USENIX Enigma 2016 - Timeless Debugging

George Hotz, comma.ai
Forget reversible debugging, why is it that the concept of time exists in debugging at all? Viewing execution as a timeless trace, the open source tool QIRA(qira.me) attempts to move debugging into a new paradigm. Battle tested in CTFs, I will be presenting the tool and showing off a 10x speedup in exploit development cycle.
Sign up to find out more about Enigma conferences:
www.usenix.org/conference/eni...
Watch all Enigma 2016 videos at:
enigma.usenix.org/youtube

[@neaplepinchy4538]

This guy doesn't need coffee.

[@mathis5225]

adderal my dude

What makes you think he didn’t pour a ½ gallon thermal bottle before the presentation?

[@loselmatos4453]

@ more like 2 lines lol

[@yt-sh]

@@mathis5225 how is he not addicted

[@magick2006]

he drank shit ton of tea

[@ProtectionDirect]

He's a brilliant mind and I'm sure we'll hear much much more from him in the next 30 years.

[@veryfrozen3271]

I honestly doubt it, the economy favors the most psychopathic and murderous people. Im rooting for him tho

[@archiehicklin9328]

very Frozen my boy should be good then

[@deviansor3884]

I'm now he's fan. He's streaming on twitch live coding/hacking unbelievable human being

[@nyctophilic1790]

He is noow this guy is a legend

[@liftingisfun2350]

@@Pretty_Boy_Proud_Fil-Am he's quite the sex man

[@jmoz]

Intelligence: 10 Weird: 10 Ego: 10

[@kelvinxg6754]

ADHD: 10

[@mrchen1211]

Hanneman's "Tres Commas"

[@wombat7961]

+mrchen1211 ....this guy fucks

[@paulgomez3318]

Exactly what I thought lol. Geohot's been watching too much SV

[@tab9100]

666

[@angel84459]

I donno... you guys made me spew coffee all over...I just read the comments before yours...it was direct the opposite...but I like you guys!!😂😂😂🤣🤣

[@deviansor3884]

This guy is so unbelievable he's streaming on twitch and I was like WTF is this human being he's actually bypassing website in a minute.

[@superior_samurai]

What is gehotzs twitch nickname and when will he stream again? Sorry for my bad language

[@wcr6121]

@@superior_samurai georgehotz

[@tlomt]

Which stream was it where he was bypassing a website?

[@vsb3000]

EinsZweiDrei did you find it

[@hassanjacobs7506]

Everyone go to comma.ai youtube page he posts his streams on there

[@aspirinemaga]

One day George Hotz will be debuggable with his own public API

[@cia3653]

😂😂😂😂😂😂😂😂

[@_justarandomone_8884]

@@cia3653 Have you tried to hire him?

[@luvsec5469]

A lot of people commenting on george not being as successful as they thought he'd be need to understand that money is not the only thing that drives him. George retired from hacking because it became boring to him, if all he wanted was money I guarantee that he would be one of the few hackers in the world that could hack into multiple bank accounts, drain all those accounts of their funds and have a high probability score of getting away with it. The guy is a beast.

[@Koyaanis]

Yep, he’s building something much bigger now. He’s gonna be huge.

[@wiskasIO]

Exactly. Plus he has inspired way more people than other CEOs out there, including me. He's the reason I learned how to program.

[@hyylo]

hi where is the remaining section to this video as the questions from the audience at the end are not included?

[@JordanBrotherInJesus]

Am I the only one that's fascinated, but has no idea what's actually going on? Lol

[@effmerunning]

Always with him

[@sarfiraawara]

Yeah same bro. Don't know anything about coding and stuff but do like his confidence and intelligence.

[@angel84459]

😂🤣😂 Same

[@hyperscaler]

This is real hacker talk, undiluted. I'm a pro programmer, I have to really concentrate to understand at a surface level what he made.

[@jlcontarino]

I like the way this guy thinks. And totally agree that our tools are still fairly primitive!

[@notsure6222]

He was on Lex Fridmans podcast and was talking about how biochem is boring (im paraphrasing) and they still use pipettes to measure instead of developing an advanced tool that can measure with great accuracy the amount of whatever you are picking, which makes sense to me (I don't know the slightest thing about biochem, but seemed logical)

[@liftingisfun2350]

@@notsure6222 find a way to give labs the funding to afford those tools that don't make much of a difference

[@asciidiego]

"Why do we still have debuggers from the 70s?". For the same reason that there are Text Editors from the same age such as Emacs or Vim.

