Latest

For several reasons, emulation has always fascinated me. A program that executes other programs sounds like such a cool concept. It really feels like you’re getting your money’s worth out of writing it! Beyond that, it definitely feels like you’re building a computer within software. I really

In what’s a novel supply chain attack, a security researcher managed to breach over 35 major companies’ internal systems, including that of Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, and achieve remote code execution. The technique, called dependency confusion or a substitution attack, takes advantage of the

This is an excellent piece found here. Detailing production grade tooling and real world scenarios. – Mozilla has been fuzzing Firefox and its underlying components for a while. It has proven to be one of the most efficient ways to identify quality and security issues. In general, we apply fuzzing on

This post is about a VirtualBox VM escape exploit that existed in VirtualBox 6.1.16 on Windows. Many thanks to the organizers for hosting this great competition, especially to ChenNan for creating this challenge, M4x for always being helpful, answering our questions and sitting with us through the many

Key Takeaways * Donkey is a new Clojure open-source HTTP library, designed for ease of use and performance. * Identifying the strengths and weaknesses of a language helps with design decisions.  * Clojure frees developers from the perils of writing concurrent programs, but at a price. * When concurrency is not a factor, consider