Binary art - funky PoCs & visual docs
•
0 likes•2,292 views
This document discusses binary file formats and creating visual documentation. It notes that specifications are imperfect and there are security consequences. Formats have diverse properties like headers, signatures, offsets. Visual docs should be self-contained, for a defined audience, and remove unnecessary details. The goal is creating useful documentation based on reality. Questions are welcome.
Report
Share
Report
Share
Download to read offline
Recommended
Conference Slides
The document discusses the history of computing and free software. It introduces C programming language code as an example of source code. It explains that a compiler converts source code into machine code that computers can understand. It then discusses the history of early computers from Digital Equipment Corporation. It defines free software as software that provides four essential freedoms: to run it for any purpose, to study and modify it, to copy it to help others, and to improve and release improvements for public benefit. It lists several examples of popular free software projects like GNU, Linux, BSD, Mozilla Firefox, and multimedia codecs from Xiph.org.
F# in MonoDevelop
F# is a functional programming language that can now be used with MonoDevelop. An F# binding for MonoDevelop was released as an open source project in October 2010 under the Apache 2 license. The document encourages contributors to help improve the F# plugin for MonoDevelop by contributing to features like go to definition, colorization of code, and debugging support to help bring F# to a wider audience.
The GNOME way - What can we learn from and within the Open Documentation World
The presentation gives an overview of the documentation for the GNOME desktop environment including the processes of user and developer help creation, review, release and bug tracking; documentation team management; collaboration with design, usability and localization teams and respective workflows; change management (DocBook to Mallard). The second part of the session presents the value of the free and open-source platforms like GNOME, as a real-world practice-playground resource for technical communication students, trainees and trainers.
Presented at tcworld 2014 conference in Stuttgart, November 2014.
There are two videos by Bastian Ilsø from GNOMEDesktop (https://www.youtube.com/user/GNOMEDesktop/) integrated into the presentation that I showed at the conference:
Introducing GNOME 3.14 - https://www.youtube.com/watch?v=7p8Prlu3owc
Discover GNOME’s Docs - https://www.youtube.com/watch?v=dCu3Ww8iI3Y
Using unicode with php
1. The document discusses internationalization and Unicode support in PHP, covering topics like encodings, locales, formatting numbers and dates for different languages, and database and browser considerations.
2. It provides an overview of PHP extensions and functions for internationalization, including Intl, mbstring, and Iconv, and discusses their strengths and limitations.
3. Examples of internationalization practices in popular PHP frameworks and applications are examined, highlighting both best practices and common pitfalls.
Php Unicode I18n
Andrei Zmievski gave a presentation on PHP 6 and Unicode at a PHP Meetup in July 2008. He discussed how PHP 6 includes support for Unicode that PHP 5 lacks, and explained what Unicode is and why it is important. Specifically, he defined Unicode as a standard that assigns a unique number to every character, allowing text to be reliably represented no matter the platform, program, or language. He also touched on mojibake, the phenomenon of corrupted text that can occur without proper Unicode support.
Using unicode with php
1. Unicode is an international standard for representing characters across different languages. It allows websites and software to support multiple languages.
2. When working with Unicode in PHP, it is important to use UTF-8 encoding, and extensions like intl provide helpful internationalization functions.
3. Common issues include character encoding problems between databases, files and PHP strings, so ensuring consistent encoding is crucial.
Forensic tool development with rust
Jens Getreu, Early stage researcher, information security expert, Tallinn Technical University https://dssitsec.eu
00 Intro
This document provides an overview of embedded C programming including:
1) A brief history of C originating from Ken Thompson and Dennis Ritchie's work on Unix in 1973 and being inherited from the B programming language.
2) Key characteristics of C like being platform independent, procedural, and commonly used for system programming in operating system kernels.
3) The typical use of .h header files containing function prototypes and .c source files containing code.
4) The basic process of building a C program from header and source files through preprocessing, compiling, assembling, and linking into an executable file.
Recommended
Conference Slides
The document discusses the history of computing and free software. It introduces C programming language code as an example of source code. It explains that a compiler converts source code into machine code that computers can understand. It then discusses the history of early computers from Digital Equipment Corporation. It defines free software as software that provides four essential freedoms: to run it for any purpose, to study and modify it, to copy it to help others, and to improve and release improvements for public benefit. It lists several examples of popular free software projects like GNU, Linux, BSD, Mozilla Firefox, and multimedia codecs from Xiph.org.
F# in MonoDevelop
F# is a functional programming language that can now be used with MonoDevelop. An F# binding for MonoDevelop was released as an open source project in October 2010 under the Apache 2 license. The document encourages contributors to help improve the F# plugin for MonoDevelop by contributing to features like go to definition, colorization of code, and debugging support to help bring F# to a wider audience.
The GNOME way - What can we learn from and within the Open Documentation World
The presentation gives an overview of the documentation for the GNOME desktop environment including the processes of user and developer help creation, review, release and bug tracking; documentation team management; collaboration with design, usability and localization teams and respective workflows; change management (DocBook to Mallard). The second part of the session presents the value of the free and open-source platforms like GNOME, as a real-world practice-playground resource for technical communication students, trainees and trainers.
Presented at tcworld 2014 conference in Stuttgart, November 2014.
There are two videos by Bastian Ilsø from GNOMEDesktop (https://www.youtube.com/user/GNOMEDesktop/) integrated into the presentation that I showed at the conference:
Introducing GNOME 3.14 - https://www.youtube.com/watch?v=7p8Prlu3owc
Discover GNOME’s Docs - https://www.youtube.com/watch?v=dCu3Ww8iI3Y
Using unicode with php
1. The document discusses internationalization and Unicode support in PHP, covering topics like encodings, locales, formatting numbers and dates for different languages, and database and browser considerations.
