diff --git a/content/posts/README.md b/content/posts/README.md index b6455e4..36d0d53 100644 --- a/content/posts/README.md +++ b/content/posts/README.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "README" date: 2019-08-01 draft: false diff --git a/content/posts/bad-malware-analysis-character-count.md b/content/posts/bad-malware-analysis-character-count.md index f4a197d..1178a9f 100644 --- a/content/posts/bad-malware-analysis-character-count.md +++ b/content/posts/bad-malware-analysis-character-count.md @@ -1,12 +1,21 @@ --- +author: "Halvo (Human)" title: "Bad Malware Analysis: Character Count" date: 2020-03-06 draft: false +tags: + - malware analysis + - string analysis + - character frequency + - security research + - humor +summary: | + In this tongue‑in‑cheek post we dive deep—actually *deeper* than usual—into the world of malware string analysis by counting individual characters. After pulling roughly 500 malicious samples from theZoo and dasMalwerk and comparing them against a hefty collection of benign binaries, we discovered that a handful of seemingly innocuous characters (v, j, ;, , 4, q, 5, /) pop up more often in the bad guys’ code. By looking at raw counts and then normalising those counts by file size, we expose why naïve “character‑frequency” heuristics are both amusing and alarmingly unreliable. The piece is deliberately over‑the‑top, aiming to entertain seasoned security folks while reminding everyone that good malware hunting requires more nuance than a simple character checklist. --- ## Introduction -I'm thinking of doing a series on bad malware analysis. Hopefully it'll be fun and at least a little informative. - + +I'm thinking of doing a series on bad malware analysis. Hopefully it'll be fun and at least a little informative. Today's post consists of performing a string analysis on malware. Where most string analysis looks at the big picture, I thought I would take it a step further and look at individual characters. This approach is terrible, as you will soon see. diff --git a/content/posts/bad-malware-analysis-hash-letter-counts.md b/content/posts/bad-malware-analysis-hash-letter-counts.md index 37306ea..21b5fa7 100644 --- a/content/posts/bad-malware-analysis-hash-letter-counts.md +++ b/content/posts/bad-malware-analysis-hash-letter-counts.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Bad Malware Analysis: Hash Letter Counts" date: 2020-04-12 draft: false diff --git a/content/posts/bad-malware-analysis-string-size-ratio.md b/content/posts/bad-malware-analysis-string-size-ratio.md index ad57ddd..0479922 100644 --- a/content/posts/bad-malware-analysis-string-size-ratio.md +++ b/content/posts/bad-malware-analysis-string-size-ratio.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Bad Malware Analysis: String Count vs File Size" date: 2021-03-08T20:20:31Z draft: false diff --git a/content/posts/bad-password-analysis-consecutive-character-patterns.md b/content/posts/bad-password-analysis-consecutive-character-patterns.md index 073eb18..029f711 100644 --- a/content/posts/bad-password-analysis-consecutive-character-patterns.md +++ b/content/posts/bad-password-analysis-consecutive-character-patterns.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Bad Password Analysis: Consecutive Character Patterns" date: 2020-09-16 draft: false diff --git a/content/posts/bad-password-analysis-dictionary-words.md b/content/posts/bad-password-analysis-dictionary-words.md index f70c109..b54b120 100644 --- a/content/posts/bad-password-analysis-dictionary-words.md +++ b/content/posts/bad-password-analysis-dictionary-words.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Bad Password Analysis Dictionary Words" date: 2021-03-11T18:55:01Z draft: false diff --git a/content/posts/code-complete-summations-metaphors.md b/content/posts/code-complete-summations-metaphors.md index 24b67ae..a6f8d00 100644 --- a/content/posts/code-complete-summations-metaphors.md +++ b/content/posts/code-complete-summations-metaphors.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Metaphors: Code Complete Summations" date: 2023-11-13 draft: false diff --git a/content/posts/code-complete-summations-pre-requisets-part-1.md b/content/posts/code-complete-summations-pre-requisets-part-1.md index 7ac1c96..16b6951 100644 --- a/content/posts/code-complete-summations-pre-requisets-part-1.md +++ b/content/posts/code-complete-summations-pre-requisets-part-1.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Pre-Requisites (Part I) Initial Design: Code Complete Summations" date: 2023-12-20 draft: false diff --git a/content/posts/code-complete-summations-pre-requisets-part-2.md b/content/posts/code-complete-summations-pre-requisets-part-2.md index a870491..f61f3e6 100644 --- a/content/posts/code-complete-summations-pre-requisets-part-2.md +++ b/content/posts/code-complete-summations-pre-requisets-part-2.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Pre-Requisites (Part II) Initial Design: Code Complete Summations" date: 2023-12-26 draft: false diff --git a/content/posts/code-complete-summations-pre-requisets-part-3.md b/content/posts/code-complete-summations-pre-requisets-part-3.md index 43c00f3..7b81031 100644 --- a/content/posts/code-complete-summations-pre-requisets-part-3.md +++ b/content/posts/code-complete-summations-pre-requisets-part-3.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Pre-Requisites (Part III) Initial Design: Code Complete Summations" date: 2024-03-05 draft: false diff --git a/content/posts/code-complete-summations-variable-names.md b/content/posts/code-complete-summations-variable-names.md index 5d88186..573adf3 100644 --- a/content/posts/code-complete-summations-variable-names.md +++ b/content/posts/code-complete-summations-variable-names.