Do It by Code
This assembly code has a segfault, if you can, fix it please: section .text global _start _start: mov rax, 0x00752076756c2069 push rax mov rsi, rsp mov rdx, 0x7 mov rdi, 0x1 mov rax, 0x1 syscall (those who fix it, don't send…
rust devs when the compiler does not prevent them from burning things:
😁3
This media is not supported in your browser
VIEW IN TELEGRAM
Introducing Deep Research on Perplexity.
Deep Research lets you generate in-depth research reports on any topic.
Available to everyone for free—up to 5 queries per day for non-subscribers and 500 queries per day for premium users.
https://vxtwitter.com/perplexity_ai/status/1890452005472055673
Deep Research lets you generate in-depth research reports on any topic.
Available to everyone for free—up to 5 queries per day for non-subscribers and 500 queries per day for premium users.
https://vxtwitter.com/perplexity_ai/status/1890452005472055673
13ft
https://github.com/wasi-master/13ft
How does it work?
#paywall #python #selfhost
https://github.com/wasi-master/13ft
This is a simple self hosted server that has a simple but powerful interface to block ads, paywalls, and other nonsense. Specially for sites like medium, new york times which have paid articles that you normally cannot read. Now I do want you to support the creators you benefit from but if you just wanna see one single article and move on with your day then this might be helpful.
How does it work?
It pretends to be GoogleBot (Google's web crawler) and gets the same content that google will get. Google gets the whole page so that the content of the article can be indexed properly and this takes advantage of that.
#paywall #python #selfhost
Do It by Code
This assembly code has a segfault, if you can, fix it please: section .text global _start _start: mov rax, 0x00752076756c2069 push rax mov rsi, rsp mov rdx, 0x7 mov rdi, 0x1 mov rax, 0x1 syscall (those who fix it, don't send…
The issue:
lack of explicit exit.
when the process is getting terminated, you are going to get segfault, because the code does not terminate its execution, so the CPU just continues execution past the program itself.
Possible fixed:
adding these at the end of _start routine:
first solution:
or:
second solution:
==========================
can anyone say what is the difference between these two solutions?
lack of explicit exit.
when the process is getting terminated, you are going to get segfault, because the code does not terminate its execution, so the CPU just continues execution past the program itself.
Possible fixed:
adding these at the end of _start routine:
first solution:
mov rax, 60
xor rdi, rdi
syscall
or:
second solution:
mov rax, 60
mov rdi, 0
syscall
==========================
can anyone say what is the difference between these two solutions?
Valve somehow announced TF2 SDK for better mods + a lot of sources (for non-commercial use)!
Article, Comments
Article, Comments
SageMath
- GitHub repo
- Official tutorial
- some algebra examples
SageMath is a free open-source mathematics software system licensed under the GPL. It builds on top of many existing open-source packages: NumPy, SciPy, matplotlib, Sympy, Maxima, GAP, FLINT, R and many more. Access their combined power through a common, Python-based language or directly via interfaces or wrappers.
Mission: Creating a viable free open source alternative to Magma, Maple, Mathematica and Matlab.
- GitHub repo
- Official tutorial
- some algebra examples
Mouse Adventures Series
- Introduction
- Extracting the Firmware
- Writing a Disassembler
- Writing a custom tool
- Dumping and Parsing the USB Descriptors
- Enabling the Bootloader
- Writing an IDA Processor Module
- Dissecting the USB Code and Unbricking the Mouse
#Hardware #ReverseEngineering
An attempt to write a cross-platform tool that can manipulate "Tecknet Hypertrak Gaming Mouse" configurations without having to use the awful Windows-only tool it's shipped with.
- Introduction
- Extracting the Firmware
- Writing a Disassembler
- Writing a custom tool
- Dumping and Parsing the USB Descriptors
- Enabling the Bootloader
- Writing an IDA Processor Module
- Dissecting the USB Code and Unbricking the Mouse
#Hardware #ReverseEngineering
build a large language model "from scratch"
Article, Comments
https://github.com/controversy187/build-a-large-language-model
Article, Comments
https://github.com/controversy187/build-a-large-language-model
GitHub
GitHub - controversy187/build-a-large-language-model: Code samples from the book Build a Large Language Model
Code samples from the book Build a Large Language Model - controversy187/build-a-large-language-model
So, about the #ByBit hack that happened yesterday
What we know about it:
- hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet)
- around $1.4B (in form of wrapped ETH as far as I've heard) were stolen (total worth: around 400k ETH)
- the wallets were "multi-sig", which means it's required to provide more than just one single signature to do withdrawal operations on them; which makes it even harder to hack
- we still don't exactly know what technique they used to carry this operation, some are saying it was spoofing, some are saying it was definitely social engineering, some are saying it was malware.
can bybit cover the loss? they can, as they said it themselves. people are saying they started getting loan and stuff, but I'm pretty much sure they have enough assets in their reserve storage to cover the losses.
What we know about it:
- hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet)
A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading operations. For exchanges, hot wallets typically contain only a small portion of their total assets (usually 5-10%) that's needed for day-to-day transactions and withdrawals.
