Forwarded from Hacker News (yahnc_bot)
Fast Virtual Functions: Hacking the VTable for Fun and Profit https://medium.com/@calebleak/fast-virtual-functions-hacking-the-vtable-for-fun-and-profit-25c36409c5e0
Medium
Fast Virtual Functions: Hacking the VTable for Fun and Profit
Exploiting the VTable to eliminate overhead, speed applications such as games up, and create flexible architectures in C++.
🤯1
Please open Telegram to view this post
VIEW IN TELEGRAM
GitHub
GitHub - boost-ext/te: C++17 Run-time Polymorphism (Type Erasure) library
C++17 Run-time Polymorphism (Type Erasure) library - boost-ext/te
🤔2🤯2✍1
Forwarded from Hacker News (yahnc_bot)
Rye: Homoiconic dynamic programming language with some new ideas https://github.com/refaktor/rye
GitHub
GitHub - refaktor/rye: Programming and interaction language. Flexible about syntax, strict about state.
Programming and interaction language. Flexible about syntax, strict about state. - refaktor/rye
👍3🤯1
Forwarded from &'a ::rynco::UntitledChannel (Rynco Maekawa)
GitHub
GitHub - LingLing40Hours/2048isyou: this project is made possible by dead people, dead dinosaurs, and outsourced research
this project is made possible by dead people, dead dinosaurs, and outsourced research - LingLing40Hours/2048isyou
👏1🆒1
https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_flow_layout/Introduction_to_formatting_contexts
MDN Web Docs
Introduction to formatting contexts - CSS: Cascading Style Sheets | MDN
This article introduces the concept of formatting contexts, of which there are several types, including block formatting contexts, inline formatting contexts, and flex formatting contexts. The basics of how they behave and how you can make use of these behaviors…
🤔1
Forwarded from Hacker News (yahnc_bot)
Monogon: A Linux userland in pure Go https://github.com/monogon-dev/monogon
GitHub
GitHub - monogon-dev/monogon: The Monogon Monorepo. May contain traces of peanuts and a ✨pure Go Linux userland✨. Work in progress!
The Monogon Monorepo. May contain traces of peanuts and a ✨pure Go Linux userland✨. Work in progress! - monogon-dev/monogon
🥴1
Forwarded from 每日消费电子观察 (无羽の翼 (｢ • ̀ω•́ )｢)
耗时 4 年时间，从零开始打造的 FuryGPU 显卡亮相：运行《雷神之锤》可 60 FPS
https://www.tomshardware.com/~
https://www.ithome.com/~
基于 Xilinx Zynq UltraScale+ FPGA 设计，开源。
为现代 Windows 版本提供完整的软件和驱动程序栈。
可以在 Windows 上运行旧版游戏软件。
https://www.tomshardware.com/~
https://www.ithome.com/~
基于 Xilinx Zynq UltraScale+ FPGA 设计，开源。
为现代 Windows 版本提供完整的软件和驱动程序栈。
可以在 Windows 上运行旧版游戏软件。
Tom's Hardware
New open source GPU is free to all — FuryGPU runs Quake at 60fps, supports modern Windows software
FuryGPU is currently capable of running Quake at 720p and 60fps.
Forwarded from &'a ::rynco::UntitledChannel (Rynco Maekawa)
根据安全研究人员 Flippo Valsorda 得到的新消息，这是一个受限且不可重放（gated/unreplayable）的远程代码执行（RCE）后门，而不是之前认为的认证绕过（auth bypass）后门。
在运行被开洞的函数之后，该后门会从远程连接到这台服务器的人提供的 RSA 公钥（N）中提取载荷。后门会（在执行一系列检查后）用一个固定的 Ed448 公钥验证对服务器本地的公钥的签名，并将载荷传递给 system(...) 函数。如果验证不成功，后门还会回到正常的执行路径。
说人话：由于后门会验证对于被攻击的服务器的公钥的签名，只有拥有对应私钥的人（攻击者本人）才可以触发这个后门（“受限”）。攻击者可以用 system 函数在被攻击服务器上随意运行程序（“远程代码执行”）。（sshd 通常是以 root 用户运行的，所以攻击者应该会拿到最高权限？）
由于后门在验证失败的情况下会回到正常路径执行，除非后门中有 bug，否则不可能仅通过网络通信判断某台计算机中是否有这个后门。
（我不是网络安全研究人员，以上总结只来源于我对网安的基础了解，还请各位读者不吝赐教）
https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b
在运行被开洞的函数之后，该后门会从远程连接到这台服务器的人提供的 RSA 公钥（N）中提取载荷。后门会（在执行一系列检查后）用一个固定的 Ed448 公钥验证对服务器本地的公钥的签名，并将载荷传递给 system(...) 函数。如果验证不成功，后门还会回到正常的执行路径。
说人话：由于后门会验证对于被攻击的服务器的公钥的签名，只有拥有对应私钥的人（攻击者本人）才可以触发这个后门（“受限”）。攻击者可以用 system 函数在被攻击服务器上随意运行程序（“远程代码执行”）。（sshd 通常是以 root 用户运行的，所以攻击者应该会拿到最高权限？）
由于后门在验证失败的情况下会回到正常路径执行，除非后门中有 bug，否则不可能仅通过网络通信判断某台计算机中是否有这个后门。
（我不是网络安全研究人员，以上总结只来源于我对网安的基础了解，还请各位读者不吝赐教）
https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b
Bluesky Social
Filippo Valsorda (@filippo.abyssdomain.expert)
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's…
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's…
👏1