Difference between revisions of "Summerschool Aachen 2005/Notes/Thursday Sep 22 2005"

From C4 Wiki
Jump to: navigation, search
Line 9: Line 9:
  
 
'''Maximillian:'''
 
'''Maximillian:'''
workend on makeing ScaPy work on MacOS X and SSL Fingerprinting.
+
workend on makeing ScaPy work on MacOS X and SSL Fingerprinting. I added some new risks I learned about to [http://lufgi4.informatik.rwth-aachen.de/faq/tags/risks our faq]
  
 
'''Emin:'''
 
'''Emin:'''
 
I have made some experiments with Java race conditions. Here is a nice [http://www.awprofessional.com/articles/article.asp?p=23947&rl=1 article] about this issue. I came accross also with a tool namely [http://www.par.univie.ac.at/~clovis/ladybug/Overview.html Ladybug] which detects dynamically java race conditions.
 
I have made some experiments with Java race conditions. Here is a nice [http://www.awprofessional.com/articles/article.asp?p=23947&rl=1 article] about this issue. I came accross also with a tool namely [http://www.par.univie.ac.at/~clovis/ladybug/Overview.html Ladybug] which detects dynamically java race conditions.

Revision as of 19:19, 22 September 2005

Typo: worked on a continuation based microthread engine for python (precursor for a python tcp/ip implementation) installed solaris and started exploring

solaris x86 syscall conventions seem to be: use a lcall $7,$0 instead of int $0x80, push all the arguments on the stack instead of linux's speedcall convention that uses registers. also the lcall contains nul bytes, so we need to create some 'lcall;ret' functionlet somewhere in memory before being able to use syscalls. i think all this is sysv/386 default.

Maximillian: workend on makeing ScaPy work on MacOS X and SSL Fingerprinting. I added some new risks I learned about to our faq

Emin: I have made some experiments with Java race conditions. Here is a nice article about this issue. I came accross also with a tool namely Ladybug which detects dynamically java race conditions.