News for hackers. Stuff that matters.

lqqq

Re:Using QEMU-user emulation to reverse engineer binaries on Wednesday May 05, 2021 @10:23AM (#27050231)
I use qemu-user to run applications. For programming and RE, qiling is more suitable.
I am waiting for (YC22) BloodySell: Auction Your Blood Online
Re:A Simplified E-graph Implementation on Saturday April 03, 2021 @11:24PM (#26686656)
Re:NFTs unbundle ownership from enjoyment on Wednesday March 31, 2021 @01:01PM (#26649804)
> What if hackers hack into it and scramble all the data. What if the artist happens to alter the data him/herself?

The same questions also apply to blockchains. But if a blockchain is compromised, then who will I sue?

I saw a lot life coach cults in recent years on Facebook/Twitter. They promise about improving mental health, career progression, dating life, ect. I believe they are mostly multi level marketing scams.

This is even beyond bs. What is he gonna do? Coach people how to born rich, how to cut ribbon? I hope there will be Kardashian life coach teaching me how to twerk. (Serious note: I know having him is good for business)

Re:Navigate your code like it's 2021 on Thursday March 04, 2021 @12:33PM (#26345302)
The scrollable tiled window concept is really nice! I hope more softwares / desktop environment adopt this.

This alone does not beat search / recent buffer like features for me. Besides goto def feature, I usually use search in project, go to last changes and avy/kjump to navigate codebases.

The HN title is so confusing. If you don't get it at first like me: 4 means "for" here. That makes a lot more sense.
Re:Browser Fuzzing at Mozilla on Tuesday February 09, 2021 @09:58PM (#26085295)
AFL is not that smart. If you only do bit flippings on the inputs, then fuzzing a JavaScript engine/dom engine will take forever. The "domino" (Mozilla internal tool) looks quite powerful as it generates semantically correct dom. Sadly, it is not open source. Google has a tool designed specifically to fuzz JavaScript engines, Fuzzilli[1], which hackers have been using for bug hunting.

[1]: https://github.com/googleprojectzero/fuzzilli

Re:SymQEMU: Compilation-based symbolic execution for binaries on Wednesday January 20, 2021 @11:15AM (#25848175)
I just discovered SymCC and wanted to play with it this weekend. Any tips from hackers using symbolic execution + fuzzing technique to hunt security bugs?

> on some benchmarks, it even achieves better performance than the source-based SymCC

This is cool.

Re:The scope of forced labor in Xinjiang is bigger than we knew on Wednesday January 06, 2021 @11:35AM (#25659243)
Not forever but long enough. Note that they are involved in numerous regions economically and politically, placing different debt-traps. The one child policy is also removed. Automation is good, yet it is not as cheap as slavery. I don't see anything like you described will happen anytime soon without major changes of political powers, policies across the globe.
Re:Why are boys academically underperforming? [audio] on Thursday December 31, 2020 @12:57PM (#25595099)
Not explicitly. But your name, LinkedIn account, Github profile picture, clubs... carry those information.