HNHacker News
TopNewBestAskShowJobs

Noxwizard

21 karma · joined November 1, 2011

https://noxwizard.github.io/
submissionscomments
Noxwizard··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
I had to look it up too since I hadn't heard of it. It's an extension to TCP that allows responses across different NICs. Sort of like Link Aggregation on to a switch, except it can go out dissimilar interfaces, like your wifi connection and your hardwired connection. Looks like you have to opt into it when you set up your socket: https://docs.kernel.org/networking/mptcp.html
Noxwizard··on Reverse Engineering Unknown File Formats with ImHex
I'm always on the lookout for a good hex editor. I've tried ImHex a few times and it doesn't quite fit the need I have and I prefer HxD for the simple things. The Pattern Language is pretty neat, I hadn't looked into that before. For the complicated things, it's not always a linear process like in the case of the blog article. Mainly, there's often lots of gaps in my structure until I figure them out. Some tools like ImHex or Kaitai, you can put in placeholder fields between two known objects, but that's kind of annoying. 010 Editor lets you highlight and put colored bookmarks, which kind of works. The workflow I've ended up using for reversing in-memory data structures is to get a hexdump of the memory, take a screenshot and then put it in OneNote. Then I can draw colored boxes or highlight and put annotations off on the side with what things are or notes. If a field is a memory address to another related and unknown structure, I often will then get a short dump of that memory and put a screenshot of it on the same page with an arrow to it. It's pretty kludgy, but I like the freeform nature of it. It's basically a RE notebook, just without any useful RE built-ins. If anyone has ideas or recommendations on better discovery workflows, I'd love to hear them.
Noxwizard··on Ask HN: What are you working on? (October 2025)
I've been working on a browser plugin for Amazon that attempts to identify the brand and seller country: https://www.wheresthatfrom.org/

It's mostly where I want it to be now, but still need to automate the ingest of USPTO data. I'd really like it to show a country flag on the search results page next to each item, but inferring the brand name just from the item title would probably need some kind of natural language processing; if there's even a brand in the title.

No support for their mobile layout. Do many people buy from their phone?

Noxwizard··on OpenPipes: Build your open-source virtual pipe organ system
"Look mum no computer" on Youtube is wrapping up a series[0] where he bought an old church organ and rebuilt it. He cleaned it up and rewired it to interface via midi as well as the console.

[0] https://www.youtube.com/watch?v=8PwwRR8deHk&list=PLluPQLh1xz...

Noxwizard··on Windows Critical ICMP Remote Code Execution Vulnerability
Indeed. Windows requires elevation for raw sockets as well. The ping binary works without elevation by using the IP Helper Win32 API's ICMP functions: https://learn.microsoft.com/en-us/windows/win32/api/icmpapi/...
Noxwizard··on Windows Critical ICMP Remote Code Execution Vulnerability
This means the listening socket was created using SOCK_RAW as opposed to SOCK_STREAM or SOCK_DGRAM. Raw sockets are used for working with ICMP, doing packet sniffing, sending some types of custom TCP packets, etc. Basically anything that isn't UDP or TCP, you'll need a raw socket for.
Noxwizard··on Remembering the best shareware-era DOS games that time forgot (2019)
Epic MegaGames had some great shareware games: https://www.dosgamesarchive.com/profile/epic-megagames

I remember playing OverKill a lot and I think we actually ended up purchasing the full game to unlock the remaining planets.

Noxwizard··on Bypassing the Linux kernel for high-performance packet filtering
For my Masters' work, I needed high speed tx/rx on Windows and looked into the same things you did. I can't find the statistics for the tests I ran, but WinPcap's speeds weren't much better than Winsock's, which was fairly poor. The solution I used was an NDIS kernel filter and protocol driver which pushed the packets into user-space memory. Luigi Rizzo has recently added a Windows port of netmap to his repository, so you might want to look into that: https://github.com/luigirizzo/netmap
Noxwizard··on Fear and Loathing and Windows 8
One of the inconsistencies that bothered me when I was testing it out was that you use a swipe motion to get to the login screen, but after that you're forced to use a scrollbar. I kept trying to drag the screen to get to the other apps and nothing would happen.
Noxwizard··on Fear and Loathing and Windows 8
You can also find the power button by signing out. Swipe up again to see the login screen and the power button is at the bottom right. It's still not as easy to find as before and I ended up finding it by accident. An accidental right-click swiped the screen up and there it was.
Noxwizard··on JIRA and text patches are anti-open-source
JIRA's patch form lets you submit patch URLs as well as attachments. So if the project wanted to allow users to provide github pull request URLs, they could. It sounds more like the project simply doesn't want to work that way.