Cindʎ Xiao

Hello! I don't use this account and will log in approximately once every millennium. If you need to contact me, see the contact info on my site, cxiao.net For technical stuff, come follow me at @cxiao" target="_blank" rel="nofollow noopener">infosec.exchange/@cxiao ✌️

Hello new folks following me! Unfortunately Elon has gone full Nazi and Twitter keeps putting random unhinged stuff on my feed, so I don't use Twitter anymore. I'm mostly on Mastodon, but I just set up a Bluesky a few days ago if that's more your style: bsky.app/profile/cxiao.…

@0x0bea @REverseConf

@REverseConf @cxiao__ pls 🦀

Less than 24 hours since launch, and we've already got some great talk submissions! Have a favorite speaker you'd like to see at RE//verse? Add them to a thread here 👇

@harvest_and_sow @HackingLZ 💖 to you leland ദ്ദി(˵ •̀ ᴗ - ˵ ) ✧

This was useful github.com/cxiao/rust-rev…

@greglesnewich @singe @HackingLZ Thanks so much Dominic and Greg for the shoutouts!!! 🫶🫶🫶💞

@singe @HackingLZ Plus one - Cindy is amazing 🐐🐐

@HackingLZ Cindy here, glad you found it valuable! I'm always happy to hear feedback or to talk about Rust reversing in general, so if you have any comments or questions feel free to send them my way and I'll do my best to answer.

Hi @reconmtl attendees! My workshop, Reversing Rust Binaries: One Step Beyond Strings will be delayed by one hour, and will run from 4:30 pm to 6:30 pm today in Soprano B. #reconmtl #recon #REcon2024

@greglesnewich @NorthSec_io @tas_kmanager @herrcore was awesome to actually meet you too greg!!! 🤘

Thank you @NorthSec_io for the amazing event and hospitality today Conference was dope, as was getting to meet the homies @cxiao__ and @tas_kmanager IRL! Highlight was def @herrcore ‘a standup comedy routine keynote that did not shill a product even once, shout out to him

Hey @mal_share is there a size limit for uploads? I'm getting a 413 Request Entity Too Large back when I try to upload a 1.6MB sample via the web interface. Not sure if this file is too large, or if it has something to do with the recent migration.

@buherator @HackingLZ @wdormann @wvuuuuuuuuuuuuu So I don’t think it’s technically difficult at all to use either the existing elasticsearch or build an external scraper. The limitation is (as with so many things) what the people running / inside the communities want.

@buherator @HackingLZ @wdormann @wvuuuuuuuuuuuuu Yes, it would absolutely be more efficient for finding things to just have full text search. Many mastodon instances have full text elasticsearch turned on already for your *own* posts / reblogs / favs, and it seems to work for me.

Mastodon will not fill the gap most people in infosec use Twitter for unless they have a working search. Keeping up with IoCs, 0day, PoCs, and everything else absolutely requires search and not just by hash tag.

@buherator @HackingLZ @wdormann @wvuuuuuuuuuuuuu Hashtags kind of provide this fine grained search opt in, but as has been discussed it can be difficult to find the right hashtag in the first place.

@buherator @HackingLZ @wdormann @wvuuuuuuuuuuuuu I can imagine, in the case of a full text search feature, having more fine grained options for opt in/out of search indexing on the post level as well.

@buherator @HackingLZ @wdormann @wvuuuuuuuuuuuuu Sorry for summoning the bots with my previous post btw 😅

@buherator @HackingLZ @wdormann @wvuuuuuuuuuuuuu I rely a lot on search here and I think it’s possible to find a middle ground with full text search, but I suspect the reason many admins are opposed to it there is because it introduces the requirement for a lot more moderation / anti spam effort from them

@awakecoding @sinclairinat0r I think I’d also consider moving to an instance with full text search of members’ published contents, as I currently rely a lot on Twitter search dorking as well. I respect how the long time fediverse ppl feel about this, though. They are being eternal Septemberd right now by us.

@sinclairinat0r It already happened this week when someone built a service that would collect the content, index it and make it fully searchable. He got banned and it caused quite a stir. That's why I wish we can start a new server with people who don't think full text search is "evil"

I wonder how long before the first cursed infosec drama occurs on Mastodon? 🤔 This will be the true test.

@awakecoding So it looks like the decimal crate provides a decimal type with a different representation, and it’s also just a wrapper around the C decNumber library: speleotrove.com/decimal/decnum… Looks like it uses one of the standard decimal128 encodings: en.wikipedia.org/wiki/Decimal12…

@cxiao__ Is there much of a difference between the 'rust_decimal' and 'decimal' crate? I've just tried the former, it works and it's quite popular. I am mostly concerned about Rust type compatibility for consumer crates for the crate I'm working on: crates.io/crates/decimal

What would be the closest Rust equivalent of the .NET "decimal" type? It appears to be a special 128-bit floating point type using base 10 instead of base 2 like float/double. How should I redefine a compatible type in Rust if it doesn't already exist? #838-the-decimal-type" target="_blank" rel="nofollow noopener">learn.microsoft.com/en-us/dotnet/c…