lcamtuf

I am wondering a bit about "To the best of our knowledge, this is the first work that shows this." and the already existing p0f from http://lcamtuf.coredump.cx/. p0f has an higher error rate (if the 96% success rate are true) and it doesn't give hints on an application level.

His main website contains hours of reading on everything from computer security to home-machining and robotics. Well worth a read. http://lcamtuf.coredump.cx/

Books, articles... I'm afraid they're boring - they are cool to read if you're interested in the society, but that comes later on and you start to look for those things yourself. If he's interested in how things really work, then just make sure he knows the difference between exploration and breaking someone's work. The best learning material I have found are pages of people dealing with real security... stuff that you cannot find by googling "hacking". That might both give him some new ideas, as well as show who is really considered important. For example, I always thought lcamtuf (http://lcamtuf.coredump.cx/) is a great example of a hacker of many skills (photography, network security, fuzzing, constructing robots with own 3d printer and many more random ideas). I guess you just don't have time to be a script kiddie if you have enough good ideas of your own... Just make sure he finds securityfocus before he finds cDc :) On the other hand you could let him know, that notifying the school officially about the security problem may be a bad idea. Typical teachers are as likely to say "thanks", as "OMG hacker! security audit to make sure you didn't change any data will cost X$/h - your parents are paying for it and you're suspended".

I believe he found new solace - woodwork[1][2]. Given the state of security and things in general in the IT, I definitely understand. Especially with the AI slop influx. His blog is quite interesting to read though, highly recommend. [1] https://lcamtuf.substack.com/p/how-do-wood-finishes-hold-up [2] https://lcamtuf.coredump.cx/woodworking/

Baffled that https://lcamtuf.substack.com/ or https://lcamtuf.coredump.cx/ isn't in there.

completely unrelated (pretty much) But this is still one of my favorite parts of the internet - https://lcamtuf.coredump.cx/gcnc/ amazing, information dense guide to actually making stuff. I reached out once to the author, who was patient and kind. I get through my days, I make stuff I do stuff, and I'm generally content with that. The author, lcamtuf, from my very limited interaction seems "extra". Maybe it really just is writing stuff down. Maybe I should do more of that.

Are you mostly interested in historical hardware or hardware in general? If the latter, Bunnie’s blog might be of interest: https://www.bunniestudios.com/blog/ Or perhaps Michał Zalewski’s newsletter and web site: https://lcamtuf.substack.com/archive, https://lcamtuf.coredump.cx/

I highly recommend the book Practical Doomsday: https://lcamtuf.coredump.cx/prep/ It was originally a long-form blog post by Michal Zalewski and he turned into a book with even more content.

As a supplement to this excellent breakdown of laser cutting, can I recommend the Guerrilla Guide to CNC [0]. To this day, it's the best reference I've ever read on small volume fabrication with a CNC machine and/or 3D printer. If you enjoyed the original post, you may enjoy this as well. [0] https://lcamtuf.coredump.cx/gcnc/

The high margin makes sense if their account is mostly ordering low-volume. The margins on cut-tape, for example, are nuts. As a distributor they order in bulk at low per-unit pricing, and then when hobbyists buy onsies twosies they can charge low-volume pricing for a huge markup. Doesn't mean they're making a lot of money on those types of orders. (That isn't an argument against the author's complaints, just providing hopefully interesting info). Off-topic: I clicked through to the author's Sir Box-a-Lot project (https://lcamtuf.coredump.cx/sir-box-a-lot/) and immediately fell in love with the micro rocker switch they used for the power switch. A 7mmx3mm rocker power switch. https://www.mouser.com/datasheet/2/295/GW-1663576.pdf What an absolute beaut.

His first gripe is the prompt for USB HID devices, where he even has been told the correct answer but attempts to pretend it away. Unfortunately, Apple is right whether or not he appreciates how many people have tried clever attacks – see https://github.com/topics/hid-attacks – but my favorite write up is this one: https://lcamtuf.coredump.cx/plasma_globe/

The fact of the matter is that what-a-resource-is includes the headers it is served with and the context in which it is requested. Consider https://lcamtuf.coredump.cx/squirrel/ It may not be normal in your day-to-day work, but it's definitely an important point of extensibility. Extensibility is indeed opposed to management (see _The Principle of Least Power_ for more on that front) but that is a trade off that worked really well for the web for decades. I for one would be really sad to see this further limited and would love for browser support for `Link` header behavior to increase rather than decrease.

