ADD / XOR / ROL

I am at Virus Bulletin in Ottawa -- if anyone wants to meet to see our new stuff, please drop mail to info@zynamics.com ! :) It has been a w...

My 100th blog post, and why my blog entries never have titles. Hey all, this is my 100th blog post. And again, it has no title. This is not ...

I think everybody should read FX's excellent post .

A few short notes on what's being reported: It seems that after my previous speculation, a few unforeseen things happened: Apparently, m...

On Dan's request for "no speculation please" I know that Dan asked the public researchers to "not speculate publicly...

*Blogspam* Advanced Reverse Engineering Trainings Class We still have a number of seats in our advanced RE class available. The class will b...

Hey all, > Supplemental note to Halvar & everybody else who has said, in effect, "this > is why SSL was invented" -- the...

All this DNS ... I am taking a very brief break from my books to write a few thoughts about this entire DNS thing that everybody seems to be...

The security book that I'd like to see written (and which I'd buy) Good security books are few and far between. But IF someone write...

The RE-DB database format for storing disassemblies For those of you that are interested in the disassembly database schema discussed here ...

Intuition, Experience, and the value of getting Pwned The following is to be taken mostly proverbially. Names have been changed, primarily t...

Travelling & Dopplr Btw, how many people that travel a lot are using Dopplr ? It seems like a somewhat clever idea (as I am stuck in sil...

Zynamics Canada Tour, Complex analysis and my stupidity Hey all -- I know I've been mostly quiet the last weeks. This was principally du...

There's a lot of hoopla in German media about the german SIGINT folks having to admit that they trojanized Afghanistan's Ministry o...

Patch obfuscation etc. So it seems the APEG paper is getting a lot of attention these days, and some of the conclusions that are (IMO false...

I have not been blogging nor following the news much in recent months, as I am frantically trying to get all my university work sorted. Whil...

My valued coworker, SP, has just released his "pet project", Hexer. Hexer is a platform-independent Java-based extendible hex edit...

Oh, before I forget: Ero & me will be presenting on our work on structural malware classification at RSA next week. If anyone wishes to ...

Conspiracy theory of the day: As everyone, I am following the US primaries, and occasionally discussing with my brother on the implications ...

A short real-life story on why cryptography breaks: One of the machines that I am using is a vhost hosted at a german hosting provider calle...