After intense debate we have concluded the following:
* IDA - Gryffindor
* Ghidra - Slytherin
* Binja - Ravenclaw
* r2 - Hufflepuff
Calle Svensson
7,649 posts
Security Engineer @ XTX. MSc in eng. physics & CompSci, dev & gamer. ❤️ music & long distance running. Wanna do a PhD sometime. Same U/N on all other sites
- Waking up to a lot of bad takes on QR codes. QR codes are meant to be scanned, just as links are meant to be clicked. If your security posture requires these two things to not happen you have already lost. Blaming the user here is Dunning-Kruger riddled infosec posing.
- My colleague recently reminded me that Python executes zip files which of course extends to other zip-based formats and lets you do things like this.
- Everyone's always posting threads about how to get into security but where are the threads about how to get out of it? 🤔
- Replying to @FreyaHolmerGenerally agree with the caveat that people open source things for very different reasons and "making it easy for others to use the code" may or may not be a motivation.
- Replying to @littmathNice. We sometimes used VVVVVV at university for the Swedish "Vilket Var Vad Vi Ville Visa", roughly "Which was what we wanted to show". Guess the kids nowadays have a bit more sass.
- Got some fantastic personal news to kick off the weekend. Thrilled to announce that in August I will join Google in the offensive security team in Zürich. Really excited about what this new chapter will bring.
- Want to find good security content creators who make videos and streams? Check out this little thing I built: securitycreators.video
- Stop suggesting input validation as a fix for XSS. You handle it by context aware escaping when outputting, not by trying to prevent double quotes in your input.
- Replying to @HbomberguyStarted the audiobook recently. It's really good. Among my favorite part so far: - They're trying to kill me - No one's trying to kill you - Then why are they shooting at me? - They're shooting at everyone, They're trying to kill everyone. - And what difference does that make?
- Come join us in the Google red team! We have a position open in NYC: google.com/about/careers/… The team is fantastic and the work is really cool. Message me if you have questions about the role but if you are interested please don't wait to get your application in.
- I hate the self-deprecating personality in tech: the "I have no idea what I'm doing, I just copy-paste from SO until it works" crowd. Stop devaluing your own work and take some pride in your skills. Not only are you hurting yourself but also misrepresenting the field to beginners
- Replying to @RLewisReportsI appreciate having a professional like you pointing subtle details like this out. I layman like me might have missed it otherwise. Really adds that extra depth to the viewing experience.
- Just published my write-up for the @Hacker0x01 #h1702 #CTF zeta-two.com/ctf/2018/06/30… for your reading and commenting pleasure.


