Understanding Binary File Components
Symbol Table Think of the symbol table as a directory for the "named things" within your code, like functions and global variables. When you compile a source file, the compiler creates an…
Control Dependence Graph and Data Dependence Graph
A Control Dependence Graph (CDG) and a Data Dependence Graph (DDG) are essential tools in computer science, particularly in compiler design and program analysis. They represent the dependencies between different parts of a program's code,…
WordPress site Migration from CentOS7 to Ubuntu24
Phase 1: Preparation on CentOS 7 (Source Server) First, you need to back up your data. Log in to your CentOS server via SSH. 1、Backup the DatabaseRun this command to…
How to reset ZeroTier moon node
ZeroTier Installation ZeroTier provides a script that detects your OS, adds the correct GPG keys and repositories, and installs the package for you. # Install curl (if missing): sudo apt…
Keynote: Perspectives on Trust in Hardware Supply Chains
https://www.youtube.com/watch?v=Nv92TuocnwA This talk, titled "Keynote: Perspectives on Trust in Hardware Supply Chains" [00:00] by Bunny Huang, discusses the complexities and vulnerabilities within hardware supply chains. Key points from the talk…
Tinker Tailor LLM Spy: Investigate & Respond to Attacks on GenAI Chatbots
https://www.youtube.com/watch?v=QfUdKtkBRjA In the "Tinker Tailor LLM Spy: Investigate & Respond to Attacks on GenAI Chatbots" talk by Black Hat, Ellen Scott discusses the increasing ubiquity of Generative AI chatbots and…
Running the “Reflections on Trusting Trust” Compiler
https://research.swtch.com/nih Supply chain security is a hot topic today, but it is a very old problem. In October 1983, 40 years ago this week, Ken Thompson chose supply chain security…
Microarchitecture Vulnerabilities: Past, Present, and Future
https://www.youtube.com/watch?v=LIYZemVCgiM Past Present Logic Issues Exploitation Techniques Physical Domain in Software Mitigation Efforts Physical hardware cannot be changed in the field Vendors build in "Survivability features" Microcode is the most…
SysBumps: Exploiting Speculative Execution in System Calls
https://www.youtube.com/watch?v=-WO_1EKkdJk The video presents an attack technique called SysBumps, demonstrated by researchers Hyerean Jang, Taehun Kim, and Youngjoo Shin at Black Hat Europe 2024. Here’s what it’s about: What SysBumps…
Bypassing ARM’s Memory Tagging Extension with a Side-Channel Attack
https://www.youtube.com/watch?v=DoPb4mG-7TY This explains a research project on how to bypass ARM's Memory Tagging Extension (MTE), a hardware feature designed to prevent memory corruption vulnerabilities. Here are the key takeaways: ARM…