I've been able to find very little information which concerns the front end and back end allocator on linux. The few articles which I have found discussing front end and back end allocators haven't really done a good job of explaining what a front end and a back end allocator is on linux.
I've been able to find very little information which concerns the front end and back end allocator on linux. The few articles which I have found discussing front end and back end allocators haven't really done a good job of explaining what a front end and a back end allocator is on linux.
I've heard that internally, when malloc needs to create the heap lazily, it will call mmap to allocate a minimum of one page for the heap. Once that one page is allocated as the heap. Malloc will distribute the memory out to the process in chunks. What is stopping that same process from just accessing the entire page/pages which nnmap has allocated for malloc?
This has been a hard decision for me. I'm not sure if I should learn both. Is it mostly not worthwhile of time if I learn both of them? Do they both help each other directly or indirectly? I know there is only so much one person can know but I really don't know what that limit is. I know someone more experienced with bug bounty and stuff like this will probably be able to answer my question. I don't want to push the limit of how much one person can know because it will probably become a waste of time. Should I just learn everything exploit related, should I stick to a field? I'm not sure if anyone has experienced this before but I keep on jumping around topic to topic. I guess I am learning from those jumps, but the question when do i stop jumping around. When do I start to specialize. Or in the first place, should I just not jump around?
This has been a hard decision for me. I'm not sure if I should learn both. Is it mostly not worthwhile of time if I learn both of them? Do they both help each other directly or indirectly? I know there is only so much one person can know but I really don't know what that limit is. I know someone more experienced with bug bounty and stuff like this will probably be able to answer my question. I don't want to push the limit of how much one person can know because it will probably become a waste of time. Should I just learn everything exploit related, should I stick to a field? I'm not sure if anyone has experienced this before but I keep on jumping around topic to topic. I guess I am learning from those jumps, but the question when do i stop jumping around. When do I start to specialize. Or in the first place, should I just not jump around?
This has been a hard decision for me. I'm not sure if I should learn both. Is it mostly not worthwhile of time if I learn both of them? Do they both help each other directly or indirectly? I know there is only so much one person can know but I really don't know what that limit is. I know someone more experienced with bug bounty and stuff like this will probably be able to answer my question. I don't want to push the limit of how much one person can know because it will probably become a waste of time. Should I just learn everything exploit related, should I stick to a field? I'm not sure if anyone has experienced this before but I keep on jumping around topic to topic. I guess I am learning from those jumps, but the question when do i stop jumping around. When do I start to specialize. Or in the first place, should I just not jump around?
I am wondering whether it is reasonable to learn binary exploitation or web exploitation? I want to ask someone more experienced who might of made this mistake. Or maybe it is not a mistake I don't know. I am finding it hard what to specialize in. I like binary exploitation but I've noticed its really niche. The main thing I want to know is how much can I learn before it starts to get unreasonable and I am wasting my time learning useless things.
For statically linked binaries, the linker attaches the function that it needs to the executable physically and then patches any function calls which call that function ( I think). I understand this because I know exactly where it is getting the address from. Dynamic linking however, gets the address of a function in an external library using an address even though it is not physically apart of the executable. I'm wondering where in the address space the shared library is even stored. Since processes can only access the virtual memory which has been allocated to them, I am guessing that the shared libraries are mapped as certain addresses in viritual memory, but I would like more details on how it is actually implemented in the real world.
I really like reverse engineering IOT devices and am wondering whether it is a sustainable career path to follow? Are there many jobs opportunities in this area, I've noticed that the bug bounty rewards around IOT devices are not that high paying so I am wondering whether I should dip my toes into another area of reverse engineering.
I really like hardware hacking and am wondering what money is in hardware hacking and IOT reverse engineering. I am wondering whether this is a sustainable career path. Hope someone has a good answer. Thanks all.
The field of reverse engineering IOT devices, dumping the firmware out of the flash memories of the devices seem intriguing and interesting to me. I'm not sure whether writing malware will indirectly help me with embedded reverse engineering. I want to hear from someone more experienced and their viewpoint on writing malware and how helpful it is for embedded reverse engineering. I am also struggling on managing what to learn and what not to learn. I'm not sure what to stick to and what to not stick to. Should I not veer off my embedded reverse engineering project and just keep going at it. Or should I gain some more experience with writing malware, reverse engineering malware, using tools like ghidra and ida.
I recently got this large tin of flux off of aliexpress. It is a thick paste. It is really inconvinient to spread it across my board. If I want to turn it into a liquid I can heat it up with my soldering iron but that only lasts around 30 seconds before the flux solidifies. Is this just how the flux is and always will be or is there some way to make it like a liquid to make it easier to appy.
I can’t seem to locate where the physical flash memory chip is located on this board. I do see the pins for i2c communication and am aware that those could be used for reading the flash memory. It is disabled most of the time. I haven’t checked it, mainly because I don’t know what software/hardware I need to interface with it.
For some reason Reddit doesn’t allow me to upload more than one image so apologies. I hope the image of the components and pads are clear.
Is there any way I can repair this broken pad in this battery compartment which is shown in the image. Thanks all.
How would I repair a battery compartment which has a metal pad ripped off like shown in the image above. The left pad in this case is the damaged pad.
How would I repair a battery compartment which has a metal pad ripped off like shown in the image above. The left pad in this case is the damaged pad.
I've heard that AI models like claude mythos are able to take a firmware blob and perfectly understand what happens in the firmware blob and quickly find errors and security issues in that firmware. I know there are some experienced folk in this sub who will give me their answers and takes on this topic. I know I will probably get downvoted on this sub for asking such a question but I really want an answer from someone experienced who can reverse firmware. Plus I really need to convince someone that AI won't replace hardware hacking but they want a more reliable source so I hope the comments I get on this sub can motivate me and the people around me to not get discouraged and stop learning because of AI. Thank you all so much.
I've heard that AI models like claude mythos are able to take a firmware blob and perfectly understand what happens in the firmware blob and quickly find errors and security issues in that firmware. I know there are some experienced folk in this sub who will give me their answers and takes on this topic. I know I will probably get downvoted on this sub for asking such a question but I really want an answer from someone experienced who can reverse firmware.
I'm not sure what I can use these pads for on this pcb
SCK GND VPP SDA
I think the flash memory for the device I am reversing is covered with a black blob. Is there any way I can remove this black blob but still read the spi flash memory. Or is that flash memory which is attached to the board via a black blob can't be read like usual with a c341a flash programmer?
