Difference between revisions of "Summerschool Aachen 2005/Notes/Thursday Sep 22 2005"
Line 9: | Line 9: | ||
'''Maximillian:''' | '''Maximillian:''' | ||
− | workend on makeing ScaPy work on MacOS X and SSL Fingerprinting. | + | workend on makeing ScaPy work on MacOS X and SSL Fingerprinting. I added some new risks I learned about to [http://lufgi4.informatik.rwth-aachen.de/faq/tags/risks our faq] |
'''Emin:''' | '''Emin:''' | ||
I have made some experiments with Java race conditions. Here is a nice [http://www.awprofessional.com/articles/article.asp?p=23947&rl=1 article] about this issue. I came accross also with a tool namely [http://www.par.univie.ac.at/~clovis/ladybug/Overview.html Ladybug] which detects dynamically java race conditions. | I have made some experiments with Java race conditions. Here is a nice [http://www.awprofessional.com/articles/article.asp?p=23947&rl=1 article] about this issue. I came accross also with a tool namely [http://www.par.univie.ac.at/~clovis/ladybug/Overview.html Ladybug] which detects dynamically java race conditions. |
Revision as of 18:19, 22 September 2005
Typo: worked on a continuation based microthread engine for python (precursor for a python tcp/ip implementation) installed solaris and started exploring
solaris x86 syscall conventions seem to be: use a lcall $7,$0 instead of int $0x80, push all the arguments on the stack instead of linux's speedcall convention that uses registers. also the lcall contains nul bytes, so we need to create some 'lcall;ret' functionlet somewhere in memory before being able to use syscalls. i think all this is sysv/386 default.
Maximillian: workend on makeing ScaPy work on MacOS X and SSL Fingerprinting. I added some new risks I learned about to our faq
Emin: I have made some experiments with Java race conditions. Here is a nice article about this issue. I came accross also with a tool namely Ladybug which detects dynamically java race conditions.