2. It provides an overview of PHP extensions and functions for internationalization, including Intl, mbstring, and Iconv, and discusses their strengths and limitations.
3. Examples of internationalization practices in popular PHP frameworks and applications are examined, highlighting both best practices and common pitfalls.
Php Unicode I18n
Andrei Zmievski gave a presentation on PHP 6 and Unicode at a PHP Meetup in July 2008. He discussed how PHP 6 includes support for Unicode that PHP 5 lacks, and explained what Unicode is and why it is important. Specifically, he defined Unicode as a standard that assigns a unique number to every character, allowing text to be reliably represented no matter the platform, program, or language. He also touched on mojibake, the phenomenon of corrupted text that can occur without proper Unicode support.
Using unicode with php
1. Unicode is an international standard for representing characters across different languages. It allows websites and software to support multiple languages.
2. When working with Unicode in PHP, it is important to use UTF-8 encoding, and extensions like intl provide helpful internationalization functions.
3. Common issues include character encoding problems between databases, files and PHP strings, so ensuring consistent encoding is crucial.
Forensic tool development with rust
Jens Getreu, Early stage researcher, information security expert, Tallinn Technical University https://dssitsec.eu
00 Intro
This document provides an overview of embedded C programming including:
1) A brief history of C originating from Ken Thompson and Dennis Ritchie's work on Unix in 1973 and being inherited from the B programming language.
2) Key characteristics of C like being platform independent, procedural, and commonly used for system programming in operating system kernels.
3) The typical use of .h header files containing function prototypes and .c source files containing code.
4) The basic process of building a C program from header and source files through preprocessing, compiling, assembling, and linking into an executable file.
How to debug machine learning call stacks
Python is a popular language for deep learning but debugging calls to existing C/C++ code in shared libraries can be extremely challenging. In this presentation from GPU Tech Conference, we look at how Python-C/C++ transformations combined with a multithreaded, multiprocess debugger helps you understand what’s going on within your deep learning code.
Programming languages vienna
This document compares several programming languages for their suitability for bioinformatics education. It discusses trends in programming language usage over time and compares Perl, Python, Java and C++ in small bioinformatics tasks by measuring lines of code. It also evaluates these languages from a software engineering perspective. Finally, it reviews major bioinformatics libraries like BioPerl, BioPython and BioJava and their commit activity over time. The document concludes that scripting languages are better suited for teaching bioinformatics and that new languages and libraries make teaching the subject easier.
ctchou-resume
Ching-Tsun Chou has nearly 20 years of experience in computer architecture, including expertise in cache coherence protocols, memory ordering, atomicity mechanisms, and virtualization. He has worked at Intel since 2013 designing atomicity mechanisms for out-of-order processors and specifying memory ordering semantics. Prior to Intel, he led the development of an FPGA-based full-system emulator at Intel and designed synchronous circuits at Fujitsu Labs of America. He has 6 granted patents, 2 pending applications, and 19 publications in the field of computer architecture.
Lisbon rust lang meetup#1
This document summarizes an introduction to Rust presented at the Lisbon Rust-lang Meetup. It describes Rust as a systems programming language that provides memory safety and concurrency without compromising performance. Rust started as a side project in 2006 and is now developed as an open source project with a diverse community. The document outlines Rust's features like ownership and borrowing for memory management and lightweight tasks for safe concurrency. It notes Rust is production-ready and used in several projects, and discusses goals for the meetup like learning Rust and discussing systems challenges.
A Python Tutorial
Presentation used for tutorial session on Python for finalists of CSEA Code Maestros on Feb 11, 2012. More resources at http://athena.nitc.ac.in/~k4rtik/python/
Effective development of a finite-element solver at the University
Keynote lecture presented at ICSAAM 2018 - The 8th International Conference on Structural Analysis of Advanced Materials
August 28-31, 2018 – Tarbes, France
https://icsaam2018.sciencesconf.org/
Software development is usually neglected by academic researchers in the field of computational solid mechanics. This lack of long-term strategy often leads to the loss of valuable numerical models and algorithms. In the first part of this talk, the key ideas behind the management of the source code of METAFOR, a nonlinear finite-element solver developed at the University of Liège, are presented in detail. The primary goal is to continuously integrate all the developments into a single application so that future projects can safely rely on the results from the past. The second part of the talk exhibits several applications of metal forming processes computed with METAFOR and based on the Arbitrary Lagrangian Eulerian formalism.
Software Languages
This introduction lecture sets the scene for the course. We introduce the notions of software languages and language software from a bigger, interdisciplinary picture.
We start with a linguistic discussion of language, its properties, and the study of language in philosophy and linguistics. We then investigate natural languages, controlled languages, and artificial languages to emphasise the human ability to control and construct languages. At the end of the first part of the lecture, we arrive at the notion of software languages as means to communicate software between people.
In the second part of the lecture, we extend the notion of software languages as means to realise processes on machines. We give an overview of language software, starting from interpreters and compilers. We then introduce various language processors as basic building blocks of compilers. We continue with a comparison of traditional compilers and modern compilers in IDEs. Finally, we introduce traditional compiler compilers and modern language workbenches as tools to construct compilers.
