corte.si

In 2024, I noticed that I'd let my blog languish.

A couple of years ago a paper titled Progressive Growing of GANs for Improved Quality, Stability, and Variation cropped up on my reading list.

Outside the Al Huda Mosque near my home (by Mark McGuire) A year ago, my wife and I decided to become citizens of New Zealand.

Six years after mitmproxy's first checkin, we've finally released version 1.0.0 of the project.

We've just released mitmproxy v0.18!

Eight years ago my wife and I walked into the Cat Protection Society near our house in Sydney on a whim - just to look, we assured each other, and most definitely not to get another cat.

I've just released modd, a new1 project of mine.

We've just released mitmproxy 0.15.

It's a universal rule that search over a sufficiently large body of user data poses security challenges.

I've just released devd 0.3 - a measured increment, with a modest set of bugfixes and new features.

We've just released mitmproxy 0.14!

I've just released version 0.2 of devd, a local webserver for developers.

I've just released devd, a small, self-contained, command-line-only HTTP server for developers.

This is a slightly late announcement of the release of mitmproxy v0.13, which was pushed out the door earlier this week by my esteemed compatriots while I was tied up with other things.

I've just released mitmproxy v0.12.1.

Project News Before we get to the new release, I'd like to give a quick update on some internal project developments.

Over the years, I've written a number of posts on this blog on the topic of binary data visualisation.

I've just pushed mitmproxy v0.11.2 out the door.

I'm happy to announce that we've just released v0.11 of both mitmproxy and pathod.

A few weeks ago, I posted that I had hacked up a version of mitmproxy that exploited CVE-2014-1266, giving unrestricted access to nearly all HTTPS traffic on affected IOS and OSX devices.

This post is a quick recap of work I've been discussing on Twitter in the last few hours.

I've just released v0.10 of both mitmproxy and pathod.

Here's a riff on Malcolm Gladwell's rule of thumb about mastery: you don't really know a programming language until you've written 10,000 lines of production-quality code in it.

I've just released v0.9.2 of both mitmproxy and pathod.

choir.io Today, I'm raising the veil (slightly) on a new project - choir.io.

I'm happy to announce the release of mitmproxy 0.9.1.

I've become a bit weary of the process of public vulnerability disclosure - I'm much more likely nowadays to just drop companies an anonymous notice and move on.

I've just released pathod 0.9, my toolset for crafting malicious and interesting HTTP traffic.

I started work on mitmproxy because I was frustrated with the available interception tools.

I'm happy to announce the release of mitmproxy 0.9.

Google has finally shut down a service I actually care about - Google Reader will die a graceless, undignified death on July 1, 2013.

I've been doing a series of posts looking at data gathered with ghrabber, a simple tool I wrote that lets you grab files matching a search specification from GitHub.

Earlier this week I published ghrabber, a simple tool that lets you grab files matching an arbitrary search specification from GitHub.

Github recently introduced hugely improved code search, one of those rare moments when a service I use adds a feature that directly and measurably measurably improves my life.

There is something terribly awry with the social news ecosystem.

Last week, I had the pleasure of attending Dropbox's annual company hack fest.

I've just released pathod 0.3, which beefs up pathoc's fuzzing capabilities, improves the spec language and includes lots of bugfixes and other small tweaks.

A few months ago, I announced pathod, a pathological HTTP daemon.

I recently wrote a series of posts using the Hilbert curve to visualize binaries, culminating in a gallery showing regions of high entropy in malware.

It's become quite a popular parlor game to guess who is responsible for the recent Antisec UDID leak.

Something I've been worrying about for a long time has just happened: Antisec has leaked a database with more than a million UDIDs.

I've been living out of a bag for the last 3 weeks, working hard on a series of intense but fun audits.

I've just pushed pathod 0.2 out the door.

I've just released pathod, a pathological HTTP/S daemon useful for testing and torturing HTTP clients.

I'm happy to announce the release of mitmproxy 0.8.

I'm happy to announce the release of mitmproxy 0.7.

My leisurely Sunday activity today is to set up a new OpenBSD firewall for my mobile app testing lab.

Edit: Since this post, I've created an interactive tool for binary visualisation - see it at binvis.io Hover and click for more.

Edit: Since this post, I've created an interactive tool for binary visualisation - see it at binvis.io Last week, I wrote about visualizing binary files using space-filling curves, a technique I use when I need to get a quick overview of the broad structu…

I posted a link to an interesting visualization paper on Twitter today, prompting someone to ask me where I had found it.