Im racing to finish three projects at the same time, and ran into a wall last week. So I went to the desert to sit by a river.

I'll be back at @reconmtl.bsky.social teaching a training with Keith Ramphal, we'll be bringing our combined malware reverse engineering experience to the masses! Whatever runs, wherever it runs, cause the days of your boring ol' Windows C bot are over. recon.cx/2026/en/trai...

On other news, there ARE Delphi runtime packers 😂

Sandboxie has a swag shop 😱 Can that be called retro yet?? sbiemerch.myspreadshop.net

Why good morning Claude. This is how THAT is going. I mean I know I'm the problem here, and I'm just cracking myself up.

Ok I did the thing, I let Claude loose on a packed Delphi binary for the shits and giggles, and its been 17 minutes of 'Bunning..' and we keep going. I'll keep y'all posted.

@blackhoodie.bsky.social will be back at @reconmtl.bsky.social this year 😱😻✨ Jane Tangen and Amna K Moon will be teaching an Introduction to x86 Reverse Engineering! We're delighted to be hosted at the Montreal Google offices! blackhoodie.re/Recon2026/

Just curious, has anyone run their agentic analysis pipeline on Delphi malware yet?

Ashley Paulsen just ran 100 miles at a 7:21 pace. Miles. 7 min 21 seconds per MILE. www.irunfar.com/ashley-pauls...

Not the first paper to state this (also not yet peer reviewed), but, maybe the largest study I've seen so far linking inflammation to neurodegenerative diseases, here specifically Alzheimers veritas.enc.edu/technology/a...

Supply chain 🤤 www.wired.com/story/iran-l...

Linux malware is boring, until you realize that your desktop is the only thing that runs Windows anymore www.theguardian.com/technology/2...

So, Rust binaries are awful? But have you seen C++???

C'mon louder, say it LOUDER

What if AI just speeds all the processes up so much we all quit in burnout, and then it IS up to the machines whether we wanted that or not?

TIL you can copy paste emojis to the Ubuntu cmdline, and apparently Ubuntu doesn't accept burn this shit down as a command yet

Hey wasn't it just January, how the hell is it April now??

A 64-bit MIPS Go backdoor 😍

Phrack call for papers is out! Check out the cool demoscene graphics at phrack.org

MIPS you guys, I'm in love!

Don't know who needs this or for what exactly but here is a MIPS ISA cheat sheet 🙃https://www.kth.se/social/files/563c63c9f276547044e8695f/mips-ref-sheet.pdf

@blackhoodie.bsky.social will be at #BSidesLuxembourg, on May 6th with a training on Linux memory forensics, brought to you by @allthingsliquid.bsky.social😍 Thank you to BSides Luxembourg and the Luxembourg House of Cyber for hosting us! Registration is now open blackhoodie.re/BSidesLuxemb...

I came across another simple no-name Linux espionage RAT by coincidence and starting to wonder what else we're missing in that space 👀

En route to Orlando 😱 #REverse2026 #Squeee

Another gem, here is all you ever wanted to know about Itanium C++ ABI exception handling and how its implemented in Linux C++ binaries maskray.me/blog/2020-12...

BlackHat US Call for Paper is open, and we're eagerly awaiting your submissions! I'm proud to be shepherding the Reverse Engineering track again this year and I'll be actively soliciting for cool research 😏😏😏 usa-briefings-cfp.blackhat.com

Randomly came across this downloader, which seems to want to download and built itself some kernel rootkit. The internet suggests this malware belongs to some relatively recent FnOS attack campaign on Feiniu private cloud. Tell me again Linux malware is boring.

My note taking pencil for the serious notes!

This is a phenomenal little blog post about Linux C++ binary analysis ❤️❤️❤️ oneraynyday.github.io/dev/2020/05/...

Mini blog: I promised I'd publish the binary pewpew project I created with the help of Claude, and here we are, blog with link to Github. Works-on-my-machine type of project ;) hackandcheese.com/posts/blog2_...

Ok weird stuff. I have a flat earther in my family and am genuinely puzzled. Torn between plain curiosity, screaming at them for ignoring physics, and really worried for their future. What.. does one do with these people?

Save the date! @blackhoodie.bsky.social is coming to Luxembourg! On May 6th we're partnering with #BSidesLuxembourg for a day of binary fun and joy 🥳🥳🥳

Maaaaan GCC for 32-bit Intel really didn't like push instructions huh

The cathartic effect of reverse engineering without a business objective should have its own therapy book.

😍😍😍

I've only spent a hot 5 min, but the level of obfuscation in the September version of Lockbit for Linux is marvelous

Do Windows sandboxes these days run full blown Win11? Asking for a friend; a friend who's been waiting for their Win11 VM to update and is bored out of their mind.

Wow Claude, that input was supposed to go to this API, not THAT one; that loop counter really didn't need increasing here; and this sanitization check returns a value ffs

HAPPY FRIDAY!!! Our Agenda is now live! Check it out! Check it out: www.districtcon.org/speakers

In November I joined @elykdeer.bsky.social on the @binaryninja.bsky.social podcast to chat about Linux malware reverse engineering, advances in analysis tools, and my upcoming training at RE//verse conference. Check out the recording! www.youtube.com/watch?v=R72m...

We still have seats open for @blackhoodie.bsky.social at @districtcon.bsky.social on January 23rd in Washington DC! The class will be reverse engineering their way through an integer overflow bug in libpng 🤓 blackhoodie.re/DistrictCon2...

👀

Wag The Dog wasn't supposed to be a documentary..

Squeee so excited 😍😍😍 @blackhoodie.bsky.social will be at @districtcon.bsky.social next year, on January 23rd @synapticrewrite.bsky.social and I will teach a day of Reverse Engineering for Vulnerability Discovery, registration is now open blackhoodie.re/DistrictCon2...

Wonderful little blog post about the Windows Process and Thread Environment blocks metehan-bulut.medium.com/understandin...

MIT Technology Review profiles @rondeibert.bsky.social, who understood that civil society needed digital defense long before just about anyone else and has been doing it ever since. www.technologyreview.com/2025/12/24/1...

I'm considering getting the System V calling convention tattooed on my palm cause why on earth does rdx come before rcx why WHY WHYYY

This sticker makes me really happy 🙃

Ill be teaching my 4-day Advanced Linux Malware Reverse Engineering training next March at RE//verse conference, come join if you're interested in the nifty tricks unique to Linux and what we're up against in cloud, IoT and infrastructure shop.binary.ninja/products/re-...

Squeee so excited 😍😍😍 @blackhoodie.bsky.social will be at @districtcon.bsky.social next year, on January 23rd @synapticrewrite.bsky.social and I will teach a day of Reverse Engineering for Vulnerability Discovery, registration is now open blackhoodie.re/DistrictCon2...