#bangbangcon — Public Fediverse posts

And that is a wrap to @bangbangcon! Once again, if you're reading this and you enjoyed my #BangBangCon livetweeting, please check out my sponsor @honeycombio! lizf out!

Posteo turned off the email address that the notpetya authors were using for their victims to communicate with them... Hackers are often script kiddies that are not l33t at all. Join the light side instead! [fin] #BangBangCon

Or finally... what about appending the key to the end of each file? it's like taping the key to the padlock. "I hope they don't look in the basement" #BangBangCon

what about generating keys seeded with the date and the document root rather than actual randomness? well, it makes it easy to crack no matter how complicated your md5 and sha1 chains are... #BangBangCon

and using crypto apis is hard, so people... just use example code. what they didn't notice was that omitting CRYPT_VERIFYCONTEXT leaves persisted private keys around, rendering the entire scheme to extort useless! RTFM folks! #BangBangCon

There's a lot of copy-pasta and misuse of win32 apis... or it just crashes... exception handling is hard! #BangBangCon

Malware & ransomware owners love to leave messages for malware analysts or people who enter wrong passwords... it's like playing CoD against an 11 year old and reading chat... #BangBangCon

There's also ransom-encryption... (covered in @amirootyet's talk from #BangBangCon West)...

How about javascript monero miners that are cryptojacking your ALL cores? well, it's pretty obvious when your fan is running and system gets slow... so the user kills it. #BangBangCon

You can also set up a honeypot and keylog it and wait for someone to do something astonishingly stupid, like download Windows 2000 sp3 exe installers... or try to find /var/spool/samba without understanding filesystem hierarchies... #BangBangCon

(1) People turn up looking for help with getting others' admin passwords or facebook accounts for fun! (2) Steal underpants, ???, profit people with no plan, and (3) sellers looking for "partners" to help them who could as well be feds. #BangBangCon

The final talk of #BangBangCon 2019: @amirootyet on cybercrime fails. [ed: which might be similar to his @bangbangconwest talk!] #BangBangCon

So we run the fibonacci example with its 'this' passed as an argument, and it works. it's 100 lines of SQL (plus all of the work that went into Postgres of course!) [fin] #BangBangCon

Lambdas need to, of course, bind their previous environment when created, plus the arguments that were passed. #BangBangCon

which means variables, creating lambdas, and calling them. and this requires environments [ed: which some of us hopefully remember from taking caffeinated 6.001 in IAP...] #BangBangCon

What do we need to make a RPN calculator now turing complete: we need comparison operators, ifs, lists, and cons/head/tail/empty operators... and finally, of course, lambdas. #BangBangCon

So we have a bunch of potential operations which can do varying kinds of expression evaluation, and then put in an initial input and see what happens. #BangBangCon

we can store state as a JSON dict: {stack: [...], result} -- and then manipulate the state each time, reading the first stack frame and popping... #BangBangCon

To do this in SQL, we need CASE statements (like if/else), and recursive CTEs which provide recursion over variables until the limit of returned results is reached. #BangBangCon

Next is @mmalisper on writing SQL interpreters for fun, without profit! #BangBangCon

Oh, but wait, there's one more thing! Inspired by the audio demos from earlier today, now there's an audio demo that generates mono audio output to pipe to aplay! #BangBangCon

You can play with a VM with just a page of rust code; and encapsulate things using VMs! [fin] #BangBangCon

The other alternative is mapping memory and having the host pass data via in-memory data structures mmapped on both sides, potentially readable and writeable on both sides. #BangBangCon

But ideally we'd like to not swap back and forth between virtual machine and host, repeatedly calling VM exits. Instead, we can use virtio to share memory using cooperation via virtual PCIE bus. Soon, there will be a rust-vmm binding too. #BangBangCon

Feed in the initial register values... and we're off to the races. Go run the CPU until it needs to do I/O; if it's serial I/O, print the output to stdout, otherwise display some errors if we get an unexpected result. #BangBangCon

A demo of accessing this from userspace with rust-kvm bindings. We create some memory inside our userspace process and ask the kernel to map it to the VM, and we throw some assembly into there to execute. #BangBangCon

There's a common OS interface in Linux for abstracting CPU and memory: the Kernel Virtual Machine (or KVM). You can use the KVM API to create a VM with vCPUs and memory. You may need a VM exit to pass through hardware. #BangBangCon

How do we use containers and how do they relate to VMs? Containers get hosted inside of VMs, or each container becomes one VM. Many cloud providers wind up abstracting you and your code from the container and VM. #BangBangCon

The final block of 3 talks at #BangBangCon 2019 begins with @josh_triplett on building VMs with KVM and Rust!

But alas, stage lighting hue and internet disconnection conspire to prevent a live demo! [fin] #BangBangCon