News for hackers. Stuff that matters.

marlin

Re:A Hex Editor for Reverse Engineers on Sunday June 30, 2024 @07:16AM (#40836557)
^ Insightful!

I too have been working in this space for a while. Then I found out about kaitai stuct, lost some steam but regrouped. I do have some novel ideas and my dsl is less verbose than theirs :)

I have a DSL in go with cli tooling at https://github.com/martinlindhe/feng/

Re:Bottles – Easily run Windows software on Linux on Wednesday July 05, 2023 @03:41AM (#36597005)
Could you mention at least one of these open source projects like wine that under-delivered according to you?
Re:Update: U+237C ⍼ &Angzarr; on Sunday June 18, 2023 @04:13AM (#36378257)
In order to encode the ; as a character, when ; is being used as a separator.
That's a cool project. I use ImHex myself but wasn't even aware of this.

Over the years there has been a silly amount of projects in this space, it is very hard to keep track of them all.

I did try to summarize the ones I know about in the feng project, see here, under "SIMILAR WORK":

https://github.com/martinlindhe/feng/blob/main/RESOURCES.md

Was there anything in particular you wanted to bring to my attention about the ImHex pattern language?

From a quick glance it looks similar indeed, with the same basic building blocks as feng (data types and structs), while they use a rust inspired format, and I use yaml format (however I also use the rust-inspired data type naming u8, u16, s16 and so on).

A major difference is that feng strives to be usable with minimal/no programming (a custom dsl was developed around this idea), while the ImHex pattern language does look rather classic programming focused data processing (like 010 templates but more pretty syntax)

Yes, see the "if statements" section in the (very terse) documentation https://github.com/martinlindhe/feng/blob/main/TEMPLATE.md#i...

You can see it in use in the PNG format template, here: https://github.com/martinlindhe/feng/blob/main/templates/ima...

I am also working on a project in this space. It is a template format for binary data, and accompanying commandline tooling. It is usable today for tasks such as:

- generating structured binary diffs

- creating universal extractors, several custom game formats are covered already

It is in a early stage but would love some feedback!

https://github.com/martinlindhe/feng

Re:Fq: Jq for Binary Formats on Saturday June 03, 2023 @04:40PM (#36180338)
> This entire genre of tools has been a long time point of interest for me.

Same for me! It turned into a long journey and I am working on a solution that I am very happy about. I am yet to announce it publicly, but i been meaning to for so long already.

If you would like to check it out I would be happy!

You can use it to map / view content from a format there is a template for. Alot of common formats is already included and you can extend it using your own templates.

https://github.com/martinlindhe/feng

Re:Fq: Jq for Binary Formats on Saturday June 03, 2023 @04:24PM (#36180202)
> About a central database of binary parsers, I've been wanting this for ages too. The closest I ever found was augeas, but that's for configuration files.

I'm working on something, that is a open template format for binary file formats. It is usable today as a universal file extractor, with some bugs and limitations.

Check it out at https://github.com/martinlindhe/feng

Re:Fq: Jq for Binary Formats on Saturday June 03, 2023 @04:22PM (#36180187)
I'm working on something, that is a open template format for binary file formats. It is usable today as a universal file extractor, with some bugs and limitations.

Check it out at https://github.com/martinlindhe/feng

Re:Does Google Have A Secret “Translate” Service? on Tuesday May 13, 2014 @01:23PM (#7739372)
omg, that's hilarious!
EDIT: i realized i answered about btsync while question was about syncthing, sorry.

Regarding detecting file modifications: my friend had issues with his synology diskstation eating 100% cpu with btsync with around 50k files. With less files it was down to 20%. We never debugged it properly but it may be polling issues, but it could also have been out of ram-swapping issues (512MB ram was not enough).

Others have reported issues with many files:

https://forum.bittorrent.com/topic/23802-syncing-600gb-10-mi...

According to [1], "LAN sync" only works when file has already been uploaded to the dropbox servers.

If this is accurate, then I guess this is the issue i have noticed.

1: https://superuser.com/questions/663600/set-dropbox-to-only-u...

UPDATE:

Confirmed by [2], that Dropbox LAN sync indeed only works once the file reached their servers.

"Well, when you add a file to your computer's Dropbox, the file is then synced with Dropbox servers. Dropbox will then initiate the syncing process as soon as it determines a change has been made to the file. All linked computers and shared folders will then download any new version of the file. With LAN syncing, Dropbox will look for the new file on your Local Area Network first, bypassing the need to download the file from Dropbox servers, thus speeding up the syncing process considerably."

2: https://www.dropbox.com/help/137/en

Thats curious. I never got it working between Windows, Linux and Mac clients. Sorry for drawing conclusions.
Dropbox actually have a "Sync over LAN" checkbox. It just never seem to been implemented/enabled.

I actually just dropped Dropbox for btsync the other week and are very happy, it's iOS app even serves other clients with files over LAN.

Btsync however uses quite crappy crypto and is closed source etc etc.

Syncthing mentions they use TLS encryption, hopefully i can roll my own 8k keys.

I tried Sparkleshare last year aswell, but my experience was mixed. Also it relies on quite a different architecture (git) than a "versioning bittorrent protocol".

Looking forward to evaluating syncthing when time permits.

