Notes


Humans

Every single human alive today is someone whose ancestors successfully reproduced for 200 000+ years of modern human evolution. And of course intelligence and personality are heritable.

And you look at some people and you have to think: “This type of human survived for 200 000 years”.

Dreams

Few days ago I had a dream where I lost my pet dog and walked around town looking for her. Went into an animal shop and they showed me all their lost animals. One of the animals was my dead guinea pig I had when I was 12, and in that moment, I gave up looking for the dog just so I could experience a day with that guinea pig. It was so nice seeing him run around happily and squeaking with joy instead of his final days of bumbling in confusion with a heavy fever. I held that guinea pig close to me one last time and told him I loved him and how much I missed him.

Princess Mononoke, 1997

Princess Mononoke, 1997

I’m speechless.

Life is suffering. It is hard. The world is cursed. But still, you find reasons to keep living.

Bot and bot-like

People have been conditioned to have superficial and predictable bot-like behavior on the Internet.

SkyRoof: New Ham Satellite Tracking and SDR Receiver Software

Recently VE3NEA has released a new Windows program called “SkyRoof”. SkyRoof is both a satellite tracking and SDR receiver program. It supports the RTL-SDR as well as Airspy and SDRplay devices.

The software is designed for tracking and receiving ham radio satellites, and it can provide detailed information about all ham satellites, tracking them in real time, and provide pass prediction. It also shows a skymap and SDR waterfall display. The receiver software supports demodulation of SSB/CW/FM, and it automatically compensates for doppler. It can also interface with antenna rotators that support hamlib. SkyRoof: New Ham Satellite Tracking and SDR Receiver Software

The Steamroller and the Violin, 1961

The Steamroller and the Violin, 1961

Andrei Tarkovsky’s diploma film, from a screenplay written by Andrei Konchalovsky and Andrei Tarkovsky, a short (45 mins) film about a boy violinist meeting a steamroller driver. Reminds me of Dziga Vertov and I can see Tarkovsky’s genius in this, because it’s a well-made and obscure piece of Russian cinema that yet again stands the test of time. Beautiful images, mirror reflections, colors.

Now what shall I do with you, dreamer?

Kernel Exploitation Techniques: Turning The (Page) Tables

So today we’ll be looking at (user) page table exploitation. If you’ve been keeping up with some of the great kernel exploitation research put out there lately (of which I will be sharing plenty of in this article, don’t worry!), you might have noticed a trend in techniques targeting page tables in order to gain powerful read/write primitives.

The goal for this post is to provide some insight into why targeting page tables can be such a powerful exploitation technique. We’ll do a primer on how paging works in Linux, to give us some context, before looking at how we can gain control of page tables in the first place, how to exploit them for privilege escalation and mitigations to be aware of. Kernel Exploitation Techniques: Turning The (Page) Tables

What's the worst that could happen?

Puggo

Breaking ADCS: ESC1 to ESC16 Attack Techniques

Let’s talk about Active Directory Certificate Services. If you’ve been doing red team work for any length of time, you’ve probably heard about ADCS attacks. What started as a convenient way to manage digital certificates has turned into one of the most powerful attack vectors in modern Windows environments.

Here’s the problem - most organizations deploy ADCS with dangerous default configurations, and many admins don’t understand the security implications of certificate templates. This creates a goldmine for attackers seeking privilege escalation and persistence that’s incredibly hard to detect. Breaking ADCS: ESC1 to ESC16 Attack Techniques

Noah, 2014

Noah, 2014

One of my favorite movies but I can see why it irks the Christians, the Catholics, the Muslims, the Atheists and the Squirrels. Oh, and black people apparently got offended because Noah wasn’t played by Idris Alba. If only the movie dialogue was done in Aramaic. I liked the Irin (the Watchers), Samyaza, Ogg, Magog and Rameel. Beautiful special effects.

The Creator formed us on the second day. They day He made the heavens. We watched over Adam and Eve. Saw their frailty and their love. And then we saw their fall. And we pitied them. We were not stone then, but light. It was not our place to interfere. Yet we chose to try and help mankind. and when we disobeyed The Creator, He punished us. We were encrusted by your world. Rock and mud shackled our fiery glow. Still, we taught mankind all we knew of Creation. With our help they rose from the dust, became great and mighty. But then they turned our gifts to violence. Only one man protected us. Your grandfather Methuselah. We were hunted, Most of us killed. Those who lived were left prisoners in these stony shells, marooned upon this barren land. We begged The Creator to take us home. But He was always silent. And now you claim that you have heard His call. Samyaza cannot accept this.

The Beach, 2000

The Beach, 2000

Directed by Danny Boyle, based on a book by Alex Garland, a very good adventure movie that only travelers will understand. The romance part was … distracting, to say the least. Not fit for the movie. First part is definitely a 4 star, second part is a 2. The soundtrack is really amazing, you can’t go wrong with Moby, Faithless, Orbital, Dario G or Underworld.

I just feel like everyone tries to do something different, but you always wind up doing the same damn thing.

Camera and Microphone Spying Using Chromium Browsers

This blog explores another Chromium command line flag that can be used to spy on a user by continuously taking pictures through their camera and recording their microphone audio.

In the previous blog post, Capturing Screen Activity Using Chromium Browsers, I used the --auto-select-desktop-capture-source=Entire Chromium flag to automatically capture the entire screen without any user interaction or approval. In this blog post, I’ll explore another Chromium flag that allows us to bypass the approval for using the user’s camera & microphone. Camera and Microphone Spying Using Chromium Browsers

Whose Life Is It Anyway?, 1981

Whose Life Is It Anyway?, 1981

What a gem on a movie, asking the question whether is it right to keep a person who wants to die, alive. You cannot not love Richard Dreyfuss, Christine Lahti and Bob Balaban. Simply unforgettable!

How does a quadriplegic cross the road? He was stapled to a chicken.

Knowing, 2009

Knowing, 2009

I liked it, the movie had many right ideas, was clever and well done, and was directed by Alex Proyas (Dark City, The Crow). The good-old-fashioned disaster movie where science is mixed with religion and the result keeps you anchored to your seat until the end.

Right now my scientific mind is telling me to have nothing more to do with this. And yours should, too.

Oblivion, 2013

Oblivion, 2013

Can barely be considered a movie: bad story, characters that are not developed, maybe it’s time I realise Tom Cruise is not really an actor. The movies has so many issues I wouldn’t know where to begin. It’s something to skip unless you like pretty CGI.

Is it possible to miss a place you’ve never been? To mourn a time you never lived?

Linkin Park - Hands Held High

Jump when they tell us that they wanna see jumpin’
Fuck that, I wanna see some fists pumpin’
Risk somethin’, take back what’s yours
Say somethin’ that you know they might attack you for
‘Cause I’m sick of bein’ treated like I had before
Like it’s stupid standin’ for what I’m standin’ for
Like this war’s really just a different brand of war
Like it doesn’t cater to rich and abandon poor
Like they understand you, in the back of their jet
When you can’t put gas in your tank
These fuckers are laughin’ their way to the bank, and cashin’ their check
Askin’ you to have compassion and have some respect
For a leader so nervous in an obvious way
Stutterin’ and mumblin’ for nightly news to replay
And the rest of the world watchin’ at the end of the day
In the livin’ room, laughin’ like, “What did he say?”