Monthly Archives: January 2023

FIDO2 für Kreditkarte (Sparkasse). Aber nicht mit Linux!

Posted on 2023-01-27 by Oliver

Im letzten Jahr hatte ich eine Kreditkarte bei der Sparkasse beantragt — Mastercard war das einzige was im Angebot war, aber gut. Also beantragt und direkt nach Erhalt einmal benutzt. Schon der zweite Versuch ging in die Hose, da aufgrund … Continue reading →

Posted in DE, IT Security, Meinung | Tagged , | 7 Comments

Floating point precision … printf-VS2013-vs.-later-VS-version edition

Posted on 2023-01-25 by Oliver

As developers we probably all know that floating point precision can be an issue1. It can haunt us in various ways. Generally when we talk about precision, though, we probably don’t have in mind printf as the first thing. This … Continue reading →

Posted in C/C++, EN, Programming | Tagged , , | Leave a comment

Enabling RSA (with SHA-1) again in OpenSSH server

Posted on 2023-01-24 by Oliver

The sshd version that ships with Ubuntu 22.04 seems to have abandoned RSA authentication. Well, that’s not true. It’s about the hash algorithm used by the “old” protocol by the name ssh-rsa, which is deemed insecure by today’s standards. RSA … Continue reading →

Posted in EN, Software | Tagged | Leave a comment

Bash training I gave some years ago

Posted on 2023-01-23 by Oliver

This is a Bash training I gave some years ago, which I had — however — prepared on my own time. Some parts may be outdated. Others may need some touching up, but in general I think it can be … Continue reading →

Posted in Bash, EN | Tagged | Leave a comment

That trick I learned with the Visual Studio debugger

Posted on 2023-01-23 by Oliver

Alright, I’ll admit it it: I am in team WinDbg. Sure, I’ll happily use WinDbgX — the “Preview” version of the “new” WinDbg which has been in preview for ages now — but I always was a bit unhappy with … Continue reading →

Posted in C/C++, EN, Programming | Tagged , | Leave a comment

IDA and Hex-Rays decompiler keyboard shortcut cheat sheet

Posted on 2023-01-22 by Oliver

Find it on GitHub: assarbad/some-latex/releases/tag/v1.0-ida-cheat-sheet LaTeX source can be found in the repository itself.

Posted in EN, Reversing | Tagged , | Leave a comment

Reminder to self: IDA load all sections

Posted on 2023-01-20 by Oliver

Just a reminder to myself. Edit cfg/pe.cfg inside the IDA installation folder to configure the PE loader to load all sections: // Always load all sections of a PE file? // If no, sections like .reloc and .rsrc are skipped … Continue reading →

Posted in EN, Reversing, Software | Tagged | Leave a comment

ASR rule “Block Win32 API calls from Office macros”

Posted on 2023-01-19 by Oliver

Microsoft says it’s fixed. It may be, but I think there’s more to it than meets the eye. Colleagues of mine noticed that, aside from shortcuts disappearing, Defender also started acting up on TortoiseProc.exe from TortoiseSVN. Notably, checkouts would fail … Continue reading →

Posted in Administration, EN, IT Security | Tagged , , | Leave a comment

dumbin.exe, editbin.exe, lib.exe …

Posted on 2023-01-05 by Oliver

They’re all just slim wrappers around the actual link.exe, not using a common DLL or so, but actually invoking: dumpbin.exe simply invokes “link /dump” and failing that “link.exe link /dump” editbin.exe simply invokes “link /edit” and failing that “link.exe link … Continue reading →

Posted in EN, Programming, Reversing | Tagged , | Leave a comment