Azeria

Azeria

@azeria-labs.com

Founder of Azeria Labs, Trainer, Author of Blue Fox: Arm Assembly Internals & Reverse Engineering

8.2K followers95 following40 posts

Pinned

The Chinese translation of my book is out and just arrived in the mail! How cool is that?! Still can’t believe this is real 🩵

Azeria@azeria-labs.com

Just got the physical copy in the mail! So exciting!!

Azeria reposted

a wild `stp q0, q1, [x4]` appeared yesterday. Hopefully, a few check at the blue fox index allowed me to figure out what that instruction did and hinted me at why it was firing an exception. Thanks fly to @azeria-labs.com for the great book ^_^*

Igor Ostapenko@ihoro.bsky.social

Great content + Great cover = Awesomeness. @fox0x01.bsky.social #arm

I can’t believe it, I finally got my O1A visa!! It also means I can finally accept training requests again and deliver onsite trainings in the US. First stop: @re-verse.io. Hope to see some of you at the conference today!

Azeria reposted

Just read 50 pages of @azeria-labs.com 's Blue Fox book and so far, this has been the only book that has been THIS engaging. I love how the book goes back to the old times to make you feel WHY computer scientists did what they did back in the days. Awesome book. My current fav 💙

Killer lineup! Can’t wait to attend. If you are into reverse engineering, check out the new Re-Verse conference, launching in February! The team behind it is incredible. This is going to be the new Infiltrate.

RE//verse@re-verse.io

Our 2025 RE//verse talk schedule is now live! Talks start Friday, but don't forget to check the Thursday schedule and arrive early enough for the kick-off event! https://re-verse.io/schedule.html?utm_source=bluesky&utm_medium=social&utm_campaign=schedulepub#sz-tab-45716

Just got the physical copy in the mail! So exciting!!

Azeria@azeria-labs.com

In other news, my book has been translated into Korean! 🤩 Absolutely blown away by that. It’s also being the translated into Polish and Chinese. Here’s the link to the Korean translation of “Blue Fox: Arm Assembly Internals and Reverse Engineering”: product.kyobobook.co.kr/detail/S0002...

Updated my username with my domain. Hope this avoids any confusion in the future. Thanks to everyone who reported the fake account! Also, here are some red flags suggesting that I’m being impersonated: - advertises cryptocurrency - DMs unsolicited links - hypes Intel processors

Azeria@azeria-labs.com

The following account is a fake account impersonating me and sending scams over DMs. Please block and report it. @foxox01.bsky.social

View full thread
View full thread

The issue: When targeting AArch64, this mitigation didn’t protect saved registers from overflows in C99-style dynamically allocated local variables and alloca() objects.

Impact: Basically, any AArch64 software compiled with GCC & the stack protection feature (flag -fstack-protector) that is vulnerable to buffer overflows via dynamically-sized variables can be exploited without bypassing this exploit mitigation.

CVE-2023-4039: “GCC's -fstack-protector fails to guard dynamic stack allocations on ARM64” On AArch64 targets, GCC's stack smashing protection does not detect or defend against overflows of dynamically-sized local variables. Affecting all versions of GCC for AArch64 targets.

> GCC’s stack protection feature (aka canary) is an exploit mitigation to prevent buffer overflows from overwriting saved registers on the stack to take control over the program flow. It makes exploitation much harder. You often need an additional bug to bypass this mitigation.

Azeria reposted

Azeria reposted

"These models right now are more like a troubled teenager," says @fox0x01.bsky.social in her Black Hat keynote--it tells lies, it makes stuff up, it's random, but the past leads us to give it the benefit of the doubt. "It's completely unpredictable, yet we trust it."

I’m doing two book signing sessions in collaboration with Patrick Wardle at Black Hat and Defcon this year! 🥳 Black Hat: Thursday 8/10 - 12:15pm: BH Bookstore - Breakers Registration 2 Defcon: Saturday 8/12 - 11:00am Caesar’s - Alliance Ballroom - Room 321

Azeria reposted

I've been so twitter-disconnected I totally missed this until I just looked at the schedule now, looking forward to this! And of course I didn't bring my copy of the Arm RE book here, hoping BH bookstore is stocking a copy I can get signed.

Azeria@azeria-labs.com

I can’t believe I’ll be keynoting Black Hat this year 😵

You are up to date.