Some idiot let me write code 😂... 🏳️‍🌈 he/they, CTFing with @0rganizers

Joined February 2016
tritoke🏳️‍🌈 retweeted
The writeup is here. We achieved RCE in Minecraft Bedrock, turning a 4-byte heap overflow into complete client compromise. @ryaagard details a universal, Bedrock-specific technique for bypassing ASLR and achieving arbitrary read / write primitives.
8
48
1
310
19,458
tritoke🏳️‍🌈 retweeted
186
765
202
7,740
1,127,154
tritoke🏳️‍🌈 retweeted
Many Linux malware samples (notably BPFDoor and similar) hide using classic BPF (Berkeley Packet Filter) socket filters. These filters keep the malware dormant until it receives a very specific “magic packet” ,only then does it activate and reveal itself. Manually reverse-engineering complex BPF programs (often 100–200+ instructions with heavy branching) to figure out the exact trigger packet used to take hours or even days. Cloudflare’s solution turns this into a process that runs in seconds. blog.cloudflare.com/from-bpf… filterforge: github.com/cloudflare/filter…
The newly observed capabilities demonstrate how BPFdoor has evolved beyond a stealth backdoor into a layered access framework. The updated variant combines encrypted HTTPS triggers, proxy-aware command delivery, application-layer camouflage techniques, ICMP-based control signals, and kernel-level packet filtering to bypass multiple layers of modern network defenses. Each technique targets a different security boundary, from TLS inspection at the edge, to IDS detection in transit, and endpoint monitoring on the host, illustrating a deliberate effort to operate across the full defensive stack.
2
41
2
174
18,891
Replying to @jsrailton
🤔💭
2
1
860
tritoke🏳️‍🌈 retweeted
This weekend I made xoflib with my friends Robin Jadoul and @_tritoke. xoflib is a Python package for the Shake extendable-output functions (XOFs) written using pyO3 bindings to the sha3 Rust crate. github.com/GiacomoPope/xofli…
1
2
1
9
1,834
tritoke🏳️‍🌈 retweeted
"a + b", this one line of Python code executes thousands of lines of C behind the scenes. My latest article explains what goes on in the CPython runtime to execute this seemingly simple operation. You will learn about: - Dynamic dispatch implementation in CPython - What is the abstract object interface in CPython and its role in dynamic dispatch - What is the PyTypeObject struct and its role in the CPython runtime - How the various types in CPython implement operators and make them available to the runtime for dynamic dispatch to work. - And, look inside the implementation of the float type to understand this more concretely. The article includes 13 annotated code listings from CPython with all the explanations. Check it out: open.techwriters.info/codeco…
The next article in the CPython internals series is ready (pending edits). It stands at 1800 words & 13 annotated code listings. All that just to explain, what goes on when you run `a + b` in Python. Coming soon to the subscribers of Confessions of a code Addict (link in bio).
32
417
11
2,564
554,943
tritoke🏳️‍🌈 retweeted
Replying to @fasterthanlime
You know that thing where you come up with a cool idea but later realize it wasn’t your own, it was just something you remembered? That’s sort of how generative AI works—there’s an interesting paper by Carlini et al where they illustrate this problem: arxiv.org/abs/2301.13188
3
13
2,122
tritoke🏳️‍🌈 retweeted
Taylor Swift as math functions, for all the Swifties. A thread. y = -x
180
1,931
459
10,700
1,756,598
tritoke🏳️‍🌈 retweeted
was trying to get a linkedin profile photo with AI editing & this is what it gave me 🤨
950
3,235
776
85,903
6,054,109
While it was good that the public was able to access the unredacted documents, journalists who need to protect their sources should watch out for this kind of mistake by using tools like Dangerzone: dangerzone.rocks/
2
40
3
276
323,278
tritoke🏳️‍🌈 retweeted
CTF rev players discovering symbolic execution
20
271
18
1,587
140,482
I got a first!!!
9
47
2,038
1/4 I am a GP, I am self-taught in trans healthcare. I treated an 11 year old with blockers and a 12 year old with testosterone. This was fully scrutinised by a Medical Practitioners Tribunal and they determined this was good and necessary care. 🧵
1,474
177
390
2,064
734,573
tritoke🏳️‍🌈 retweeted
FUCK THIS JUSTICE FOR FINLAND
4
78
1
478
18,088
Amazing writeup covering so really neat maths, definitely worth a read if you want to learn about elliptic curves!
This week, I authored CTF challenge for Curta. In the first 48 hours, 25 players solved it. In this thread, I'll cover how the challenge works, including a explanation of elliptic curves! 👇🧵
2
263
tritoke🏳️‍🌈 retweeted
KiCanvas is an open source, interactive, browser-based viewer for KiCAD schematics and boards- and now it's in 🎉 public alpha 🎉 Head over to my blog to learn more and try it out for yourself 🧚‍♀️ blog.thea.codes/introducing-…
23
194
12
888
95,840
tritoke🏳️‍🌈 retweeted
Replying to @matt_mp
The only way it could ever be ok is if he was the designated carrier for his polycule of gay felons and everyone just reached for him in an emergency.
2
1
20
842
tritoke🏳️‍🌈 retweeted
⚛️ Happy #Quantum Day! ⚛️ We are very happy to bring you a project we have spent the last few months on: a typeface for quantum circuit diagrams! We give you Quantum Computer Modern (QCMU) - The functional font by Quantum Village. Here is the link 🧵⤵️ quantum-village.github.io/QC…
1
6
2
11
4,407