Totally unrelated to TFA, but to the (great, in my opinion) author: here's[0] an older prepping guide for non-crazy people. I understand that the author has published a book recently about the topic. [0] https://lcamtuf.coredump.cx/prep/index-old.shtml

you don't know you lcamtuf is, do you? I understand you're all worked up by his apparent misuse of radioactivity-detecting instruments, but... he's a bit smarter than most humans, I tend to give him some credit. I suggest starting here, https://lcamtuf.coredump.cx/ personally I'm a big fan because of the Guerilla Guide to CNC, he has clearly researched his stuff.

With bonus link to author's home decor recommendation, toward the bottom. Such clarity! Such brevity! Aw hell, here it is here: https://lcamtuf.coredump.cx/geiger/

That's the focus of the classic prepping guide: Doomsday Prepping For Less Crazy Folk https://lcamtuf.coredump.cx/prep/

This ability would be a big time saver during development. I enjoy to develop without Googling; really enjoy! I tried some other amazing things: - developing without using touchpad or mouse. - debugging without running code until the end. - developing with turn offed WiFi. In general, I'm always trying to reduce my needs. I think this practices would help me to be more accurate, more independent, and become able to live in a post-apocalypse situation as a geek. I said post-apocalypse, I remembered lcamtuf article "Disaster planning for less crazy folk": https://lcamtuf.coredump.cx/prep/

Doomsday prepping for less crazy folk https://lcamtuf.coredump.cx/prep/ Looks like it’s been renamed recently. Great guide in my opinion.

You might be interested in resin casting technique. It gives amazing results. Lcamtuf wrote a whole series about this: http://lcamtuf.coredump.cx/gcnc/ch1/ and very nice article for make zine: https://makezine.com/2014/03/21/resin-casting-going-from-cad-to-engine…

Thanks for posting this; I finally regained a link to American Fuzzy Lop (http://lcamtuf.coredump.cx/afl/) which I'd forgotten the name of. It's an excellent fuzzer.

I'd love to know how to test graphics and audio programs, frankly. TDD works very well for things with a defined input and output, including: 1. compilers 2. databases 3. all web apps (output is the DOM) In regards to the escape string, if there was a bug at exactly 15 characters, there must be a branch somewhere that isn't being hit, and it should be pretty easy using code coverage reports to find it, and generate the correct input sequence to exercise it. When you get to fuzzing, you're hitting the edge of state-of-the-art. There is good research going on at automating some of that: http://lcamtuf.coredump.cx/afl/

Fuzzing is really helpful. Even trying really hard to check for buffer overflow, it's nearly impossible to catch it all. Kudos for the AFL creator http://lcamtuf.coredump.cx/afl/ I would love if it was easier to do "external checks" (for example network fuzzing). Something like a dissociation of the "submit payload" and the "tortured piece of software" would be really really nice.

There's a really good, single page webpage called "Concise electronics for geeks": http://lcamtuf.coredump.cx/electronics/ It's a good read if you're trying to learn the fundamentals.

I finally got around to reading lcamtuf's other book, Silence on the Wire (2005) this wekk. If you have even a small amount of interest in passive recon, it is excellent- http://lcamtuf.coredump.cx/silence.shtml

>http://lcamtuf.coredump.cx/prep Did you write this? This is great!

Off topic, but the same guy (Michal Zalewski) has an absolutely amazing guide to his CNC work. http://lcamtuf.coredump.cx/gcnc/ For something a bit less depressing.

Reminds me of this, one of my all-time favorites: http://lcamtuf.coredump.cx/juggling_with_packets.txt Guessing date as circa 2003. Could be wrong. As for DNS, djbdns can store arbitrary bytes in RR (e.g., TXT), as octal. For example, modified dnstxt can print formatted text stored in TXT records, with linefeeds, etc.

I don't know why, but this somehow reminds me an excellent paper[1] by lcamtuf about parasitic data storage (keeping data "on the cable"). [1] http://lcamtuf.coredump.cx/juggling_with_packets.txt

I found this guys webpage some years ago, he has done awesome work casting resin cogs and other shapes in CNC milled molds. [1] Regarding the post, I'm not a nutritional expert, but cooking yourself is a great method to keep better track of what enters your body. [1] http://lcamtuf.coredump.cx/gcnc/ch4/

I suppose opinions differ, but I like things where content is king, and these are excellent: http://lcamtuf.coredump.cx/gcnc/ http://www.sparkbangbuzz.com/ https://ludens.cl/Index.html