Sign in Subscribe

CitrixAI Architect

Moving Quicksilver into production

Moving Quicksilver into production

This post originally appears here One of the great arts of software engineering is making updates and improvements to working systems without taking them offline. For some systems this can be rather easy, spin up a new web server or load balancer, redirect traffic and you’re done. For other

Configuration Distribution at Internet Scale

Configuration Distribution at Internet Scale

This post originally appears here Cloudflare’s network processes more than fourteen million HTTP requests per second at peak for Internet users around the world. We spend a lot of time thinking about the tools we use to make those requests faster and more secure, but a secret-sauce which makes

Privacy predictions for 2021

Privacy predictions for 2021

2020 saw an unprecedented increase in the importance and value of digital services and infrastructure. From the rise of remote working and the global shift in consumer habits to huge profits booked by internet entertainers, we are witnessing how overwhelmingly important the connected infrastructure has become for the daily functioning

Data flow analysis: DepGraph

Data flow analysis: DepGraph

In binary analysis, a recurrent problem is to track back a register or memory value (we will call them variables in the rest of the blog entry). To present the problem, we will use a simplified representation instead of barbarous assembly. Here is a first example: Here are some questions

Reverse Engineering Starling Bank: Jailbreak & Debugger Detection, Weaknesses & Mitigations

Reverse Engineering Starling Bank: Jailbreak & Debugger Detection, Weaknesses & Mitigations

Three layers There are three layers of protection applied before main starts doing its intended work. Frida detection, jailbreak detection, and debugger detection. Frida listens (Edit: Here is what Frida does) When Frida runs in injected mode1, there’s a daemon, frida-server, that listens for connections on port 27042 and

Command PATH security in Go: Bugfix Mechanism

Command PATH security in Go: Bugfix Mechanism

Today’s Go security release fixes an issue involving PATH lookups in untrusted directories that can lead to remote execution during the go get command. This post details the bug, the fixes we have applied, how to decide whether your own programs are vulnerable to similar problems, and what you