#informatyka

Miałem dziś dyskusję na temat operacji zmiennoprzecinkowych. Większości i tak to nie zainteresuje (stąd tagi), ale to dosyć ciekawy temat. I właściwie wszystkie problemy w tej dziedzinie mają jakieś rozwiązania.
Proszę: https://docs.oracle.com/cd/E19957-01/806-3568/ncg_goldberg.html

#matematyka #informatyka #datascience

8 czerwca:

* Dzień Informatyka
* Światowy Dzień Oceanów
* Dzień Cyrku bez Zwierząt
* Światowy Dzień Dziergania w Miejscach Publicznych
* Światowy Dzień Guza Mózgu

#nietypoweswieta #kalendarz #ciekawostki #informatyka #ocean #dzierganie #cyrk

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.06.07.md

Nullcon Goa 2025: What The PHUZZ?! Finding 0-Days In PHP Apps wt Coverage-guided Fuzzing - https://www.youtube.com/watch?v=sgMRoZO4lh4
Hiding In PlainSight - Proxying DLL Loads To Hide From ETWTI Stack Tracing - https://0xdarkvortex.dev/proxying-dll-loads-for-hiding-etwti-stack-tracing/
Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals - https://jhalon.github.io/chrome-browser-exploitation-1/
FriendlyFire BOF: Selective Process Freezing - https://kreep.in/friendlyfire-bof-selective-process-freezing/
Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428) - https://profero.io/blog/ivanti-epmm-attacks

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.06.05.md

Eclipse on Next.js: Conditioned exploitation of an intended race-conditio - https://zhero-web-sec.github.io/research-and-things/eclipse-on-nextjs-conditioned-exploitation-of-an-intended-race-condition
Malvertising’s New Threat: Exploiting Trusted Google Domains - https://www.geoedge.com/malvertisings-new-threat-exploiting-trusted-google-domains/
Kalmar CTF 2024 Challenge Writeup - https://seall.dev/posts/ezv2kalmarctf2024
Spying On Screen Activity Using Chromium Browsers - https://mrd0x.com/spying-with-chromium-browsers-screensharing/
kASLR Internals and Evolution - https://r0keb.github.io/posts/kASLR-Internals-and-Evolution/

#informatyka

Na zrzucie ekranu lista rzeczy, których w/g Microsoftu nie powinniśmy zlecać AI (które podobno ma zastąpić programistów). Obejmuje jakieś 99% tego, co robię :grinning:

Nieśmiało przypominam, że GitHub Copilot jest dostępny jako komercyjny produkt od około 3 lat. Jeśli dalej będzie się uczył, jak w obecnym tempie, to moja posadka jest bezpieczna przez najbliższe 50 lat :grinning:

źródło: https://docs.github.com/en/enterprise-cloud@latest/copilot/using-github-copilot/coding-agent/best-practices-for-using-copilot-to-work-on-tasks

#informatyka #ai

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.06.03.md

CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability - https://www.crowdfense.com/cve-2024-11477-7zip-zstd-buffer-overflow/
Modernizing LDAP with Keycloak: Build a Scalable, Secure IAM Architecture - https://www.cloud-iam.com/post/ldap-idp-broker
[CVE-2025-37752] Two Bytes Of Madness: Pwning The Linux Kernel With A 0x0000 Written 262636 Bytes Out-Of-Bounds - https://syst3mfailure.io/two-bytes-of-madness/
My Zero Day Quest & BlueHat Podcast - https://security.humanativaspa.it/my-zero-day-quest-bluehat-podcast/
One-Click RCE in ASUS’s Preinstalled Driver Software - https://mrbruh.com/asusdriverhub/

#informatyka

#afera #polityka #instagram #facebook #informatyka
czy wiedzieliście że wpisując Jezus Pan w wersji gwiazdkowej na platformach meta to zostanie to przekonwertowane na !!!
Czy zagraniczne korporacje ograniczają nam wolność do pisania Jezus Pan i konfederację?

