News for hackers. Stuff that matters.

hegzploit

Re:I've Acquired a New Superpower on Saturday January 18, 2025 @03:01PM (#42750975)
Cool site that I often use with this trick to impress some friends: https://www.spotthedifference.com/practice.asp?m=2&l=4
Re:Dumping Firmware for fun and learning [pdf] on Monday January 22, 2024 @08:00AM (#39089019)
Is the video for this talk available?
Re:Modeless Vim on Tuesday January 16, 2024 @07:38AM (#39012630)
for a moment there, I was wondering why they'd install a JavaScript engine in a tesla.
Re:Fairphone 5: Keeping it 10/10? on Friday December 08, 2023 @07:54AM (#38568430)
Mind sharing any source about the harmful effects of electromagnetic radiations coming from ear buds? I always believed these were negligible compared to the radiation we are exposed to everyday.
Re:Beej's Quick Guide to GDB (2009) on Monday November 06, 2023 @07:42AM (#38161810)
There is also GEF, which is widely used by the reverse engineering and CTF community.

https://github.com/hugsy/gef

Re:Show HN: Android Hacker News Widget and App on Saturday September 16, 2023 @07:50AM (#37533984)
Nice, I have been using harmonic. wish It had a notifications for comment replies.
Re:500'000€ Prize for Compressing Human Knowledge on Wednesday September 13, 2023 @11:39PM (#37504706)
because, then you will have beat pied piper in the market.
My parents did something similar, limiting my computer usage to 1hr/day and they'd sometimes enforce it by confiscating the laptop from me etc..., I remember one day my dad went to do a call so I ran mimikatz on his PC and dumped the windows password. so I can use it whenever he's asleep/away.

Not my proudest moment but I used to do anything to get extra time on the computer, I work full time as a security engineer now.

I think that's correct behavior there.
Re:Ask HN: Who wants to be hired? (July 2023) on Monday July 03, 2023 @07:43PM (#36580286)
Location: Cairo, Egypt

Remote: Yes

Willing to relocate: Yes

Technologies: Python, x86/x64, C, IDA, etc...

Résumé/CV: http://hegz.io/resume.pdf

Email: [email protected]

I'm looking for a vulnerability research position either at the hardware or the software side, I'm an electronics and communications BSc nearing my graduation.

I have been hacking since I was 12, learned VB.NET as my first programming language and have come a long way since, right now I love binary exploits, memory corruption and low-level stuff. I love the hardware side too! (side-channel attacks, fault injection, etc...). I'm very flexible and down for a new challenge.

Re:The tiny corp raised $5.1M on Thursday May 25, 2023 @10:52AM (#36071462)
adding upon this comment to why the two cardinalities are not equal, on one hand we have the set of integers {..., -2, -1, 0, 1, 2, ...} and they can be put into a bijection with the set of natural numbers {1, 2, 3, 4, ...}, this is done by rearranging the set of integers like {0, -1, 1, -2, 2, -3, 3, ...}. so this is a countably infinite set (one that has a cardinality of ℵ_0)

As for the set of real numbers, we have the subset of irrational numbers which are uncountably infinite (see cantors diagonalization argument) thus making the whole set of real numbers, a set whose cardinality is ℵ_1.

The annotated turing book goes into this pretty well in the first couple pages.

I had a similar experience with my domain, hegz.me, which I had purchased from Namecheap. I allowed it to expire and did not pay the redemption fees, thinking I could buy it again at a later time. However, to my surprise, after the redemption period had ended, it was listed for a price of $2,888. Can you explain why this is the case?
Re:NSA Ghidra software reverse engineering framework on Wednesday March 29, 2023 @01:14PM (#35360201)
I'm interested in this stuff, care to share some good starting point?
Re:NSA Ghidra software reverse engineering framework on Wednesday March 29, 2023 @10:35AM (#35357892)
here's one way I love to think about it, A RAT will go all the way to try and persist, hide from AV, load other components from some remote endpoint. It will trigger so much events that can be detected by an AV. on the other hand, TeamViewer will not try to hide what Its doing, there's also a lot more stuff at play here since this is just heuristic analysis, AVs tend to be more complex and incorporate more methods of analysis like signature-based detection and integrity checking, etc...
Re:The tech downturn seen through Hacker News comments on Thursday March 02, 2023 @04:39PM (#35002468)
poe's law to the rescue
Re:GOTOphobia Considered Harmful (In C) on Monday February 27, 2023 @03:34AM (#34954283)
Where would once find examples of such code?
Re:Ask HN: Share Your Personal Site on Friday January 06, 2023 @07:54PM (#34283695)
here's mine: https://hegzploit.github.io/

Did a recent revamp, not proud of the excessive JS but it is what it is, also I've started using stable diffusion to generate thumbnails for my posts which I really like, now the only thing missing is to start blogging actively.

Re:Ask HN: Who wants to be hired? (September 2022) on Friday September 02, 2022 @07:32PM (#32696930)
Location: Cairo, Egypt

Remote: Yes

Willing to relocate: Yes

Technologies: Python, C, Assembly, GDB, Linux.

Résumé/CV: https://hegz.me/resume.pdf

Email: [email protected]

I'm looking for a remote position/internship that involves low-level programming and/or systems security.

Re:Ask HN: Who wants to be hired? (August 2022) on Monday August 01, 2022 @09:34PM (#32314260)
Location: Egypt

Remote: Yes

Willing to relocate: Yes

Technologies: GDB, Ghidra, GNU/Linux, Python, OCaml, C, x86asm, Metasploit. (stuff I enjoy using though not necessarily fluent at)

Résumé/CV: https://hegz.me/resume.pdf

Email: [email protected]

Hey,

I'm Yusuf, I'm currently an electrical engineering undergraduate in my senior year, I love cybersecurity and hardware.

mainly stuff that has to do with pwn and exploit development, I've been only doing CTFs from time to another. I'm an okay programmer (I often write scripts in python)

Ideally, I would love a remote position for the time being, I consider relocating after I finish my bachelor's in the coming year, I'm looking to see what jobs are out there.

Re:Ask HN: Does anybody still use bookmarking services? on Thursday June 23, 2022 @08:59AM (#31848421)
Raindrop*
Re:Ask HN: Does anybody still use bookmarking services? on Thursday June 23, 2022 @08:57AM (#31848403)
I'm using raindrops across all my devices for curating links and tagging them.

It's a nice tool.

Re:Zachtronics: Last Call BBS on Thursday June 16, 2022 @01:12AM (#31762618)
I've got Shenzhen I/O recently and the game is amazing, though It's a bit tougher than real life assembly programming for the constraints it imposes on you in order to pass the level.
Same applies to a lot of security oriented tools, most notably metasploit which had these same accusations when it came out long ago, nowadays it's no big deal as exploitation frameworks are now more accessible. same applies to a lot of niche technologies that can be misused.
Would it be possible to spoof the host and get free internet, that's something I've always thought about when facing such limits.
Re:My website is one binary on Wednesday April 06, 2022 @10:01PM (#30939837)
I'm sure this is late, but OP might like zola, It's a SSG that's contained in one binary (written in rust), It's lightweight and more barebones than most SSGs imo.

been using it and have enjoyed it so far.

Older »