News for hackers. Stuff that matters.

cryogenic_soul

Re:SoftICE on Monday January 20, 2020 @06:27AM (#22098097)
As I already mentioned in other comment, there was Syser debugger, but seems to be lost now.

https://qpdownload.com/syser-debugger/ (I am not sure how much is this link legitimate, so please be careful)

https://github.com/marakew/syser

Re:SoftICE on Monday January 20, 2020 @06:14AM (#22098049)
btw, there was also a Syser debugger, developed as a replacement for SoftICE, I never used it, except playing with it a little, few years ago, it was nice experience.

Although I heard they stopped the development, a little google -ing found a page with fresh release and win10 support claim, but I have no idea, how the legitimate is it https://qpdownload.com/syser-debugger/

also there is rewriting project on github, with last commit from 5th June, 2019 https://github.com/marakew/syser

Would appreciate to hear any info about current status of Syser

UPDATE: Just FYI, after lurking a bit over the github repo and associated links, found that gihub repo maintainer seems to be a pretty qualified reverse engineer, for example, he made his own independent skype protocol reconstruction (https://marakew.github.io) and the README.md in gihub repo say, that Syser sources were lost due to the corrupt flash drive, so I guess he was one of the (author?) developers of Syser.

Still would be happy to hear more, if somebody know the full story.

Re:A Coder Who Became a Crime Boss on Thursday January 31, 2019 @02:10PM (#19047726)
Thanks, I was not aware that Wikipedia mentions David Tesařík.

From what I can see in Wikipedia article, there is nothing about David Tesařík's legal dispute with Le Roux, actually it says that Le Roux had a dispute with SecurStar (a company which wanted to develop commercial disc encryption system).

Team member David Tesařík stated that Le Roux informed the team that there was a legal dispute between himself and SecurStar, and that he had received legal advice not to comment on the case. Because of this, he was unable to confirm or deny the legitimacy of TrueCrypt, keeping its development in limbo.[13][14] A new version was released in June,[15] but with a different digital signature and the developers now being referred to as "the TrueCrypt Foundation". The project received funding, the source of which is equally unclear.

https://en.m.wikipedia.org/wiki/Paul_Le_Roux

Altogether, it is still unclear how much Le Roux participated in TrueCrypt development (except E4M legacy), but it is clear that David Tesařík was one of the main developers of TrueCrypt

Re:A Coder Who Became a Crime Boss on Thursday January 31, 2019 @10:28AM (#19045397)
For those who are interested in TrueCrypt history, here (it is in Russian) https://news.softodrom.ru/ap/b19702.shtml (https://translate.google.com/translate?sl=auto&tl=en&u=https...) author did a small research and came to conclusion that TrueCrypt most likely was created by a Czech guy named David Tesařík.

Update: IMHO this research is the most comprehensive one which I saw regarding TrueCrypt authorship

Re:Hiding malware in Windows: The basics of code injection on Friday September 21, 2018 @12:23PM (#18040782)
Bit off topic, but in some sense, I really miss old DOS/Windows virus scene. A lot of people was writing viruses just for fun, and they were inventing very clever technics, such as polymorphic/metamorphic code or advanced anti debugging/disassembling tricks (which nowdays you can find in Denuvo :D ). Nowdays most of the malware are just money grabbers without any art in them, as a proof of my words - till now nobody were able to beat Z0mbie's "Zmist" from 2002

https://en.wikipedia.org/wiki/Zmist

I think on of the best attempts to fix calendar system was done by George Eastman (Kodak founder), who presented "International Fixed Calendar" created by Moses Cotsworth to League of Nations in 1923. At that time League of Nations was trying to redesign current calendar system and was accepting different proposals.

Unfortunately they failed to come to consensus between different calendar designs :(

https://en.wikipedia.org/wiki/George_Eastman

https://en.wikipedia.org/wiki/Moses_B._Cotsworth

https://en.wikipedia.org/wiki/International_Fixed_Calendar

https://en.wikipedia.org/wiki/International_Fixed_Calendar_L...

https://gizmodo.com/how-the-quest-for-a-perfectly-rational-c...

http://www.pnas.org/content/early/2018/01/25/1718185115

E-cig has been promoted as noncarcinogenic and a safer substitute for tobacco. In fact, recent studies show that E-cig smokers, similar to individuals on nicotine replacement therapy, have 97% less 4-(methylnitrosamino)-1-(3-pyridyl)-1-butanol (NNAL), an isoform form of NNK, a tobacco nitrosamine and lung carcinogen, in their body fluid than tobacco smokers.

Many people will now start to dig in. War is started and I hope somebody will find a way to totally remove/replace(with a stub) Intel ME before some critical vulnerability will be discovered in the Intel ME's network stack.

In white hats we trust :)

I mean, it is a first time that researchers get full access to the Intel ME firmware, so now it is became possible to reverse engineer it.
Here is some Russian guys having success in almost fully disabling the Intel ME.

http://www.pvsm.ru/informatsionnaya-bezopasnost/262876

(you can use Google translator from the top of the page, to translate content from Russian to English)