Uriya Yavniely

@uriya_yavniely

Security researcher, fan of ML and NLP Occasionally writes code on github:

Israel
Vrijeme pridruživanja: prosinac 2015.
5 fotografija ili videozapisa Fotografije i videozapisi

Tweetovi

Blokirali ste korisnika/cu @uriya_yavniely

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @uriya_yavniely

  1. prije 3 sata

    Looks like a very usefu guide for reverse engineering android apps

    Screenshot of the table of contents at maddiestone.github.io/AndroidAppRE
    🌟v2 of my free Intro to Android App Reverse Engineering workshop is here! 🌟 I've added 3 new exercises, walk-through videos for all 7 exercises, a new module on obfuscation, & exercises on vuln hunting rather than just malware. I hope it helps!
    Prikaži ovu nit
    Poništi
  2. proslijedio/la je Tweet
    3. velj

    We just released KotlinScriptProvider, an extension that allows running Kotlin scripts in Ghidra.

    12 proslijeđenih tweetova 22 korisnika označavaju da im se sviđa
    Poništi
  3. 2. velj

    This looks awesome - a vscode frontend that allows you to run on every process and even remotely on your android phone. This makes it easy to hook and run code in a closed source programs

    1:31
    VSCode x * VSCode based GUI * Interactive terminal * Remote file browser (Yes!) * Open source Not on market yet. But you can built it from the source:
    Prikaži ovu nit
    Poništi
  4. 27. sij

    Here is the fix they wrote: I think they should wrap the buffer with a safe structure that will check the size for them instead copy and paste the size checks everywhere..

    Starting off the week with yet more serious , although these have already been addressed. Researchers discovered two vulnerabilities in OpenCV which could be exploited by an attacker to execute arbitrary code.
    1 korisnik označava da mu se sviđa
    Poništi
  5. 22. sij

    PerfFuzz uses fuzzing in order to find out the worst case of an algorithm in the performance aspect. This is very cool and very creative and kind of forsee the future of security research - one day the techniques of security research will be used to find any bug

    Finally uploaded video of my talk "Expanding the Reach of Fuzz Testing", which I gave at UMass Amherst! Introduces PerfFuzz, FuzzFactory, FairFuzz, Zest + JQF, RLCheck and Autopandas 😃
    Prikaži ovu nit
    2 korisnika označavaju da im se sviđa
    Poništi
  6. 19. sij

    If you ever fought with gcc in order that it will not optimized out some important variable even though you compiled the program with -O0 - this might be the problem

    Poništi
  7. 14. sij

    Also, I'm planning to share more cheat sheets like this

    1 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  8. 14. sij

    I have a very good habit of documenting the problems that I ran into and their solutions so I won't have to solve it all over again. Recently I started to develop for android for fun. So here is my cheat sheet for Android development:

    1 reply 2 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  9. proslijedio/la je Tweet
    10. sij

    Our latest blog post reviews ’s research and explains how and why a bug in the ARM v8.1 PAN mechanism caused maintainers to roll back support for XOM pages. This is a case of one interfering with another.

    New blog post. ARM hardware bug. In the specification.
    10 proslijeđenih tweetova 12 korisnika označava da im se sviđa
    Poništi
  10. 31. pro 2019.

    I am here to say that 7 segments display is really not hard as you might imagine 😀

    1 korisnik označava da mu se sviđa
    Poništi
  11. proslijedio/la je Tweet
    30. pro 2019.

    Our favorite EU agency - - issued a new report defining good practices for the security of smart (connected & autonomous) cars. Bringing together players from across the ecosystem, it is expected to serve as the reference doc on this subject.

    8 proslijeđenih tweetova 10 korisnika označava da im se sviđa
    Poništi
  12. proslijedio/la je Tweet
    17. pro 2019.
    Odgovor korisnicima

    Heap disclosure in Windows libc for effectively forever. Reachable from some scripting languages too by using a similar code pattern:

    1 reply 48 proslijeđenih tweetova 133 korisnika označavaju da im se sviđa
    Poništi
  13. 11. pro 2019.

    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  14. 11. pro 2019.

    After last tedious advanture, I found this javascript library that does what I want - it applies all sort of electronic guitar effects on the audio input:

    The troubles I get into from having an unrooted phone are way too many. Currently in the sort of guitarix for android I need to run qpython and termux in parallel so that qpython will be able to record and play (thanks to SL4A) and termux will be able to convert 3gp to wav
    Prikaži ovu nit
    1 reply 1 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  15. 10. pro 2019.

    So ffmpeg needs to be used to convert the audio, but file permissions prevents me from running an executable in qpython. So thats where I need termux to run.. I hope I will finish it today

    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  16. 10. pro 2019.

    The thing is that qpython can't build python packages that involves c code, so pyaudio cannot be used (also, pyaudio uses alsa, I think, so it cannot be used what so ever). So the record is of SL4A, which creates a 3gp audio file

    1 reply
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  17. 10. pro 2019.

    The troubles I get into from having an unrooted phone are way too many. Currently in the sort of guitarix for android I need to run qpython and termux in parallel so that qpython will be able to record and play (thanks to SL4A) and termux will be able to convert 3gp to wav

    1 reply 1 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  18. proslijedio/la je Tweet
    9. pro 2019.

    I decided to create a tutorial called "Reversing Windows Internals" and explain about Windows Internals. The first part describes about Handles, Callbacks and Hidden Callbacks and ObjectTypes in Windows Thanks to for answering my questions.

    18 replies 530 proslijeđenih tweetova 1.150 korisnika označava da im se sviđa
    Poništi
  19. 8. pro 2019.

    I ran into it when looking for python based code to apply distortion effect on my ukelele sound. Yesterday I succeeded to use guitarix to do that, but guitarix is based on Jack, and I want it yo run in my android phone (which can't run Jack)

    2 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  20. 8. pro 2019.

    When searching for python code for doing some high-performance stuff there will be always people that will tell you that python isn't a high-performance language. But there might be also people who actually know python and will be able to help you.

    1 reply 4 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi

@uriya_yavniely još nije objavio nijedan Tweet.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·