安坂星海 Azaka || VTuber
still@infosec.exchange
<p>‧₊˚ ⋅ Indie Comfy VTuber<br />⊹˚. Employed Threat Intel Researcher<br />♡‧₊˚ SV Cover Artist<br />✧･ﾟ<a href="https://azaka.fun" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">azaka.fun</span><span class="invisible"></span></a><br />*:･˚ @jamama_666 / @MomoiroKohi / @justNovaj / <a href="https://infosec.exchange/tags/artsyaz" class="mention hashtag" rel="tag">#<span>artsyaz</span></a></p>
Posts
-
Post #4445650
you know Microsoft fucked up when your non-tech-savvy friend has moved to Linux all by themselves
-
Post #4423902
It's been a few days since I got my Pebble Time 2 It honestly feels like getting an old friend back everything just works and is all still so familiar - even the apps I used a decade ago
-
Post #4389355
I think I think I need to cut down my work and relax a little - I've been working on so many things nonstop it's actually killing my health I've had so much personal projects and matters to work on in between and after work that I'm missing meals, cutting sleep hours
-
Post #4256116
the latest NIKKE event story is fucked up bro
-
Post #4151378
I managed to find a 6-year-old bug in capa whilst trying to make a new rule for detecting Windows Security Center related ops sometimes it really feels like capa is held together with duct tape and glue
-
Post #4148851
I'm feeling pretty good about the shorts experiment from yesterday - I think it worked out well
-
Post #4113603
Why are antivirus so bad at catching malware? Let's talk detection engineering ❤️ https://twitch.tv/azakasekai 🤍 https://youtube.com/live/2ILs6q3q9TQ?feature=share
-
Post #4094808
We’re nearly up to 30 episodes of REWorkshop, and I’ll be honest I still don’t know what viewers would like to see. Is there anything specifically you’d be interested in seeing?
-
Post #3982258
the ability to preview arg names in line is so nice in IDA 9.4
-
Post #3967532
a lot of people like to shit on AVs/EDRs for failing to detect or considering benign things to be malicious but man try doing it yourself detection engineering is hard
-
Post #3963104
PC parts in current year no way
-
Post #3949201
Through StackTraceMetadata, we were able to rebuild the RVA to member mapping, so any .NET AoT compiled applications with StackTraceSupport on (the default) should be able to get its member names restored. Other things that can help with reverse engineering: - Hydratable metadata/MethodTable/EEType should be present in either hydrated section or the .rdata section when hydration is off (.NET 8 = on; .NET 10 = off due to performance/memory savings). This is parsed by default from nativeaot IDA...
-
Post #3949188
I finally found a nice way to crosspost now I can actually start posting across accounts like this again
-
Post #3830839
ida.dll has been increasingly getting fatter and fatter. From the ~5MB of 8.4/9.1 to nearly 50+ MB in 9.4. I'm not really sure what Hex-Rays has been feeding IDA.