Christian Blichmann 🇺🇦 (also on Mastodon)

Hex-Rays somewhat underhandedly added Linux ARM64 builds in their new IDA Pro 9.3 beta.
I really need to find some time to work on #BinDiff...

OMW to CODE BLUE

Auto-detect Ghidra protobuf version at build time by cQQkie-dev · Pull Request #164 · google/binexport Summary Auto-detect Ghidra's protobuf version from the installation directory to prevent runtime version mismatch errors. Problem BinExport previously hardcoded protobuf 4.31.0 and bundled it i...

PSA: If your #BinDiff workflow relies on a working BinExport for Ghidra, check github.com/google/binex....

Unexpected benefit of AI agent use in our codebase:
People have started adding a file like agent-readme.md, explaining what the project does, its design and special considerations.
Always wished for a humans-readme.md with that content, but hey, I take what I get.

pagedout.institute ← we've just released Paged Out! zine Issue #7
pagedout.institute/download/Pag... ← direct link
lulu.com/search?page=... ← prints for zine collectors
pagedout.institute/download/Pag... ← issue wallpaper
Enjoy!

Please please please share to spread the news - thank you!

Japan: Apple Must Lift Browser Engine Ban by December - Open Web Advocacy

I really hope other countries/regions follow suit...
open-web-advocacy.org/blog/japan-a...

Is it too late to introduce "bribe coding" as the human-powered way to generate code?

Exciting! Vector35's excellent @binary.ninja ships with built-in BinExport in the latest dev version!
Here's how to use it with #BinDiff: dev-docs.binary.ninja/guide/binexp...

Is there a list of words chiefly used in answers by AI tools?
Feel like "unravel" should be on it.

And yes, late nineties was indeed peak UX design - and let's not forget about the nostalgia factor... :)

The @archive.org is amazing - I needed a Windows 2000 VM with CorelDRAW! 9 to create a PDF of a very old file and here I am on my 2020 M1 MacBook running archived software from 1999...

Compiler is out for 4th of July

D:\a\binexport\build\_deps\protobuf-src\src\google/protobuf/descriptor_visitor.h(108): fatal error C1001: Internal compiler error.

How's everyone else's Friday going? (MSVC 19.44.35209.0)

The Fifth Element Zorg Fires 1 million YouTube video by Google User

MSFT be like youtu.be/r0mO6UY6uTg?...

Build with IDA SDK 9.1 · cblichmann/binexport@411d99f Export disassemblies into Protocol Buffers. Contribute to cblichmann/binexport development by creating an account on GitHub.

Experimenting with #BinExport builds for IDA Pro 9.1:
github.com/cblichmann/b...
(macOS currently broken)

I rarely use Windows these days, but I'm always amazed at how broken Windows Update still is.
Today's (un)installment: Windows 11 24H2 - "we could not install it, but you may retry later". Like, tell me what is wrong instead so I might fix it.

"How Compiler Explorer works in 2025" - using nsjail.dev:
xania.org/202506/how-c...

AfD classified as extreme-right by German intelligence The AfD came second in Germany's February elections and has a record number of seats in the new parliament.

www.bbc.com/news/article...
I don't claim to speak for most Germans, but the agency's classifaction of "extreme-right" basically means "Nazis" for me.
The parliament now needs to find a way to deal with this (up to and including a ban). Interesting times.

A progress bar that's 30% complete.

2025 is 30% complete.

#CVE

support IDA version 9.0 · Issue #50 · google/bindiff Is your feature request related to a problem? Please describe. support IDA version 9.0

PSA #BinDiff for IDA 9.1+ will happen: github.com/google/bindi...

Surprisingly clarifying and… terrifying?

lol. Halvar's final slide

Two-thirds of the Earth’s surface experienced record heat in 2024. See where and by how much – visualised In oceans and on land, from the north to the south pole, records were smashed for the monthly average temperature

Two-thirds of the Earth’s surface experienced record heat in 2024. See where and by how much – visualised

#climatecrisis
www.theguardian.com/environment/...

Newly discovered asteroid now has a slightly higher risk of hitting Earth | CNN A newly discovered asteroid named 2024 YR4 now has a 2.2% chance of affecting Earth in 2032 after recent observations.

German word of the day: "Asteroideneinschlagswahrscheinlichkeit", the probability of an asteroid impact.
edition.cnn.com/2025/02/07/s....

Blog: Secure by Design: Google's Blueprint for a High-Assurance Web Framework Learn more about how Google has created and deployed a high-assurance web framework that almost completely eliminates exploitable web vulnerabilities.

Building secure web apps shouldn't be a burden. We've built a high-assurance web framework at Google that makes security easy for developers. Learn about our "Secure by Design" approach and how it works in our new blog post:
bughunters.google.com/blog/6644316...

cc: @ddworken.bsky.social

AMD: Microcode Signature Verification Vulnerability ### Summary Google Security Team has identified a security vulnerability in some AMD Zen-based CPUs. This vulnerability allows an adversary with local administrator privileges (ring 0 from outside...

It's out and make for a very interesting read:
github.com/google/secur...

IMO, AMD should own it and release a microcode SDK....

@sirdarckcat.bsky.social

Release v0.13.0 · VirusTotal/yara-x Implemented basic linting via the check command. Refactor the format of JSON output (#281). Parse Mach-O certificates (#276). Allow using previously defined variables in with statements (#287). BUG...

YARA-X 0.13.0 is out: github.com/VirusTotal/y...

As always, Victor and the contributors are cranking out quality improvements!

In particular, check out the docs on how to use the formatter and linter and open issues (or tell me somehow) if you hit bugs or have things you want to see.