Collaborate Disseminate
This article claims that zip bombs cannot be used today as modern systems are too smart for it and no victim is going to slowly unpack terrabytes of data so zip bombs are basically useless.
Is this true? Are there any uses f… Continue reading What are some possible uses of a zip bomb?
This article claims that zip bombs cannot be used today as modern systems are too smart for it and no victim is going to slowly unpack terrabytes of data so zip bombs are basically useless.
Is this true? Are there any uses f… Continue reading What are some possible uses of a zip bomb?
It appears that Chrome, Firefox, and soon Edge, support the new Brotli compression algorithm over HTTPS only.
I can’t find anything on whether this new compression algorithm is susceptible to the BREACH attack. The only rele… Continue reading Brotli compression for HTTPS
It appears that Chrome, Firefox, and soon Edge, support the new Brotli compression algorithm over HTTPS only.
I can’t find anything on whether this new compression algorithm is susceptible to the BREACH attack. The only rele… Continue reading Brotli compression for HTTPS
Zip files, GZip files, and likely others, include information about the contained file, including the uncompressed size of the file. However, when extracting these files the number is meaningless as the actual data can be muc… Continue reading Are there valid reasons for compressed files (zip, gzip, etc.) to spoof file size?
Today it was posited to me that
sha256 has a domain large enough to never encounter a collision and
that because it is such a large domain and given that a reverse function was created for it, that it would make current c… Continue reading What are the implications of reversing hashes
Warez scene groups often compress their binary executables using UPX or similar software.
I’ve heard somewhere that they do this to obscure the algorithms they use from other groups, but I find this hard to believe as binar… Continue reading Is it possible to obfuscate binaries with UPX or similar software?
[Jaromir Sukuba] has an awesome BrainF*ck interpreter project going. He’s handling the entire language in less than 1 kB of code. Sounds like a great entry in the 1 kB Challenge. The only problem is the user interface. The original design used a 4 line character based LCD. The HD44780 controller in these LCDs have their own character table ROM, which takes up more than 1 kB of space alone.
[Jaromir] could have submitted the BrainF*ck interpreter without the LCD, and probably would have done well in the contest. That wasn’t quite enough for him though. He knew he could …read more
[CNLohr] needs no introduction around these parts. He’s pulled off a few really epic hacks. Recently, he’s set his sights on writing a simple, easy to extend library to work with the HTC Vive VR controller equipment, and in particular the Watchman controller.
There’s been a lot of previous work on the device, so [Charles] wasn’t starting from scratch, and he live-streamed his work, allowing others to play along. In the process, two engineers who actually worked on the hardware in question, [Alan Yates] and [Ben Jackson], stopped by and gave some oblique hints and “warmer-cooler” guidance. A much-condensed version …read more
Continue reading [CNLohr] Reverses Vive, Valve Engineers Play Along
I have a confession to make. I enjoy the challenge of squeezing software into a tiny space or trying to cut a few more cycles out of a loop. It is like an intricate puzzle. Today, of course, there isn’t nearly as much call for that as there used to be. Today even a “small” microcontroller has a ton of memory and resources.
Even so, there’s still a few cases where you need to squeeze those last few bytes out of memory. Maybe you are trying to maximize memory available for some purpose. Maybe you are anticipating mass production and …read more