[@maxkoller4791]

I see a man of culture 😊👍

[@scotttallec584]

you mean vi. Vim was made in the 90s.

[@PuerinTheHunter]

His debugger seems to record the execution of a program (what steps ran, what were the state of the variables/registers at each step) so that the person can "play" it forward and backward and inspect the state.

[@darvein]

Pretty sure that crowd started to laugh a couple of days after 😂

[@Fvneral_moon]

Why

[@danylopolishchuk1748]

Dennis Ruiz yeah why, what happened ?

[@yuno7825]

@@danylopolishchuk1748 cuz he was actually kinda funny but they were with a straight face all the time

[@nafisrahman5791]

@@Fvneral_moon Dennis is saying that the crowd were a bit dumb so didn't understand the humour of geohot

[@sia.b6184]

@@danylopolishchuk1748 because his jokes where beyond what the crowds brain power could interpret where the crowds joke processor unit of the will complete calculations a few days later , only then causing the physical reaction of the laugh

[@coder_extreme6389]

Wish had know about this tool earlier, Great work George Hotzz..

[@huckleberryfinn923]

One day I wanna debug comma's self driving unit with QIRA. That would be fantastic.

[@johnsmiles715]

+Huckleberry Finn do you know how he put ida in?

[@Stan-qv2zq]

yea debug a open source project

[@trieulieuf9]

Debug a AI, that is the next level of AI right here

[@camui87]

Lol you didn’t know what you just said. It’s nice to be part of the conversation though! 😄

[@ultrasound1459]

​@@trieulieuf910 missed calls from OpenAI 😂🧏‍♂️

[@peyastig6371]

This is the real Mr Robot

[@rooster443]

Pey Astig he even got a cameo, hopefully you know who is him

[@azulamazigh2789]

CONFIDENT MR ROBOT

[@yt-sh]

@@rooster443 when did he have a cameo?

[@rooster443]

@@yt-sh Not exactly him, but the actor that "portrays him", talks, acts and he even hacks by making rap songs. Not going to spoil you. But probably thats enough to spot him.

[@yt-sh]

@@rooster443 sorry but the only similarity I see are the black hoodie, Elliot is an introvert with DID

[@Micksoffthings]

I played this at 0.75 speed to give him some time to breath

[@totpotator]

well this is just brilliant idea!

[@max_ishere]

Is that a three coma club reference?

[@kevinhock1041]

geohot is great.

[@danielkoren4969]

19:09 *** foh tha same pryce ***

[@prod.bymaxx]

aahhahahha

[@azulamazigh2789]

I WANNA BE THIS GUY.

[@TOn-fx2gr]

Any resources where i can look how to learn jailbreaking ? I am not a total noob i know python/c/c++/some java /basic Fortran and i am learning assembly and i have been using linux for a good amount of time

[@hamzawinix7492]

Learn the platform you want to debug, don't settle with the high level stuff,

[@JasOn-rs7xz]

This guy is brilliant. ------>.

[@tsnstt]

Where can I go to get instructions on how to download his software so I can have an autonomous car? My car has drive by wire and adaptive cruise control built in the vehicle. Thank you.

[@zawadi563]

comma.ai

[@AvinashSewpersadh]

GitHub

[@newrind]

useEffect can be a timeless way to debug

[@robbybergers3997]

you mean like in react?

[@magick2006]

I love this guy

[@ChillerDragon]

That was fun. This guy selled himself pretty good :)

[@danpena344]

THREE COMMA CLUB

[@phurien]

Kudos to you if you know what he's talking about.

[@JosueMartins]

impressive.

[@pablovidaurre4204]

funny guy, brain runs fast in there

[@meghaneeldey5385]

What the hell is Joshua from F.R.I.E.N.D.S doing here?

[@kaynesheenan]

this guy is hardcore

[@jakelove3348]

I don’t know what the hell his talking about but I watched the entire video.

[@idanbanani7703]

18:16 lol, it's so true. I've been to their offices in 2017

[@gunnergun2077]

i would have used port 300 on each cataport to debug into qira and causes the flow into each program code an grey area of eax and delta 1 over 2.I would have done a load from hex 400 also leaving the trace of code delta eax timeless diverion would you agree?

