The Curious Engineer

All blogs / Reverse engineering

devever.net/~hl

devever.net/~hl

Reverse engineeringSecurityNetworking

’15’20’25
Posts
139 from 27 Feb 2013 to 4 Feb 2024
Posting
quiet since 2024
Kind
personal blog
Feed
https://www.devever.net/~hl/index.feed

2024 2

  1. [Computing] The Bootstrapping Exam: Escaping from “Trusting Trust”
  2. [Hμblog] 37C3 talk recording: Adventures in Reverse Engineering Broadcom NIC Firmware

2023 29

  1. [Hμblog] Libreboot 10-year anniversary
  2. [Computing] I'll be speaking at 37C3 (and have some spare tickets)
  3. [Hμblog] Towards Greater Accountability: A Proposal for CA Issuance Decision Logs
  4. [Computing] Expect-CT Lite: A humble proposal for minimal CT enforcement in TLS certificates
  5. [Computing] Mitigating the Hetzner/Linode XMPP.ru MitM interception incident, part 2: XMPP-specific mitigations
  6. [Computing] Mitigating the Hetzner/Linode XMPP.ru MitM interception incident
  7. [Hμblog] Make the web great again
  8. [Computing] Why even let users set their own passwords?
  9. [Computing] The problem with federated web apps
  10. [Hμblog] I don't trust Signal
  11. [Computing] Web-based cryptography is always snake oil
  12. [Computing] Writing a KVM hypervisor VMM in Python
  13. [Computing] Modern CPUs have a backstage cast
  14. [Hμblog] Thoughts on Apache, .htaccess and the hackish state
  15. [Computing] Patterns in register map design
  16. [Computing] Binary formats and protocols: LTV is better than TLV
  17. [Computing] Memoirs from the old web: IE's crazy content rating system
  18. [Computing] Client certificates aren't universally more secure
  19. [Computing] Memoirs from the old web: The KEYGEN element
  20. [The World] Heterogenous v. homogenous manufacturing
  21. [Computing] On numbering hegemonies and namespace monopolies
  22. [Hμblog] Chicken Scheme's internal data representation
  23. [Computing] Memoirs from the old web: server-side image maps
  24. [Computing] The inscrutable nature of UK rail ticketing
  25. [Computing] Against risk-based authentication (or, why I wouldn't trust Google Cloud)
  26. [Computing] Netheads vs. bellheads redux: the strange victory of SIP over the telephone network
  27. [Computing] Producing HTML using string templates has always been the wrong solution
  28. [Computing] Memoirs from the old web: The GateKeeper access control system
  29. [Hμblog] Pushup, a framework for mildly dynamic websites

2022 6

  1. [Computing] Let's Encrypt now supports ACME-CAA: closing the DV loophole
  2. [Computing] The Talos II, Blackbird POWER9 systems support tagged memory
  3. [Computing] Computers are an inherently oppressive technology
  4. [Hμblog] Webrings
  5. [Computing] The Demise of the Mildly Dynamic Website
  6. [Computing] Website redesign and editorial changes

2021 15

  1. [The World] Requiem for Strawberry
  2. [Computing] How the K-line got its name: history of IRC daemon configuration
  3. [Computing] Freenode commits suicide, is no longer a serious IRC network
  4. [Computing] I have now been banned from Freenode
  5. [Computing] Why the GDPR is a threat to a free internet and should be ignored by those outside the EU
  6. [Computing] A thought experiment: High-Availability IRC
  7. [Computing] Freenode IRC operators perform mass seizure of channels for mentioning Liberachat
  8. [Computing] Freenode IRC operators now engaging in routine abuses of power
  9. [Computing] Having a bank account without having a phone number
  10. [Computing] Live feed of the HN Top 30 as an IRC Channel
  11. [Computing] Patterns in application-layer protocol design
  12. [Computing] A taxonomy of I/O architectures
  13. [Computing] Attributes of configuration languages
  14. [Computing] How secure boot and trusted boot can be owner-controlled
  15. [Computing] In the future, even your RAM will have firmware; and the subject of POWER10 blobs

