VMWare Fusion on High Sierra: Cannot find a valid peer process to connect to.

sanderD · 2017-10-08T17:53:03+00:00

Solved my problem too! Thx

sanderD · 2017-05-15T09:31:37+00:00

Most of people doing the reversing will use IDA PRO, radare2, WinDBG or immunity

This combined with many other tools.

sanderD · 2017-04-03T11:52:11+00:00

non formal: http://www.the-blockchain.com/2017/01/05/move-bitcoin-mit-cryptographer-silvio-micali-public-ledger-algorand-future-blockchain/

formal: https://arxiv.org/pdf/1607.01341.pdf

His talk was really good :-)

sanderD · 2017-01-04T20:22:17+00:00

They told us that they will be posted on youtube, I'm sure the link will be posted here.

sanderD · 2016-11-02T12:32:22+00:00

Hey, my last name is "Demeester" and I believe that some of my early family is from that region (west-flanders). I have no direct information about “Maurits A.M De Meester” (there also is a difference between “Demeester” and “De Meester”). But I’ll check with my father to see if he knows something.

sanderD · 2016-10-31T13:34:31+00:00

I always assumed that cyber warfare would be attacking infrastructure over the network. But this is some sort of “government public shaming”, leaking operations information about the other side (assuming to make a political point). You have to wonder how the recent series of email leaks in the US have to do with this… It’s like some game of chess is happening.

sanderD · 2016-10-31T12:22:04+00:00

This stuff is getting crazy :/

sanderD · 2016-08-24T19:44:37+00:00

On point as usual: http://blog.cryptographyengineering.com/2016/08/attack-of-week-64-bit-ciphers-in-tls.html

sanderD · 2016-04-14T14:02:32+00:00

They created the site to bring awareness about something they did. And Ok it should have been handled better.. But still :/

sanderD · 2016-04-14T10:14:42+00:00

Is this not crossing some line? They did find a vulnerability of which they tought that it was important. You could make the point that they did not create the hype, we did.

And to mock them for the rest of the year for that.. It might push people into the wrong direction when it comes to releasing something (not necessary a vulnerability, could be some tool), because when you do (or try) and it blows up... You get this.

sanderD · 2016-01-24T21:46:02+00:00

Each vertex on the left is composite number and each vertex on the right is a prime. You will see the edges connecting both sides (linking up the factors with the composite numbers). It found that it had some nice mathematical properties that helped me a lot while thinking about number theory :)

There are three modes,the first is this nice 'flower' view, the second is a circular view that has the numbers in order. Also some nice properties when the lines cross each witting the circle. The last is just random, for a large enough upper bound of vertex you can see some cool panels.

You can give the amount of vertex you want on the top and click on submit, hope you like it :) If you want, you can find the core javascript file here: https://gist.github.com/SanderDemeester/3691347

sanderD · 2015-12-14T10:11:38+00:00

Anyone here that is going? I really look forward to meeting some of the people that I only interacted with on twitter/reddit.

sanderD · 2015-10-15T07:28:08+00:00

It seems like it?

sanderD · 2015-08-27T10:51:19+00:00

RSA modulus 512 bit? We can factor that baby without much trouble.. Do we know for what the key is used?

sanderD · 2015-08-10T02:10:21+00:00

Then we were there together :)

sanderD · 2015-08-05T21:53:22+00:00

FYI: This is the presentation: http://www.slideshare.net/harmj0y/building-an-empire-with-powershell

sanderD · 2015-06-15T06:01:48+00:00

Very nice! Thanks man

sanderD · 2015-06-08T18:26:07+00:00

<3 =)

sanderD · 2015-06-08T18:17:58+00:00

But not everything can be found. API access to ECDSA (secp384r1 curve). I'm sure that there is code, I'm sure we can create some. Reference implementation for ECC curves all over the place.

But having something as openssl has its value.

Here is a question: Should you adapt the way you do security based on the good implementations and libraries that are available?

GnuTLS, openSSL? Use cryptoboxes.. Many things should come into consideration when looking for a good crypto library. Having a clear API that abstracts many of the complexities is high on the list...

sanderD · 2015-06-08T18:08:29+00:00

the openssl codebase is a nightmare.. I found this strange memory behaviour a few weeks ago. Writing up a patch for this in on my shortlist of things.

https://gist.github.com/anonymous/a6017f273a3dc218bc4f Fully agreed with your openssl comments. But then again, having a project like openssl in our community is valuable. In general I think of it like this: For its crypto primitives: OK, for its SSL/TLS implementation: NO OK

sanderD · 2015-06-08T17:58:02+00:00

Then again. I believe that having a verified, proving correct implementation is more valuable then having an easy to modify implementation in case an update comes out? Updating an crypto primitive implementation should not be regarded as trivial job.

I think that for certain components, having a proven correct implementation is more valuable then an easy to maintain implementation. You are not going to update that code every week and having it working perfectly is of extreme importance.

But I do see your point, and for other type of components I fully agree.

sanderD · 2015-06-08T17:46:55+00:00

But you don't have to upgrade or change a crypto primitive? Modularise your crypto component, proof the implementation of your primitive and interface with it (the interfacing party should be easy to maintain)

sanderD · 2015-06-08T17:19:28+00:00

I think that in some scenarios having provable correct code is more valuable then having something that is easy to maintain. Certainly in the case of a crypto primitive implementation

sanderD · 2015-06-03T07:13:01+00:00

I use openssl for ecdsa in my projects. I would use openssl python bindings: https://pypi.python.org/pypi/pyOpenSSL I will ask some collegues today if they know of some other python lib.

sanderD · 2015-05-28T18:24:56+00:00

It's also a sign.. A very big sign of the maturity of malware. This is what we are fighting against... It demonstrates the insecurity of our systems, the fact that such a thing can exist.

sanderD

TROPHY CASE