[@Mayday-cr7pr]

Do it then

[@DJjakedrake]

Is he basically saying... Large companies should develop this further to optimize instruction sets, with like a heat map?

[@moldisocks1521]

Tough crowd eh...

[@soraaoixxthebluesky]

This guy is an Otsutsuki no doubt.

[@canozcan5269]

Superior comment

[@LostAnFound]

More proof we're living in the future.

[@llovebeats3749]

geohots is awesome

[@MD-hx3wf]

Haha love his character

[@soulofangel1990]

18:03 That was uncalled for mate #IfeelTargeted

[@snarkyboojum]

I once got a room of 300 people to stand up at the start of my presentation, then put one hand on their heads and then stand on one leg. Almost everyone did :D

[@sauce9140]

what's enigma?

[@movement2contact]

Same as ligma, just different.

[@DimitarTomovEU]

Fucking ill. Interesting, useful, reasonable to high extend. Hurtful truth, but this is the way you should do it, when no one listens to reason. Maybe at times too much self-boosting words, but hey - he earned it :D Thanks for sharing :-) ps: So 'he' doesn't deal with 1MIL hacking stuff, but drops stock for 0.5B (500MIL) and feels safe xD That's insanity right there ! :D :D

[@TheGreatBlackBird]

It's true.

[@rrezartbuzhala]

tres commas club

[@TheGnarTube]

I dont get it, he wont go after a 1 million dollar bounty because "people get killed over that kind of money" ...... but he'll shit on a company and cause their stock to drop half a billion dollars and not worry about it? Seems legit

[@boudayoub]

Which company ?

[@RuiSilvaPT]

How much is Apple worth compared with that company?

[@TimvandeStadt]

This guy.

[@erikbreaman9124]

look at all the worthless haters.. Let's see we can't insult his intelligence or skills or wealth..

[@neaplepinchy4538]

May everything work out in his favor. This is what happens to smart people without restraints, and a bit of luck, they get rich.

[@LittleRainGames]

I like him. But he is very arrogant.

[@edjoultz9678]

@@LittleRainGames More of a realist!

[@Aresous]

@@LittleRainGames don't you think he out of the very few people at his skill level have the right to be arrogant? Tell me the percentage of humans that comprehend what he's talking about here, really.

[@Israeli8103]

Make qira to work on Android jvm, and i will be greatful forever.

[@winthardcastle]

It's open source, you could make it work

[@MikhailFederov]

Anyone have a link to the video with the questions?

[@psq81997]

Richard hendricks in real life

[@AdrianDucao]

no more like Gilfoyle on adderall

[@vergelvelasquez]

More like jin yang on msg

[@n8style]

more like Russ Hanneman on lsd

[@tranthanhnha]

He is talent

[@supervortex8363]

interesting

[@shahzansadick1248]

Is this guy even real

[@awezomnezz1]

Hello classmates

[@louytrtrttrt]

Mr. Jailbreak is funny

[@japhalpha]

So, basically actually solve problems, and use software to solve B2B problems that matter

[@MGRogue]

... shit.. i'm lost... i don't know what the fuck he is doing here... confused.

[@jimothyus]

This man really is going to be so rich

[@zuiokopl2256]

but he is not check his channel he ask for money in twitch user

[@renovatiovr]

@@zuiokopl2256 there is never too much money

[@crazyweb9605]

@ronny Dude is because he likes fast money twitch guys do make a lot of money. Probably he can work anywhere he wants. He just doesn't want. Alpha type mentality. Am sure he does stuff for others behind the scenes

[@soraaoixxthebluesky]

@@zuiokopl2256 He does the hacking and company pay him a hefty amount.

[@NoajmIsMyName]

It is 2020 and your car still in that garage

[@prostovanka]

That’s false. There’s comma two now. Do some research.

[@lolerie]

IDA pro now supports undo... You know. But practically you also need to debug on kernel level to properly support async operations, etc. Also gdb also support undo, redo and

[@alephanull1953]

IDA Pro is proprietary non -free and closed source It does not follow the UNIX philosophy. If it was atleast open-source I could consider using it but Qira is REALLY good alternative

[@lolerie]

@@alephanull1953 do you really think real hackers care about GPL 3.0? It will become open source sooner or later. When somebody will leak the code. It will happen.