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Variable Usage: Code Complete Summations" date: 2024-02-23 draft: false diff --git a/content/posts/exploring-enrollment-over-secure-transport.md b/content/posts/exploring-enrollment-over-secure-transport.md index 783b5c0..11955ec 100644 --- a/content/posts/exploring-enrollment-over-secure-transport.md +++ b/content/posts/exploring-enrollment-over-secure-transport.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Exploring Enrollment over Secure Transport" date: 2023-03-30 draft: false diff --git a/content/posts/fast-flux-botnet-overview.md b/content/posts/fast-flux-botnet-overview.md index 056dfee..2100d8f 100644 --- a/content/posts/fast-flux-botnet-overview.md +++ b/content/posts/fast-flux-botnet-overview.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Fast Flux Botnet Overview" date: 2019-09-26 draft: false diff --git a/content/posts/intro-to-ai-at-work.md b/content/posts/intro-to-ai-at-work.md index 9ae8eed..36fccdf 100644 --- a/content/posts/intro-to-ai-at-work.md +++ b/content/posts/intro-to-ai-at-work.md @@ -1,5 +1,5 @@ --- -author: "Lumo (AI) & Human Editor" +author: "Lumo (AI) & Halvo (Human)" date: 2026-01-15 title: "Using AI as My Daily Driver at Work" draft: false @@ -9,8 +9,6 @@ summary: "A fresh Software Engineer II shares how internal AI tools and Lumo a -# Using AI as My Daily Driver at Work - ## Why I’m Jumping on the AI Bandwagon In my new position, at my new company, as a Software Engineer II, I finally got the chance to treat AI like a coworker instead of a distant sci‑fi concept. Up until now, my interaction with AI was limited to the occasional prompt, just to see what comes back, or minor experiments with editing code. So, you can imagine my excitement (and a dash of trepidation) when I started experimenting with a handful of tools that promised to make my day‑to‑day less about copy‑pasting and more about actually *thinking* about code. diff --git a/content/posts/pseudo-random-number-generators.md b/content/posts/pseudo-random-number-generators.md index d3e23fe..4bd2684 100644 --- a/content/posts/pseudo-random-number-generators.md +++ b/content/posts/pseudo-random-number-generators.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Pseudo Random Number generators" date: 2024-03-22 draft: false diff --git a/content/posts/random-algorithm-analysis.md b/content/posts/random-algorithm-analysis.md index 12de713..aedc700 100644 --- a/content/posts/random-algorithm-analysis.md +++ b/content/posts/random-algorithm-analysis.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Random Algorithm Analysis" date: 2020-04-17 draft: false diff --git a/content/posts/rsa-optimization.md b/content/posts/rsa-optimization.md index 9b22716..77da77d 100644 --- a/content/posts/rsa-optimization.md +++ b/content/posts/rsa-optimization.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "RSA Optimization" date: 2022-12-06 draft: false diff --git a/content/posts/secure-coding-in-c-summations-concurrency.md b/content/posts/secure-coding-in-c-summations-concurrency.md index 4701255..dc3e7b0 100644 --- a/content/posts/secure-coding-in-c-summations-concurrency.md +++ b/content/posts/secure-coding-in-c-summations-concurrency.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Concurrency: Summations of Secure Coding in C and C++" date: 2023-01-27 draft: false diff --git a/content/posts/secure-coding-in-c-summations-file-io.md b/content/posts/secure-coding-in-c-summations-file-io.md index c404e36..652746b 100644 --- a/content/posts/secure-coding-in-c-summations-file-io.md +++ b/content/posts/secure-coding-in-c-summations-file-io.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Concurrency: Summations of Secure Coding in C and C++" date: 2023-06-29 draft: false diff --git a/content/posts/secure-coding-in-c-summations-free-and-null.md b/content/posts/secure-coding-in-c-summations-free-and-null.md index 239cfb9..f134bbc 100644 --- a/content/posts/secure-coding-in-c-summations-free-and-null.md +++ b/content/posts/secure-coding-in-c-summations-free-and-null.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Set to NULL After Free: Summations of Secure Coding in C and C++" date: 2022-08-17 draft: false diff --git a/content/posts/secure-coding-in-c-summations-null-terminate-2.md b/content/posts/secure-coding-in-c-summations-null-terminate-2.md index f1ef2a4..2b0e5a5 100644 --- a/content/posts/secure-coding-in-c-summations-null-terminate-2.md +++ b/content/posts/secure-coding-in-c-summations-null-terminate-2.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Always null Terminate (Part 2): Summations of Secure Coding in C and C++" date: 2022-08-13 draft: false diff --git a/content/posts/secure-coding-in-c-summations-null-terminate.md b/content/posts/secure-coding-in-c-summations-null-terminate.md index 66b1cbf..8718027 100644 --- a/content/posts/secure-coding-in-c-summations-null-terminate.md +++ b/content/posts/secure-coding-in-c-summations-null-terminate.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Always null Terminate: Summations of Secure Coding in C and C++" date: 2021-09-01 draft: false diff --git a/content/posts/stateless-detection-of-malicious-traffic.md b/content/posts/stateless-detection-of-malicious-traffic.md index d197df0..eb71b54 100644 --- a/content/posts/stateless-detection-of-malicious-traffic.md +++ b/content/posts/stateless-detection-of-malicious-traffic.md @@ -1,4 +1,5 @@ --- +author: "Halvo (Human)" title: "Stateless Detection of Malicious Traffic" date: 2019-08-23 draft: false