Re:Does Google Have A Secret “Translate” Service? on Sunday May 04, 2014 @03:43AM (#7693654)
Curiously, it translates to "It's a child in a candy" on my google translate session.
Re:One of my Drupal sites was hacked on Wednesday April 30, 2014 @08:42AM (#7672866)
the malware has XERATUTA string, https://github.com/wouters-frederik/help_me_clear_this_up/bl...

google reveals several posts about this one

Re:One of my Drupal sites was hacked on Wednesday April 30, 2014 @08:22AM (#7672793)
I started on a tool dealing with analysis, https://github.com/martinlindhe/PhpDeobfuscator
Re:Announcing the MIT Bitcoin Project on Tuesday April 29, 2014 @08:22AM (#7666424)
swap BTC for LTC. swap LTC for other BTC's, win.
Re:Announcing the MIT Bitcoin Project on Tuesday April 29, 2014 @08:21AM (#7666416)
No, i misunderstood OP, thought he meant HN, due to his wording.
Re:Announcing the MIT Bitcoin Project on Tuesday April 29, 2014 @08:19AM (#7666410)
Ah, i didnt realize that by the wording of OP.

also, thx someone for downvoting a helpful attempt.

i see the cancer found HN also

Re:Announcing the MIT Bitcoin Project on Tuesday April 29, 2014 @07:45AM (#7666284)
Dont understand your issue. the only javascript served by this page should be

  <script type="text/javascript">
  function byId(id) {
    return document.getElementById(id);
  }

  function vote(node) {
    var v = node.id.split(/_/);   // {'up', '123'}
    var item = v[1];

    // hide arrows
    byId('up_'   + item).style.visibility = 'hidden';
    byId('down_' + item).style.visibility = 'hidden';

    // ping server
    var ping = new Image();
    ping.src = node.href;

    return false; // cancel browser nav
  } </script>
for the <a> links, as such:

  <a id=up_7666264 onclick="return vote(this)" href="vote?for=7666264&amp;dir=up&amp;xxxx">
and this makes it surely works correctly even without javascript.
Re:Announcing the MIT Bitcoin Project on Tuesday April 29, 2014 @07:42AM (#7666274)
Students get 100$ each for silk road shopping, damn!
Re:Exec($_GET on Tuesday April 29, 2014 @07:18AM (#7666198)
You now also excluded thousands of true positives which dont present the code exactly as queried
Re:Exec($_GET on Tuesday April 29, 2014 @07:08AM (#7666159)
After looking at the search result i can see that most of the results have legit reasons.

Instead of half-assing the problem, please dedicate 10 minute of your life to look in, analyze & report one or two of the problems you find.

Also explain why you think this is an security issue.

You will:

  * help someone out by pointing out an issue

  * hopefully educate the person how to write better code

  * educate yourself in reading and understanding others spaghetti code
Re:Exec($_GET on Tuesday April 29, 2014 @06:38AM (#7666064)
You should. But be factual. No point in bringing the attitude.
Re:Exec($_GET on Tuesday April 29, 2014 @06:32AM (#7666048)
Horrible.. Been sending 2 security bug reports so far.
One i remember clearly was on my first programmer job in 2000. The other coders were poking at PHP but the company had several customers on WebCrossing [1], which at the time was considered one of the "serious" website building tools.

I had to customize WebCrossing to the needs of Svenska Spel [2], the swedish lottery company. They had about 200 pages of drawn screenshots how they wanted _EVERY_ detail to look.

The problem was WebCrossing did not offer much of customization built in, and i had to basically override every single template. Especially i had to create whole new forum code, because the WebCrossing way of presenting stuff was not how the customer wanted it.

Also, for some reason, aftonbladet.se, Swedens then (and still?) biggest news site had got 2 guys from WebCrossing USA office to come over and build their site.

Since i did the first gig, i also ended up rewriting the publishing system to aftonbladet.se:s forum from a "pre-moderation" system, into a self-moderating (post-moderation) system. The reason for this was beause the site managed to approve some nazi posts, and the publisher got fined [3].

After all this horror i could finally start learning PHP instead.

1: https://en.wikipedia.org/wiki/Webcrossing 2: https://web.archive.org/web/20010615000000*/http://chat.sven... 3: https://www.aftonbladet.se/nyheter/article10198408.ab

Re:Ask HN: Screenshot Saturday on Sunday April 27, 2014 @04:21AM (#7654371)
awesome site! this'll be my coding playlist for a while!
Re:LibreSSL on Tuesday April 22, 2014 @03:20AM (#7626270)
OpenBSD folks, what is your obsession with CVS????
I'm not seeing how these questions are relevant to very many swedes right now, with regard to ongoing world-wide & european political development.

We seem to have the same confused politics in Sweden as usual. Womens rights & equality is important and seeing some progress locally, while from a more global perspective we can actually expect this trend to go backwards.

A substainable economy is left to the "industry", and the government are selling out the last parts of the welfare.

We have a strong right-wing movement in Sweden now, which we didnt have since the early 90's. A movement whose european cooperatives are open fascists.

One of our negihbour counties are being invaded by Russia.

Sweden is in bed with USA and the UK with regards to signal spying (https://en.wikipedia.org/wiki/National_Defence_Radio_Establi... which puts Sweden in quite a bad spot against Russia. Russian cables go through Sweden and wiretapping of these cables is what the FRA are supplying to NSA / GCHQ. This is not even discussed in the Swedish media.

And still, you believe the Pirate Party's ideas are relevant for this year's election?

Older »