egglessness - random notes on computer security

Picture this: you just bought your brand new IoT device. You take it out from the box and power it on. But... how do you pass your WiFi credentials to make it connect to your network? This solution literally blew my mind!

Even if specifying the length of the buffer you want to operate on seems a good security practice, using strncpy instead of strcpy may help attackers to leak sensible data from your program memory. Here's why.

Compilers like GCC and Clang give developers the possibility to secure buffers in their applications by supplying the _FORTIFY_SOURCE macro at compile time. In this post, we will see how does it work and what can it do for us.

Prefetching external links on Facebook can surely enhance the user experience, but... can it be exploited to do some reconnaissance on a target victim?

Recompiling the whole LLVM infrastructure is a very tedious and long process. I'll show you how to get away with it in just a few seconds.