Schizophrenic files v2
This document summarizes a talk about abusing file format parsers to cause different parsing behaviors, known as "schizophrenia". It describes techniques used across various formats like ZIP, BMP, PDF, GIF and PE files that can result in files being parsed or interpreted differently depending on factors like the parsing order, which part of a program does the parsing, or which specifications are followed. The goal is to fool parsers without causing failures by leveraging ambiguity and flexibility in file specifications.
Advanced Video Production with FOSS
This document provides an overview of advanced video production using free and open source software (FOSS). It begins with definitions of key terms like SMPTE, EDL, NLEs and file formats. It then outlines the typical pre-production, production and post-production workflows and maps FOSS tools to each stage, including Krita for image editing, Blender for compositing, and ffmpeg for format conversion. It acknowledges limitations in FOSS tools like missing metadata support and proposes solutions for common tasks like proxy generation and disk optimization. The document aims to demonstrate that high quality video production is possible using FOSS.
Ange Albertini and Gynvael Coldwind: Schizophrenic Files – A file that thinks...
As file format specs leave room for interpretation and sometimes are misunderstood or ignored by the programmers, some well-formed files may be interpreted inconsistently by different tools and libraries. As a result, this can be (ab)used for simple jokes, anti-forensics or to bypass sanitizers which might lead to data exfiltration.
Ange Albertini: Reverse Engineer, author of Corkami
Gynvael Coldwind: His main areas of interest are low-level security (kernel, OS, client), web security and reverse-engineering. Captain of Dragon Sector CTF team :) Currently working as an Information Security Engineer at Google.
Schizophrenic files
The document discusses various techniques for manipulating file formats in unconventional ways, including:
1. Embedding multiple files or data streams within a ZIP archive by ignoring specified parsing rules.
2. Hiding data in optional PDF layers that may not be displayed by all PDF readers.
3. Creating ambiguous BMP files that can display different pixel data depending on which header offsets are followed.
A bit more of PE
This document discusses oddities that can be found in Portable Executable (PE) file formats. It describes how static elements like the DOS header, image base, entry point, and sections can be manipulated in non-standard ways. It also explains how dynamic loading behaviors are affected by these oddities, such as through the thread local storage, relocations, and different parsing of headers and data directories between on-disk and in-memory formats. The document promotes further understanding of PE files through the use of proof of concepts provided on related websites.
Binary art - Byte-ing the PE that fails you (extended offline version)
This is the extended offline version of
an overview of the Portable Executable format and its malformations
presented at Hashdays, in Lucerne, on the 3rd November 2012
direct download link: http://corkami.googlecode.com/files/ange_albertini_hashdays_2012.zip
Messing with binary formats
a 44CON 2013 presentation
slides downloadable (including inception binary) at http://mix.corkami.com
BeagleBone black
The document provides information about the BeagleBone Black development board. It is a low-cost board based on the ARM Cortex-A8 processor. It boots Linux in under 10 seconds and allows programming in C/C++ for real-world applications. The BeagleBone Black has features like Ethernet, USB host and client ports, HDMI output, and programmable GPIO pins that make it suitable for prototyping embedded systems. The document also provides instructions on getting started with the board by installing an operating system image and connecting via SSH.
Dfrws eu 2014 rekall workshop
The document provides an overview of memory forensics and the Rekall memory analysis tool. It discusses why memory forensics is useful, describes how Rekall supports multiple operating systems through profiles, and covers memory imaging, virtual memory concepts, and analyzing live memory. Rekall's interfaces like the command line, console, notebook, and web console are also introduced.
One Year of Porting - Post-mortem of two Linux/SteamOS launches
2013 was the year in which Linux finally got the attention of game developers; it was also the year in which my first two Linux/SteamOS ports were released. This talk will cover the learnings of one year of porting work from a programmer's point of view: DOs and DON'Ts and issues both expected and unexpected.
Mender.io | Develop embedded applications faster | Comparing C and Golang
Mender.io's Marcin Pasinski discusses the tradeoffs of developing embedded applications with both C and Golang
Caring for file formats
Presented at Troopers 2016.
When Infosec and Digipres share interests...
TL;DR
- Attack surface with file formats is too big.
- Specs are useless (just a nice ‘guide’), not representing reality.
- We can’t deprecate formats because we can’t preserve and we can’t define how they really work
- We need open good libraries to simplify landscape, and create a corpus to express the reality of file format, which gives us real “documentation”.
- Then we can preserve and deprecate older format, which reduces attack surface.
- From then on, we can focus on making the present more secure.
- We don't need new formats: reality will diverge from the specs anyway - we need 'alive' (up to date, traceable) specs.
Linux as a gaming platform, ideology aside
Linux commonly connotes with open-source zealots and a small PC market
share, not blockbuster video games. However, the arrival of Steam on
the platform might change the outlook quite dramatically, and Linux
support may soon become a must-have feature for your game. Setting the
open-source ideology aside, this lecture is an overview of the
technical challenges a game developer may face while porting their
game to this platform, along with solutions.
PyTorch for Delphi - Python Data Sciences Libraries.pdf
Replay and more: https://blogs.embarcadero.com/pytorch-for-delphi-with-the-python-data-sciences-libraries/
The next installment of the Embarcadero Open Source Live Stream takes a look at the Delphi side of the Python Ecosystem with the new Python Data Sciences Libraries and related projects that make it super easy write Delphi code against Python libraries and easily deploy on Windows, Linux, MacOS, and Android. Specific examples with the Python Natural Language Toolkit and PyTorch, the library that powers projects like Tesla Autopilot, Uber's Pyro, Hugging Face's Transformers.