[@alephanull1953]

@@lolerie I yearn for the day IDA's source gets leaked :) Cheers

[@user-th7zb4cy2c]

What do you mean by 'undo'? In IDA, you cannot undo each instruction's "execution" on its debugging session. Did you mean "ctrl^z" feature in IDA? Also in gdb, there is rr debugger that has some undo-feature, but it is not supported by vanilla gdb

[@ashhkz2203]

i havnt done shit in mylife

[@ehabaleid1093]

Energy efficiency may not matter as much on ICE but it certainly does on BEV. Having better energy efficiency is forward thinking if anything not "90s". Just shows how myopic and dogmatic people can be when they want to sell their dream/product.

[@Kobe29261]

His parents, nobody talks about his parents - they are the people we need in the lab. Don't want samples of Georges brain rather the training model that created him! Somebody interview his parents please! Show us how, if possible - to make/support/increase the probability of more of him!

[@therandomthoughtsofaninsig5492]

I read a bit about this and like I suspected the secret to raising a child like this is to stay out of his fucking way. Thanks for the constant micro managing mom and dad.

[@mitchkuner9191]

16:47

[@kernelsmith]

wow, love yourself much?

[@fashanuwillies7051]

+Joshua Smith I think it's a bit tongue and cheek.

[@kernelsmith]

I dunno, ever met geohot?

[@Unprofessor]

+Fashanu Willies Nope. Not even a bit. The guy really is a narcissist, but he does good work.

[@kernelsmith]

+David Allen #troof

[@jason_storm]

+Joshua Smith He's earned the right.

[@missionpage]

GDB? Go valgrind first and you will no need to use GDB again...

[@missionpage]

That's what I wanted to hear

[@fopperer]

i do not understand anything

[@Pretty_Boy_Proud_Fil-Am]

This gay man is brilliant.

[@travis3371]

They didn’t the I showed up a day late joke lmao

[@therandomthoughtsofaninsig5492]

It's not a joke. It was a brag.

[@user-yg2up4lg3r]

I wish I had high functioning Autism.

[@the_real_vdegenne]

How stupid of you to call someone Autistic just because his intelligence is greater than yours..

[@user-ob5hj5vn8c]

Valentin Degenne I mean, that’s sort of the definition of high functioning autism. Autistic people are often way better at pattern recognition and logic compared to regular people. en.m.wikipedia.org/wiki/Autism scroll down to other symptoms

[@miguel360kmc]

@@user-ob5hj5vn8c so every Intelligent individual is autistic? That is not how autism works no one fully understands how it works yes there are studies lots in facted that focus on the connections between autism and genius etc etc but having raised 2 kids been around 100s Genius and autism being common is more of a movie thing not real life real life is more like 1 in 80,000 have some type of savant capability. And geohot is far from Artistic sad for someone to even try to judge based on videos! his just hyped up in 99% of the time and why the hell wouldn't he be? His young and steps away from being a billionaire self made man thought himself how to hack made his 1st big splash with blackrain downloaded bye over 25 millon people

[@yt-sh]

proof?

[@zuiokopl2256]

now a days he ask people to help him earn through TWITCH 🤣🤪

[@kumarankush8615]

Laugh when you're able to have a 100th of his current worth. He can, on this day, still join a tech company and earn a fat paycheck if he really wants to get into corporate. Yet he _chooses_ to find other ways to earn his bread. I do not appreciate the guy for his arrogance sometimes, too. But when you are him, I guess a little arrogance is excusable.

[@crazyweb9605]

Because he doesn't work well with others. He thinks other people are dumb in tech firms.

[@maggot1234]

@@crazyweb9605 and hes right

[@luvsec5469]

Honestly from what I've seen, George has the intelligence and skills to become a billionaire if he wanted to, he just chooses not to.

[@ZapOKill]

or you do (88+12+13+14+15+16)×4 + 54 × 12

[@yieldcurve2455]

Can he write a script for a haircut?

[@SpongyDoom]

dude is great at what he does, but seems awful as a human being

[@dazkillinger1397]

How Do You Figure Roi?

[@charlieoconnor40]

this guy is arrogant because he has reason to be and it is his choice..the corporations have born this out of the pursuit of profit. this guy is changing the world and your on the internet criticizing him.. go learn something and apply it. if it wasnt for these people, we would be living in north korea 2.0 because most people just take the superior word as truth. THink for yourself.

