https://www.lucabruno.net/posts/ Zola en Mon, 22 Dec 2025 00:00:00 +0000 Sat, 15 Feb 2025 00:00:00 +0000 lucab@lucabruno.net https://www.lucabruno.net/posts/2025-02-15/subverting-redis-lua-environment/ https://www.lucabruno.net/posts/2025-02-15/subverting-redis-lua-environment/ <p>In 2015 I performed an offensive security analysis of Redis, focusing on its Lua scripting capabilities and related execution environment. This post contains a brief summary of my findings, which at the time have been reported and discussed with project maintainers.</p> Tue, 08 Mar 2022 00:00:00 +0000 lucab@lucabruno.net https://www.lucabruno.net/posts/2022-03-08/google-opensource-award-ukraine-aid/ https://www.lucabruno.net/posts/2022-03-08/google-opensource-award-ukraine-aid/ <p>Recent days have been full of news and emotions, with many sad events and a few happy ones. On the last days of February 2022 I got shocked by the beginning of a new deadly war in Ukraine, but also got an unexpected FLOSS-related email from the <a href="https://opensource.google/documentation/reference/growing/peer-bonus">Google Open Source Peer program</a>.</p> Sun, 20 Sep 2020 00:00:00 +0000 lucab@lucabruno.net https://www.lucabruno.net/posts/2020-09-20/cve-2020-10781-retrospective/ https://www.lucabruno.net/posts/2020-09-20/cve-2020-10781-retrospective/ <p>This page contains a <a href="https://landing.google.com/sre/sre-book/chapters/postmortem-culture/">blameless retrospective analysis</a> on <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10781">CVE-2020-10781</a>, from the point of view of the reporter (<a href="https://www.lucabruno.net">me</a>). This analysis has NOT been externally reviewed and may be biased/incomplete; private feedback and corrections are welcome!</p> Thu, 26 Dec 2019 00:00:00 +0000 lucab@lucabruno.net https://www.lucabruno.net/posts/2019-12-26/nrf52-ap-protection/ https://www.lucabruno.net/posts/2019-12-26/nrf52-ap-protection/ <p>This post explains some low-level details related to <a href="https://infocenter.nordicsemi.com/topic/struct_nrf52/struct/nrf52.html">nRF52</a> Debug Access Port (DAP) protection.</p> Sun, 13 Aug 2017 00:00:00 +0000 lucab@lucabruno.net https://www.lucabruno.net/posts/2017-08-13/fxe-rs/ https://www.lucabruno.net/posts/2017-08-13/fxe-rs/ <p>This post briefly describes a useful trick to execute binaries across different mount-namespaces. It consists of a neat technique involving <code>setns(2)</code> and <code>fexecve(3)</code>.</p> Sun, 01 Jan 2017 00:00:00 +0000 lucab@lucabruno.net https://www.lucabruno.net/posts/2017-01-01/static-hosting/ https://www.lucabruno.net/posts/2017-01-01/static-hosting/ <p>This post contains a quick summary describing how this website is actually made, and how it evolved over time.</p>