This is part of a series of regular live streams discussing the latest in Embarcadero open source projects. Hosted by Jim McKeeth and joined by members of the community and developers involved in these open source projects, as well as members of Embarcadero and Idera’s Product Management. A great opportunity to see behind the scenes and help shape the future of Embarcadero’s Open Source projects.
Programming with Python - Basic
s[:] makes a copy.
– s[:]
– slice(0, 3)
– s[slice(0, 3)]
– s[0:3]
– s[:3]
– s[3:]
– s[:-3]
So slice is more flexible.
– s[start:stop:step]
– s[::-1] # reverse
– help(slice)
– s = 'Hello World'
– s[5:11:2]
– 'oWl'
– s[::2]
– 'Hlo rd'
– s[-
More Related Content
What's hot
How to debug machine learning call stacks
Python is a popular language for deep learning but debugging calls to existing C/C++ code in shared libraries can be extremely challenging. In this presentation from GPU Tech Conference, we look at how Python-C/C++ transformations combined with a multithreaded, multiprocess debugger helps you understand what’s going on within your deep learning code.
Programming languages vienna
This document compares several programming languages for their suitability for bioinformatics education. It discusses trends in programming language usage over time and compares Perl, Python, Java and C++ in small bioinformatics tasks by measuring lines of code. It also evaluates these languages from a software engineering perspective. Finally, it reviews major bioinformatics libraries like BioPerl, BioPython and BioJava and their commit activity over time. The document concludes that scripting languages are better suited for teaching bioinformatics and that new languages and libraries make teaching the subject easier.
ctchou-resume
Ching-Tsun Chou has nearly 20 years of experience in computer architecture, including expertise in cache coherence protocols, memory ordering, atomicity mechanisms, and virtualization. He has worked at Intel since 2013 designing atomicity mechanisms for out-of-order processors and specifying memory ordering semantics. Prior to Intel, he led the development of an FPGA-based full-system emulator at Intel and designed synchronous circuits at Fujitsu Labs of America. He has 6 granted patents, 2 pending applications, and 19 publications in the field of computer architecture.
Lisbon rust lang meetup#1
This document summarizes an introduction to Rust presented at the Lisbon Rust-lang Meetup. It describes Rust as a systems programming language that provides memory safety and concurrency without compromising performance. Rust started as a side project in 2006 and is now developed as an open source project with a diverse community. The document outlines Rust's features like ownership and borrowing for memory management and lightweight tasks for safe concurrency. It notes Rust is production-ready and used in several projects, and discusses goals for the meetup like learning Rust and discussing systems challenges.
A Python Tutorial
Presentation used for tutorial session on Python for finalists of CSEA Code Maestros on Feb 11, 2012. More resources at http://athena.nitc.ac.in/~k4rtik/python/
Effective development of a finite-element solver at the University
Keynote lecture presented at ICSAAM 2018 - The 8th International Conference on Structural Analysis of Advanced Materials
August 28-31, 2018 – Tarbes, France
https://icsaam2018.sciencesconf.org/
Software development is usually neglected by academic researchers in the field of computational solid mechanics. This lack of long-term strategy often leads to the loss of valuable numerical models and algorithms. In the first part of this talk, the key ideas behind the management of the source code of METAFOR, a nonlinear finite-element solver developed at the University of Liège, are presented in detail. The primary goal is to continuously integrate all the developments into a single application so that future projects can safely rely on the results from the past. The second part of the talk exhibits several applications of metal forming processes computed with METAFOR and based on the Arbitrary Lagrangian Eulerian formalism.
Software Languages
This introduction lecture sets the scene for the course. We introduce the notions of software languages and language software from a bigger, interdisciplinary picture.
We start with a linguistic discussion of language, its properties, and the study of language in philosophy and linguistics. We then investigate natural languages, controlled languages, and artificial languages to emphasise the human ability to control and construct languages. At the end of the first part of the lecture, we arrive at the notion of software languages as means to communicate software between people.
In the second part of the lecture, we extend the notion of software languages as means to realise processes on machines. We give an overview of language software, starting from interpreters and compilers. We then introduce various language processors as basic building blocks of compilers. We continue with a comparison of traditional compilers and modern compilers in IDEs. Finally, we introduce traditional compiler compilers and modern language workbenches as tools to construct compilers.
What's hot (7)
Effective development of a finite-element solver at the University
Effective development of a finite-element solver at the University
Similar to Binary art - funky PoCs & visual docs
Schizophrenic files v2
This document summarizes a talk about abusing file format parsers to cause different parsing behaviors, known as "schizophrenia". It describes techniques used across various formats like ZIP, BMP, PDF, GIF and PE files that can result in files being parsed or interpreted differently depending on factors like the parsing order, which part of a program does the parsing, or which specifications are followed. The goal is to fool parsers without causing failures by leveraging ambiguity and flexibility in file specifications.
Advanced Video Production with FOSS
This document provides an overview of advanced video production using free and open source software (FOSS). It begins with definitions of key terms like SMPTE, EDL, NLEs and file formats. It then outlines the typical pre-production, production and post-production workflows and maps FOSS tools to each stage, including Krita for image editing, Blender for compositing, and ffmpeg for format conversion. It acknowledges limitations in FOSS tools like missing metadata support and proposes solutions for common tasks like proxy generation and disk optimization. The document aims to demonstrate that high quality video production is possible using FOSS.
Ange Albertini and Gynvael Coldwind: Schizophrenic Files – A file that thinks...
As file format specs leave room for interpretation and sometimes are misunderstood or ignored by the programmers, some well-formed files may be interpreted inconsistently by different tools and libraries. As a result, this can be (ab)used for simple jokes, anti-forensics or to bypass sanitizers which might lead to data exfiltration.
