Gwendolyn

@petersuber@fediscience.org the EFF already made this years ago, with more features and much more usable, and also not made by some weird LLM company: https://coveryourtracks.eff.org/

@DaveMWilburn@infosec.exchange @kimzetter@infosec.exchange our society is failing young people and her conclusion is that they need to be locked away for longer

@DaveMWilburn@infosec.exchange @kimzetter@infosec.exchange literal defender of corporate America and her whole thing about these people not being punished harshly enough, the whole thing about mental illness

@sitharus@cloudisland.nz anyways here's a slightly shorter payload that does exactly the same 78daab77f57163626464800126063b0610af82c101cc7760c0040e0c160c301d209a154d16999e07e5c16806010895951961f89f9fd5a3d79603c833fc96651d31939f553f29334fbf388301007f240dab or even shorter by taking advantage of linux zeroing registers despite this being AFAICT not required: 78daab77f57163626464800126063b0610af82c101cc7760c0040e0c160c301d209a154d16999e07e5c168060108959519c1cfda6b0bd29a650d64ea2765e6e91767300000195c0a70

@sitharus@cloudisland.nz @diazona@techhub.social if I remove the try/except I also get OSError “Bad message” (errno 74) on recv, I’m on fedora

@ewenmcneill @sitharus ohh thank you!

@sitharus@cloudisland.nz there’s also a few bytes to be saved in the embedded ELF you don’t really need exit() after execve() I’m not sure if the setuid call is necessary since it should already be executed with effective uid 0 the instructions that load constants into registers look like they could be using one byte less but I’m not enough of an assembly expert to say for sure And does it even make sense to count the payload as part of the exploit? In a real scenario that payload would likely be larger to do anything useful anyways That said, why are they even golfing the poc in the first place, it feels like they’re trying to create the impression that less bytes makes it better/scarier/easier to exploit

@sitharus@cloudisland.nz I thought that the setuid syscall should be unnecessary since setuid binaries are executed with the effective user id of the owner so it seems redundant? but apparently not, when I removed that it didn't work anymore if anyone knows why that is I would love an explanation

@sitharus@cloudisland.nz I think we can also save some bytes by using base64 instead of hex encoding, decoding takes a few more characters but that should be more than made up for by the more compact encoding

@kimzetter@infosec.exchange ew that woman is disgusting

@kimzetter@infosec.exchange I was going off the linked interview, because said interview introduced her as a defender of capitalism and was pretty much entirely about that. Perhaps I should not have included that particular sentence, because it completely distracts from my actual point, which is that you don’t solve the problem of our society letting people fall through the cracks and get radicalised by increasing punishments for said people. That’s at best fixing the symptoms while ignoring the actual problems, and at worst adding to the radicalisation potential. She clearly lays out the actual problem, she points out all the mental health issues, and her solution is not better mental health resources, it’s not deradicalisation, it’s not prevention, it’s putting people in prison to scare them straight, it’s making sure people with mental illness don’t get released from prison.