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.06.01.md

4. Game Hacking - Valve Anti-Cheat (VAC) - https://codeneverdies.github.io/posts/gh-2/
The 'Invisibility Cloak' - Slash-Proc Magic - https://dfir.ch/posts/slash-proc/
The Path to Memory Safety is Inevitable - https://hardenedlinux.org/blog/2025-05-07-the-path-to-memory-safety-is-inevitable/
Stealthy .NET Malware: Hiding Malicious Payloads as Bitmap Resources - https://unit42.paloaltonetworks.com/malicious-payloads-as-bitmap-resources-hide-net-malware/
[Cracking Windows Kernel with HEVD] Chapter 0: Where do I start? - https://mdanilor.github.io/posts/hevd-0/

#informatyka

Upadł Builder.ai - firma tworząca model AI, który miał zastąpić programistów. Ich AI było tak naprawdę zespołem programistów z Indii i Ukrainy. Inwestorami byli m. in. Microsofy i SoftBank. #informatyka #sztucznainteligencja

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.30.md

O2 VoLTE: locating any customer with a phone call - https://mastdatabase.co.uk/blog/2025/05/o2-expose-customer-location-call-4g/
io_uring Is Back, This Time as a Rootkit - https://www.armosec.io/blog/io_uring-rootkit-bypasses-linux-security/
Fantastic Rootkits: And Where to Find Them (Part 1) - https://www.cyberark.com/resources/threat-research-blog/fantastic-rootkits-and-where-to-find-them-part-1
Windows BitLocker -- Screwed without a Screwdriver - https://neodyme.io/en/blog/bitlocker_screwed_without_a_screwdriver/
PE32 Ransomware: A New Telegram-Based Threat on the Rise - https://any.run/cybersecurity-blog/pe32-ransomware-analysis/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.28.md

New Process Injection Class: The CONTEXT-Only Attack Surface - https://blog.fndsec.net/2025/05/16/the-context-only-attack-surface/
Overview of Map Exploitation in v8 - https://xia0.sh/blog/visit-the-map/visit-the-map
State of Linux Snapshot Fuzzing - https://fuzzinglabs.com/state-of-linux-snapshot-fuzzing/
Lateral Movement via Internet Explorer DCOM & ActiveX: Leveraging StdRegProv - https://blog.fndsec.net/2023/02/23/lateral-movement-using-internet-explorer-dcom-object-and-stdregprov/
Evading Defender With Python And Meterpreter - https://infosecfacts.github.io/content/Evading%20Defender%20with%20Python%20and%20Meterpreter%20Shellcode:%20Part%201.html

#informatyka

Czy to dobra cena za monitor IPS 24” 1080p 240Hz? Chcę go sprzedać za 320 zł, czy jednak wołać więcej? Kupiłem go 3 lata temu za 999 zł.

Model - iiyama G-Master GB2590HSU Gold Phoenix

#informatyka #komputery #gry #ankieta

Ma ktoś może jakąś zniżkę do sklepu wydawnictwa Helion? #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.26.md

A Series of io_uring pbuf Vulnerabilities - https://u1f383.github.io/linux/2025/03/02/a-series-of-io_uring-pbuf-vulnerabilities.html
ROPing our way to RCE - https://modzero.com/en/blog/roping-our-way-to-rce/
Python Dirty Arbitrary File Write to RCE via Writing Shared Object Files Or Overwriting Bytecode Files - https://siunam321.github.io/research/python-dirty-arbitrary-file-write-to-rce-via-writing-shared-object-files-or-overwriting-bytecode-files/
GOst in the Protocol: Hunting Ligolo with JARM Fingerprinting in the wild - https://necromancerlabs.com/research/papers/2025/gost-in-the-protocol/
Reliable system call interception - https://blog.mggross.com/intercepting-syscalls/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.24.md

