News for hackers. Stuff that matters.
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by kw71 on Wednesday May 06, 2015 @06:22AM (#9497616)
Terrible javascript on this page, all I see is a Mr Clean lookalike. Not going to bother fiddling to read it.

Sorry for the rude comment but I've finally lost it.

Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by xenophonf on Wednesday May 06, 2015 @07:44AM (#9497893)
I added an ABE rule to hide "evilsocket.net##.cover", which took care of that. Very poor behavior on behalf of the theme developer, if you ask me.
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by evilsocket on Wednesday May 06, 2015 @06:48AM (#9497691)
Mr Clean lookalike here :D Do you have any specific navigation problem on the website? i recently switched to a new blog theme, maybe it's that?
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by jarman on Wednesday May 06, 2015 @07:08AM (#9497744)
When js is disabled, fixed-positioned, 100% width, 100% height sidebar takes all page, hiding text
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by evilsocket on Wednesday May 06, 2015 @07:10AM (#9497752)
i see, well that's the default behaviour ... apparently js is not optional for that theme, im sorry :)
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by kw71 on Wednesday May 06, 2015 @01:00PM (#9500069)
Hi thanks for checking in!

http://i.imgur.com/wlgowRR.png

Can't move. :(

Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by userbinator on Wednesday May 06, 2015 @05:53AM (#9497531)
That's a bit surprising (particularly the IDA case), and probably an indication that the ARM code/data separator in these disassemblers needs some work... because my experience with x86 IDA is that it is not going to think some address is the start of a function and disassemble it unless it actually finds a control flow instruction like call/jump leading to it, and it starts at the entry point when it does code/data separation so it shouldn't falsely identify data as code (indirect jumps, however, do tend to make it stumble, so code that doesn't get disassembled is the more common case.)

Another possibility could be blind reliance on debug information that's causing it to think that symbol is a function; strip the binary and try again.

Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by evilsocket on Wednesday May 06, 2015 @06:52AM (#9497702)
good point although the post is just a simple PoC ... to fool the kind of behaviour you're talking about, one could simply install a signal handler, call the fake function, handle the sigsegv or whatever, and then use the function as data ... also, since ARM instrutions are 4 bytes each, you could play with 3 bytes declaration ... funny things happen ;)
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by pjmlp on Wednesday May 06, 2015 @06:43AM (#9497677)
And so yet another young developer discovers the tricks of the Assembly programming golden age. :)
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by evilsocket on Wednesday May 06, 2015 @06:46AM (#9497683)
more than 15 yr experience actually, I just thought that sharing some simple tricks would be a good thing
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by pjmlp on Wednesday May 06, 2015 @07:03AM (#9497732)
Sorry about that then, it is just that HN tends to be full of young Web devs rediscovering the ways of old. :)

Nice idea though.

Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by evilsocket on Wednesday May 06, 2015 @07:05AM (#9497737)
no offence taken at all :D and I totally agree with you, that's why it's so important to share old tricks despite their simplicity :)
Re:Using ARM Inline Assembly and Naked Functions to Fool Dis... by legulere on Wednesday May 06, 2015 @09:08AM (#9498290)
Basically what you're doing is marking data as a function in the executable/library metadata.