaction:
Any non-exploitable read overflow get CVSS of 9.8, like VLC is a server and you could do RC… Continue reading Exploitation tactics for heap over-reading?
We have a client that runs some native (C++) code on both Android and iOS, to mitigate MITM attacks we use certificate pinning.
This means that the binary includes some strings (const char * const bla = “XXXXXXXXXX”) that id… Continue reading Obfuscating "sensetive" strings in mobile client
We have a client that runs some native (C++) code on both Android and iOS, to mitigate MITM attacks we use certificate pinning.
This means that the binary includes some strings (const char * const bla = “XXXXXXXXXX”) that id… Continue reading Obfuscating "sensetive" strings in mobile client
Could somebody provide an example of a source code for a Sybil attack for a wireless sensor network and an comprehensive explanation about how it should/could be implemented?
If you have an opinion about C++, chances are you either love it for its extensiveness and versatility, or you hate it for its bloated complexity and would rather stick to alternative languages on both sides of the spectrum. Either way, here’s your chance to form a new opinion about …read more
Continue reading C++20 Is Feature Complete; Here’s What Changes Are Coming
I have a pet project where I am trying to develop a small antivirus program for Linux. I have already designed the mathematical model and the heuristic approach that I plan on using, yet now I am struggling when trying to fin… Continue reading Getting Linux process list and state C++ [on hold]