Christian Blichmann 🇺🇦 (also on Mastodon)
@admvonschneider.bsky.social
Everything is always broken. Googler by day. #BinDiff maintainer. My tweets, my opinion. During my lifetime, CO2 increased by 67.84ppm (so far). http://pronoun.is/he
[RFC] CopySanitizer (CSan): Detecting unneccessary object copies at runtime by ObfuscaTHOR discourse.llvm.org/t/rfc-copysa...
[RFC] CopySanitizer (CSan): Detecting unneccessary object copies at runtime
[Posted on behalf of Jan Newger since discourse limits the number of links and images for new users] Hi folks, This RFC proposes a compiler extension (“CopySanitizer”) to identify the creation of un...
discourse.llvm.org
Hex-Rays somewhat underhandedly added Linux ARM64 builds in their new IDA Pro 9.3 beta. I really need to find some time to work on #BinDiff...
PSA: If your #BinDiff workflow relies on a working BinExport for Ghidra, check github.com/google/binex....
Auto-detect Ghidra protobuf version at build time by cQQkie-dev · Pull Request #164 · google/binexport
Summary Auto-detect Ghidra's protobuf version from the installation directory to prevent runtime version mismatch errors. Problem BinExport previously hardcoded protobuf 4.31.0 and bundled it i...
github.com
Unexpected benefit of AI agent use in our codebase: People have started adding a file like agent-readme.md, explaining what the project does, its design and special considerations. Always wished for a humans-readme.md with that content, but hey, I take what I get.
pagedout.institute ← we've just released Paged Out! zine Issue #7 pagedout.institute/download/Pag... ← direct link lulu.com/search?page=... ← prints for zine collectors pagedout.institute/download/Pag... ← issue wallpaper Enjoy! Please please please share to spread the news - thank you!
I really hope other countries/regions follow suit... open-web-advocacy.org/blog/japan-a...
Japan: Apple Must Lift Browser Engine Ban by December - Open Web Advocacy
open-web-advocacy.org
Is it too late to introduce "bribe coding" as the human-powered way to generate code?
Exciting! Vector35's excellent @binary.ninja ships with built-in BinExport in the latest dev version! Here's how to use it with #BinDiff: dev-docs.binary.ninja/guide/binexp...
BinExport / BinDiff - Binary Ninja User Documentation
Documentation for the Binary Ninja reverse engineering platform
dev-docs.binary.ninja
Is there a list of words chiefly used in answers by AI tools? Feel like "unravel" should be on it.
The @archive.org is amazing - I needed a Windows 2000 VM with CorelDRAW! 9 to create a PDF of a very old file and here I am on my 2020 M1 MacBook running archived software from 1999...
D:\a\binexport\build\_deps\protobuf-src\src\google/protobuf/descriptor_visitor.h(108): fatal error C1001: Internal compiler error. How's everyone else's Friday going? (MSVC 19.44.35209.0)
Experimenting with #BinExport builds for IDA Pro 9.1: github.com/cblichmann/b... (macOS currently broken)
Build with IDA SDK 9.1 · cblichmann/binexport@411d99f
Export disassemblies into Protocol Buffers. Contribute to cblichmann/binexport development by creating an account on GitHub.
github.com
I rarely use Windows these days, but I'm always amazed at how broken Windows Update still is. Today's (un)installment: Windows 11 24H2 - "we could not install it, but you may retry later". Like, tell me what is wrong instead so I might fix it.
"How Compiler Explorer works in 2025" - using nsjail.dev: xania.org/202506/how-c...
nsjail
A light-weight process isolation tool, making use of Linux namespaces and seccomp-bpf syscall filters (with help of the kafel bpf language)
nsjail.dev
www.bbc.com/news/article... I don't claim to speak for most Germans, but the agency's classifaction of "extreme-right" basically means "Nazis" for me. The parliament now needs to find a way to deal with this (up to and including a ban). Interesting times.
AfD classified as extreme-right by German intelligence
The AfD came second in Germany's February elections and has a record number of seats in the new parliament.
bbc.com
Surprisingly clarifying and… terrifying?
Germany’s Far-Right Comeback | NYT Opinion
YouTube video by The New York Times
youtu.be
Patricia Aas 🐢🏳️🌈@patigallardo.bsky.social · last yr.Germans, has there been a shift in the polls based on what Trump has been doing/saying? Are some people not so keen on the far right anymore?
Two-thirds of the Earth’s surface experienced record heat in 2024. See where and by how much – visualised #climatecrisis www.theguardian.com/environment/...
Two-thirds of the Earth’s surface experienced record heat in 2024. See where and by how much – visualised
In oceans and on land, from the north to the south pole, records were smashed for the monthly average temperature
theguardian.com
German word of the day: "Asteroideneinschlagswahrscheinlichkeit", the probability of an asteroid impact. edition.cnn.com/2025/02/07/s....
Newly discovered asteroid now has a slightly higher risk of hitting Earth | CNN
A newly discovered asteroid named 2024 YR4 now has a 2.2% chance of affecting Earth in 2032 after recent observations.
edition.cnn.com
Building secure web apps shouldn't be a burden. We've built a high-assurance web framework at Google that makes security easy for developers. Learn about our "Secure by Design" approach and how it works in our new blog post: bughunters.google.com/blog/6644316... cc: @ddworken.bsky.social
Blog: Secure by Design: Google's Blueprint for a High-Assurance Web Framework
Learn more about how Google has created and deployed a high-assurance web framework that almost completely eliminates exploitable web vulnerabilities.
bughunters.google.com
It's out and make for a very interesting read: github.com/google/secur... IMO, AMD should own it and release a microcode SDK.... @sirdarckcat.bsky.social
AMD: Microcode Signature Verification Vulnerability
### Summary Google Security Team has identified a security vulnerability in some AMD Zen-based CPUs. This vulnerability allows an adversary with local administrator privileges (ring 0 from outside...
github.com
YARA-X 0.13.0 is out: github.com/VirusTotal/y... As always, Victor and the contributors are cranking out quality improvements! In particular, check out the docs on how to use the formatter and linter and open issues (or tell me somehow) if you hit bugs or have things you want to see.
Release v0.13.0 · VirusTotal/yara-x
Implemented basic linting via the check command. Refactor the format of JSON output (#281). Parse Mach-O certificates (#276). Allow using previously defined variables in with statements (#287). BUG...
github.com