Ange Albertini: Reverse Engineer, author of Corkami
Gynvael Coldwind: His main areas of interest are low-level security (kernel, OS, client), web security and reverse-engineering. Captain of Dragon Sector CTF team :) Currently working as an Information Security Engineer at Google.
Schizophrenic files
The document discusses various techniques for manipulating file formats in unconventional ways, including:
1. Embedding multiple files or data streams within a ZIP archive by ignoring specified parsing rules.
2. Hiding data in optional PDF layers that may not be displayed by all PDF readers.
3. Creating ambiguous BMP files that can display different pixel data depending on which header offsets are followed.
A bit more of PE
This document discusses oddities that can be found in Portable Executable (PE) file formats. It describes how static elements like the DOS header, image base, entry point, and sections can be manipulated in non-standard ways. It also explains how dynamic loading behaviors are affected by these oddities, such as through the thread local storage, relocations, and different parsing of headers and data directories between on-disk and in-memory formats. The document promotes further understanding of PE files through the use of proof of concepts provided on related websites.
Binary art - Byte-ing the PE that fails you (extended offline version)
This is the extended offline version of
an overview of the Portable Executable format and its malformations
presented at Hashdays, in Lucerne, on the 3rd November 2012
direct download link: http://corkami.googlecode.com/files/ange_albertini_hashdays_2012.zip
Messing with binary formats
a 44CON 2013 presentation
slides downloadable (including inception binary) at http://mix.corkami.com
BeagleBone black
The document provides information about the BeagleBone Black development board. It is a low-cost board based on the ARM Cortex-A8 processor. It boots Linux in under 10 seconds and allows programming in C/C++ for real-world applications. The BeagleBone Black has features like Ethernet, USB host and client ports, HDMI output, and programmable GPIO pins that make it suitable for prototyping embedded systems. The document also provides instructions on getting started with the board by installing an operating system image and connecting via SSH.
Dfrws eu 2014 rekall workshop
The document provides an overview of memory forensics and the Rekall memory analysis tool. It discusses why memory forensics is useful, describes how Rekall supports multiple operating systems through profiles, and covers memory imaging, virtual memory concepts, and analyzing live memory. Rekall's interfaces like the command line, console, notebook, and web console are also introduced.
One Year of Porting - Post-mortem of two Linux/SteamOS launches
2013 was the year in which Linux finally got the attention of game developers; it was also the year in which my first two Linux/SteamOS ports were released. This talk will cover the learnings of one year of porting work from a programmer's point of view: DOs and DON'Ts and issues both expected and unexpected.
Mender.io | Develop embedded applications faster | Comparing C and Golang
Mender.io's Marcin Pasinski discusses the tradeoffs of developing embedded applications with both C and Golang
Caring for file formats
Presented at Troopers 2016.
When Infosec and Digipres share interests...
TL;DR
- Attack surface with file formats is too big.
- Specs are useless (just a nice ‘guide’), not representing reality.
- We can’t deprecate formats because we can’t preserve and we can’t define how they really work
- We need open good libraries to simplify landscape, and create a corpus to express the reality of file format, which gives us real “documentation”.
- Then we can preserve and deprecate older format, which reduces attack surface.
- From then on, we can focus on making the present more secure.
- We don't need new formats: reality will diverge from the specs anyway - we need 'alive' (up to date, traceable) specs.
Linux as a gaming platform, ideology aside
Linux commonly connotes with open-source zealots and a small PC market
share, not blockbuster video games. However, the arrival of Steam on
the platform might change the outlook quite dramatically, and Linux
support may soon become a must-have feature for your game. Setting the
open-source ideology aside, this lecture is an overview of the
technical challenges a game developer may face while porting their
game to this platform, along with solutions.
PyTorch for Delphi - Python Data Sciences Libraries.pdf
Replay and more: https://blogs.embarcadero.com/pytorch-for-delphi-with-the-python-data-sciences-libraries/
The next installment of the Embarcadero Open Source Live Stream takes a look at the Delphi side of the Python Ecosystem with the new Python Data Sciences Libraries and related projects that make it super easy write Delphi code against Python libraries and easily deploy on Windows, Linux, MacOS, and Android. Specific examples with the Python Natural Language Toolkit and PyTorch, the library that powers projects like Tesla Autopilot, Uber's Pyro, Hugging Face's Transformers.
This is part of a series of regular live streams discussing the latest in Embarcadero open source projects. Hosted by Jim McKeeth and joined by members of the community and developers involved in these open source projects, as well as members of Embarcadero and Idera’s Product Management. A great opportunity to see behind the scenes and help shape the future of Embarcadero’s Open Source projects.
Programming with Python - Basic
s[:] makes a copy.
– s[:]
– slice(0, 3)
– s[slice(0, 3)]
– s[0:3]
– s[:3]
– s[3:]
– s[:-3]
So slice is more flexible.
– s[start:stop:step]
– s[::-1] # reverse
– help(slice)
– s = 'Hello World'
– s[5:11:2]
– 'oWl'
– s[::2]
– 'Hlo rd'
– s[-
Glimworm 21 11-13 (1)
The document discusses plans for a prototype of an open platform called Relayr for the Internet of Things. It will include a starter kit called Wonderbar that is an Arduino compatible developer board with various sensors to allow hardware and app developers to connect devices to Relayr's cloud platform. The creator is committed to not shaving until a working prototype is built and asks for feedback on questions around Arduino compatibility, sensor selection, and form factors.
