This profile might be incomplete.
Open on infosec.exchange lcamtuf :verified: :verified: :verified:Substack:
Book:
Contact infoWebsite:
Wall 12 posts
The BASIC feature of the C language standard permits the use of familiar line numbering: https://godbolt.org/z/dfsKGqYGz You can use an if () statement to see if the feature is supported by your compiler.
Show previous comments
@lcamtuf that is some proper cursed C there. And can you really guarantee the side effects of an array initialisation will be in order?
Show previous comments
@lcamtuf That reminds me of this Springer meme. Original (?) source: https://www.reddit.com/r/mathmemes/comments/uz8twg/its_funny_because_its_true/ OK, this is a silly but trippy post - Sir, there's a cat in your mirror dimension: https://lcamtuf.substack.com/p/sir-theres-a-cat-in-your-mirror-dimension OK, so here's my slightly more eloquent take on the xz thing, complete with a zinger closing paragraph: https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor
Show previous comments
@lcamtuf@infosec.exchange I hear you and I think what you're saying is the real villain is systemd. The unsung heroes of today are all the backdoor authors who do proper benchmarking and profiling, so that they don't get caught because SSH logins are too slow. Did you ever wake up in the middle of the night wondering what would happen if you applied JPEG-style lossy compression to text? Well, here's the tool you've been waiting for - The Text Lossifizer: https://lcamtuf.coredump.cx/lossifizer/
Show previous comments
@lcamtuf it would be fun to try a keymap that puts letters close to their common typing error neighbors. Lossy compression that can be further improved by applying automatic spellchecking. @lcamtuf I would say this is a kind of lossy data transmission. Compression would suggest a restricted character set intended to convey the same message.
Show previous comments
@lcamtuf the man is a national treasure. Money Stuff is the only newsletter I have ever signed up for that I legitimately read every day. I hate Elf on the Shelf. I think it teaches children that it's OK to live under constant surveillance. Why not come up with a more benign explanation, such as that Santa is just one of many parties buying behavioral information from an online data broker?
Show previous comments
@dan Yeah, rules-as-written, the Elf is a fascist. He plays a different role at our house - a bringer of snacks, a player of tricks, and eventual confidant. :) "Dad, why does Santa only deliver presents on Christmas Eve?" "It's because he spends the rest of the year in prison for breaking and entering." You know that horror film staple where the victim is trying to get away from an axe murderer and they turn the key but the car won't start? Well, it's time to upgrade that trope, so to speak
Show previous comments
@lcamtuf I'm a software person and I haven't had a car for over a decade but, if I ever have one again, it will have a electromechanical switch to start it, no software involved. @lcamtuf Another one with Teslas (maybe other EVs, I don't know?) is that they can go into a deep sleep, and can take multiple minutes to wake up enough to be driven. Every time that happens to me, I think about axe murderers. |
@lcamtuf
Nice light saber!
@lcamtuf yes, this cryptoanalizer is ready for some social engineering and passwords guessing, it's very good for those longer passwords until we have quantum 'puters.
@lcamtuf
In Germany we call this 'Hartloeten', means hardsoldering, brazing. Soldering with an alloy of copper and zinc at high temperature.