This is a really neat idea. I’m frequently put off by large highly distributed (among files and dependencies) codebases with no obvious entry point. I wanted to make some changes to GNU’s mailutils and the code felt genuinely incomprehensible (BSD’s implementation of mail was a bit easier).
Perhaps another approach is to parse ptrace.
Indentation can be (and should be) tabs, EOL is it’s its own thing either \n or CRLF which Python source code did actually care about as recently as 2.3.
Assumptions like this is why most people should stick to verbose languages with lots of guardrail braces.
To be pendantic, it’s level of indentation in Python that has semantic meaning, not whitespace.
Hobbyist here, Is it normal for businesses to be having 50 mil rows to insert into a 50 columns wide database via a 2100+ parameters query, 15000 inserts at a time to a single DB?
So you want to make a frontend for emulators like emulationstation?
Job title: Cybersecurity Engineer
Actual Job: DNS Janitor
Yup. One of the vestiges of corporate internet. I tried to make a less ideological argument for wider appeal but I absolutely agree with you.
shitty illegal crypto
Opinions. Irrelevant. What is and isn’t “shitty” is a matter of opinion. Obviously fuck casinos and crypto scams but it ain’t relevant.
The explanation you linked on the other hand is valid. I think it’s a little ridiculous though that Cloudflare can’t do any sort of geo-restriction instead. Just about everything is illegal somewhere.
Of course you can’t find examples because
I can’t be arsed.
https://old.reddit.com/r/programming/comments/1d14rb7/cloudflare_took_down_our_website_after_trying_to/ is the most recent Cloudflare drama. They’ve been known to fuck customers before but I can’t really find specific examples. Obviously their protection can also be overzealous and block legitimate traffic too, which pisses off users as well.
Beyond that there’s many more philosophical reasons to hate Cloudflare - they’re a highly centralised point of failure and like in the story linked above could at any time “alter the deal”, so to speak. As an advocate for the free and open internet I wouldn’t consider them a force for good any more than Google, Facebook or Amazon.
They’re also hated for blocking privacy tools like Tor and blocking scraping, which does suck, but if cloudfail doesn’t work anymore you can still always search SHODAN for website title/headers to see if the LB is accessible directly via the internet. DNS management at medium sized corpos is usually a clusterfuck so it’s definitely a non-zero chance.
More hellish complexity
Hell yeah
That’s fine, I think for my purposes it’s better to start simple with the basic concept of it first, then add complexity by learning about the protections and how they have/could be circumvented.
Thanks! This is very helpful
This resource was 100% exactly what I was looking for. Now gonna setup an env and play with the examples! Thanks so much!
I agree, I think for now I’d like to try to create a demo exploit and exploitable program like this without considering ASLR et al. and then at some point in the future perhaps look at a return to libc type deal to understand that as well.
Interesting point.
This makes it seem like the whole concern about memory safety has become almost redundant, the chances of exploitation are just so remote, it must take incomprehensible work to discover a functional exploit that would be useful to attackers in modern software
Yeah I’m a big fan of this actually! I remember putting together a half adder with some breadboards, never got to the full computer because I didn’t have the drive to do so and felt like I understood the concepts well enough, but yes this is awesome!
Yeah I fully agree with the former in particular. The GRC side of things is just not that interesting and not that valuable. I do vulnerability management as a job which is somewhat depressing after a cybersec MSc, but honestly a job is a job and I don’t really believe it produces that much value to anyone, but neither does the entire company I work for, the entire system we live under incentivizes waste, and who am I to argue as long as I get paid?
When it comes to low level stuff, this is purely curiousity and self-fulfillment of understanding for me.
You can’t. You either go into work and learn to solve complex problems or pivot to something else. For me it was the latter, I’m IT brainlet now, but every time I come back to brushing up on programming there’s like no middle ground with projects, I don’t have the time or really energy to commit to building a 3D video game engine in C or an OS, and learning pointer arithmetic for multiple iterators all just to make a palindrome checker CLI feels lame and building a clone of Spotify but in some new webdev thing of the week to some tutorial is hard to be excited about.