namazso retweeted
How to find ALL PHP bugs:
1. Compile code (e.g. to RISC-V, x86, LLVM IR)
2. Vibe prove ASAN and non-ASAN versions have same behavior across all inputs. Hard, but Claude can do it!
3. Find a LOT of bugs
Super proud of our work. A big step towards finding ALL memory safety bugs
1. Compile code (e.g. to RISC-V, x86, LLVM IR)
2. Vibe prove ASAN and non-ASAN versions have same behavior across all inputs. Hard, but Claude can do it!
3. Find a LOT of bugs
Super proud of our work. A big step towards finding ALL memory safety bugs
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/formaā¦
24
61
1,190
55,407
namazso retweeted
Claude, plz rewrite wordpress in rust. Yes all the plugins too. No I don't just mean the source code, I mean like, go replace everybody's wordpress install.
You don't have access, well funny thing...
You don't have access, well funny thing...
60
483
11,522
189,384
namazso retweeted
āPublicly shared Claude AI chat and artifacts are available onlineā¦ after the used made them public, by choice, by clicking through multiple optionsāā¦ doesnāt sound as punchy of a headline š¤£
Some people's chats with Claude AI found to be publicly available online bbc.in/4fAI5vECommunity noteChats found online were ones users chose to share via Claude's public link feature. Anthropic says these are public by design, not guessable unless shared, and may be indexed like other public content. Private chats remain private.
ca.news.yahoo.com/peoples-chats-ā¦
support.claude.com/en/articles/10ā¦
2
5
21
4,364
Just released a new torrent client/daemon, rsbtd. I always hated how all three popular daemons had various drawbacks, but only recently found some time to actually do something about it.
github.com/namazso/rsbtd
github.com/namazso/rsbtd
1
3
34
3,942
I actually built some parts multiple times with several models, reviewing the output. My experiences:
- Fable is much better at tasks with less obvious goals or evaluability such as API design or UI
- Sol is much better at reviewing, because it doesn't block every prompt
- Fable is much better at tasks with less obvious goals or evaluability such as API design or UI
- Sol is much better at reviewing, because it doesn't block every prompt
1
0
5
1,032
I always found uutils using Rust file IO misguided from the start. Whenever I dealt with security-sensitive file ops (on Windows) I had to just make my own abstractions to retain any security, I imagined itād be same with fds.
But do you know what coreutils are a fertile ground for? Race conditions around file creation, deletion, permission setting, and so on. The original code accounted for decades of hard-learned lessons in that space. The Rust rewrite did not:
seclists.org/oss-sec/2026/qā¦
2
0
3
2,710
It seems Iām a webdev now: imgcmp.com
Imgsli has been down for a while, so I rebuilt it from scratch
Imgsli has been down for a while, so I rebuilt it from scratch
2
0
9
2,021
Ever wanted to stub out some function with a hook, but it was inconvenient to find or hook it? No problem, just hook a callee ('s calle)* and do a super return! Itās even CET compatible! gist.github.com/namazso/bb47adā¦
3
12
73
9,220
namazso retweeted
One-Click RCE in ASUSās Preinstalled Driver Software
mrbruh.com/asusdriverhub/
mrbruh.com/asusdriverhub/
2
19
83
21,950
namazso retweeted
Another pointless weekend project - a playable version of the old 3DMaze screensaver from Windows 9x.
I reverse-engineered the original screensaver binary and added user-input functionality for the controls (and fixed some other minor issues!)
github.com/x86matthew/Plaā¦
I reverse-engineered the original screensaver binary and added user-input functionality for the controls (and fixed some other minor issues!)
github.com/x86matthew/Plaā¦
51
220
1,610
114,423
Dropping my newest Windows vulnerability that Microsoft refuses to acknowledge!
New Windows Driver Signature bypass allows kernel rootkit installs - @billtoulas
bleepingcomputer.com/news/security/ā¦
bleepingcomputer.com/news/security/ā¦
1
29
145
17,630
Fun fact: If your first 20 blocked people got deleted for spam, your blocked accounts menu permanently breaks, and you can only possibly unblock people by getting your twitter data export and hacking up a script. Thanks Elon!
0
0
12
3,403
Just published two new projects, github.com/namazso/dll-prā¦ and github.com/namazso/dll-unā¦
I always missed how there is no dUP2 but for dll hijacking runtime patch ā now there is! Iāll port MagicSigner over to it soon as well.
I always missed how there is no dUP2 but for dll hijacking runtime patch ā now there is! Iāll port MagicSigner over to it soon as well.
4
55
175
17,298
Seems like Hex-Rays is trying to erase their crypto oopsie (seri.tools/blog/ida-72-paā¦ writeup by @seritools, still up fortunately) with fake DMCAs, just got one on GitHub. Shouldāve just asked me over mail instead tbh.
0
18
58
10,482
namazso retweeted
Iām a C programmer so forgive me for the (maybe) dumb question.
I see people saying that the CS catastrophe shows that we need to switch to Rust.
But the bug was in the parser, handling bad input. In this case wouldnāt Rust panic, and end up in a BSOD as well?
I see people saying that the CS catastrophe shows that we need to switch to Rust.
But the bug was in the parser, handling bad input. In this case wouldnāt Rust panic, and end up in a BSOD as well?
193
104
2,532
577,487
Iām begging for infosec people, please before announcing something is āvulnerableā at least read the documentation, just in case it explicitly details the supposed vulnerability such as here. Developers like me donāt just write them as a joke.
@UK_Daniel_Card It is not, this is by design and is not only configurable but also documented, as I called out under the previous post. Also, it works with PIN too, it will only ask you the PIN and not the recovery key.
1
5
45
62,075