The Curious Engineer

All blogs / Security

David Buchanan's Blog

da.vidbuchanan.co.uk/blog

CTF writeups, programming, and miscellaneous stuff.

SecurityReverse engineeringPython

’18’19’20’21’22’23’24’25’26
Posts
38 from 1 Jan 2018 to 29 Oct 2026
Posting
monthly (7 in the last year)
Kind
personal blog
Feed
https://www.da.vidbuchanan.co.uk/blog/rss.xml

2026 5

  1. C2PA's eMudhra Moment
  2. The Temporary Democratization of Software Reverse Engineering
  3. How to Hack Time, With C2PA
  4. C2PA Cameras Do Not Survive Contact With Reality
  5. Slop Cleanup Duty

2025 7

  1. AI can only solve Boring Problems
  2. Shell Permission Errors for Busy Coding Agents
  3. Adversarial ATProto PDS Migration
  4. When Circumvention Is More Popular Than Compliance
  5. Stop Saying "Responsible Disclosure"
  6. UofTCTF 2025: An AES Timing Side-Channel
  7. 2024 Retrospective

2024 6

  1. There Is No Universal De-Select-All Idiom
  2. Can You Get Root With Only a Cigarette Lighter?
  3. MPEG-CENC: Defective by Specification
  4. Jailbreaking RabbitOS: Uncovering Secret Logs, and GPL Violations
  5. SIMD in Pure Python
  6. Text Editors Should Be Worse

2023 9

  1. 2024 Will Be the Year of the Blog
  2. Another Way Not to Sign JSON
  3. Blogging With Math
  4. Colliding Secure Hashes
  5. Hijacking Bluesky Identities with a Malleable Deputy
  6. s32 Unix Clock
  7. Exploiting aCropalypse: Recovering Truncated PNGs
  8. The Quest for Netflix on Asahi Linux
  9. Hello, PNG!

2022 1

  1. BGGP3: Chipping Out

2021 1

  1. V8 Heap pwn and /dev/memes - WebOS Root LPE

2018 9

  1. 35c3ctf: Collection - an Unintended Solution!
  2. WPICTF 2018: Forker[1-4] Writeup - Blind-ish ROP
  3. WPICTF 2018: Jay-Peg Writeup - LSB-Stego
  4. HITB-XCTF GSEC 2018 Quals: babypwn - Blind Format String Exploitation
  5. 0CTF 2018 Quals: Baby Stack - ret2dlresolve
  6. Crashing QEMU VGA Drivers - The Story of my First CVE
  7. CTF Writeup: Hackvent 2017 Day 23 - "Only Perl"
  8. CTF Writeup: Hackvent 2017 Day 21 - "Tamagotchi"
  9. Hello, world!