[@yieldcurve2455]

@@charlieoconnor40 I want someone to campaign on thee thoughts!

[@charlieoconnor40]

@@yieldcurve2455 its coming partner. its coming. #forwardprogress

[@dazkillinger1397]

bi gawd!

[@kensaiix]

ADHD at its finest

[@dynamicgecko1213]

I beg to differ.

[@whateveryh2119]

Nah its aspergers

[@veryfrozen3271]

@@whateveryh2119 i agree but notice how he keeps pacing around and swinging his arms

[@whateveryh2119]

@@veryfrozen3271 yeah i just watched this again and i think he could have both

[@kopenhavnkopenhavn5817]

this guy does not have an attention deficit

[@ZehMatt]

So all he did is log traces and make them all fancy in a Browser? That is pretty lame.

[@johnsmiles715]

+ZehMatt do you know how he put ida in?

[@mtnmatessim]

No. It's a timeless PIN/QEMU trace viewer. It's completely different. M

[@GabrielTrosell]

you know the other stuff this guy have done ? =P

[@n8style]

he's very good but the moment he said his self-driving car was better than tesla's self-driving car I switched off lol

[@alephanull1953]

Tesla was selling cars. This guy made a kit to make EVERYONE's car self-driving. It was comparatively affordable and was open-source. Sure, in terms features and "the brand-name" , Tesla's are awesome. I myself am a big fan of Elon Musk. But what this guy did is awesome too

[@bernoulli9047]

When you compare hardware, his solution does lane keeping for a fraction of the price and a fraction of the computational power. Teslas are just fine, of course. But his solution is incredibly cheap and works for everyone who can't afford a Tesla.

[@faizanm1563]

r/iamverysmart

[@johndoe-gt4rx]

Wait that subreddit is for irony, George is actually a savant. Too bad you're a pleb.

[@umadbroyo2388]

He is arrogant but actually very smart...

[@biesman5]

But he is actually very smart.

[@og_skullkid1387]

He was brilliant except he was arrogant as all hell.

[@gvd3111]

What has this guy actually created that classes him as genius. So he is good at programming, so are other people. Big deal

[@loremipsum7513]

Hell yeah, i'd say gauss is also good at mathematics! so are other people. Big deal right?

[@davidruss718]

Considering he's the pioneer on the original PS3 and Ipod exploits, being the first one to escalate privileges in these closed systems... He's definitely a genius. I'm guessing you don't even understand memory addresses though... Exploiting memory addresses and low level programming is much more difficult than writing a Python, Java, or even C++ program

[@davidruss718]

@CalmApe if Holtz isnt a genuis then why do you think newton deserves the title of genius?

[@davidruss718]

@CalmApe so geniuses cant exist anymore because they have too many resources at their disposal.. right

[@platterpartyrecordsltd.co.8632]

@CalmApe Newton believed in alchemy. Liebniz's Calculus is the Calculus the world actually uses. Newton's theories of the universe have been supplanted. Newton also used the work of others that came before him. Guess he's not a genius.

[@k1ngjulien_]

Geohot is great but he's a terrible speaker 😁

[@cia3653]

your mom is

[@therandomthoughtsofaninsig5492]

Did we watch the same video?

[@nihadogresevic6287]

i have met much smarter developers and they are not this smug.

[@EvilTim1911]

Excuse my skepticism, but I very much doubt that

[@crazyweb9605]

This is just a tool that he created that he uses to make his exploit work faster he hasn't even started working on anything in this session.

[@yeahiworkout6677]

Unless you're hurting anyone because of it, being smug/prideful is important. I know too many smart developers with years of experience who never got to do any shit worth noting because they look down on themselves. They think they need to learn more machine learning, learn more cryptography or blockchain or some crap before they can join a competition, build a product, or found a startup. Instead they just decay in their corporate job to zero relevance, making comments at hacker news recycling the same advice and "insight" they got from others to make themselves sound successful or smart, and writing their 3rd game engine in XYZ programming language from scratch that nobody will use anyway but they convince themselves it's better than the CRUD and machine learning API plumbing crap they are doing at work. Meanwhile I know plenty of people with less capable skills that have achieved a lot, because they were either ignorant of the risks and requirements, or they were so sure of themselves that they can do it.