ICYDK I maintain an index of my workshops, keynotes, talks...
github.com/corkami/docs/b
Pinned Tweet
Follow
Click to Follow angealbertini
Ange
@angealbertini
Corkami, CPS2Shock, PoC||GTFO, Sha1tered. Security engineer @ Google. He/him.
Ange’s Tweets
I’ve been parenting a lot lately - no infosec activities in my spare time. What did I miss?
3
3
Dear MSX lazyweb
Since I posted my silicon tracing work, I have been asked exactly 3 times about reverse engineering the V9990. Each time I replied, there was no answer.
Question: Where can I get a V9990?
4
5
10
Anyone know anyone who might be able to decap a chip and extract a 544Kbit mask rom?
3
3
Show this thread
Some recently registered .ZIP domains 🤭
85
578
2,009
Show this thread
We are now the proud owner of your favorite initial access method
54
290
2,773
I wonder how long before the .zip TLD is full of malware distribution and it just ends up being entirely blacklisted.
Cf spamhaus.org/statistics/tld
1
9
24
Tempted to register report.zip and booking.zip just to look at the traffic (pity those are "premium" at~ 500$ and ~1100$/y).
#TerribleIdeas: Let's go all in and add .exe, the domain for people who get things done.
1
3
18
1/ Make an self-hosting (’s) APE web server.
2/ append website content as a zipped archive to the file.
[2.5/ add standard zip-based archives (epub docx 3mf…). And some scripts too]
3/ host that as its own name.
…
x/ any suggestion?
1
1
5
Show this thread
PDF readers typically turn “http:/“ text words into clickable links, without any hlink/annotation declaration needed.
How long before some imports / external reference system is silently updated to load (like Log4j) remote zip-served file, but without any protocol keyword ?
1
6
14
Show this thread
.zip 🤦🏻♂️
8
18
99
ICYMI: Twitter is cracking down on 'inactive accounts', starting right now. Accounts are already being taken down for inactivity.
What I had ASSUMED though, that it'd be counts that were maybe 3 years inactive, 5 years, 10 years maybe. NO, IT'S 30 DAYS!
Gone for a month? BANNED
read image description
ALT
1,202
30.2K
46.6K
Show this thread
I learnt that Zach Riggle, the author of pwndbg, passed a few days ago.
We weren't close friends, but acquaintances, and discussed stuff in Twitter DMs.
I am sad. My Twitter DMs have lost multiple good folks in the last years :(
22
94
362
A few days ago I had a fun chat with about secure design of file formats. One of the specific problems that we discussed were overlarge fields and how to approach them in a format design in a secure-by-default way. Here are some notes:
gynvael.coldwind.pl/?id=767
4
15
62
The new asm.bytes.asbits display the instruction bytes in the disassembly in bits format, which is ideal for manually dissecting instructions, implementing or fixing disassemblers and better understanding of the architecture details
1
26
93
Added IPTC (in PSD), EXIF (in TIFF) and XMP metadata formats at github.com/corkami/pics/b
New milestone: 127 formats dissections now in Sbud!
read image description
ALT
read image description
ALT
read image description
ALT
4
18
I made a few compressors for hp48, including improvements of existing ones (bz2, tnt2).
The one I was using most was LZD, due to very fast decompression speeds, ideal for packaging.
For daily usages, R.O.C was likely more balanced.
You can find them here:
1
7
Is there any common software that uses default password [auto-used silently] - besides PDF (null password) and Excel (VelvetSweatshop) ?
1
4
The landscape of metadata formats is more complex than I expected.
The amount of different thumbnails that you can put in a JPG is crazy.
read image description
ALT
4
15
50
.info files on Amiga are considered an early example of “Side-car files” (as in “metadata in a separate file”), but they’re only documented as Workbench icons.
Was there any other use of .info files?
3
1
5
Show this thread
🤯😳
Quote Tweet
The Canon R5 now has an "IBIS High Resolution" mode that takes 9 images, shifting the sensor subpixel amounts for each, and stitching them together into a 400 megapixel image. I experimented with this on the owl. It's good at being perfectly still and there was no wind...
Show this thread
6
Do not trust the Ea-Nasir brand of copper. These guys are swindlers and crooks
0:29
157.2K views
39
2,003
8,140
My original BBC Micro OS 1.20 disassembly listing which I annotated back in the day. I learnt so much about 6502 programming and how the BBC Micro worked by doing this. Not many people do this any more. It has been scanned and is here..
archive.org/details/kevedw
29
88
446
Here I put together over 90 "Fight" logos from various fighting games. It's worth noting only games with "Fight" are here as many fighting games use another phrase (Go! being the second most common).
89
3,087
11.3K
Show this thread
New blog post (in over a year!)
Driver adventures for a 1999 webcam
In where I refuse to accept that a webcam that I remember from my childhood won't work anymore for Google Meet, and write a userspace USB driver to bring it back from the obsolete dead:
blog.benjojo.co.uk/post/quickcam-
18
118
721
What does a Bento Box and #fileformats Friday have in common? Read about the Open Media Framework format to find out! #digipres preservation.tylerthorsted.com/2023/04/28/ope
read image description
ALT
1
7
12
I've published an annotated disassembly of the US edition of Contra for the NES on github.
10
70
252
Show this thread
At last, here's the final specification of the Quite OK Audio Format, along with some benchmark results: phoboslab.org/log/2023/04/qo
13
100
609
Show this thread
Updated this extension at last!
It now has ACTUALLY ACCEPTABLE scrolling on a scroll wheel (AND you can hold ctrl and/or shift to change the amount)
Furthermore, the compiler itself has been updated to the latest version, and I finally made the webview work offline
💙
read image description
ALT
read image description
ALT
read image description
ALT
read image description
ALT
1
6
29
Show this thread
Protip: If you open a file in notepad and it starts with "PK" it's probably a ZIP file. Rename it .ZIP and open it. Many random seemingly proprietary file formats are actually just ZIP file collections of other standardized formats and text data collected into an easy package.
86
395
3,112
Show this thread
3
4
And a crazy monolith source file ;)
22263 lines (21030 with data), 641.2 kB
sourceforge.net/p/recoil/code/
1
2
Show this thread