lander's posts

The year is 2026.

This post is a follow-up to part 1 of my adventure in reverse engineering a unique file format present in early Unreal Engine titles.

# Getting Into Security In middle school the gateway drug known as Halo 3 and unapproved mods shared on the game's File Share system got me interested in programming and security.

Splinter Cell (2002) was one of the first games I had on the original Xbox and still remains one of my favorite games of all time.

jj (jujutsu) is a newish git-compatible version control system that has some fresh ideas and a pretty great CLI UX (compared to git).

Emma (@carrot_c4k3) is a good friend of mine.

In the late 2000s and early 2010s my friends and I were living and breathing Xbox hacking.

# Context A couple months back I read "C isn't a Hangover; Rust isn't a Hangover Cure" (original Medium link) by John Viega.

# Background This blog post is something I'm writing 3 years after my initial research/development, and about 2 years after I stopped actively working on the tool.

# ASAN Primer If you're already an ASAN expert, feel free to skip to the next section.

# Background Ham radios are a fun way of learning how the radio spectrum works, and more importantly: they're embedded devices that may run weird chips/firmware!

Last Updated: April 5, 2017 to address some incompleteness and errors.

The phpBB team released phpBB version 3.1.7-PL1 on Jan 11, 2016 which fixed a CSRF issue I found in the admin control panel BBCode creation form.

# Overview Recently the Symfony project published a security advisory to the SecureRandom class in their Security component that affects Symfony versions 2.3.0-2.3.36, 2.6.0-2.6.12, 2.7.0-2.7.8.