Thomas Dullien
“Halvar Flake”The Binary Diffing Pioneer
BinDiff, and the theory of weird machines
Rating
85Impact score
Domains
Reverse engineeringPatch analysisExploit theory
Scouting report
Built the graph-based binary diffing that made it routine to extract the vulnerability out of a vendor patch, founded zynamics around BinDiff and VxClass, and sold it to Google in 2011. Later worked in Project Zero and wrote the “weird machines” framing that treats exploitation as programming an unintended state machine inside the target.
Curator’s note
Turned Patch Tuesday into a reliable source of exploit intelligence.
Sources
- 01BinDiff zynamics.com
- 02Thomas Dullien’s research blog addxorrol.blogspot.com