Posted May 29 2009
apple art bits c code evil games interaction iphone java js mathematica micro optimization php quine reveng sound swf updates useless video whine xterm zip
Feeds: RSS / Twitter
Feb 12 2011
ASCII/UTF-8 SWFs
I needed some valid SWF files with constrained character sets for an injection PoC. Putting them here in case someone else needs some.
Jul 6 2009
GOTO for Java
PHP has finally taken the plunge into the 1960s by implementing GOTO. Here's an implementation for Java.
Jun 7 2009
Unofficial Java Vulnerability Fix
A patch for a serious Java bug. No longer needed as of June 16.
Jun 2 2009
Max/MSP Multitouch drivers
Max & Michael have written a Max/MSP driver based on the multitouch code.

My CSS-fu is weak; please use a recent browser.

Some rights reserved.

Random, semi-related image by Naj.

MacBook Multitouch Demo

This is a little test applet to shows the touch points as reported by the MacBook multitouch pad. The drivers seems to be able to track an impressive 11 fingers at once. If it works, it should look something like the animation on the right.

Warning: There is normally no way to access the multitouch data from the browser, so the applet below uses a rather nasty exploit to get access (it uses the serialization bug to raise privileges, then drops a binary in /tmp which does the actual readout). Click to start only if you are OK with this. You may want to restart your browser afterwards to clean up.

Note also that the back/forward and Exposé gestures are still active; if you swipe left with three fingers, Safari will leave the page, etc. If you keep at least five fingers on the pad, you'll be safe.

The applet

Click to start (after reading the disclaimer above), then jam your hand down on the touch pad. This obviously only works if you have some sort of Apple laptop :-)

This demo doesn't work as of July 2009; I'll have to go back and sign the applet now that the vulnerability has been patched.

Java is disabled! You'll need to enable it (note that it is a good idea to disable it again afterwards)

Comments

I love it. That's the most awesome use of such a vulnerability ever!
— Timothy 2009-06-06
[Thank you! This is one page I wouldn't mind if stopped working right now. I can't believe Apple hasn't patched this yet.]