Emulator Debugging: Area 5150's Lake Effect - https://martypc.blogspot.com/2025/05/emulator-debugging-area-5150s-lake.html
Exploring Heap Exploitation Mechanisms: Understanding the House of Force Technique - https://www.darkrelay.com/post/exploring-heap-exploitation-mechanisms-understanding-the-house-of-force-technique
Hacking a Smart Home Device - https://jmswrnr.com/blog/hacking-a-smart-home-device
How a Single Line Of Code Could Brick Your iPhone - https://rambo.codes/posts/2025-04-24-how-a-single-line-of-code-could-brick-your-iphone
Three new vulnerabilities found related to IXON VPN client resulting in Local Privilege Escalation (LPE) and [REDACTED] - https://www.shelltrail.com/research/three-new-cves-related-to-ixon-vpn-client-resulting-in-local-privilege-escalation/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.22.md

Breaking Down Adversarial Machine Learning Attacks Through Red Team Challenges - https://boschko.ca/adversarial-ml/
Cisco Talos Uncovers CSS Exploitation Techniques for Bypassing Spam Filters and Tracking Users - https://dailyinfosec.net/cisco-talos-uncovers-css-exploitation-techniques-for-bypassing-spam-filters-and-tracking-users/
Fileless Execution: PowerShell Based Shellcode Loader Executes Remcos RAT - https://blog.qualys.com/vulnerabilities-threat-research/2025/05/15/fileless-execution-powershell-based-shellcode-loader-executes-remcos-rat
1. Land Of The PEB - Modules and DLLs - https://codeneverdies.github.io/posts/lotp-1/
Bypassing Web Filters Part 1: SNI Spoofing - https://blog.compass-security.com/2025/03/bypassing-web-filters-part-1-sni-spoofing/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.20.md

Reliable system call interception - https://blog.mggross.com/intercepting-syscalls/
Zen and the Art of Microcode Hacking - https://bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-microcode-hacking
Next.js and the corrupt middleware: the authorizing artifact - https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware
The absurdly complicated circuitry for the 386 processor's registers - https://www.righto.com/2025/05/intel-386-register-circuitry.html
Vulnerabilities in Open Source C2 Frameworks - https://blog.includesecurity.com/2024/09/vulnerabilities-in-open-source-c2-frameworks/

#informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.18.md

CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) - https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/
Linux Kernel Attack Surface: beyond IOCTL. DMA-BUF-  https://slavamoskvin.com/linux-kernel-attack-surface-beyond-ioctl.-dma-buf/
Parser Workflow - https://w1redch4d.github.io/post/parser-workflow/
Introducing Early Cascade Injection: From Windows Process Creation to Stealthy Injection - https://www.outflank.nl/blog/2024/10/15/introducing-early-cascade-injection-from-windows-process-creation-to-stealthy-injection/
Block YouTube Ads on AppleTV by Decrypting and Stripping Ads from Profobuf - https://ericdraken.com/pfsense-decrypt-ad-traffic/

#informatyka

Marcin Wiązowski zajął 4 miejsce w pierwszym dniu zawodów PWN2own. Wykorzystał lukę out-of-bounds write w Windows, aby uzyskać uprawnienia system.
#hacking #ctf #polska #informatyka

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.05.16.md

Leakymetry: Circumventing GLPI Authentication - https://sensepost.com/blog/2025/leakymetry-circumventing-glpi-authentication/
China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures - https://blog.eclecticiq.com/china-nexus-nation-state-actors-exploit-sap-netweaver-cve-2025-31324-to-target-critical-infrastructures
AES & ChaCha — A Case for Simplicity in Cryptography - https://phase.dev/blog/chacha-and-aes-simplicity-in-cryptography/
How I ruined my vacation by reverse engineering WSC - https://blog.es3n1n.eu/posts/how-i-ruined-my-vacation/
SAP Emarsys SDK for Android Sensitive Data Leak (CVE-2023-6542) - https://www.rcesecurity.com/2025/04/sap-emarsys-sdk-for-android-sensitive-data-leak-cve-2023-6542/

#informatyka