- around $1.4B (in form of wrapped ETH as far as I've heard) were stolen (total worth: around 400k ETH)
- the wallets were "multi-sig", which means it's required to provide more than just one single signature to do withdrawal operations on them; which makes it even harder to hack
- we still don't exactly know what technique they used to carry this operation, some are saying it was spoofing, some are saying it was definitely social engineering, some are saying it was malware.
can bybit cover the loss? they can, as they said it themselves. people are saying they started getting loan and stuff, but I'm pretty much sure they have enough assets in their reserve storage to cover the losses.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
In a multisig interaction there are 3 ways to get hacked:
- The multisig smart contract is owned
- The computer you're signing on is owned
- The hardware wallet (ledger, trezor) you're using is owned
The multisig contract in question here (Gnosis Safe) has shown to be incredibly robust, and hardware wallets are very difficult to attack, so the current weak point might be the computer (so most probably they somehow could get their malware to inside of the environment of ByBit).
these are just my guesses tho, there have been no official statement regarding this so far.
- The multisig smart contract is owned
- The computer you're signing on is owned
- The hardware wallet (ledger, trezor) you're using is owned
The multisig contract in question here (Gnosis Safe) has shown to be incredibly robust, and hardware wallets are very difficult to attack, so the current weak point might be the computer (so most probably they somehow could get their malware to inside of the environment of ByBit).
these are just my guesses tho, there have been no official statement regarding this so far.
Do It by Code
ETH be like: le code is law but when code is bad we rollback
The reason I said this:
around 6 years ago (2016), a major hard-fork happened in ETH network.
"but when code is bad we rollback" - This refers to when the Ethereum community decided to do a hard fork to reverse the effects of The DAO hack, where a hacker exploited a vulnerability in The DAO's smart contract code to steal about $50 million worth of ETH. Instead of accepting this as "code is law," the community voted to essentially roll back the blockchain to return the stolen funds.
around 6 years ago (2016), a major hard-fork happened in ETH network.
On June 17, 2016, the DAO was subjected to an attack exploiting a combination of vulnerabilities, including the one concerning recursive calls, that resulted in the transfer of 3.6 million Ether - around a third of the 11.5 million Ether that had been committed to The DAO - valued at the time at around $50 million.
"but when code is bad we rollback" - This refers to when the Ethereum community decided to do a hard fork to reverse the effects of The DAO hack, where a hacker exploited a vulnerability in The DAO's smart contract code to steal about $50 million worth of ETH. Instead of accepting this as "code is law," the community voted to essentially roll back the blockchain to return the stolen funds.
Do It by Code
So, about the #ByBit hack that happened yesterday What we know about it: - hot wallet(s) were drained (some news sources are also saying it was a cold storage wallet) A "hot wallet" is a cryptocurrency wallet that is actively being used for immediate trading…
there isn't many more reliable news about this than what we already know tho.
but apparently, the group behind this, is called lazarus-group, and it's not their first time doing this:
- September 2024: BingX hack (~$52 million)
- July 2024: WazirX hack (~$235 million)
- May 2024: DMM Bitcoin Hack (~$305 million)
now if we go a little bit deeper in this:
The Lazarus Group is a cybercrime group that has been active since at least 2009. It is commonly believed to be an advanced persistent threat (APT) group affiliated with the North Korean government.
now what is APT exactly?
APT refers to a threat actor with the resources necessary to pose a sustained threat to a organizations or companies. Often, APTs are sponsored by nation-states or some organizations, which provide them with the resources required to attract and train top talent and to develop or acquire sophisticated tools. These APTs will typically carry out attacks to support the goals of their sponsors
so...does that mean they are being sponsored by The DPRK? we can't definitely say so, but it's highly likely in my opinion.
If you have more information about this security incident, or about the group behind it in general, feel free to comment I guess
but apparently, the group behind this, is called lazarus-group, and it's not their first time doing this:
- September 2024: BingX hack (~$52 million)
- July 2024: WazirX hack (~$235 million)
- May 2024: DMM Bitcoin Hack (~$305 million)
now if we go a little bit deeper in this:
The Lazarus Group is a cybercrime group that has been active since at least 2009. It is commonly believed to be an advanced persistent threat (APT) group affiliated with the North Korean government.
now what is APT exactly?
APT refers to a threat actor with the resources necessary to pose a sustained threat to a organizations or companies. Often, APTs are sponsored by nation-states or some organizations, which provide them with the resources required to attract and train top talent and to develop or acquire sophisticated tools. These APTs will typically carry out attacks to support the goals of their sponsors
They often develop their own malware and have their own set of tools and a team of specialists.
APT attacks are commonly attributed to a particular group based on the combination of the malware/tools used and the techniques used to deploy it. Some groups have their own custom malware that is only used by them, while others may use the same tools as other groups. Groups also differ in their choice of targets, attack techniques, and other factors. This means that, while the attribution of a cyberattack is never guaranteed to be correct, it is possible to identify the group behind an attack with high confidence.
so...does that mean they are being sponsored by The DPRK? we can't definitely say so, but it's highly likely in my opinion.
If you have more information about this security incident, or about the group behind it in general, feel free to comment I guess
Do It by Code
ByBit asked eXch to freeze the ETH that was stolen. eXch's response from their Bitcointalk thread 😬
Worren:
Looks like exch might get blacklisted by more exchanges potentially, for refusing to help bybit
The bybit hacker started using exch
This might be the end for exch in regards to using it for legitimate exchanges for Binance etc
Looks like exch might get blacklisted by more exchanges potentially, for refusing to help bybit
The bybit hacker started using exch
This might be the end for exch in regards to using it for legitimate exchanges for Binance etc