B Horn
@b.horn.uk
allegedly a software engineer / does some OSS / occasionally security things / former hackathon organizer / got a strcpy() CVE in 2025
https://b.horn.uk/ / https://github.com/bahorn / https://hachyderm.io/@bah
https://b.horn.uk/ / https://github.com/bahorn / https://hachyderm.io/@bah
Pinned
B Horn
@b.horn.uk
· Jul 21
i have recuring nightmares of set covering problems,
they just keep turning up
everywhere. i turn around, set covering problem
they just keep turning up
everywhere. i turn around, set covering problem
driving myself insane with the function-graph tracer.
December 29, 2025 at 8:53 PM
driving myself insane with the function-graph tracer.
github.com/bahorn/Diamo...
in case anyone needs diamorphine with flipswitch (.text to x64_sys_call, due to the syscall table not being used on recent kernels). was annoying to write this patch as diamorphine actually had broken getdents() hooks that read out of bounds, which no one noticed.
in case anyone needs diamorphine with flipswitch (.text to x64_sys_call, due to the syscall table not being used on recent kernels). was annoying to write this patch as diamorphine actually had broken getdents() hooks that read out of bounds, which no one noticed.
December 27, 2025 at 8:57 PM
github.com/bahorn/Diamo...
in case anyone needs diamorphine with flipswitch (.text to x64_sys_call, due to the syscall table not being used on recent kernels). was annoying to write this patch as diamorphine actually had broken getdents() hooks that read out of bounds, which no one noticed.
in case anyone needs diamorphine with flipswitch (.text to x64_sys_call, due to the syscall table not being used on recent kernels). was annoying to write this patch as diamorphine actually had broken getdents() hooks that read out of bounds, which no one noticed.
Terrible news, i'm in the UK
Its cold and expensive. Gotta get the first flight back to asia....
Its cold and expensive. Gotta get the first flight back to asia....
December 23, 2025 at 7:55 AM
Terrible news, i'm in the UK
Its cold and expensive. Gotta get the first flight back to asia....
Its cold and expensive. Gotta get the first flight back to asia....
Hell yeah flights got free wifi, can shit post 10km in the sky
December 22, 2025 at 4:45 PM
Hell yeah flights got free wifi, can shit post 10km in the sky
Ending 9 months of backpacking around asia the right way, getting stuck in jakarta's traffic :)
December 22, 2025 at 8:09 AM
Ending 9 months of backpacking around asia the right way, getting stuck in jakarta's traffic :)
Back to europe today, rip
Got 16 hours of flights, 14 hours in just one which is gonna suck so much
Got 16 hours of flights, 14 hours in just one which is gonna suck so much
December 21, 2025 at 6:06 PM
Back to europe today, rip
Got 16 hours of flights, 14 hours in just one which is gonna suck so much
Got 16 hours of flights, 14 hours in just one which is gonna suck so much
Vintage & Morelli - Jakarta [Silk Music]
YouTube video by Monstercat Silk
m.youtube.com
December 18, 2025 at 7:08 AM
github.com/MatheuZSecur...
github.com/bahorn/detec...
been a cat and mouse game going on between our repos for the last few days over specific details over how longs are read in the kernels sysctl() implementation.
github.com/bahorn/detec...
been a cat and mouse game going on between our repos for the last few days over specific details over how longs are read in the kernels sysctl() implementation.
December 13, 2025 at 3:21 PM
github.com/MatheuZSecur...
github.com/bahorn/detec...
been a cat and mouse game going on between our repos for the last few days over specific details over how longs are read in the kernels sysctl() implementation.
github.com/bahorn/detec...
been a cat and mouse game going on between our repos for the last few days over specific details over how longs are read in the kernels sysctl() implementation.
On the ferry between bali and java and its playing christmas music for some reason
December 4, 2025 at 4:58 AM
On the ferry between bali and java and its playing christmas music for some reason
I apparently pass as an aussie now (except my weird british accent). Long hair, a tan and flip flops are all you need :)
December 2, 2025 at 3:05 PM
I apparently pass as an aussie now (except my weird british accent). Long hair, a tan and flip flops are all you need :)
Had a guy try to charge me 500k IDR ($30) for a shitty import towel today.
generally feel insulted by them thinking i was such a mark.
like, i know you have to deal with a lot of idiots who don't know the value of the local currency but like do you actually think we pay that much in the west?
generally feel insulted by them thinking i was such a mark.
like, i know you have to deal with a lot of idiots who don't know the value of the local currency but like do you actually think we pay that much in the west?
