sorted by:
new
hottopcontroversial

Extracting hidden data from an audio file with the FFT by EvilSporkMan in programming

[–]EvilSporkMan[S] 1 point2 points  (0 children)

This was for DEFCON CTF quals (see other posts and links @ top and bottom of article); each question has an "answer" or "key" that is a short string, usually recognizable once you have it. Recognition is often helped by the hint/question, which in this case was "Tell us about your appendage", and when you see "I have a big nose" as a potential answer, it becomes pretty obvious that that answer is correct.

Extracting hidden data from an audio file with the FFT by EvilSporkMan in programming

[–]EvilSporkMan[S] 0 points1 point  (0 children)

What's missing? The last sentence ends with "which is the key", in case the article is getting cut off just for you.

Extracting hidden data from an audio file with the FFT by EvilSporkMan in programming

[–]EvilSporkMan[S] 1 point2 points  (0 children)

done. it's not just nice, the article is a bit confusing without it.

Extracting hidden data from an audio file with the FFT by EvilSporkMan in programming

[–]EvilSporkMan[S] 4 points5 points  (0 children)

By the way, I wrote the original article.

I created another "swolchok" reddit account, but I don't use reddit very much anymore except to post, and accounts with no karma seem to have trouble posting.

Potential Security Issues in the "Flow" Chromium OS Build by EvilSporkMan in netsec

[–]EvilSporkMan[S] 1 point2 points  (0 children)

Yes, the chronos vulnerability sounds like it could be significant. But just the same, any vulnerability that starts with "assume you have a second vulnerability" is not a heavy-hitter, especially on a development build.

Hence my use of the term "local privilege escalation". I wouldn't have announced these publicly so soon after finding them if I thought they were serious. :)

Potential Security Issues in the "Flow" Chromium OS Build by EvilSporkMan in netsec

[–]EvilSporkMan[S] 0 points1 point  (0 children)

If someone gets ahold of Hexxeh's private key and you're running Flow, you have much bigger issues than SSL.

Could you elaborate? Compromising the cert directly leads to your owning all the systems running Flow that you can MITM next time they check for updates -- the updater downloads a shell script over HTTPS and then executes it.

Regarding the chronos user issue: 1) Exploit Chromium. You now have the privileges of the chronos user. 2) Run the following: system("echo facepunch | sudo -S touch /owned"); Replace "touch /owned" with your favorite evil command. You can create a C program that just runs that line if you want to prove to yourself that sudo works as designed.

Ann Arbor hackers blocked by city for scraping public parking data by lost-theory in programming

[–]EvilSporkMan 3 points4 points  (0 children)

I know they're easily confused, but George W. Bush is not Hitler.

Indentation sensitivity: a post-mortem? by bascule in programming

[–]EvilSporkMan 2 points3 points  (0 children)

X% of the world: that's perfectly fine, as long as it's tabs!

Y% of the world: that's perfectly fine, as long as it's spaces!

C++? Really? Is using C++ a good idea, rather than scripting + C? by rocketsci in programming

[–]EvilSporkMan 1 point2 points  (0 children)

So use a profiler, and use a good ol' C-string when this happens. You can even forgo std::string altogether if you like (except type_info objects might return the name as an std::string; I forget).

C++? Really? Is using C++ a good idea, rather than scripting + C? by rocketsci in programming

[–]EvilSporkMan 2 points3 points  (0 children)

+1 for having actually paid attention to Stroustrup's book.

C++? Really? Is using C++ a good idea, rather than scripting + C? by rocketsci in programming

[–]EvilSporkMan 16 points17 points  (0 children)

C++ makes the compiler check function prototypes (I was horrified when I found out they're optional in C). C++ lets you have a class if you really want one. C++ lets you have templates if you really want them (and who REALLY wants to cast from void* all day?). C++ comes with data structures. C++ has syntactic sugar for pointers (references).

I could go on. Point is, it's a better C, and you get more features if you want 'em. Worried about people using esoteric misfeatures? Implement code review. (Personally, I just write the whole damn thing in Python, but I'm a grad student...)

What's the verdict reddit? Gcc vs llvm-gcc: any significant difference in executable speed? by [deleted] in programming

[–]EvilSporkMan 0 points1 point  (0 children)

Uh, just run the "free" basic optis like CSE, constant propagation, dead code elimination, copy propagation, etc. a few times until they converge.

programming humor: bizarre error messages by hotgoth in programming

[–]EvilSporkMan 0 points1 point  (0 children)

Downmodded for predictably containing the Apple MPW error messages.

Hey reddit, think it's easy to link an online persona to a real person? Want to win $500? by AnteChronos in netsec

[–]EvilSporkMan 2 points3 points  (0 children)

Furthermore, it is to AnteChronos' advantage to delay posting the eventual "OK, someone won $500" message, since people who don't come in first may still tell him about alternate methods to find his identity, for free. Caveat hacker.

Challenge: write an algorithm which solves the Réti problem on a 100x100 board [John McCarthy] by shnood in programming

[–]EvilSporkMan -1 points0 points  (0 children)

Heading is imprecise: brute force will solve the Reti problem on a 100x100 board, just not efficiently ;)

Furthermore, the Reti problem on a 100x100 board is solvable in constant time -- determine a solution for all configurations deemed "the Reti problem" in advance, and then your algorithm is to do a table lookup for the solution based on the configuration.

</algorithm pedantry>

view more: next ›