voice coding nix junkie
Joined November 2014
- Tweets1.2K
- Following1.4K
- Followers1.4K
- Likes10.1K
fidgeting bits retweeted
Kind of a long-shot, but anyone interested in contracting with us on USB-PD firmware? We're doing more with USB-PD than most hardware makers, and regularly find ourselves constrained by what our suppliers' firmware teams are capable of around it.
fidgeting bits retweeted
Hey, I'm going to ask you something just in case.
I teach a Linux kernel exploitation course and I wanted to differentiate to the class the kinds of randomizations we see in memory. Even without KASLR or any other configurable randomization, if you check a slub cache right after booting up, the slab base address is subject to some randomization, independent of the cache as far as I can tell.
I spent some time investigating this and there's a point during the boot that there's no randomization, but it'll appear somehow. My guess is that some randomization will happen after the other processors are set up (maybe APIC is undeterministic). I even checked the first kmem caches being set up and kmalloc allocations. I didn't finish my analysis, and couldn't come up with a good hypothesis that could explain this behavior. Do you know anything about this? Thank you, and I've checked your book several times during my analysis.
fidgeting bits retweeted
🚨More than a year after the XZ Utils crisis, we found 35+ publicly available Docker Hub images still carrying the backdoor, some tagged “latest”. Long-tail supply-chain risk is real!
Read the blog: binarly.io/blog/persistent-r…
fidgeting bits retweeted
arm64: Linear mapping is mapped at the same static virtual address project-zero.issues.chromium…
fidgeting bits retweeted
[SECURITY] firefox-patch-bin, librewolf-fix-bin and zen-browser-patched-bin AUR packages contain malware lists.archlinux.org/archives…
fidgeting bits retweeted
I had fun playing with Bitchat today.
A MITM attacker can pretend to be a "favorited" peer which has been marked as trusted.
This lets an attacker inject themselves into trusted conversations
My general thoughts about vibe coding and cryptography are written within
When Identity is just a Vibe: a Bitchat MITM supernetworks.org/pages/blog…
@jack
ALT A MITM attack can fool the "Favorites" system in Bitchat
fidgeting bits retweeted
🧠 [POC2025] TRAINING
Windows Kernel Exploitation: Becoming an "Advanced" Exploit Developer
by Cedric Halbronn (@saidelike)
📅 Nov 10-12 (3 days)
📍 Four Seasons Hotel Seoul, South Korea
🔗 More info powerofcommunity.net/#traini…
#POC2025
fidgeting bits retweeted
A bit late, but I just published my blog post on bypassing Ubuntu’s sandbox! Hope you enjoy it!
u1f383.github.io/linux/2025/…
fidgeting bits retweeted
jemalloc Postmortem jasone.github.io/2025/06/12/…
fidgeting bits retweeted
My writeup on CVE-2025-31200. This ones an interesting one blog.noahhw.dev/posts/cve-20…. thanks to @bellis1000 for the shoutout.
fidgeting bits retweeted
Had some fun with rust and wrote a kernel.
github.com/xwings/elinOS
elinOS RISC-V64 kernel
fidgeting bits retweeted
Our new blog post is live: blog.dfsec.com/ios/2025/05/3…
fidgeting bits retweeted
🚨🚨🚨We just broke everyone’s favorite CTF PoW🚨🚨🚨
Our teammate managed to achieve a 20x SPEEDUP on kctf pow through AVX512 on Zen 5. Full details here: anemato.de/blog/kctf-vdf
The Sloth VDF is dead😵
This is why kernelCTF no longer has PoW!
fidgeting bits retweeted
This might be the best bug I found. Never thought I'd be writing a kernel exploit as reliable, clean and fast as a browser exploit. For a while I actually used this to root my research phone when can't be bothered to patch the rom: github.blog/2022-07-27-corru…
fidgeting bits retweeted
Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:
darknavy.org/blog/argusee_a_…
fidgeting bits retweeted
We still need help getting early access to Android 16 sources prior to the stable release in June. Every mainstream Android OEM has it. We're currently spending significant time on reverse engineering Android 16 Beta releases. It's a huge waste compared to having what we need.
fidgeting bits retweeted
#OffensiveCon25 videos are now up!
youtube.com/playlist?list=PL…
fidgeting bits retweeted
Thrilled to share our latest deep dive into Windows Kernel Streaming!
Just presented this research at @offensive_con.
Check it out: devco.re/blog/2025/05/17/fra…
