Interesting on the assembler writing. I was curious on a few points about it<br><br>Which syntax is it going to support?<br>Is it going to have many high level helpers like masm or be more bare bones?<br>Probably most important ... which types of object files will it be able to produce? Is it going to be a quick learning experince or is it being designed more modular so other people can extend it?<br><br>My only suggestion would to be keep it nasm style and make the coder specify sizes on compares, moves, "lea"s and other operations where the size of the operation can be ambigious. It makes the coder have to cocentrate more.<br><br><br><b><i>Dave Aitel <dave@immunityinc.com></i></b> wrote:<blockquote class="replbq" style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"> -----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA1<br><br>I note that "Infosecurity Sellout" is claiming there is another bug in<br>mDNS which is wormable.[1] This is
obviously untrue, since there are<br>no more remote bugs in OS X.<br><br>For the record, I did not discover any bugs in mDNS previously. For<br>the past few days I've been writing an x86 assembler - I'm usually<br>doing such things. When I'm not doing consulting work, I work on the<br>guts of CANVAS. This leaves very little time for exploit writing.<br>Writing an x86 assembler can be fun though. There really aren't very<br>many good papers on how to do this sort of thing from a practical<br>perspective so when I'm done, I'll write it up.<br><br>- -dave<br>http://infosecsellout.blogspot.com/2007/07/oh-look-apple-worm.html<br>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v1.4.6 (GNU/Linux)<br><br>iD8DBQFGm52QB8JNm+PA+iURAteoAJ9MuJfewZyemWN9ojujYmdfeDoZ6QCeKguw<br>ZMvSX+HkVKafwqk9zIUoO1s=<br>=ADYC<br>-----END PGP SIGNATURE-----<br><br>_______________________________________________<br>Dailydave mailing
list<br>Dailydave@lists.immunitysec.com<br>http://lists.immunitysec.com/mailman/listinfo/dailydave<br></blockquote><br><p> 
<hr size=1><a href="
http://us.rd.yahoo.com/evt=49981/*http://advision.webevents.yahoo.com/mailbeta/features_spam.html">Sucker-punch spam</a> with award-winning protection.<br> Try the <a href="
http://us.rd.yahoo.com/evt=49981/*http://advision.webevents.yahoo.com/mailbeta/features_spam.html">free Yahoo! Mail Beta.</a>