| Tweetovi |
|
Yarden Shafir
@yarden_shafir
|
2 h |
|
Getting back in shape is haaaaaaard pic.twitter.com/vbs9p1tc0V
|
||
|
||
|
|
Yarden Shafir
@yarden_shafir
|
7 h |
|
If you'll be at @BlueHatIL tomorrow come say hi before I run away from Israel again! pic.twitter.com/rWqfU6irAu
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
10 h |
|
The first few times, absolutely. And these cracks and pops are the best 🤩
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
20 h |
|
Yes, that's true :)
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
24 h |
|
He asked if I know anyone else who might be interested, should I link him to you? 😜
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
4. velj |
|
I'm already booked for the next few months 😂
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
4. velj |
|
I was just offered a job as a magician's assistant while having lunch and editing a blog post.
This is my life.
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
3. velj |
|
In a way, yes. But mostly context switching between these two things became really difficult lately. Especially switching between the two distinct "personalities"
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
3. velj |
|
Me too 😅
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
3. velj |
|
The secret is having clones. I recommend at least 2 😜
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
3. velj |
|
At some point we'll need a distraction from another research project and accidentally write part 2 😂
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
3. velj |
|
After 62 shows, these intense 2 months are done! Got some time this week to go back to normal work and training before flying to @offensive_con!
Until then, I'm back to doing some cool new stuff that's I'm excited about 🤩 pic.twitter.com/BnbTeYYqls
|
||
|
|
||
| Yarden Shafir proslijedio/la je tweet | ||
|
BSIDES TLV
@BsidesTLV
|
2. velj |
|
This is how we start the week! What about you?
BsidesTLV 2020 CFP is open
cfp.bsidestlv.com/20/cfp
Submit and share.
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
2. velj |
|
Can your EDR detect symbolic link callback rootkits? Because ours sure as heck can't.
@aionescu and I wrote about these!
windows-internals.com/dkom-now-with-…
|
||
|
|
||
| Yarden Shafir proslijedio/la je tweet | ||
|
Saar Amar
@AmarSaar
|
21. sij |
|
In those CET times: It's possible to return in unwinding to any address in the SSP, causing a "type confusion" between stack frames ;)
I really like the different variants of this concept twitter.com/AmarSaar/statu…:) Type confusions are on fire! (stack frames, objc for PAC bypass) twitter.com/yarden_shafir/…
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
21. sij |
|
You beat me to it! Planned to PoC this at some point and never got the time. Would love to see a nice sample of this if you have one 😊
|
||
|
|
||
| Yarden Shafir proslijedio/la je tweet | ||
|
Alex Ionescu
@aionescu
|
20. sij |
|
Security jobs @CrowdStrike for anyone interested in C/C++ kernel development and testing (user-mode too), especially if you're into the Linux/macOS threat landscape.
All global openings, not just US.
crowdstrike.wd5.myworkdayjobs.com/crowdstrikecar…
crowdstrike.wd5.myworkdayjobs.com/crowdstrikecar…
crowdstrike.wd5.myworkdayjobs.com/en-US/crowdstr…
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
20. sij |
|
Congrats! It's an awesome conference 😁
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
16. sij |
|
Have to leave some things for other people to discover 😉
|
||
|
|
||
|
|
Yarden Shafir
@yarden_shafir
|
16. sij |
|
After a lot of work and some crypto-related delays, I couldn't be more proud to publish @aionescu's and mine latest research - The complete overview of CET internals on Windows (so far!):
windows-internals.com/cet-on-windows/
|
||
|
|
||