HNHacker News
TopNewBestAskShowJobs

Genbox

582 karma · joined July 25, 2011

My name is Ian (Denmark) and I do science, security, algorithms, software architecture and high-performance stuff.

I built Farseer Physics Engine 3.0, SimpleS3 and about 25 other open source projects. Check them out over at https://github.com/genbox

I am also the founder and director of Chronos, a platform for investigating large-scale security incidents using forensics techniques.

submissionscomments
Genbox··on Improving Git protocol security on GitHub
Not sure what you are asking, but it is trivially easy to fake a git short hash to whatever you like.

I cloned this repo: https://github.com/bradfitz/gitbrute

Ran the command in the readme (had to do it twice for some reason) and the latest commit is now 000001 on my fork of the repo: https://github.com/Genbox/gitbrute/commit/0000019075dabc337f...

It took less than 3 minutes for the full thing.

Genbox··on Microsoft Tries, Fails to Patch Critical Windows Vulnerability. Chaos Ensues
It is exploited by calling a remote procedure call function called rpcAddPrinterDriver. There is a buggy check that lets a user without the adequate privileges to load a driver on the remote system.

Since remote functions can be called locally as well, this is both a remote code execution (RCE) and local privilege escalation (LPE). For more information, see the original source: https://github.com/afwu/PrintNightmare

Genbox··on eBPF on Windows
Sysinternal's Process Monitor does that from a process perspective: https://docs.microsoft.com/en-us/sysinternals/downloads/proc...

There is also System Monitor which logs the events to EventLog: https://docs.microsoft.com/en-us/sysinternals/downloads/sysm...

Are those not enough?

Genbox··on Ask HN: How much do you love C#?
I love the language itself. Some C# 5 and 6 features still bug the hell out of me, but it fine as long as they are optional. The tools (Visual Studio) is the best editor out there without question and makes coding C# a breeze.

That being said, I've always hated the choices Microsoft made about the .NET framework; closed source, license, installation, dependency and all that. Thankfully, that seems to change for the better now with .NET core, which I really hope takes the language to the next level.

.NET native is also a MUST in my world. Give me C#, open source portable .NET, .NET native and I'm convinced C# (and .NET) is the best there is.

Genbox··on [EXPERIMENT] I attached a file to a tweet
With some regular expression magic I extracted the data from Twitter, however, the data was in the wrong order. With this command in Linux, I reversed the order and decoded the data:

tac twitData.txt | base64 -d -i > image.jpg

I've uploaded the image here:

http://iqsecur.blogspot.com/2012/01/sending-files-using-twit...

However, it seems there is an error in the image, I'm not sure if it is the process itself or the image actually has an error. A reverse search resulted in 0 results, so I'm inclined to believe the former.

Genbox··on [EXPERIMENT] I attached a file to a tweet
Tweet #91 is an error from Excel. I was going to combine the messages into the image, but I can't without the full base64 stream.
Genbox··on Rate my startup: GPU.NET - GPU computing on .NET, from TidePowerd
I've built a physics engine in C# called Farseer Physics Engine. Believe it or not, but it is acutally faster than the original C++ code it is based on. I did a benchmark on physics engines (based on Box2d) in Java, C# and C++: http://ianqvist.blogspot.com/2010/12/benchmarking-box2d-base...
← PreviousPage 7 of 7