platform security @playstation. previously @okta, @spotify

San Francisco, CA
Joined April 2011
I've just (re)written TaskExplorer Think Process Monitor but for macOS, open source, & much more powerful 💪🏽 Highlights: • CLI + JSON export • On-device AI assistant • Code signing + VirusTotal context • Live process/file/dylib/network activity objective-see.com/products/t…
10
50
7
347
31,274
I'd like to introduce Kuna, a new Rust-based decompiler that explores a highly experimental direction: self-refining decompiler development and usage. Or: a decompiler constantly improved by agents, made for agents. Kuna rivals the best in structuring now. Let's talk about it.1/
4
42
4
316
25,255
one person is 10x'ing their output with Claude while the rest of the org is busy dealing with the resulting mess
I talk to engineers at other companies every day and hear the same thing: one person is 10x'ing their output with Claude but the rest of the org hasn't caught up. Watching teams adopt AI, I keep seeing the same 4 steps. I mapped them out here: Steps of AI Adoption claude.ai/code/artifact/bfdf…
39
128
2
3,550
215,909
Omar retweeted
This is the type of malware game hackers build to bypass kernel anti-cheat. The same techniques can be used by malware authors to evade EDRs. A UEFI bootkit that injects into Microsoft's own Hyper-V at ring -1 before the OS even loads (easier than building a custom hypervisor from scratch). Four phase bootloader. Hypervisor VM-exit interception. EPT page shadowing. MSR virtualization. EFI memory map ghosting. TPM measurement spoofing. Reads like malware. Because it is. Videos and full technical breakdown in the link. Author: gsmll.github.io/hypervenom/w… #ReverseEngineering #Malware #AntiCheat
While gamers debate kernel anti-cheat, ring-1[.]io was shipping a Themida-protected UEFI bootkit that injects into Hyper-V, manipulates EPT entries, clones game page tables, and hides memory contents below the OS entirely. After partially deobfuscating their binaries and recovering critical functions, this is what was inside. Bungie and Ubisoft sued them. They found $12 million in Bitcoin and kept going. This is what kernel anti-cheat is actually fighting. back.engineering/blog/04/02/… Authors: @BackEngineerLab #AntiCheat #Malware #InfoSec
5
61
1
348
38,330
I’ve been keeping a secret for 5 years… For the first time, I’ll reveal the hidden 5th USB port on the original Xbox and how @MakeMHz spent the last year making the impossible possible with over 250,000 software patches. 🧵
24
213
9
2,683
247,682
Since my whole timeline is full of people swooning about @dark1x claim that getting from one point of Crimson Desert’s map to another took a whopping 4 hours, let me share what’s going through my mind: I’ve been doing Level Design for 17 years now - I designed most of the levels / world for the Ori games and I’m still supervising LD on Wicked, so I think I can share some valuable insight. I always find it a bit worrying when everyone gets excited about ‘oh my god, they crafted an insanely huge world!’. In fact, I have basically the exact opposite reaction, which is more like: ‘Oh no, they started with a huge terrain, I hope they had an army of level designers to actually create a meaningful world instead of just a procedurally crafted, empty husk.’ I know how difficult it is to design good levels and how much time it takes us to build ours - so just hearing that, I already know that there’s likely not going to be a lot of actual good level design in Crimson Desert. And I actually don’t want to sound too disparaging or ruin anyone’s fun because Crimson Desert certainly looks insane and I can’t wait to play it myself either, but I also know how important and how underrated good level and world design is for a title and what the effect is if you have to OK huge, but empty worlds. I’d say at this point even some of the best studios in the world weren’t able to crack that nut. Even Nintendo struggled for a long time with the world size of Breath of the Wild and ultimately they had to put hundreds of devs on it to fill it up with content, but even their content then mostly consisted of ‘oh, here’s another Korok Seed!’ and other such lukewarm experiences. Since procedural level generation produces pretty crappy results and since we don’t have AI yet that can actually create well designed levels, the only way out of feeling like being in an empty world is to make every inch interactive. Minecraft did that and it was quite genius - but I doubt that’s what CD is going for. I understand the allure of ‘they created an entire universe!’, but be careful what you wish for: In Gaming Worlds, huge usually also means extremely shallow.
95
20
11
443
69,265
The worst thing about dealing with C (and C++ to an extent) code is understanding and debugging macros that you didn't write. Here are a couple ways of how to deal with them!
11
89
3
1,106
64,523
that's new. somebody ask me to merge change of CNAME for github page
160
127
33
5,142
520,222
Did you know that when they say stuff like "The A18 uses TSMC's 3nm process" or "announced the 2nm node" The 3nm, 2nm actually doesn't mean anything?! It's just like a version number. They make it up. Literally nothing measures 2nm or 3nm. I certainly didn't know.
332
510
163
8,657
773,420
when i realized pink shower mold was intentionally spread by the US government over all of san francisco in 1950 as a bioweapon experiment called operation sea-spray i became a bit frustrated that i have to pay for it to be cleaned and then i get taxed on that. some guy died too
173
539
125
13,488
1,169,551
I'm here to once again remind people that for every topic on HN I've ever been truly an expert of or have had access to inside information: the HN commentary is impressively, yet very confidently, wrong. When reading other topics, I have to constantly remind myself that...
60
56
8
1,419
122,962
they don't want you to know this, but you can visualize arbitrarily hyper dimensional spaces in your head. just keep stacking!
Replying to @waitbutwhy
Just think of it like a bunch of 3D spaces stacked on top of each other, like in all the multiverse fiction, and you have magic universe sliding powers. Now 5D that’s rough.
253
893
156
9,990
1,317,157
15
92
13
898
81,469
Omar retweeted
Ed Zitron
@edzitron23 Apr 2024
Today's newsletter is the story of how Prabhakar Raghavan, Google's former head of ads - led a coup so that he could run Google Search, and how an email chain from 2019 began a cascade of events that would lead to him running it into the ground. wheresyoured.at/the-men-who-…
132
2,281
502
10,628
1,641,627
MSFT stock grants New hire: can’t code. has 30k twitter followers. $800k over 4 years. Current eng: finds 500ms backdoor, saves world. $67k retention grant, vests over 5 years.
40
215
23
5,656
1,451,211
Write up of the HVCI bypass vuln (CVE-2024-21305) with @aall86 ! tandasat.github.io/blog/2024…
4
115
3
289
50,583
Vim allows you to use any regex delimiter in your pattern substitution. No need to use / at all, try # instead: :s#/usr/local/bin#/usr/sbin#g This avoids escaping slashes. 👉 Read the post: bit.ly/3IQoG8d ✉️ Subscribe to our newsletter: bit.ly/vimtricks
1
16
76
7,866
Reinforcement learning explained xitter.cf/i/status/1731094134134…
139
2,149
410
12,355
2,625,247
Progress in a research project is when you go from now understanding one thing to not understanding three things
7
17
1
140
10,835
For too long has it been a mild inconvenience to not have the features of GEF in LLDB. We at Foundry Zero feel you deserve better! So we ported GEF features to LLDB. You're welcome. Read about it here: foundryzero.co.uk/2023/07/13… Find it here: github.com/foundryzero/llef
32
2
100
10,413