Brendan Dolan-Gavitt

Wow, @nickblack's notcurses is doing some super cool things with pure fixed-width terminal graphics! https://nick-black.com/dankwiki/index.php/Notcurses …pic.twitter.com/HmEVVOGF5z

Looks like they’ve updated the post with the coverage comparison I asked for - on the left, Dharma+AFL, on the right Vasilisk. Seems to do better at covering code in the optimizer! https://twitter.com/moyix/status/1209260338635558912 …pic.twitter.com/wKQynT4H8v

master and 10.0.0 died with errors related to AIDL (lost to scrollback, but I can recreate them if needed); 9.0.0 had a bunch of these. I also tried with the aosp_arm64-eng target, so I don't think it's 32 vs 64 bit relatedpic.twitter.com/MT7E7czUfC

Successfully tricked it into using the system go. Now a mere... 1407 prebuilt x86 executables to figure out how to replace.pic.twitter.com/yJAefguTpH

Heartbleed thing is pretty straightforward. Checks if tls1_process_heartbeat exists in http://libssl.so , calls SSL_CTX_set_message_hook to register a callback whenever an SSL message is received, and crashes by writing to 0xdedb1eed if msg type is DTLS1_RT_HEARTBEAT.pic.twitter.com/OGnH1NTHsy

Weird native libraries in the Facebook android app: - http://libdistract.so  - seems to be a disassembly/hook engine? - http://libheartbleed.so  - some kind of heartbleed mitigation that crashes the app when it receives an SSL heartbeat messagepic.twitter.com/FZUIZpoj4C

Congratulations to Dr. Kevin Gallagher, my first graduated PhD student (coadvised w/@evilproffy)!! His work on making the Tor browser more usable will help keep people safe and anonymous online :)pic.twitter.com/VjVE6IiYL6

Whee, managed to tickle some kernel bugs with the multicore implementationpic.twitter.com/m1DUINtNOw

Probably not a very good implementation since it takes longer than the naïve for loop pic.twitter.com/KlPRsRahUg

Preliminary attempt after a bunch of StackOverflow and ARM doc spelunkingpic.twitter.com/aITd4VnUZ6

If you're curious about LLVM+clang, it's only a few minutes morepic.twitter.com/5NwT6BIhl2

This was a very silly way to spend half an hour, but Merry Christmas from htop!pic.twitter.com/ub13RYEdSL

Also, of course, this is a much more satisfying htop view :) Gotta keep those cores busy!pic.twitter.com/qZqTfjhjuN

OK by popular request, benchmark for building LLVM on the new ARM server I mentioned yesterday. Config is default + gold linker + ninja build.pic.twitter.com/430OLLLkmV

Ok, slightly unusual htop problem... should I report a bug? pic.twitter.com/3a3Yb9qxR4

With rdtsc the histograms are sometimes separable and sometimes not; I'll see what they look like with the thread timer. Thanks!pic.twitter.com/KyON8irB5V

Relevant bits (I think) from CPUIDpic.twitter.com/LvMPxzVuzA

It was quite a bit worse (only a little over 50%) when I was using rdtsc, but using the timer thread trick from the SGX-Malware paper helped a lot. https://arxiv.org/abs/1702.08719 pic.twitter.com/L4aSpubt87

Pretty dang proud of my brother @Peckinpal (from the Mad About You revival) :Dpic.twitter.com/136j2QRqSq

GPT2 can program in several languages, it’s fun to see what it picked uppic.twitter.com/0riAypeEXj