Mobile security researcher. Previously @Qualcomm product security. @UF Ph.D, @UCF B.S. Opinions my own https://xitter.cf/t.co/VKTGUksQFd 🦋: @digitalcold

NoVA
Joined October 2012
Повну емуляцію апаратної платформи Nokia 6600 (NHL-10) у QEMU завершено. GSM-зв’язок працює end-to-end: Відправка та прийом СМС ARM → DSP → IQ → Osmocom → IQ → DSP → ARM
81
386
25
3,850
176,878
Just hacked some AI wizardry to tame my paper collection. Check it out: aischolar.0x434b.dev (based on github.com/0xricksanchez/pap…). Ideas welcome!
1
1
6
1,261
Grant H retweeted
The most challenging part of writing "The Secret Life of Circuits" wasn't the writing process. It was crafting over 290 full-color illustrations on my own design. I think they set the book apart. For a no-strings-attached sample chapter, check out: lcamtuf.coredump.cx/electron…
18
123
4
1,206
50,838
Watch our @DARPA AI Cyber Challenge streaming event TODAY at 4pm ET for the latest on competition prizes, resources, schedule, and scoring! #AIxCC youtube.com/watch?v=vyIMdo8m…
18
34
6,924
FirmWire is nominated 🐎🐎🐎 @Digital_Cold @nSinusR
Congrats! And thanks for grabbing snapshots of all the nominees so we can share them here as well 😅
1
3
1
37
The Qualcomm Product Security team is starting our annual internship process, but I'm told that twitter doesn't know what we do anymore, so over the week I'm going to post a very incomplete list of the things we're doing. #TeamQualcomm
1
22
1
45
💬Do you know how baseband #processor #chip works internally? ⚡Here is an amazing opportunity to gain hands-on experience on baseband firmware in modern smartphones from the renowned trainers 🙌 @domenuk & @nSinusR 🟢Register➡️bit.ly/3z9DJoB #samsung #shannonbaseband
1
6
2
7
A few days ago, Epic Games filed a lawsuit against Apple, challenging the idea that the Apple App Store--with its high fees and limitation on promotion of anything that isn't an Apple product or payment mechanism--is the only way to distribute apps on iOS. cdn2.unrealengine.com/apple-…
53
377
90
1,439
We (@Digital_Cold & me) just finished @BlackHatUSA talk on "Emulating Samsung’s Baseband for Security Testing"! Feel free to have a look at our slides over here docs.google.com/presentation…
4
37
84
In a few hours, @TeamT5_Official is going to present their research on breaking Samsung S-Boot at #BHUSA. They wrote a technical post about one bug back in June. Since I also found this bug a bit earlier and got the SVE, I decided to share some thoughts allsoftwaresucks.blogspot.co…
1
7
24
So, I finally finished my PhD (yay!). Alas, the whole COVID thing has interfered with my plans. As a result, I am now looking for a Software Engineer spot (remote pref, but not required) Portfolio: emallson.net/portfolio/ Resume: emallson.net/jdavidsmith_res… RTs appreciated!
1
5
1
18
Grant H retweeted
We are taking this time of uncertainty as an opportunity to grow and expand our club. We are now moving all our meetings online which means anyone can join! If you want to learn about Jailbreaking IPhones, and Android rooting this is a meeting you don’t want to miss! @UFCISE
1
8
1
19
Success! The @fluoroacetate duo got the #Samsung Galaxy S10 to connect to their rogue base station and then pushed a file to the phone. Third year in a row. Off to the disclosure room to get all the details.
1
28
1
119
Grant H retweeted
There’s also a format string bug going the opposite direction (when your phones name is %p%p%p...) xitter.cf/fransrosen/status/1179…
If you have an AppleTV named as an XSS-payload it will trigger when AirPlay is used in Safari on iOS. A pretty far-fetched UXSS I would say.
5
70
6
296
Welcome Maddie Stone (@maddiestone) to Project Zero! Maddie is leading a new effort to study 0day exploits in the wild.
26
46
13
590
My colleague @Digital_Cold presented some of his exciting work looking at implementation flaws in cellular baseband firmware during the #WiSec19 poster session. @kevinrbbutler @uf_fics @UFCISE
1
1
20
Grant H retweeted
SwampCTF 2019 is officially over! Congratulations to the top three teams: 1st place: flagbot - 8548 2nd place: cr0wn - 8548 3rd place: DuckDuckNo - 7560 Thank you to all of the teams that participated this weekend, we hope you all had as much fun playing as we did putting it on!
1
8
1
16
Wow. Just wow. Starting from a web browser within a virtual client and ending with code execution on the host OS. Now off to the disclosure room for all the details.
5
66
9
244
Join us again for #SwampCTF, UF's 2nd annual Capture the Flag competition hosted by @UFSIT. It starts April 5th 18:00 EDT and lasts 48 hours. Look forward to pwn, re, smart contract, web, forensics, crypto, and misc challenges! Register now: swampctf.com
9
3
12