ADD / XOR / ROL

Hey all, I haven't given a reverse engineering trainings class in Amsterdam for a few years, but this year is different :-) -- I will be...

I posted a while ago about the new DiffDeluxe comparison engine, and that we'd release it in Q1 2009. Well, we're almost there, the ...

Hey all, I will be in Washington DC from the 16th to the 20th of February. Amongst other things, I will be teaching a course at Blackhat DC...

Correction of my last post: It appears that Clam has *some* unpacking support. It is not as comprehensive as some of us would like, but prog...

Hey all, this might be a rather odd question, but given the (unfortunate) fact that ClamAV can't unpack even the simplest packers, has n...

http://taossa.com/index.php/2008/10/13/bugs-vs-flaws/#more-83 I didn't see this post beforehand, and I would like to comment on it (main...

Hey all, apologies for the sensationalist title, but I found another amusing example today where the same function was present in two differ...

... is like a good joke. This one , while requiring special circumstances to succeed with high probability, was responsible for a lot of lau...

Hey all, we have re-activated the BinDiff / BinNavi User Forum under https://zynamics.fogbugz.com/default.asp?BinNavi https://zynamics.fogbu...

Hey all, for some research that I'm doing, I'm looking for a collection of malicious Office/PDF documents. If anyone has such docume...

Hey all, we have written about the SQL storage format for BinNavi quite a few times on this blog, and how we'd like to encourage third p...

One of my favourite things when travelling and interacting people from other cultures is observing differences in conversational conventions...

So I do own a car (contrary to what most people expect). About a year ago, I bought a VW Caddy EcoFuel. It runs on natural gas in normal mod...

... I can't help but post this small PNG. And since blogger rescales/blurs the picture, here is a link to the "full" one.

My brother wrote an article injecting some reality into the discussion about the banking crisis on Spiegel Online. The german version can be...

Hey all, I forgot to mention a few things in the previous post: We're going to release BinDiff v2.1 on the 15th of October 2008. This is...

I am at Virus Bulletin in Ottawa -- if anyone wants to meet to see our new stuff, please drop mail to info@zynamics.com ! :) It has been a w...

My 100th blog post, and why my blog entries never have titles. Hey all, this is my 100th blog post. And again, it has no title. This is not ...

I think everybody should read FX's excellent post .

A few short notes on what's being reported: It seems that after my previous speculation, a few unforeseen things happened: Apparently, m...