Ben Lincoln

@0x00C651E0

Penetration tester, senior security engineer, forward/reverse engineer, former principal security consultant. He/him.

city11 -inspectral
Vrijeme pridruživanja: svibanj 2015.

Tweetovi

Blokirali ste korisnika/cu @0x00C651E0

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @0x00C651E0

  1. Prikvačeni tweet
    14. sij

    The NSA immediately prior to hitting the submit button to report CVE-2020-0601:

    Poništi
  2. proslijedio/la je Tweet
    2. velj

    It's the year 2020, and we're still finding buffer overflows in programs written in C. Fortunately, those programs are only esoteric, rarely installed programs like... <checks notes> sudo.

    Poništi
  3. proslijedio/la je Tweet
    31. sij

    alright all you terrified dorks let me show you how to search for matching protein sequences because there is a CERTAIN GARBAGE PAPER OUT THERE

    Prikaži ovu nit
    Poništi
  4. 31. sij

    Concur's OCR reading a receipt from Enterprise (the car rental company) as "AGREONENT SANORY" is a great illustration of why Expensify uses the "let's just have a bunch of Internet randos transcribe receipts and call it 'SmartScan' - what could possibly go wrong?" approach.

    Poništi
  5. proslijedio/la je Tweet
    26. sij

    Figured you’d like this “Offensive information security researcher”

    Poništi
  6. 25. sij

    ...but they should. Elder gods' influences can clearly bridge worlds and span multiple lifetimes.

    Prikaži ovu nit
    Poništi
  7. 25. sij

    No one expects the Sherriff in _Bang!_ or the Engineers in _Terra Mystica_ to have a secret win condition of sacrificing the rest of the players to Yog-Sothoth. Especially if the players in those games weren't involved in the _Mansions of Madness_ game.

    Prikaži ovu nit
    Poništi
  8. 25. sij

    Rule modification: when playing _Mansions of Madness_ (or similar), if a character suffers an insanity effect caused by an elder god, roll 1d20. If the die roll (N) is greater than 17, the effect persists into the next N-17 characters that person plays in any other tabletop game.

    Prikaži ovu nit
    Poništi
  9. proslijedio/la je Tweet
    23. sij

    Larger than life size Hercules Beetle grub made out of strawberry lemon cake and vanilla meringue buttercream. If one of these plopped onto your plate would ya eat it?

    Poništi
  10. proslijedio/la je Tweet
    5. sij

    Controlling the reset vector was a key piece of the copy protection puzzle, especially for single-load games. Can't have filthy pirates breaking into the monitor with your precious game code still in memory! Even the sloppiest developers knew how to redirect reset to wipe memory.

    Prikaži ovu nit
    Poništi
  11. proslijedio/la je Tweet
    21. sij

    One of the apps we tested was using PD4ML for HTML to PDF, we got an XSS and later escalated to LFI using Iframe. But the funny part was PD4ML API supports attachment through <pd4ml:attachment> tag using which you can attach a file that lists directory or file content

    Prikaži ovu nit
    Poništi
  12. proslijedio/la je Tweet
    20. sij

    I've written a new article covering the final issue preventing near-perfect emulation of the SNES: exact cycle-timing of the SNES PPUs (video generators.) I've also proposed solutions that are beyond my abilities, so this article is also a call for help.

    Prikaži ovu nit
    Poništi
  13. proslijedio/la je Tweet
    21. sij

    Interested in the details of CVE-2020-0601/Curveball? I released a video on Friday going into the technical details of the Microsoft CryptoAPI vulnerability!

    Poništi
  14. 20. sij

    This game is the reason that ten-year-old me checked out _Neuromancer_ from the library - hoping to get hints. If I hadn't had some birthday money to spend on games, who knows how different I'd be today?

    Poništi
  15. proslijedio/la je Tweet
    20. sij

    Missed our stream? No problem! You can catch last weeks stream here:

    Poništi
  16. proslijedio/la je Tweet
    17. sij

    Story time: I had a pentest this week, in a locked down environment. It was a RDP like session. The system was preventing powershell, cmd, and other programs. No internet access. I started looking at LOLBins. I discovered I could use diskshadow.

    Prikaži ovu nit
    Poništi
  17. 18. sij

    I discovered recently that if Wireshark isn't autodetecting a particular protocol (e.g. NTLMSSP auth) you can tell it explicitly to use that dissector for traffic to/from a particular port. I posted the Lua script here, as it's based on an earlier reply:

    Poništi
  18. 18. sij

    I thought I'd do the same thing for my stream with , partly because the background wasn't super-interesting. It shows up way better in video form, but I was surprised how well it worked. It's somewhat like depth of field blur, but catches the light.

    Prikaži ovu nit
    Poništi
  19. 18. sij

    In J.W. Rinzler's excellent _The Making of Alien_, Ridley Scott is described as burning truly massive amounts of incense in the Nostromo sets to create the atmospheric look, even though cast and crew said it didn't make sense for a spaceship to be full of smoke.

    Prikaži ovu nit
    Poništi
  20. proslijedio/la je Tweet
    17. sij

    Our friend Ben Lincoln of The Lost Worlds () and Legacy of Kain creator Denis Dyack are live streaming a Blood Omen/ commentary/Q&A.

    Poništi
  21. proslijedio/la je Tweet
    16. sij

    since this was mentioned in a video lately - yes, these concepts I released a few years ago were for a Legacy of Kain: Blood Omen reboot which sadly didn't make it. I was the Art Director on the project and had a ton of fun working on it with a great team ♥️

    Prikaži ovu nit
    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·