|
|
| Line 1: |
Line 1: |
| ==Open source detritus==
| |
| * fix up ext3grep to work on ext4 filesystems
| |
| * Implement handling of [[C99]] [http://gcc.gnu.org/onlinedocs/gcc/Variadic-Macros.html variadic macros] in [http://www.splint.org/ splint] (see [http://www.advogato.org/person/muks/diary.html/start=0 this], [http://www.buzztard.org/index.php/Splint this] and [http://www.splint.org/faq.html#quest18b of course this])
| |
| * Review cryptographic implementations in [http://www.pidgin.im pidgin] -- last time I looked (back in the bad ol' gaim days), its usage of [[OpenSSL]] was all FUBAR
| |
| * [[Subversion|Subversion's]] --xml and --ignore-externals options couldn't be used together properly in <tt>svn status</tt>, at some point. Investigate, rectify.
| |
| * Various [[Debian]]-related things
| |
| * "taking [[OpenSSL|OpenSSL's]] <tt>RAND_bytes()</tt> (which uses <tt>/dev/urandom</tt>, EGD, or a pregenerated seed file) function and stirring that into a target buffer of arbitrary length, such that use of actual high-quality entropy bits is constant (probably a read of several words each time a thread calls into (threadsafe from the start, no *_r() crap!) <tt>FAUXRAND_bytes()</tt> for the first time) has been on my plate since...well, since just now." (mail to Dr. Richard Vuduc, 2009-09-19)
| |
| * [[mpd]] ought use filesystem change notification events to trigger database changes, not periodic or manual rescans
| |
| * [[valgrind]] is missing some obscure ioctl's, including [[ethtool|ethtool's]]
| |
| ===Various open source contributions (very incomplete)=== | | ===Various open source contributions (very incomplete)=== |
| * [[Valgrind]]: | | * [[Valgrind]]: |
| Line 18: |
Line 9: |
| * [http://www.wireshark.org/about.html Wireshark]: | | * [http://www.wireshark.org/about.html Wireshark]: |
| ** [http://www.ethereal.com/lists/ethereal-users/200402/msg00153.html Fixed handling] of IPv4 fragmentation bits. | | ** [http://www.ethereal.com/lists/ethereal-users/200402/msg00153.html Fixed handling] of IPv4 fragmentation bits. |
| | * [http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2 iproute2] |
| | ** Many [http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git;a=blobdiff;f=man/man8/ip.8;h=0f9f454737c5a5977026752321d620d7bee79158;hp=68887bacff00e6e03f4e035a5935f557aa79bd83;hb=db4a7f198b6193a1e584c3b6647d92bb6c66fb52;hpb=14a1c164d12e32415acc44ef566fcf52ff4dd113 man page] fixes |
| * [[Linux APIs|Linux kernel]]: | | * [[Linux APIs|Linux kernel]]: |
| ** [http://lkml.org/lkml/2010/5/4/6 Added support] for Model-30 [[Nehalem]] processors in [[Oprofile]] ([http://marc.info/?l=linux-kernel&m=127294830417492&w=2 more discussion] on oprofile-users) | | ** [http://lkml.org/lkml/2010/5/4/6 Added support] for Model-30 [[Nehalem]] processors in [[Oprofile]] ([http://marc.info/?l=linux-kernel&m=127294830417492&w=2 more discussion] on oprofile-users) |
| Line 34: |
Line 27: |
| * iw | | * iw |
| ** [http://thread.gmane.org/gmane.linux.kernel.wireless.general/82070 Correct unsigned] ints used to hold signed data | | ** [http://thread.gmane.org/gmane.linux.kernel.wireless.general/82070 Correct unsigned] ints used to hold signed data |
|
| |
| ==Projects with their own pages==
| |
| * [[ptracer]]: Quick-n-dirty instruction trace generation tool
| |
| * [[libdank]]: Long-term personal collection of routines / application frameworks with a low-level feel
| |
| * [[TANGE]]: Terminal Application (Next-Generation Emulation)
| |
| * [[ctxdiff]]: Context-sensitive fractal fuzzy diffing (not at all like [[Shingleprinting|shingleprinting]])
| |
| * [[xsh]]: Exactly what it sounds like!
| |
| * [[makelint]], which immediately suggests? [[lintmake]]
| |
| * [[libtorque]]: Multithreaded event handler for UNIX on manycore [[NUMA]]
| |
| * [[daytripper]]: Binary translation to take advantage of Intel's Loop Stream Detector
| |
| * [[CUBAR]]: collection of tools for testing [[CUDA]]'s security model
| |
| * [[libcudest]]: open-source implementation of the [[CUDA]] userspace
| |
| * [[LRUmap]]: O(1) LRU for massive numbers of sets
| |
| * [[omphalos]]: multi-pronged network discovery
| |
|
| |
| [[CATEGORY: Networking]]
| |
| * Various projects on [http://github.com/dankamongmen GitHub] which I've not yet documented here...
