Installing SMLNJ on Cygwin
Today, I spent a few hours trying to figure out why my SMLNJ install kept failing. For the benefit of others who may have run into this problem, I’m going to record my solution (which I haven’t seen...
View ArticleTwelf Resources
I’ve always been interested in computer assisted proof systems. Over the last year (or 2), I’ve been reading more and more on proving interesting properties of programs. I began with the very recent...
View ArticleUnderstanding the PDF format: DRM and Wookies
Recently, my friend Dave and I were talking about the Adobe PDF DRM mechanism for eBooks. He was one of many people I’ve talked to who have bought an Adobe eBook without realizing it included DRM...
View ArticleA Tricky Bit of SNES Code
I’ve been working to disassemble and comment the source to a certain SNES cartridge. I’ve decided to write all the tools from the ground up — as a learning experience. I’m making good progress and, at...
View ArticleFuzzing Adobe Reader 9
As I mentioned in a previous post, the PDF specification seems bloated. Additionally, the Adobe Reader makes a really good effort to display something even when the PDF document is ill-formed. These...
View ArticlePatch for libdasm-1.5
While working on DynaTrex, I found a small but problematic bug in libdasm-1.5 when parsing some floating point instructions. One of the floating point opcode tables was missing 4 null entries in the...
View ArticleA Quine in PDF
A quine is a self-reproducing program. One whose output is the source of the program itself. The wikipedia link above goes into more depth. I’m full of mucus and my head is floating, so instead of...
View ArticleDifferential Reversing (or some better name)
Note: As a prefix, I want to say I can’t decide on what to call this simple technique. Everyone seems to call it something different: filtering, differential debugging, coverage diffs, or delta traces....
View ArticleGetting Pointers from Leaky Interpreters
Note: I haven’t seen this anywhere before but I wouldn’t be surprised if it had been done, so let me know if I should credit someone. It was inspired in some really abstract way by a USENIX Security...
View ArticleI'm not dead yet…
This site has never been updated all that regularly, I admit. This time, though, I have an excuse; I’ll be speaking at Blackhat DC and ShmooCon. Preparing for two talks in the same week on mostly...
View Article