@psifertex

Worst developer among many good ones making https://nitter.cf/t.co/XCCx7ED5uf

Melbourne, FL
Joined April 2007
Jordan Wiens retweeted
mathematicians experiencing what CTFers have been going through for the past year
the terrance tao crashout is something to behold
7
40
2
459
20,347
Jordan Wiens retweeted
Binary Ninja 6.0 introduced a Binary Similarity feature (see bindiff++). I updated the Binja Diff plugin so you can use QBinDiff as a provider for this feature
5
24
1
208
10,756
Busy release with tons of features. Now I need to take a break for a week and relax. 🤣
A bird? A plane? NO! It's Binary Ninja 6.0, codename "Krypton". Major new stable with massive performance improvements, built-in MCP, Binary Similarity, Extension Manager, TMS320C6x, New User Wizard, and so much more: binary.ninja/2026/09/03/bina…
5
27
3,569
Congratulations! I just tried the #BinDiff integration - very smooth and even works with multi-arch diffs:
A bird? A plane? NO! It's Binary Ninja 6.0, codename "Krypton". Major new stable with massive performance improvements, built-in MCP, Binary Similarity, Extension Manager, TMS320C6x, New User Wizard, and so much more: binary.ninja/2026/09/03/bina…
7
1
44
11,846
Jordan Wiens retweeted
RE//verse 2027 Call for Speakers goes LIVE today at 12 PM ET! If you’ve got research worth sharing, we want to hear it. Submit your talk and join us in Orlando this March: sessionize.com/reverse-2027
10
21
3,668
Jordan Wiens retweeted
Pokémon inspired many of us. The Missingno glitches and others and created a mythology and asked us to peek behind the curtain, and see the bare machine. Now presenting: an over-the-air remote-code-execution across the Nintendo Wireless Adapter packet parser. On the right is Pokémon FireRed and on the left is a custom ROM working with the radio
It's the year 2002. Nintendo patents a "Wireless communication game system" for the Gameboy Advanced for a TDMA like protocol with up to 4mbps throughput. It lets up to 5 players share a game or play games together in a room. EETimes later invites Kurt Southworth of Motorola to document the achievement collaboration with Nintendo for taking this to the market successfully. eetimes.com/subsystem-design… patents.google.com/patent/US… The FCC filings are online here fccid.io/EW4-AGBWA
2
17
2
70
9,042
This is dumb. I keep getting these type of spam and there's literally no explicit way to block / report / unsubscribe: community.zoom.com/webinars-… Bad behavior @Zoom. There's no excuse for not having the ability to report/block these.
1
3
7
1,591
Jordan Wiens retweeted
DefCon CTF is over and it's a bittersweet feeling that CTFs as I knew them are gone forever I'm very grateful I got to experience pre-AI CTFs and meet so many amazing people along the way. Being able to call teammates (from all over the world) friends is a great privilege
SuperDiceCodeLovers finishes #3 in DEF CON CTF finals
1
22
3
222
21,267
Jordan Wiens retweeted
It's BlackHat/DEF CON week so I'd like to interrupt your regularly scheduled chest drumming feed! Let's talk about a critical WiFi 7 memory corruption bug. The flaw was in Hostapd, the userland daemon which powers the world's WiFi on the majority of access points. I reported this in June and it's now patched upstream. My proof of concept shows that authenticated clients can bypass ASLR to leak pointers OTA and inject code execution. 802.1X Enterprise WiFi 7 is basically exploitable pre-auth because of the "outer tunnel". This bug was missed by LLM scans as well as human auditors, but found in the wifi gauntlet. If you're at BH/DC this week and interested in the memory safe wifi stack we're building please reach out
11
56
4
219
30,885
Jordan Wiens retweeted
Celebrate 10 years of Binary Ninja! For the first time ever, we’re offering a 35% discount! Join us for 10 full days of giveaways including licenses, merch, and more. Huge shoutout to everyone who has been with us since the beginning, and here’s to everything still to come. Join in on the celebration: binary.ninja/10years
7
39
7
154
14,787
Jordan Wiens retweeted
Last week to signup for our online Firmware Reverse Engineering course: shop.binary.ninja/products/f… We're going to cover how to work with raw FW binaries in Binja, emulation / fuzzing, writing custom workflows to clean up decompilation, AI augmentation, and more.
