@Rairii@haqueers.com
@Rairii@haqueers.com avatar

Rairii

@Rairii@haqueers.com

Reversing (malware and otherwise); appsec and websec; embedded security; exploit dev; software preservationist; knows how not to use cryptography.

Currently finding bugs in Windows bootloaders.

You may also know me from capcom.sys.

#nobot

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Rairii, to random
@Rairii@haqueers.com avatar

just remote reported four years of spam on the "casinoonline" hashtag on m.s

big servers were a mistake

Rairii, to random
@Rairii@haqueers.com avatar

minds.com

which now supports activitypub.

according to wikipedia "Minds describes itself as focused on free speech, and minimally moderates the content on its platform."

also mentions them having first-class cryptocurrency support and being a home for "far-right users" as you'd expect from a website with "minimal moderation"

some evidence of them federating:

dansup@mastodon.social observing them federating : https://mastodon.social/@dansup/110977645214228621

ariadne@treehouse.systems confirming that they do indeed speak activitypub: https://social.treehouse.systems/@ariadne/110977665213159568

Rairii, to random
@Rairii@haqueers.com avatar

win32k lives!

Rairii, to random
@Rairii@haqueers.com avatar

and the nt kernel has initialised enough such that it's calling hal!HalInitializeProcessor :D

note that the hal I picked doesn't even support Arthur derivatives, so will insta-bugcheck here

Rairii, to random
@Rairii@haqueers.com avatar

from a twitter post: "Nintendo confirmed after all this there would be no more updates, security or otherwise, to any Wii U or 3DS software, firmware, or hardware, or services."

in that case, I'll be publicly documenting the piav2.x-3.x bug in full very soon (not at home right now). :)

Rairii, to random
@Rairii@haqueers.com avatar

epic games gets the #1 victory royale over google???

Rairii, to random
@Rairii@haqueers.com avatar

still some more exception handler patches required

right now it's getting as far as a legitimate program exception, which proceeds to turn on interrupts, it takes the decrementer interrupt then dies due to srr1 and some registers being restored with the wrong endianness

Rairii, to random
@Rairii@haqueers.com avatar

progress is progress, the entire bugcheck text shows now

(oh, and I fixed the HAL text printing lol)

Rairii, to random
@Rairii@haqueers.com avatar

what the fuck?

I added in the bisect bugcheck stuff to try and figure out where exactly things were fucking up on real hardware.

Wasting some additional cycles in the exception handler causes everything to be fine?!

Rairii, to random
@Rairii@haqueers.com avatar

thinking about how when XP released critics called luna a "fisher-price interface"

i was 6 when XP RTM'd (7 when it GA'd), and i always preferred watercolor, when i first saw screenshots of luna (in print; pretty sure they were of 2428 as the previous screenshots i saw were of (most likely) 2419 but they could have been anything between 2428 and 2462) i didn't think they were real

Rairii, to random
@Rairii@haqueers.com avatar

oh look a new bugcheck

this is a null deref, the faulting instruction is "lbz r10, 0x59(r10)", and it's trying to read address 0x59

Rairii, to random
@Rairii@haqueers.com avatar

i thought facebook hated tiktok, why would fb use their libs

Rairii, to random
@Rairii@haqueers.com avatar

...I did specify the display driver should use framebuf.dll in txtsetup.sif, why didn't setupdd configure that

(oh, and the previous issue? I basically forgot to update the end pointer of the linked list of PE-patch structures, so things broke if more than two image section objects were open at any one time)

Rairii, to random
@Rairii@haqueers.com avatar

so I hooked hal!HalInitializeProcessor to instead call the return-to-loader function

I can confirm that hal!HalInitializeProcessor is reached on real hardware :)

Rairii, to random
@Rairii@haqueers.com avatar

three hours to get link-transfer code working lol

ce374f5ce982ef4ea89663ccfec4242de1b08c89b00065b55e3bc004d7966536 gamebox-bootrom.bin

Rairii, to random
@Rairii@haqueers.com avatar

"avengine.sys"

well, that looks like a lie, what kind of respectable AV engine would have the sole communication method between user and kernel mode implemented by

checks notes

bind socket, binding on localhost, where the port is derived from a checksum of cpuid(manufacturer_id)?

Rairii, to random
@Rairii@haqueers.com avatar

bored

rogueamp's old nava shield video pops up on my youtube recommended somewhere

hey, let's reverse nava shield! let's get the original installer, not the custom one made by endermanch, and... ooh, realbasic!

there's one loader for this, but uses the old idapython API

I guess I could write my own ida loader for the custom executable format in the overlay, if I can't get the existing loader to work?

Rairii, to random
@Rairii@haqueers.com avatar

so i'm slowly starting with abstractions over nt syscalls for my custom nt userland

decided to go with the obvious joke and call it neurodivergent lol

Rairii, to random
@Rairii@haqueers.com avatar

hmm

i wonder if the gba hw clone doesn't mirror WRAM at all

the flashcart firmware does rely on this (because it's also a DS passme cart).

first thing it does is copy itself (0x1800 bytes, in 128 bit blocks) from cart-ROM space to 0x02380000

this is near the end of main-RAM on NTR, and should be mirrored to start of wram on AGB

but i don't know what this clone hardware is doing ;)

Rairii, to random
@Rairii@haqueers.com avatar

what's a lightning connector

(wrong answers only)

Rairii, to random
@Rairii@haqueers.com avatar

if there's a love island does that also mean there's a hate peninsula

Rairii, to random
@Rairii@haqueers.com avatar

i think i've just found an entire platform being used to host facebook-ad scam front-ends

namely: i found one of the front-ends, noticed it was CNAME'd somewhere else, noticed the both the "main" domain and the cdn were basically registered by namecheap with whois privacy, which sounds suspicious, why would a company allowing people to set up webstore presences on their infra do this?

anyway i ended up finding some documentation and surprise surprise it's all in vietnamese

Rairii, to random
@Rairii@haqueers.com avatar

people are saying mario kart 9 is in development but that's impossible

we had mario kart 8, mario kart 8.1, the next mario kart has to be mario kart 10 as per the version number standard set by MS

Rairii, to random
@Rairii@haqueers.com avatar

I just realised something

ActivityPub asymmetric keypairs are stored in the db for mastodon

When did kolektiva run tootctl accounts rotate --all last?

For how long was a nation state actor (the FBI) able to impersonate any user of kolektiva to any remote instance?

@admin

Rairii, to random
@Rairii@haqueers.com avatar

is there any software that has been forked more than misskey

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • thenastyranch
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • ngwrru68w68
  • provamag3
  • magazineikmin
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • anitta
  • Leos
  • tester
  • JUstTest
  • All magazines