2020 8

  1. [Computing] Modifying and running a binary by recompiling a reverse engineered disassembly
  2. [Computing] The different kinds of authentication protocols
  3. [Computing] Serial Attached SCSI (SAS) is a circuit switched computer network
  4. [Computing] USB Mass Storage and USB-Attached SCSI... are both SCSI
  5. [Computing] A brief introduction to SCSI
  6. [Computing] Myths about USB NKRO and how USB HID works
  7. [Fiction] Kolmogorov's AI
  8. [Computing] Mis-fitted USB ports, an epidemic

2019 13

  1. [Computing] Total Advertising Denial
  2. [Computing] XML is almost always misused
  3. [Computing] The evolution of the web, and a eulogy for XHTML2
  4. [Computing] Cloudflare considered harmful
  5. [The World] Lifeforms
  6. [Computing] The PowerPC AS Tagged Memory Extensions
  7. [Computing] On the opening of the Power ISA, and the chilling effects of proprietary ISAs
  8. [Computing] The i.MX8 cannot be deblobbed
  9. [Computing] Rethinking the filesystem as global mutable state, the root of all evil
  10. [Computing] Rethinking files
  11. [Computing] Extended Validation certificates have always been useless
  12. [Computing] Adventures in reverse engineering Broadcom NIC firmware
  13. [Computing] Running Baldur's Gate 2 in windowed mode at high resolutions

2018 2

  1. [Computing] Grow-up and grow-down technologies
  2. [Computing] Why Intel will never let owners control the ME

2017 2

  1. [Computing] Legal Analysis of the “Admiral” Anti-Adblocker DMCA Incident
  2. [Computing] Phone numbers must die

2016 14

  1. [Computing] Rackmount Improv HSM
  2. [Computing] Let's Encrypt for IRC Networks: A Deployment Guide
  3. [Computing] The Cultural Defeat of Microsoft
  4. [Computing] Microsoft has stopped making Windows
  5. [Computing] Why I will never use Windows 8 or Windows 10
  6. [Computing] Psychological effects of coding style
  7. [Computing] Death to the Win32 console subsystem
  8. [Computing] Why I don't like smartphones
  9. [Computing] The Normativity Manifesto
  10. [Computing] Zero-G Programming
  11. [Computing] The Bourne Ambiguity
  12. [Computing] Nexuses Redux: Nativity
  13. [Computing] Embedding of binary data into programs
  14. [Computing] There are no secure smartphones.

2015 6

  1. [Computing] TLS and the Policy MitM Armageddon
  2. [Computing] Why the AGPL is often unenforceable
  3. [Computing] Linux's GPLv2 licence is routinely violated
  4. [Computing] Why I don't like smartcards, HSMs, YubiKeys, etc.
  5. [Computing] The Straight Line Principle
  6. [Computing] On Nexuses

2014 1

  1. [Computing] On Normativity in Configuration Management

2013 4

  1. [Computing] Insyde BIOS Issues
  2. [Computing] Coroutines in C
  3. [Computing] A usable Linux desktop
  4. [Computing] Notes on building lexers

Undated 37

  1. computing
  2. the world
  3. Hμblog » (view all)
  4. Tag=talk
  5. firmware
  6. broadcom
  7. Tag=ortega
  8. Tag=foss
  9. history
  10. security
  11. Tag=webpki
  12. Tag=pki
  13. cryptography
  14. Tag=ct
  15. cloudflare
  16. Tag=web
  17. indieweb
  18. Tag=signal
  19. HN comment
  20. Tag=lisp
  21. Tag=scheme
  22. virtual machine
  23. Tag=cs
  24. mildly dynamic
  25. Tag=go
  26. webrings
  27. listening to
  28. noise generator
  29. Tag=lotd
  30. interactive fiction
  31. compiler
  32. Tag=prolog
  33. z-machine
  34. Tag=inform
  35. homepage
  36. Tag=wasm
  37. Atom feeds