📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Brainstorms - General  >>  Site Feedback

Topic created on: June 22, 2005 05:12 CDT by JCRoberts .

Pedram asked me for feedback on the site in a private message but I think a better place to put feedback is out in the open, so (hopefully) others can toss in their .02

(1) For those who work in the security field, I'm certain some have reasons/policy for not disclosing certain information to the general public. On the other hand, allowing read access to the Brainstorming-II and Brainstorming-Members forums may have benefits, such as allowing novice users watch how difficult problems are addressed/solved through collaboration. Heck, I can't count the times where I've read some doc or discussion and heard that infamous *wooshing* noise as the whole thing went over my head. After I read through it enough times and looked up definitions for all the terms I didn't understand, I've usually managed to learn something important from it. Anyhow, read access is just a thought. I'm sure you guys already thought through your decision, but I'm curious to know your reasoning.

(2) Would it be worthwhile for the "Reference Library" to hold information on file formats?

(3) What (if any) hardware reference material would be considered useful? (i.e. instruction sets, ...)

(4) Would having a .plan file for the site listing the features that are in development be worth the effort to prevent people (me) from suggesting things that are already in the pipeline?

JCR

  michael     June 22, 2005 06:59.52 CDT
> (2) Would it be worthwhile for the "Reference Library"
> to hold information on file formats?

If we choose to add file format information, good starting points to compile documents can be found at:

http://www.wotsit.org/
http://www.sonicspot.com/guide/fileformatlist.html

  Gerry     June 22, 2005 07:51.43 CDT
(1) I learned allot from reading posts and talking to people, so I would not feel right nor do I think its right to prohibit people from trying to do the same. Then on the other hand, it

  JCRoberts     June 22, 2005 13:37.22 CDT
I guess I wasn't exactly clear with explaining my reasoning for #2 and #3. When you have file format and hardware information, the (less than) obvious next step to me is using them to create IDA processor and loader modules.

For example, generic Arm/StrongArm is already supported to some degree by default in IDA but yesterday, I was handed an Atmel AT91RM9200-EK evaluation board by a client to do some work. This thing is a an Arm/Thumb (SoC) processor, and as usual, I'm clueless about how 32-bit Arm and 16-bit Thumb instructions get mixed together. The Thumb Decompiler by Ludvig Strigeus in the downloads section will be helpful but it would also be nice to know what docs were used to make the plugin.

Before you chalk the above example up to the world of uncommon, esoteric and irrelavant embedded systems, realize the darn thing runs WinCE. Such a thing could be in the next appliance you buy.

JCR

  pedram     June 22, 2005 20:16.03 CDT
Regarding a .plan. Check the about section, it has the list of features currently under development.

  JCRoberts     June 22, 2005 23:08.15 CDT
(5) In user profiles, email addresses are obfuscated to prevent havesting, very cool. Considering some of my code has migrated to here, it would be nice if the same address obfuscation was done on the download description pages.

For example, Ludvig's email address is in plain text:
http://www.openrce.org/downloads/details/121

JCR

  ryanlrussell     June 27, 2005 22:21.07 CDT
I'm enjoying the site quite a bit so far.  I'd like to request an RSS feed if possible.

  pedram     June 27, 2005 22:33.52 CDT
RSS feeds are on the 'todo' list. The todo list is available on the about page.

  pedram     June 28, 2005 17:20.41 CDT
RSS feeds are now done. Let me know if there are any bugs.

Please don't hammer the site with requests, bandwidth isn't free ;-)

  ryanlrussell     June 28, 2005 18:30.45 CDT
Nice, thank you!

I expect I will use less bandwidth checking the RSS feeds ever couple of hours than I do checking the site manually. :)

Next time you're working on them, could I ask for an "everything" feed, too?

I would also be perfectly happy with a non-https set of feeds, too.  That should be a tiny bit less load on your server and bandwidth.  I haven't even looked at the cert, I assume it's self-signed.  I don't feel like I get much security out of it that way anyway.

  ryanlrussell     July 5, 2005 19:47.20 CDT
Quick one, I don't see it on the todo list.

I'm reminded every time I post that I'd like to see a "preview" button.  It's probably implicit in some larger "edit posts" feature planned, but I thought I'd throw in my vote for seeing it sooner rather than later.

  JCRoberts     July 5, 2005 22:01.19 CDT
Pedram,

The user map is fantastic!

Is it possible to send out an board message to existing users that have not added location data?

JCR

  pedram     July 6, 2005 09:47.08 CDT
I wouldn't want to "spam" the users. On the other hand, that would serve as a good introduction to the messaging system as well as the maps.

Lets give it a few days. Hopefully it'll pick up.

  transzorp     July 10, 2005 23:03.57 CDT
ryan if you're looking to have an all in one RSS feed look at feed burner (http://feedburner.com) it can agregate a bunch of RSS feeds into one. I find that and blog lines to be a really useful way to track this site.

  Marc   July 30, 2005 01:21.25 CDT
Just to throw out an idea, would it be possible to add an "Events" section. I know the site did not exist prior to RECON..but I am a little miffed that I did not know about it. Love the site.

Marc

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit