Battle Programmer Yuu

Part 1 of my #BGGP6 writeup about nasm's most mysterious object file format, RDOFF. n0.lol/bggp6-rdoff/

@vxunderground Galaxy Brain: write a virus in yara bytecode bnbdr.github.io/posts/extrache…

> be me > reading on yara stuff > reviewing yara > basically user-mode static analysis engine > reading, reading, reviewing > realize ive never written a yara rule before > thinking... > realize yara is excluded from AV engines > no av would flag yara lib or dll > used everywhere > thinking ... > what if... > make yara rules for identifying security products > make yara rules for environment identification > edr and/or av would ignore > "hehe hes checking if its malicious" > its free real estate

We’re having a Linux rootkit competition for tmp.out #5! tmpout.sh/rootkitcomp.txt

FYI I am no longer involved with Phrack

@mattpass Yes, I was going to have it come out with tmpout 5 but I will push some scoring this weekend!

@netspooky heya 😀 Do you know when the #BGGP6 entires might be reviewed?

"MIPS" more like May I Please See the disassembly and hex dump because the decompiler has no idea wtf is going on

there's an AWS outage in me-central-1 because it got bombed

> A message to all fuckers: Stop using war to justify your continued power. > > A question for all baddies: How will you fight when stealth is not an option? - Phrack 71, Introduction The second line is a quote from Physique - "Evolution of Combat" youtube.com/watch?v=pBP5uY…

The most expensive luxury item you can own is a spine.

@awawawhoami i'll block a bitch on meshtastic

i just blocked a bitch off my razer phone

Happy birthday to my first ever exploit and taste of hacking (It’s Pokémon’s 30th anniversary)

@xerostyle Beautiful

new animated cyberpunk pixel art font #pixelart #cyberpunk #retrofuturism

@vxunderground I failed Algebra 1 three times and thought I was cooked forever. Turns out self taught programming and electronics gives way more practical applications for concepts. Now I'm catching up on math but it feels like it's actually useful and inspiring.

> be me > can't math at all > suffered in math in school > mathematical dyslexia > weird symbols scare me > can program though > self taught c programmer > been programming for like, 20 years > see spoopy calculus thingy > ask ai thingy > "can translate calculus to c?" > ai thingy responds > "programming just discrete mathematics lol r u dumb? of course" > shows me calculus thingy translated to C > makes literally perfect sense > look inside > calculus, discrete mathematics, algebra > all make perfect sense Wtf why did the public school system make math seem so crazy

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

@vxunderground Dude im also sick again, same timeline, i thought i was immune too

>be me >have influenza type a, like 3 weeks ago >recover >omg thank god >fast forward >visit family >they have a bunch of kids >running around >coughing >smearing boogers everywhere >haha im immune >fast forward to thursdays >cough >hehe throat tickles >saturday >coughing up mystery goop >ears popping (???) >fatigue >body aches I'm gonna say something no one has the balls to say. We need to BAN children. Children need to be CRIMINALIZED. They're disgusting creatures and create plagues (except my son, he's perfect in every way imaginable)

@GASLIGHTER_ This is sick af tho

I look like a stupid goblin when fixing things and no one has ever flirted with me (50% of what I do is fixing things)

Here it is, our biggest issue to date, Issue #8! Read, share, enjoy! pagedout.institute/?page=issues.p… Get prints here - lulu.com/search?page=1&… And with that CFP for #9 is open - deadline 30 April 2026

> be nerds > look into persona (used by discord) > kyc (know your customer) service > used for age verification > search on internet (shodan) > find weird server > image 1 > openai-watchlistdb.withpersona > openai-watchlistdb-testing.withpersona > lolwtf > look inside > supposed to be behind cloudflare to hide ip > openai messed up > not behind cloudflare > real ip shown > using google cloud > lookup cert history > 2023-11-16 created > 2024-02-28 gets cert > 2024-03-04 prod goes live > google stuff > openai and persona partners > partner around timeline of certs > back to searching stuff > find withpersona-gov > look inside > okta (image 2) > lolwtf > look inside > website accidentally leaking stuff > fedramp-private-backend-api > look inside > api .js accidentally exposed > look inside > wtf "SARInstructionsCard" > wtf "app.onyx.withpersona-gov" > wtf "FINTRAC" > wtf "PrivatePartnershipProjectNameCodes" > image 3 > wtf "AsyncSelfie" > look inside > openai, persona, send data to us gov > feds map face to financial records > map face using AI > map face to ICE stuff > api stores data for lots of stuff > image 4 tl;dr persona kyc and openai are frens, using your selfie for verification and sending to ICE (or USGOV in general), using AI to tie to your financial records. see subsequent post for full write-up. its long and not mobile friendly

@lcamtuf Also dovetails nicely with base64 padding

Did you know that Unicode has a symbol for "really equals, but this time I mean it"? It could come in handy for JavaScript U+003D = EQUALS SIGN U+2261 ≡ IDENTICAL TO U+2263 ≣ STRICTLY EQUIVALENT TO

@TracketPacer Big nerd yes, insane studio

what i’m hearing is supposedly deadmau5 is a massive nerd

apparently at some point deadmau5 reposted this video on IG & ppl keep leaving comments on it, very confused about why