Top all-time · #5996
lander's posts
Personal blog · landaire.netsecurityprogramming
lander's posts is a personal blog at landaire.net about security and programming. Since 2016, 13 different Hacker News readers have linked it 16 times, most often “Apple ImageIO Denial of Service”. It is still writing: the last post was on 2026-07-14, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link lander's posts on building a reflective PE loader for Xbox, reverse engineering with AI-assisted static analysis and debuggers, and Zig/Rust memory safety. The links are cited as sources, with no judgement of the writing.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
nothing interesting
Most-linked posts?
- Apple ImageIO Denial of Service2 people · 2 mentions · first linked 2016-04-22
- Saving My Commit With `jj evolog`2 people · 2 mentions · first linked 2025-10-06
- A file format uncracked for 20 years2 people · 2 mentions · first linked 2025-11-06
- Reverse Engineering Yaesu FT-70D Firmware Encryption2 people · 2 mentions · first linked 2021-12-30
- Reverse Engineering Binaries with AI2 people · 2 mentions · first linked 2026-03-18
What Hacker News says?
I recently wrote my own PE loader and found handling TLS data the most annoying aspect of the process: https://landaire.net/reflective-pe-loader-for-xbox/
Comment linking /reflective-pe-loader-for-xbox/
on “TLS Callbacks (2012)”Submitted A file format uncracked for 20 years as a story · 299 points
HN discussion>ReleaseSafe catches use-after-free errors through runtime checks which panic if the program tries to use freed memory. I don't know Zig so maybe they know something I don't, but I have seen no evidence that it catches any type of use-after-free including double-free? While writing a blog post (below) I went through the documentation to figure out the possible runtime memory safety checks Zig can insert. The term "u…
Comment linking /memory-safety-by-default-is-non-negotiable/
on “How Our Rust-to-Zig Rewrite Is Going”Submitted Reverse Engineering Yaesu FT-70D Firmware Encryption as a story · 162 points
HN discussionhttps://landaire.net/jj-evolog/ gives me 404 not found
Comment linking /jj-evolog/
on “Saving My Commit With `jj evolog`”Submitted A File Format Uncracked for 20 Years as a story · 93 points
HN discussionStatic analysis tools + MCP server + a debugger with an MCP server makes reverse engineering incredibly easy and low-cost. I wrote a blog post about this recently: https://landaire.net/reverse-engineering-with-ai/ Just yesterday I completely reverse engineered several proprietary audio codecs from a game without even having to touch the static analysis tool myself.
Comment linking /reverse-engineering-with-ai/
on “When life gives you lemons, write better error messages”Submitted Reverse Engineering Yaesu FT-70D Firmware Encryption as a story · 36 points
HN discussionSubmitted Apple ImageIO Denial of Service as a story · 12 points
HN discussionSubmitted Dependency Usage in Rust as a story · 7 points
HN discussionSubmitted Saving My Commit With `jj evolog` as a story · 2 points
HN discussionSubmitted MITMing the Xbox 360 Dashboard for Fun and RCE as a story · 2 points
HN discussionSubmitted Apple ImageIO Denial of Service as a story · 2 points
HN discussionSubmitted Reverse Engineering Binaries with AI as a story · 1 points
HN discussionSubmitted Deobfuscating World of Warships' Python Scripts as a story · 1 points
HN discussionSubmitted One Weird Trick to Improve Bug Finding with ASAN as a story · 1 points
HN discussion