| |
|
| |
| ==Core stuff==
| |
|
| |
| ===Parvenu===
| |
| * One string-matching automaton to Rule them All! It must handle:
| |
| ** Thousands (millions?) of patterns concurrently
| |
| ** Initially targeting GigE wire speeds
| |
| ** [[Using Unicode|UTF-8]] (at a minimum) and various transcodings
| |
| ** Small-memory (embedded) environments
| |
| ** Most elements of regular expressions (definitely all the syntactic sugar)
| |
| * Uses [[Research ideas#libblaze|libblaze]] as a memory management helper
| |
|
| |
| ===libblaze===
| |
| * Use [[cpuid]] to select and dlopen(2) a processor-specific set of low-level routines
| |
| ** Observe the details within [http://people.redhat.com/drepper/dsohowto.pdf Ulrich Drepper's] fine document!
| |
| * Expose [[cpuid]] and [[SMP on x86|SMP]] details
| |
| * Expose algorithms for memory management / layout tuned to cache/DRAM parameters (detected with [[SPD]])
| |
| * Material largely inspired by Warren's ''[http://www.hackersdelight.org/ Hacker's Delight]''.
| |
| ** And to a lesser, far less rigorous extent, Kaspersky's ''[http://www.amazon.com/Code-Optimization-Effective-Memory-Usage/dp/1931769249/ref=sr_1_1?ie=UTF8&s=books&qid=1205173465&sr=1-1 Effective Memory Usage]''.
| |
| * Might have already been superseded by [http://liboil.freedesktop.org/wiki/ liboil]. That damn open source community moves fast!
| |
|
| |
| ==Networking==
| |
|
| |
| ===Zetetic===
| |
| * Network traffic analysis (ala Wireshark or tcpdump) with strong [[covert channel]] detection
| |
| * Passive network modeling (protocols, services, hosts, versions) initially
| |
| ** To be paired with vulnerability correlation, active probing, histories (ala SourceFire RNA?)
| |
| * Higher layers do not restrict the inductive analysis of lower layers, but influence the deduction
| |
| * [[Automata|Automata-based]] analysis of content builds up possibility space of what it CAN be
| |
| ** Probability multipliers (products of series) paired with [[Automata|non-deterministic automata]]
| |
| * Expert knowledge-based reduction of possibility space adds input as to what it OUGHT be
| |
| * Neural net-based learning with state determines what it IS
| |
| ** Over time, confidence in matching both recurring and new traffic increases
| |
| * Uses [[Research ideas#Parvenu|Parvenu]] as a pattern-matching helper
| |
|
| |
| ===liburine===
| |
| * The inverse of [[Research ideas#Zetetic|Zetetic]]. Take a leak (alternatively: "You're in")!
| |
| * Use arbitrary combinations of protocols (and fuzzing/embedding thereof) to find channels
| |
| * Goals: if even a bit of controllable information can be used as a channel
| |
| ** Tunnel [http://openvpn.net/ openvpn](?) (and thus [http://www.torproject.org/ TOR](?)) under it
| |
| * Goals: [[Research ideas#Zetetic|Zetetic]] should be able to find us, but nothing of lesser power!
| |
| * The ultimate assistant for: whistleblowers, samizdat publishers, hax0rs stuck in airports, [http://yro.slashdot.org/story/09/06/21/127229/Researchers-Find-Gaps-In-Iranian-Filtering Iranians]
| |
|
| |
| ===drbenway===
| |
| * Checks sysctls, <tt>netstat</tt>, <tt>/proc</tt>, etc for network settings. Makes extensive sensible recommendations.
| |
| ** Is device polling / NAPI in use? Do firewall rules disallow PMTU discovery?
| |
| ** Is [[TCP]] FRTO being used in the presence of wireless links? etc
| |
| * Analyzes pcaps or raw sockets ''in situ'', with filters, performing detailed diagnostics ie
| |
| ** "[[TCP]] 1323 high-performance extensions are being used in 24% of the connections"
| |
| ** "Fragmentation is resulting from port 7000's large UDP emissions, can we tune it this way..."
| |
|
| |
| ==Compilation/binaries==
| |
|
| |
| ===[[gcc]] stuff===
| |
| * Work on [http://gcc.gnu.org/ml/gcc/2006-06/msg00736.html RABLET]
| |
| * It'd be interesting to take [http://gcc.gnu.org/onlinedocs/gccint/GIMPLE.html GIMPLE] and apply it to [[malware analysis]]
| |
| * Work on finishing out [[ISO C99]] support
| |
| * Work on [http://www.ggcc.info/?q=codingrules Coding Rule Checking] (GGCC)
| |
|
| |
| ===debugging / reverse engineering tools===
| |
| * getgetopt -- discover a program's command line parameters via object analysis
| |
| ** maybe something to test combinations of command line parameters, as well?
| |
| * getgccopt -- discover the compiler options used to build an object. difficult!
| |
| * arrlimiter -- run object code with various [[rlimit]] restrictions to test failure paths
| |
| * ploom -- [[pthreads]] debugging from process (tracing framework, object lookup + pthread knowledge, contention measures, etc)
| |
|
| |
| ==Aborted/abandoned projects (very incomplete)==
| |
| * Investigate [[suffer]] and see whether it's feasible (update: [http://www.cs.ubc.ca/~davet/fbcmd/ fbcmd] hendels its dendels [[User:Dank|Dank]] 23:05, 8 December 2008 (UTC))
| |
| * [[Gyre]], a programming language.
| |
| [[Category: Projects]]
| |
