Top all-time · #15928
Chris Evans
Personal blog · scarybeastsecurity.blogspot.co.uksecurityprogramming
Chris Evans writes Security, a personal blog at scarybeastsecurity.blogspot.co.uk about security and programming. Since 2012, 5 different Hacker News readers have linked it 5 times. The last post was in 2021, but the archive is still widely read.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link Chris Evans's blog for security research on exploits and attack surfaces, such as a sound file that runs an emulated 6502 virtual machine, SNES music emulation in gstreamer, and gzip's forgotten decompressor.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Hacking everything, by Chris Evans / scarybeasts
What Hacker News says?
Defining "non-executable" is then an interesting exercise... From https://scarybeastsecurity.blogspot.co.uk/2016/12/redux-comp... > You’ve likely guessed it by now, but the Linux gstreamer media playback framework supports playback of SNES music files by…. emulating the SNES CPU and audio processor, courtesy of Game Music Emu. How cool is that?
Comment linking /2016/12/redux-compromising-linux-using-snes.html
on “How to shoot on iPhone 7”There are interpreters for programs that are delivered over the network to be run locally by the unsuspecting user, in some surprising places. For example: Here's a sound player that contains an entire 6502-based virtual machine, because the "sound file format" that it "plays" is actually an executable program. Unfortunately, the virtual machine hardware is not properly simulated, allowing the 6502 code to memory-ma…
Comment linking /2016/11/0day-exploit-compromising-linux-desktop.html
on ““AV is my single biggest impediment to shipping a secure browser.””https://scarybeastsecurity.blogspot.co.uk/2016/11/0day-explo...
Comment linking /2016/11/0day-exploit-compromising-linux-desktop.html
on “An ode to pack: gzip’s forgotten decompressor”> You have not been paying attention. Maybe consider accepting the advice of experts? It would be great to have a few of these issues sourced in the comment (and your comments on the Tor Browser expanded with some reasoning) just so everyone is on the same page. I've seen some exploits with Tor Browser but I thought they'd be mostly sorted out. I get that Chrome has some more mature sandboxing code, but I must admit…
Comment linking /2016/11/0day-poc-risky-design-decisions-in.html
on “Basic Security Precautions for Non-Profits and Journalists”The "guy" is Chris Evans. He works at Google in Chrome Security Team. * http://scarybeastsecurity.blogspot.co.uk/ * http://www.scary.beasts.org/security/
Comment linking /
on “Java flaw allows “complete” bypass of security sandbox”