Top all-time · #4593
Diary of a reverse-engineer
Personal blog · doar-e.github.io/blogsecurityprogramming
Diary of a reverse-engineer is a personal blog at doar-e.github.io about security and programming. Since 2013, 17 different Hacker News readers have linked it 17 times, most often “Modern attacks on the Chrome browser: optimizations and deoptimizations”. The last post was in 2023, but the archive is still widely read.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link this reverse-engineering diary for technical write-ups on browser exploitation, including Firefox and Chrome vulnerabilities, WebAssembly bounds checks and compiler IR. One commenter calls a PoC writeup detailed.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Modern attacks on the Chrome browser: optimizations and deoptimizations2 people · 2 mentions · first linked 2020-11-17
- Introduction to TurboFan2 people · 2 mentions · first linked 2019-10-13
What Hacker News says?
This ensures aborting bounds checks to some parts of the the pipeline, but this doesn't mean that later optimizations can't determine that the check is dead code and remove it. For example: https://doar-e.github.io/blog/2019/05/09/circumventing-chrom...
Comment linking /blog/2019/05/09/circumventing-chromes-hardening-of-typer-bugs/
on “Is WebAssembly magic performance pixie dust?”Submitted Corrupting the ARM Exception Vector Table as a story · 59 points
HN discussionShort-answer: The debugger (in Windows) sits between the first and second and chances, if I recall correctly, to "help" the user by displaying a dialogue notifying them that 'x' is unhandled. Anything in second chance has reached the kernel for handling and is no longer in the user space. You'll often see this (second chance) as exception entries in the Windows Event Log for things like kernelbase.dll, which points…
Comment linking /blog/2013/10/12/having-a-look-at-the-windows-userkernel-exceptions-dispatcher/
on “Why Linked Lists Are an Interview Staple”Submitted Introduction to TurboFan as a story · 36 points
HN discussionSeas of nodes are also used as IR in Java Hotspot and the V8 engine ( https://doar-e.github.io/blog/2019/01/28/introduction-to-tur... )
Comment linking /blog/2019/01/28/introduction-to-turbofan/
on “Understanding Programs Using Graphs”Submitted A Static Analysis Approach Relying on Symbolic Execution as a story · 32 points
HN discussionInterested readers should check out the author's earlier work exploiting CVE-2019-9810: https://github.com/0vercl0k/CVE-2019-9810 And their fantastically detailed writeup of a PoC they wrote for that vulnerability: https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionm... This exploit is different in that they use the arbitrary read/write primitive gained by CVE-2019-9810 to flip a couple of bits and patch out…
Comment linking /blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/
on “An example of exploiting two fixed vulnerabilities in Firefox on Windows”Submitted Taming Nanomite-protected MIPS Binary with Symbolic Execution: No Such Crackme as a story · 17 points
HN discussionI was a developer at Microsoft in the 90s (Visual Studio (Boston) and Windows teams). I won't claim that software back then was "better," but what is definitely true is that we had to think about everything at a much lower level. For example, you had to know which Win32 functions caused ring-3 -> ring-0 transitions because those transitions could be incredibly costly. You couldn't just "find the right function" and…
Comment linking /blog/2013/10/12/having-a-look-at-the-windows-userkernel-exceptions-dispatcher/
on “Significant Raise of Reports”Submitted Dissection of Quarkslab's 2014 Security Challenge as a story · 5 points
HN discussionSubmitted Reverse-engineering tcpip.sys: mechanics of a packet of the death (CVE-2021-240 as a story · 4 points
HN discussionSubmitted Deep Dive into Python's VM: Story of LOAD_CONST Bug (2014) as a story · 3 points
HN discussionSubmitted Deep Dive Into Python's VM: Story of LOAD_CONST Bug as a story · 3 points
HN discussionSubmitted Modern attacks on the Chrome browser: optimizations and deoptimizations as a story · 2 points
HN discussionSubmitted Modern attacks on the Chrome browser: optimizations and deoptimizations as a story · 1 points
HN discussionSubmitted Modern attacks on the Chrome browser: optimizations and deoptimizations as a story · 1 points
HN discussionSubmitted Inside Windows' User/Kernel Exceptions Dispatcher as a story · 1 points
HN discussion
