Uploaded December 2020 | Updated September 2026, 2 weeks ago
I want to kick off this December/advent series with the oldest t-shirt I own. I started with PenSpinning as a teenager in ~2007 and eventually we ordered t-shirts. It taught me a lot of lessons when it comes to learning and practicing, and it was the first real online-community I found.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Join the Hextree Discord: discord.gg/xgQpCQCpvy
All Videos: youtube.com/playlist?list=PLhixgUqwRTjwy6HCzLfwNzdrSrcrLOM4d
A day in the life of a pen-tester: youtube.com/watch?v=2LOtBpA7W_M
JaPen 1st: youtube.com/watch?v=c3ddIoziQ_U
CHAPTERS
00:00 - Shirt Stories and my T-shirt archive
01:21 - The old German Pen Spinning Community shirt
02:52 - Discovering pen spinning and JaPen 1st
04:05 - Why this hobby finally stuck
05:15 - Finding the early GPC community
06:32 - Online friends becoming real-life friends
07:03 - Lessons about practice and mastery
09:39 - Pen spinning, web development, and first XSS
10:28 - Why this old shirt still matters
11:05 - Supportive communities for beginners
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#PenSpinning #ShirtStories #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
I want to kick off this December/advent series with the oldest t-shirt I own. I started with PenSpinning as a teenager in ~2007 and eventually we ordered t-shirts. It taught me a lot of lessons when it comes to learning and practicing, and it was the first real online-community I found.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Join the Hextree Discord: discord.gg/xgQpCQCpvy
All Videos: youtube.com/playlist?list=PLhixgUqwRTjwy6HCzLfwNzdrSrcrLOM4d
A day in the life of a pen-tester: youtube.com/watch?v=2LOtBpA7W_M
JaPen 1st: youtube.com/watch?v=c3ddIoziQ_U
CHAPTERS
00:00 - Shirt Stories and my T-shirt archive
01:21 - The old German Pen Spinning Community shirt
02:52 - Discovering pen spinning and JaPen 1st
04:05 - Why this hobby finally stuck
05:15 - Finding the early GPC community
06:32 - Online friends becoming real-life friends
07:03 - Lessons about practice and mastery
09:39 - Pen spinning, web development, and first XSS
10:28 - Why this old shirt still matters
11:05 - Supportive communities for beginners
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#PenSpinning #ShirtStories #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.

![Understanding C Pointer Magic Arithmetic | Ep. 07
We debug the line that causes the heap overflow. And its a great opportunity to understand pointers in C.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-sudoedit/understanding-the-vulnerability
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
The full playlist: https://www.youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
Grab the files: https://github.com/LiveOverflow/pwnedit
The original disclosure: https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit
Episode 07:
CHAPTERS
00:00 - Intro & Motivation
00:46 - Create Debug Build
01:02 - The Crashing Location
01:43 - Scary Pointer Magic
02:10 - *to++ = *from
02:56 - Explaining: from++
04:03 - Explaining: *from
04:56 - Explaining: to++
05:23 - Explaining: *to = *from
05:54 - The Copy While Loop
06:26 - Explaining: from[0] vs *from
07:14 - The Bug!
08:35 - Wrong Allocation Size Calculated
09:30 - Unescape Logic
10:15 - Why though?
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#BufferOverflow #BinaryExploitation #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Understanding C Pointer Magic Arithmetic | Ep. 07](https://i.ytimg.com/vi/zdzcTh9kUrc/mqdefault.jpg)