Foreman: a secure self-hosted agent orchestrator
Giving a modern LLM root access to a computer allows it to do a lot of things that were previously unthinkable.
palkeo
Latest posts
THCon 2023 “supplychain” writeup
This is a writeup from the “supplychain” challenge of the CTF for THCon 2023, made by Dridri.
Critical analysis of Flashbots
This article is about the Flashbots project (see that post on ethresear.ch for background).
Python logging: do’s and don’ts
Logging is important. Python has a nice logging framework. I very rarely see it used properly, even by experienced programmers.
The bZx attacks explained
This article will examine in details what happened during the two transactions that exploited vulnerabilities to open under-collateralized positions in bZx, causing a loss of equity worth more than a million dollar in total.
Analyzing suspicious smart contract vacuuming
This is the counterpart of Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths, looking at suspicious patterns in the history of Ethereum, where contracts would not be killed but simply emptied by attackers.
How to steal Ethers: scanning for vulnerable contracts
Four years ago, I wrote an article “How to steal Bitcoins” that was about finding address corresponding to weak brainwallets, and some forensic evidence that it was exploited automatically, for profit.
Pakala: yet another EVM symbolic execution tool
Pakala is a tool for symbolic execution of EVM bytecode (like Manticore or Mythril).
Syncing a Parity Archive Node: How-To
For my experiments, I set on having an Ethereum archive node (with the full history of all the states), with Parity.
The perfect password manager
TL;DR: Use a Yubikey 4 with touch-to-sign to store your GPG keys, and use these keys for SSH authentication and storing your secrets with password-store.
Static IPv6 with Online.net [fr]
Quelques notes sur la configuration d’IPv6 sur un serveur Online.net, sous Debian.
Memo with various tips [fr]
Pour convertir un BIN, MDF, PDI, CDI, NRG et B5I, en ISO : iat
Neo4j tips : starting & optimizing
This article is a collection of tips and informations that I found useful to know about neo4j, when learning about it. It also presents some performance tips (from the developer point of view).
Un Firefox qui respecte votre vie privée
Quand on est soucieux de sa vie privé / confidentialité sur le web, on peut facilement tomber dans deux extrêmes :
Web crawler & finding word lists [fr]
J’ai toujours été assez fasciné par les crawlers web. Avec un crawler puissant et rapide, il devient possible de tirer profit de l’énorme quantité d’information présente sur le web, de toutes les façons imaginables. Il y a tellement d’applications possibles !
A REALLY simple, but powerful Python web crawler
I am fascinated by web crawlers since a long time. With a powerful and fast web crawler, you can take advantage of the amazing amount of knowledge that is available on the web.
Robot pianos, computer vision and motion planning [fr]
J’ai eu l’occasion de travailler avec Céleste Boursier-Mougenot (artiste français) pour sa dernière exposition au musée des abattoirs à Toulouse. En effet, j’ai fait partie d’une équipe de quatre ingénieurs (Ken Hasselman, Guilhem “Nim” Saurel et Vincent Angladon), contactés pour travailler sur la partie technique de l’œuvre Offroad.
Installing a web server with Exim4 and Dovecot [fr]
Quelques notes sur l’installation d’un serveur mail, avec gestion en IMAPS et configuration d’un « catch-all » pour pouvoir reçevoir tous les mails envoyés (indiféremment de la partie de l’adresse mail avant l’arobaze).
List of quality games
I found it difficult to encounter open-source games with a good quality. Here is a small list of games that I really enjoyed:
How to steal Bitcoins
Every Bitcoin address is based on a secret key, from which the public key (associated to a Bitcoin address) is calculated. Once you have the private key for an address, you have the control of that address and can use it to transfer funds.