TULIKA KESHRI (1)
Tulika Keshri is a software engineer with over 10 years of experience in areas such as Windows audio driver development, audio validation, video and image codecs, and digital signal processing. She has expertise in WHQL/WHCK certification, bug fixing, device driver development, and algorithm design and optimization. She is looking for opportunities in software development, particularly Linux device drivers and debug/test tools, and has experience with languages like C/C++ and operating systems like Windows, Linux, and Moblin.
Troubleshooting Memory-Related Issues with the Memory Profiler
Finding leaking memory, the biggest memory allocations, or just poking around to see what was happening on the memory level has not always been easy, but is essential to getting the best performance for your game. Come to this session to learn how the Memory Profiler improves upon Unity's past tools and helps you troubleshoot memory issues faster.
Stephanie Rancourt - Unity Technologies
Greg Wojciechowski - Unity Technologies
Hardware hacking
This presentations introduces some common protocols used in electronics, and how to sniff/speak them. Then a bit about USB, and some interesting hacks with these things.
Then a bit about openwrt and router hacking.
Similar to Binary art - funky PoCs & visual docs (20)
Ange Albertini and Gynvael Coldwind: Schizophrenic Files – A file that thinks...
Ange Albertini and Gynvael Coldwind: Schizophrenic Files – A file that thinks...
Binary art - Byte-ing the PE that fails you (extended offline version)
Binary art - Byte-ing the PE that fails you (extended offline version)
One Year of Porting - Post-mortem of two Linux/SteamOS launches
One Year of Porting - Post-mortem of two Linux/SteamOS launches
Mender.io | Develop embedded applications faster | Comparing C and Golang
Mender.io | Develop embedded applications faster | Comparing C and Golang
PyTorch for Delphi - Python Data Sciences Libraries.pdf
PyTorch for Delphi - Python Data Sciences Libraries.pdf
Troubleshooting Memory-Related Issues with the Memory Profiler
Troubleshooting Memory-Related Issues with the Memory Profiler
More from Ange Albertini
Technical challenges with file formats
"Technical challenges"? More like horrors!
Let's explore first the technical debt of old file formats,
with the evolution of the "MP3" format.
Then we go through more recent forms of file format abuses and tools:
polyglots, polymocks, and crypto-polyglots.
Last, an overview of recent collisions and other forms of art with MD5.
They say that with file formats, "specs are enough".
Should we laugh, cry or run away screaming?
Presented at Digital Preservation Coalition's CyberSec & DigiPres event.
Relations between archive formats
The document discusses different archive formats and their relationships. It begins with an introduction to the presenter and then covers zlib, gzip, and zip file formats. Zlib and gzip both wrap deflate compression, but in different ways, so while the compressed data can be transferred between them, the formats are not directly compatible. Zip can use deflate but also other compression methods and a different one for each file. In conclusion, deflate is a common algorithm while the various formats wrap it with different headers and metadata.
Abusing archive file formats
This document is a slide presentation about hash collisions and generating polyglot files that have the same hash but different content. It discusses existing attacks on hashes like MD5 and SHA1 that allow two files to be generated with the same hash. It then explains how collisions can be generated for ZIP and TAR.GZ files by manipulating the ZIP file format in a way that maintains compatibility with ZIP parsers but results in different files with the same hash. Examples of colliding file pairs are shown with identical prefixes and suffixes and differing collision blocks in the middle.
TimeCryption
Clean now, malicious later.
AKA Abusing one-time pads with binary polyglots.
April 08, 2021 Stefan Kölbl, Ange Albertini
Recording @ https://www.youtube.com/watch?v=liancIA1m9w
You are *not* an idiot
You are *not* an idiot ~ or maybe we're all idiots.
Keynote at NorthSec 2021.
Talking about school, failure, success, diploma, impostor syndrom, manipulators, burn out, suicide, and how to deal with them.
The talk delivery was more personal, the slides are kept generic.
The recording is available @ https://youtu.be/Iu70J49bPlE?t=20869 (starts at 5:47:49)
Improving file formats
The document discusses the author's experience with malware and file formats over 13 years, noting how specifications are often outdated and incomplete which can lead to misunderstandings. It advocates for better tools to analyze, document, and validate file formats to improve understanding of their current usage and behaviors. The author has created several open source projects focused on file format analysis and validation.
KILL MD5
Demystifying hash collisions.
Pass the Salt, 1st July 2019.
video @ https://passthesalt.ubicast.tv/videos/kill-md5-demystifying-hash-collisions/
Hack.Lu, 22 October 2019.
video @ https://www.youtube.com/watch?v=JXazRQ0APpI
No more dumb hex!
Troopers, Heidelberg, Germany
21 March 2019
co-presented and designed with Rafał Hirsz
https://github.com/corkami/sbud
https://github.com/evoL/albert
Beyond your studies
Beyond your studies ~ You studied X at Y. now what?
HackPra, July 2018
A student's life ago, the author somehow managed to graduate.
On the way, he made a lot of mistakes -- and he still does.
A few people since called him 'successful', but LOL, if only they knew....
And now, the author will do another (big!) mistake:
instead of hiding in shame as he probably should,
he'll share his mistakes with anyone bored enough to attend,
in the hope that he's the last person to ever look that dumb to commit such mistakes.
If you're a genius and you know what to do in life, please skip this. Seriously.
If, like the author at the time, you wonder WTF is going on with graduation, professional work and life, then hopefully you learn a few things. Maybe.
Btw the author is 42 (WTF - old!).
Maybe that will help to provide a few answers.
