News for hackers. Stuff that matters.
Re:TLS Callbacks (2012) by landr0id on Sunday October 27, 2024 @10:55PM (#41967425)
I recently wrote my own PE loader and found handling TLS data the most annoying aspect of the process: https://landaire.net/reflective-pe-loader-for-xbox/
Re:TLS Callbacks (2012) by billpg on Monday October 28, 2024 @05:11AM (#41969099)
Anyone else getting this?

The connection for this site is not secure legend.octopuslabs.io uses an unsupported protocol. ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Re:TLS Callbacks (2012) by billpg on Monday October 28, 2024 @05:14AM (#41969122)
In case anyone needs it: https://web.archive.org/web/20240306134340/https://legend.oc... (The most recent snapshots look like a bad redirect.)
Re:TLS Callbacks (2012) by evujumenuk on Monday October 28, 2024 @05:25AM (#41969198)
Ironic. A blog post on TLS has TLS issues.
Re:TLS Callbacks (2012) by junon on Monday October 28, 2024 @02:20PM (#41974338)
Different kind of TLS.
Re:TLS Callbacks (2012) by evujumenuk on Monday October 28, 2024 @03:23PM (#41975038)
Yeah… I gotta work on my comedic delivery.
Re:TLS Callbacks (2012) by skissane on Monday October 28, 2024 @05:38PM (#41976646)
When I saw the title about "TLS Callbacks", I immediately knew what kind of TLS the article was talking about. But then when I saw the comment on ERR_SSL_VERSION_OR_CIPHER_MISMATCH – at the time there weren't many others – and I started to doubt myself – has TLS the network protocol added some new feature called "callbacks" that I'm unfamiliar with?
Re:TLS Callbacks (2012) by junon on Wednesday October 30, 2024 @11:40AM (#41996328)
Some libraries use callbacks for e.g. host certificate verification so the consuming application can manage its own whitelists.
Re:TLS Callbacks (2012) by junon on Wednesday October 30, 2024 @11:41AM (#41996343)
I figured but erred on the side of "maybe not a joke" :D
Re:TLS Callbacks (2012) by skissane on Monday October 28, 2024 @05:20AM (#41969160)
> Note: Very few targets will ever have a TLS section specified unless they are using it as an anti-debug mechanism as most program never use TLS.

Most programs don't use thread-local storage? Very many do, although it depends on what kinds of programs you are looking at.

Re:TLS Callbacks (2012) by landr0id on Monday October 28, 2024 @10:57AM (#41971640)
Things have certainly changed since 2012. Every Rust program uses TLS -- at least on Windows. Not sure about other platforms.