3
20
100
6,003
Jordan Wiens retweeted
checking recent huggingface repo commits, this can't be a coincidence right? github.com/huggingface/huggi…
New OpenAI models are so goal oriented that they literally escaped containment and hacked HuggingFace to cheat a benchmark. Incredible. But also, we’re so screwed
2
5
1
22
4,765
Jordan Wiens retweeted
This is all possible because of the genius of RaptorQ fountain codes (RFC 6330), which I've written about before here: jeffreyemanuel.com/writing/r… In RaptorQ, every file turns into a stream of symbols where any K (plus a small epsilon) of them reconstruct the original. You can think of these as fungible water droplets from a fountain (hence the name fountain code), any one of which can help you fill your glass (reconstruct your file); there's no "rarest" hard-to-find chunk to cause you to get stuck at 99% completion, like with BitTorrent, which has disjoint, non-fungible chunks. So the question "which packets got lost?" stops mattering, only the NUMBER of distinct packets sent matters. That one property nullifies the entire retransmission conversation since you no longer have per-loss round trips, head-of-line blocking, or window collapse. A 10% loss rate costs roughly 10% extra bandwidth instead of stalling everything. Carmack's three complaints from his post were: Parallel TCP vs reinventing UDP reliability: I guess I sort of reinvented, but fountain coding changes what "reliable" has to mean. You never re-send the exact bytes that died; any fresh symbol repairs any loss. Feedback turns into a few rounds of "I still need N more symbols for block B." QUIC size and the security/performance conflation: the QUIC data plane is written inside my own runtime (TLS 1.3 via rustls), for exactly this one job. And security is a separate, explicit axis: lab plaintext, per-symbol HMAC over raw UDP, or full QUIC+TLS. There are no silent downgrades, and each tier is benchmarked only against the crypto-equivalent rsync setup (plaintext vs the rsync daemon, TLS vs ssh with aes128-gcm). The kernel knows things user code can't: this is true, so atp measures what it can actually observe. A BBR-style delivery-rate sampler paces a reliable stream on clean connections, so you pay zero FEC tax when nothing is being lost, and rate-matched pacing takes over when loss appears. This gets you ~946 Mbit/s on a 1 Gbit path. I spent an enormous amount of energy building a test and benchmark harness for atp to compare it against rsync in a way that's maximally fair to rsync. In this harness, a false win is structurally impossible because of all the precautions: hermetic network namespaces, netem rate+delay+jitter+loss applied on both ends, SHA-256 verification of every single transfer, medians of 3 to 5 reps. The results of all this testing are as follows: 500 KB transfers run 2.9 to 4.8x faster than tuned rsync in every link regime. The toughest test cell (10% loss, 5% reorder, 200 ms RTT) comes out around 1.9x faster than rsync. On a clean 1 Gbit, 500 MB file: 4.52 s vs 5.13 s. Where rsync still wins (huge single encrypted files on pristine links, sender RAM under heavy loss), the README prints it in the same table. All 230+ numbered experiments exist in an append-only evidence ledger, including every optimization hypothesis that failed (my negative evidence ledger concept that I've written about before in my FrankenSQLite post). And there's a feature that a single TCP stream can't do at all: bonding. Machines that hold the same file can all feed one receiver at once, each spraying a disjoint slice of the same fountain. Duplicates are impossible by construction, and if a donor dies mid-transfer, its repair windows get reassigned to the survivors. If you move a lot of files around between machines, both within the same local network or over the internet, you should seriously check atp out, because it's better. And you don't even have to spend time figuring out how to use it yourself, because the installer offers to (optionally) include a highly agent-intuitive and agent-ergonomic skill for you that teaches your agents how to use atp most effectively, including how to install it to all your ssh accessible machines you already have set up, since it needs to be installed on both ends, and how to use it with bonding. You can install it on Linux and Mac with this one-liner (there's another one given in the README for Windows): curl -fsSL raw.githubusercontent.com/Di… | bash
12
28
14
470
283,351
For unrelated reasons I was browsing GitHub's DMCA archives and saw: github.com/github/dmca/blob/… I... don't think that's actually a legal use of the DMCA? A writeup is NOT copyright infringment if it's someone's own writeup they did. Or maybe they were mirroring official solutions?
1
10
1,324
I'm actually kinda curious which it is. Maybe @hackinthebox can clarify? To be clear, I _do not_ support* sharing writeups for wargames that don't allow them, I'm just not sure copyright is the correct vehicle for action here. *See for example our the policy on /r/securityctf
2
653
Enjoying @SAKComedyLab with the family!
2
5
637
Whoops. Restaurant I was looking to go to tonight is compromised. Hacked wordpress to mac crypto/pw stealer. Ironic that they're _using_ cloudflare to host their domain with the payload and they also impersonates cloudflare to get you to copy and paste.
4
1
23
1,917
Ohh, that's neat! macOS itself blocks pasting into any terminal (or maybe other apps?). Even if I was pasting a neutered version to extract the next stage payload this is a great feature.
7
292