« first day (4154 days earlier)      last day (1024 days later) » 

forest
forest
00:33
Saw this in the C channel. Pretty mix of gdb and vim under tmux.
user image
Actually, that reminds me... Does anyone know if there's a way to use gdb purely with emulation (perhaps in combination with qemu) so that ptrace() is not required? Obviously it'd be much slower, but that doesn't matter.
 
1 hour later…
forest
forest
01:47
Hello @JourneymanGeek
Journeyman Geek
Journeyman Geek
Oh hello
@forest this might be a question, assuming there's a good reason to 😁
forest
forest
@JourneymanGeek It'd be nice to be able to debug a program without having to expose the ptrace() interface.
The attack surface area of POKETEXT and GETREGSET and the like are not small.
Of course, the attack surface of the debugger would go up, but it'd be easier to sandbox.
Although I imagine most people who do it would do it to debug a binary that's a different architecture!
Journeyman Geek
Journeyman Geek
02:03
Ah erf, that's pretty specific
What do you expect to attack something you're debugging?
forest
forest
I expect something I'm debugging to attack.
So... other way around.
And I'd prefer it only successfully attack the debugger, which can be isolated, than to attack the kernel. :P
Journeyman Geek
Journeyman Geek
02:28
Ah
I have no idea about most of this 😁
 
7 hours later…
nobody
nobody
09:40
@forest Has there been any known instance of malware attacking the debugger? It would be very odd to use a zero day when it knows it is being analyzed.

« first day (4154 days earlier)      last day (1024 days later) »