Teddy Reed

icon indicating a website link https://casualhacking.io icon indicating an email [email protected]

icon company @lacework icon location New York, NY icon location Mostly security, trusted computing, OS, embedded focuses; always for fun. (he/him)

Results 23 comments of Teddy Reed

Abandoned project? Any active development?

I don't mind forking and merging some of these bug fixes, but my Ruby isn't very strong. If no one wants to take over by the end of the weekend...

Would a cython python app benefit from this/how do i do this?

Hey @hippylover, I think you'd have to build each of those dependencies with this toolchain. It you look at how ssdeep's build is configured, it installs itself into the toolchain:...

Would a cython python app benefit from this/how do i do this?

Sure I can try later today. :)

Would a cython python app benefit from this/how do i do this?

Hey @hippylover, my approach was to build `python` using the build-anywhere toolchain then try to perform the small test you mentioned at the top. It looks like the scope of...

Use thin LTO for compiling/linking with security environment

I think this should use a separate environment since it may not work with all builds.

FIM using iNotify stops detecting events if the watched file is deleted and recreated

This is a known problem with our implementation of Linux inotify. If a file is watched, then deleted, the recreation of the file is missed. This is because we add...

macOS `apps` table incomplete results

I can confirm that observation, it's the same for several of my machines too. The API [`LSCopyAllApplicationURLs`](https://github.com/facebook/osquery/blob/master/osquery/tables/system/darwin/apps.mm#L219) is not an exported symbol so our mileage may vary. I don't know...

Distributed queries execute regardless of discovery

> Of course, this is terrible. Agreed, we should revisit the documentation, expectation, and implementation here.

ibridge_info table is broken on T2 devices

What parts of this table / iBridge information are important? If it is the case that T2 information is difficult to retrieve, I want to make sure we're focused on...

ibridge_info table is broken on T2 devices

I read https://duo.com/labs/research/apple-t2-xpc and browsed all of the `ioreg` properties on my T2 macbook last night and did not see an alternative to querying the firmware version. This is what...