I tweet mainly about IT security, iOS / iPhone jailbreaking. I have a Microsoft background. Administrator on theiphonewiki․com. Blue team.

Switzerland
Joined April 2010
Decided to publish the Lexmark printer exploit + writeup + tools instead of sell it for peanuts. 0day at the time of writing: github.com/blasty/lexmark -- enjoy!
17
271
10
912
146,790
We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema
5
117
7
296
138,674
Hi Auto Industry. It's the internet calling... (Subtitle: How to take over a Ferrari account with zero interaction.) samcurry.net/web-hackers-vs-…
1
18
1
37
6,182
If you sent an API request to Twitter with an e-mail address, and an incorrect password, the API returned a JSON response containing the username associated with the account. A Threat Actor compiled 221,608,279 entries. This list includes celebrities, politicians, and more...
41
594
95
3,071
573,067
Does anyone have a copy or working link to original netcat 1.00 (version 951010), file nc100.tgz or is that lost forever? I can only find dead ftp links or a MinGW fork or v1.10 versions.
2
3
6
5,620
Reverse engineering yet another ebook format mijailovic.net/2022/12/25/hk…
18
32
3,155
Here are some of the presentations I found the most interesting within the macOS/iOS Kernel Security research space in 2022! 🧵 alexplaskett.github.io/macos…
3
65
217
44,788
Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard. These techniques also work on victims logged on before the server was compromised. research.ifcr.dk/pass-the-ch…
34
668
21
1,671
215,873
🔐 ICYMI - JP Aumasson (@veorq) is teaching a free #workshop on #Cryptography! Cryptography is indispensable for protecting information in computer systems, but choosing secure protocols and parameters can become overwhelming. Sign up to learn more! 🎟️ ringzer0.training/workshops.…
8
10
2,012
The Christmas open-obfuscator challenge is live at this address: obfuscator.re/challenges/ Thank you to @vector35 @build38dotcom and @eshard for sponsoring the prizes of this challenge.
1
42
1
76
12,622
I just removed all references to the new social media site where everyone is going to and my handle name in my bio, in order to comply with Twitter’s new policies. You’ll find me anyway. help.twitter.com/en/rules-an…
365
I wonder why the iOS version of the checkmark is more expensive. xitter.cf/TwitterBlue/status/160…
we’re baaaack! Twitter Blue is now available for $8/month on web or $11/month on iOS – we’ve made some upgrades and improvements 🧵
1
1
Hey ChatGPT, write me an x86 binary, undetected by all AV and EDR, that contacts my C2 on IP 12.133.253.6 port 443 once per day and migrates to a legit process before calling back. Embed it into a PDF that auto-starts the binary via AdobeReader zeroday.
1
15
Checkout Day 1 of the macOS and iOS Security Internals Advent Calendar now with enhanced audio… youtu.be/WxOZgr0Ld9o #ios #macos #security #internals #adventcalendar #xmas
1
6
17