An introduction to inkscape
This document provides an introduction and overview of Inkscape, an open-source vector graphics editor. It discusses Inkscape's features such as its use of Scalable Vector Graphics (SVG), tools for drawing objects and manipulating nodes, layers, transformations, and more. The document also includes tutorials for tasks like tracing an image, creating a poster, and converting code snippets to SVG. Throughout, it emphasizes that Inkscape is non-destructive and files remain editable, while also noting some limitations like unsupported gradients along paths.
The challenges of file formats
The document discusses the author's perspectives on file formats after over 30 years of experience working with computers and digital preservation. The author believes specifications are imperfect and do not fully define what constitutes a valid file, as implementations can interpret specifications differently and become outdated. The author has experimented with creating extreme files that push the boundaries of specifications in order to understand formats better and find potential issues.
Exploiting hash collisions
Exploiting (identical prefix) hash collisions.
Presented at BlackAlps in November 2017
PoCs @ https://github.com/corkami/pocs/tree/master/pdf/shattered
recording @ https://www.youtube.com/watch?v=Y-oJWEYKVLA
Infosec & failures
video recording https://www.youtube.com/watch?v=erZ2JlfTtcE
(smaller deck, but w/ more personal details)
Ange Ąż杏 Albertini
Hack.Lu - October 2017
Connecting communities
This document contains the table of contents for an issue of PoC||GTFO, a journal for sharing technical content in unconventional ways. It lists over 60 articles across various topics including hardware hacking, firmware reverse engineering, embedded exploitation, and unusual file formats. The sections are numbered and titled with references to hacking, unconventional thinking, and sharing knowledge in new ways.
TASBot - the perfectionist
https://www.youtube.com/watch?v=s-bKWT9fj8Y
written and presented by dwangoAC at DEF CON 24, SVLUG & NBLUG
[slides collaboration]
Hacks in video games
Game developers are able to create better video games than what the limitations of computers allow by understanding how things truly work at a detailed level. They discovered tricks to get around limitations, such as updating colors rapidly to display more than the limited palette or changing sounds quickly to generate new voices. Understanding the underlying systems allows developers to creatively solve problems like drawing huge animated monsters that surpass the small allowed object sizes. This knowledge of how things really function provides advantages beyond initial restrictions.
Trusting files (and their formats)
1. File formats are complex with many stakeholders who interpret specifications differently, leading to divergent implementations over time.
2. Specifications are often incomplete, unclear, non-free, or do not reflect reality, making it difficult to determine what a valid file is.
3. Relying on specifications alone is not sufficient - one must also analyze sample files and code to understand how file formats work in practice.
Let's write a PDF file
The document provides a step-by-step guide to writing a basic "Hello World" PDF file. It explains the overall PDF file structure and key elements like the file body, cross-reference table, trailer, and objects. Objects are used to define things like the catalog, pages, and a single page. The guide demonstrates creating three objects - one for the catalog that refers to a pages object, which in turn refers to a page object defining a single page.
PDF: myths vs facts
A presentation for the digital preservation community,
during a Digital Preservation Coalition event at Oxford,
15th July 2015
An overview of potential leaks via PDF
This document discusses potential leaks that can occur from PDF documents, specifically from text, images, and drawings embedded in the pages. Even if text is invisible, images are not displayed, or drawings are covered, this information can still be extracted from the PDF. Importing or copying parts of a PDF does not necessarily limit the content, as the full document is often brought in and only a "limiting view" is applied. The only fully reliable way to prevent leaks is to convert the PDF pages to individual image files. In general, the PDF format has many issues preventing leaks and poses a large attack surface due to embedded metadata.
More from Ange Albertini (20)
Recently uploaded
Income Tax exemption for Start up : Section 80 IAC
A presentation on the concept of Exemption of Profits of Start ups from Income Tax
Industrial Tech SW: Category Renewal and Creation
Every industrial revolution has created a new set of categories and a new set of players.
Multiple new technologies have emerged, but Samsara and C3.ai are only two companies which have gone public so far.
Manufacturing startups constitute the largest pipeline share of unicorns and IPO candidates in the SF Bay Area, and software startups dominate in Germany.
Organizational Change Leadership Agile Tour Geneve 2024
Organizational Change Leadership at Agile Tour Geneve 2024
Dpboss Matka Guessing Satta Matta Matka Kalyan Chart Satta Matka
Dpboss Matka Guessing Satta Matta Matka Kalyan Chart Satta Matka➒➌➎➏➑➐➋➑➐➐Dpboss Matka Guessing Satta Matka Kalyan Chart Indian Matka
Dpboss Matka Guessing Satta Matta Matka Kalyan Chart Indian Matka Indian satta Matka Dpboss Matka Kalyan Chart Matka Boss otg matka Guessing Satta Building Your Employer Brand with Social Media
Presented at The Global HR Summit, 6th June 2024
In this keynote, Luan Wise will provide invaluable insights to elevate your employer brand on social media platforms including LinkedIn, Facebook, Instagram, X (formerly Twitter) and TikTok. You'll learn how compelling content can authentically showcase your company culture, values, and employee experiences to support your talent acquisition and retention objectives. Additionally, you'll understand the power of employee advocacy to amplify reach and engagement – helping to position your organization as an employer of choice in today's competitive talent landscape.