December 2, 2025 at 12:28 PM
Had a guy try to charge me 500k IDR ($30) for a shitty import towel today.
generally feel insulted by them thinking i was such a mark.
like, i know you have to deal with a lot of idiots who don't know the value of the local currency but like do you actually think we pay that much in the west?
generally feel insulted by them thinking i was such a mark.
like, i know you have to deal with a lot of idiots who don't know the value of the local currency but like do you actually think we pay that much in the west?
Today i thought fuzzing ld.so.cache would be a good idea. I directly patched a copy of ld dot so on my box thinking it'll crash easily.
no crashes :( (but also lazy fuzzing with radamsa)
no crashes :( (but also lazy fuzzing with radamsa)
December 1, 2025 at 3:08 PM
Today i thought fuzzing ld.so.cache would be a good idea. I directly patched a copy of ld dot so on my box thinking it'll crash easily.
no crashes :( (but also lazy fuzzing with radamsa)
no crashes :( (but also lazy fuzzing with radamsa)
Curious if using .inputrc as a backdoor is a known thing?
e.g:
$if Bash
"\C-m": "\nsource x_sh\n"
$endif
And it'll source that file when you press enter. make that script remove two lines with terminal control codes + `history -d -1` + remove the binding and it seems like a nice trick
e.g:
$if Bash
"\C-m": "\nsource x_sh\n"
$endif
And it'll source that file when you press enter. make that script remove two lines with terminal control codes + `history -d -1` + remove the binding and it seems like a nice trick
November 28, 2025 at 7:29 AM
Curious if using .inputrc as a backdoor is a known thing?
e.g:
$if Bash
"\C-m": "\nsource x_sh\n"
$endif
And it'll source that file when you press enter. make that script remove two lines with terminal control codes + `history -d -1` + remove the binding and it seems like a nice trick
e.g:
$if Bash
"\C-m": "\nsource x_sh\n"
$endif
And it'll source that file when you press enter. make that script remove two lines with terminal control codes + `history -d -1` + remove the binding and it seems like a nice trick
Lots of mention spam the last day or so hitting me...
At least they get banned fast but annoying af
At least they get banned fast but annoying af
November 27, 2025 at 2:26 PM
Lots of mention spam the last day or so hitting me...
At least they get banned fast but annoying af
At least they get banned fast but annoying af
I spent several hours trying to build the kernel on a box with 1GB ram.
not fun....
not fun....
November 26, 2025 at 4:53 PM
I spent several hours trying to build the kernel on a box with 1GB ram.
not fun....
not fun....
youtube.com/watch?v=hmf1...
music from timor-leste.
Lead singer runs a nice bar in dili call tipal, which you should drop by if you visit.
music from timor-leste.
Lead singer runs a nice bar in dili call tipal, which you should drop by if you visit.
KLAMAR - Lemorai (Official Audio)
YouTube video by KLAMAR
youtube.com
November 25, 2025 at 11:15 AM
youtube.com/watch?v=hmf1...
music from timor-leste.
Lead singer runs a nice bar in dili call tipal, which you should drop by if you visit.
music from timor-leste.
Lead singer runs a nice bar in dili call tipal, which you should drop by if you visit.
Going to bali tomorrow, gonna start my eat pray love arc lol
November 24, 2025 at 1:59 AM
Going to bali tomorrow, gonna start my eat pray love arc lol
The oecsussi-dili ferry is pretty brutal. 13-14 hours, 2 stuck in port waiting to leave.
Gotta fight for space, i ended up staying outside for most of it above some livestock
also a random flying fish attacked me...
Gotta fight for space, i ended up staying outside for most of it above some livestock
also a random flying fish attacked me...
November 17, 2025 at 8:05 PM
The oecsussi-dili ferry is pretty brutal. 13-14 hours, 2 stuck in port waiting to leave.
Gotta fight for space, i ended up staying outside for most of it above some livestock
also a random flying fish attacked me...
Gotta fight for space, i ended up staying outside for most of it above some livestock
also a random flying fish attacked me...
Gonna start a charity to give out earbuds to people as it seems no one uses them when scrolling tiktok in public....
November 17, 2025 at 6:12 PM
Gonna start a charity to give out earbuds to people as it seems no one uses them when scrolling tiktok in public....