Haarlems
haarlems.bsky.social
Haarlems
@haarlems.bsky.social
I do security
If you have a high enough tolerance to pain, you can make bytes do anything
September 17, 2025 at 9:28 AM
Reposted by Haarlems
Taking them to the SHITTER: an analysis of vendor abuse of security research in-the-wild

aff-wg.org/2025/07/13/t...

(There is no benefit modulating my voice for anyone's comfort. This is my fair take, but unapologetic truth. This phenomena has gone unchecked for too long)
July 14, 2025 at 2:05 PM
I failed and kept on failing until I didn't.
What started as frustration at not solving a network forensics challenge on the @antisyphontraining.bsky.social cyber range on @metactf.bsky.social led to my first research.

Yesterday, it was also my first time presenting at BSides Bucharest!
June 27, 2025 at 6:57 PM
How many linker errors while patching openssl does it take before you seek salvation in a 1999 book?
May 12, 2025 at 5:43 PM
Reposted by Haarlems
I once heard a network engineer comment that the speed of light is too slow, and that has haunted me ever since.
May 7, 2025 at 6:21 PM
Reposted by Haarlems
RUMOURS are TRUE 🤷‍♀️

PHRACK will be releasing a SPECIAL #71.5 👉HARDCOVER👈 at www.offensivecon.org BERLIN ("The 𞅀-Day Edition").

Main #72 release THIS SUMMER at MULTIPLE conferences (main release at WHY2025). ❤️
April 28, 2025 at 10:16 AM
Tried to make a donation to the @archive.org. The bank canceled the transaction and blocked my card for suspicious activity. I donated another way. And tripled it out of spite.

Which project are u fighting the big banks to support today?
April 25, 2025 at 2:15 PM
One of the more important recent contributions to the security conversation.

You might expect a blog post, but you'll end up in a full-fledged talk: steeped in post-exploitation history, pointing to solutions and actions forward.
Post-ex Weaponization: An Oral History

aff-wg.org/2025/04/10/p...

A walk-through of some history on post-ex eco-systems used by CS (PowerShell, Reflective DLLs, .NET, and BOFs).

Ends with a coffee conversation talking about magician's guilds, security research, and ideas about what's next.
April 11, 2025 at 2:44 PM
Reposted by Haarlems
We heard you needed some more time, so we wanted to let you cook.

We decided to push the Phrack 72 CFP deadline back until June 15th.

Stay tuned for upcoming Phrack events.

Print this flyer out and give it to someone IRL!!
March 17, 2025 at 1:58 PM
Say you're on a security engagement to test for unauthorized access to the crown jewels at Tiffany's. Do you go for the vault? No. You go for the chandelier. It's priceless.
March 12, 2025 at 7:52 AM
Yeehaw!

Just finished James Forshaw's Windows Security Internals, and talk about a wild ride.

I used to say that whenever I'm deep in windows internals, a wild Alex Ionescu appears. But the mythical creatures gain new cunning as you approach Tyranid's lair :)

Review:
medium.com/@haarlems/re...
Review of Windows Security Internals by James Forshaw
April 2024 edition, No Starch Press
medium.com
November 14, 2024 at 6:01 AM