CTO @crashappsec. Past: Cofounder and Chief Scientist @capsule8, Hacker-in-Residence @NYUTandon, and other research, reverse-engineering, and exploit dev roles.
NYC
Joined June 2009
- Tweets4.8K
- Following1.1K
- Followers5.2K
- Likes7.3K
Brandon Edwards retweeted
❌ No type safety
❌ No argument count
❌ Can’t wrap one vararg API in another
❌ Can’t push/pop args or introspect
You're stuck in a model where the caller has to be perfect. That’s not an interface, it's an improv show with segfaults.
h4x0r.org/vargs/
Brandon Edwards retweeted
Today I have a more serious topic than usual, please consider reposting for reach:
My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]
Brandon Edwards retweeted
wow this is the dumbest shit I have ever read.
Tape is an amazing long term storage solution for records you can’t afford to lose. Also $1M is a drop in the bucket for government spending.
The @USGSA IT team just saved $1M per year by converting 14,000 magnetic tapes (70 yr old technology for information storage) to permanent modern digital records.
Readers added context they thought people might want to know
Despite its age, magnetic tape is still highly favorable for long-term, static data archives. It offers cost-effectiveness (cheaper than disk/cloud), longevity (outlasts disk drives), offline security (resists cyber threats), and high capacity (up to 50TB per tape). research.ibm.com/blog/tape-dens… corodata.com/tape-backups-s…
Brandon Edwards retweeted
Sigh...not that it matters or anything but we have a whole array of underwater microphones to spot subs.
Remember the Titanic sub that imploded and the Navy was like "yea we have the audio"?
I know this and I'm just a guy who annoys Navy officials and reads books...
Brandon Edwards retweeted
Who know what's crazy? When you say you don't want titles or money but space to work on something important without disruption, people are looking at you like you are crazy. This is why America is losing.
Brandon Edwards retweeted
If you thought that there were privacy risks from TikTok, imagine the privacy risks from using an *online* LLM service that is run in China... Already people are in the habit of using LLMs to summarize uploaded documents, etc. The time to focus on private AI inference is *now*.
Brandon Edwards retweeted
"We've reduced our support load by 99.9% using AI"
In reality... your customer can't get ANY support now
I'm getting tired of these terrible AI bot rollouts...
Example:
Brandon Edwards retweeted
What really frighten me is that people no longer know what "liberalism" is. Among the uneducated public, it's been warped to mean "left-wing". Among the educated, it means tolerance, individual rights, rule-of-law, democracy -- the blueprint for how western society's work. It's like sportsball: different teams fight to win the game (where political parties are the teams), but "liberalism" is the rules of the game.
Internationally, Russian and China are the major threat to liberalism. Domestically, it's wokism and Trumpism. Woke Marxism dominates college campuses to a toxic extent. Trump appeals to the most ignorant and brutal of our society.
Liberalism is what the never-woke and never-trump centrist people fight to defend. But we can't even have a simple conversation about it because for some reasons, civics classes in high school have stopped teaching "liberalism".
Just 25 years ago, liberalism was the world's dominant ideology.
Now, in 2024, it's on the run everywhere, pushed underground by a combination of 21st century technology and the power of the Chinese Communist Party.
noahpinion.blog/p/liberalism…
Brandon Edwards retweeted
FBI Statement on Inauthentic Use of Bureau Name, Insignia in Promoting False Election-Related Narratives: fbi.gov/news/press-releases/…
Brandon Edwards retweeted
A generalized LLM agentic framework is a fancy way of saying “I wrote a ton of abstractions on top of stdin/stdout/stderr”. The value is in the tool specific bindings, and at least in cyber, those are the things doing the heavy lifting of finding and verifying your bugs.
The low cost bootstrapping, automation and orchestration is the value the LLM brings. But be careful not to conflate the two when trying to determine uplift provided. Ask yourself “where are my bottlenecks? Where are the attackers?”. Are you unblocking that bottleneck or merely duplicating and enhancing an existing capability with an LLM?
Brandon Edwards retweeted
I’m a C programmer so forgive me for the (maybe) dumb question.
I see people saying that the CS catastrophe shows that we need to switch to Rust.
But the bug was in the parser, handling bad input. In this case wouldn’t Rust panic, and end up in a BSOD as well?
Brandon Edwards retweeted
Here’s a way to extract your bitlocker key from ntds.dit archive if your DC is also bricked.
Great work @0gtweet!
Unless you have an offline BitLocker key extraction tool 😎
github.com/gtworek/PSBits/bl…
Brandon Edwards retweeted
CrowdStrike effectively bricked windows, Mac and Linux today.
Windows machines won’t boot, and Mac and Linux work is abandoned because all their users are on twitter making memes.
Incredible work.
Brandon Edwards retweeted
The award-winning Qualys Threat Research Unit (TRU) has discovered a critical vulnerability in OpenSSH, designated CVE-2024-6387 and aptly named "regreSSHion." This Remote Code Execution bug grants full root access, posing a significant exploitation risk. blog.qualys.com/vulnerabilit…