Company Valuation webinar series - Tuesday, 4 June 2024
This session provided an update as to the latest valuation data in the UK and then delved into a discussion on the upcoming election and the impacts on valuation. We finished, as always with a Q&A
Best Forex Brokers Comparison in INDIA 2024
Navigating the world of forex trading can be challenging, especially for beginners. To help you make an informed decision, we have comprehensively compared the best forex brokers in India for 2024. This article, reviewed by Top Forex Brokers Review, will cover featured award winners, the best forex brokers, featured offers, the best copy trading platforms, the best forex brokers for beginners, the best MetaTrader brokers, and recently updated reviews. We will focus on FP Markets, Black Bull, EightCap, IC Markets, and Octa.
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
CALL 8867766396 SATTA MATKA | DPBOSS | KALYAN MAIN BAZAR | FAST MATKA | DPBOSS GUESSING | TARA MATKA | KALYAN CHART | MATKA BOSS
The 10 Most Influential Leaders Guiding Corporate Evolution, 2024.pdf
In the recent edition, The 10 Most Influential Leaders Guiding Corporate Evolution, 2024, The Silicon Leaders magazine gladly features Dejan Štancer, President of the Global Chamber of Business Leaders (GCBL), along with other leaders.
Creative Web Design Company in Singapore
At Techbox Square, in Singapore, we're not just creative web designers and developers, we're the driving force behind your brand identity. Contact us today.
How MJ Global Leads the Packaging Industry.pdf
MJ Global's success in staying ahead of the curve in the packaging industry is a testament to its dedication to innovation, sustainability, and customer-centricity. By embracing technological advancements, leading in eco-friendly solutions, collaborating with industry leaders, and adapting to evolving consumer preferences, MJ Global continues to set new standards in the packaging sector.
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Schedule Unveiled
2024-6-01-IMPACTSilver-Corp-Presentation.pdf
IMPACT Silver is a pure silver zinc producer with over $260 million in revenue since 2008 and a large 100% owned 210km Mexico land package - 2024 catalysts includes new 14% grade zinc Plomosas mine and 20,000m of fully funded exploration drilling.
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
This letter, written by Kellen Harkins, Course Director at Full Sail University, commends Anny Love's exemplary performance in the Video Sharing Platforms class. It highlights her dedication, willingness to challenge herself, and exceptional skills in production, editing, and marketing across various video platforms like YouTube, TikTok, and Instagram.
2022 Vintage Roman Numerals Men Rings
Discover timeless style with the 2022 Vintage Roman Numerals Men's Ring. Crafted from premium stainless steel, this 6mm wide ring embodies elegance and durability. Perfect as a gift, it seamlessly blends classic Roman numeral detailing with modern sophistication, making it an ideal accessory for any occasion.
https://rb.gy/usj1a2
Recently uploaded (20)
Income Tax exemption for Start up : Section 80 IAC
Income Tax exemption for Start up : Section 80 IAC
Organizational Change Leadership Agile Tour Geneve 2024
Organizational Change Leadership Agile Tour Geneve 2024
Dpboss Matka Guessing Satta Matta Matka Kalyan Chart Satta Matka
Dpboss Matka Guessing Satta Matta Matka Kalyan Chart Satta Matka
The Influence of Marketing Strategy and Market Competition on Business Perfor...
The Influence of Marketing Strategy and Market Competition on Business Perfor...
Company Valuation webinar series - Tuesday, 4 June 2024
Company Valuation webinar series - Tuesday, 4 June 2024
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
The 10 Most Influential Leaders Guiding Corporate Evolution, 2024.pdf
The 10 Most Influential Leaders Guiding Corporate Evolution, 2024.pdf
The Influence of Marketing Strategy and Market Competition on Business Perfor...
The Influence of Marketing Strategy and Market Competition on Business Perfor...
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
Binary art - funky PoCs & visual docs
- 1. Insomni’hack Geneva, Switzerland Ange Albertini 2014/03/21 funky PoCs & visual docs
- 3. boring? ● file formats were supposed to be safe ○ public specs ○ open-source parsers ● {weirdness} == {exploits} ? ● software = parse, sanitize, recover
- 4. formats’ diversity 1/2 no header ● COM (1982), MBR (1982) magic signature ● none: DOL (2001) ● 2: TIFF, PE ● 4: most standard ● >4: PNG, PDF
- 5. start offset: ● archives ● range: PDF ● mostly 0 special properties ● deprecated header: PE ● variable scanning direction: PDF ● multi-versions: BMP ● scanned chunk: JPEG ● no official names: ZIP formats’ diversity 2/2
- 13. quine (relay)
- 15. polyglot
- 21. schizophren
- 23. misc
- 25. 128, 217, 255, 217, 128, 38, 1, 38
- 29. crypto-tology: for anything crypto, ask @veorq (coz he’s awesome)
- 42. On binary formats ● specs far from perfect ● plenty of fun ● many consequences for infosec ○ unforeseen attack channels
- 45. disclaimer no awards, no studies
- 50. goal create useful documentations based on reality
- 51. posters self-contained ● immediate ‘big picture’ ● no roleplay gamebook
- 52. use common sense and your own eyes
- 54. creativity? give yourself time! to fail!
- 60. define your audience lower and upper limits
- 61. “you should add …” see “setting a upper limit”
- 62. “too simple/simplified”? 1/ teach others, beginners, kids 2/ no more excuses for not knowing
- 63. remove the obvious guessing doesn’t hurt
- 66. left right
- 67. left right
- 68. left right
- 71. no unnecessary extras leave doors closed (to be opened somewhere else)
- 72. requirements
- 73. a computer a transparent tablecloth
- 78. On visual documentations ● it doesn’t hurt ● it’s not so hard ● requires time
- 79. Questions ? thank YOU ! @angealbertini ✉ ange@corkami.com