@_niklasb

research @dfsec_com - @niklasb@infosec.exchange

 Germany
dfsec.com/
Joined December 2016
  • Tweets3.5K
  • Following801
  • Followers14.6K
65Media
We at @dfsec_com are currently looking for a senior Linux kernel researcher, feel free to DM if you’re curious :)
1
29
1
96
30,783
Niklas B retweeted
sparkey@iBSparkes15 Oct 2025
Our newest @dfsec_com blog post is live, thanks to @tomitokics from @df_forensics for putting this together :-) blog.dfsec.com/ios/2025/10/1…

Depicting an iOS Vulnerability

Dataflow Security blog

blog.dfsec.com
1
40
1
166
38,027
Our new blog post is live: blog.dfsec.com/ios/2025/05/3…

Blasting Past iOS 18

Dataflow Security blog

blog.dfsec.com
2
83
2
262
60,824
DMs were apparently disabled, but fixed now
Niklas B@_niklasb10 Sep 2024
We at @dfsec_com are currently looking for a senior Linux kernel researcher, feel free to DM if you’re curious :)
1
1
12
7,391
This is very cool work. Since I’m not super familiar with the domain, is there any published work around code understanding/querying? Is context size a limiting factor here for non trivial code bases?
Ivan Fratric 💙💛@ifsecure20 Jun 2024
New Project Zero blog post by Sergei Glazunov and Mark Brand: Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models googleprojectzero.blogspot.c…

Project Naptime: Evaluating Offensive Security Capabilities of Large Language Models

Posted by Sergei Glazunov and Mark Brand, Google Project Zero IntroductionAt Project Zero, we co...

projectzero.google
4
1
14
9,467
AKA natural language CodeQL - it feels like the Code Browser approach from the blog post may be applicable here as a general concept
6
2,365
Pwn2Own lineup looks very impressive this year, good luck to everyone!
1
1
38
8,167
Software transactional memory is probably the one thing I miss the most from my Haskell developer times. IMO it is the most intuitive way to write concurrent code by far. It‘s wild to see it implemented in such a complex context as C++, amazing effort
Filip Jerzy Pizło
@filpizlo15 Mar 2024
I wrote a blog post about C++ transactional memory. unrealengine.com/en-US/tech-…

Bringing Verse Transactional Memory Semantics to C++

Introducing AutoRTFM: a transactional memory system for C++ code in Unreal Engine.

unrealengine.com
1
13
5,415
Are there any details known about what makes a WiFi “unsafe to join” according to iOS Lockdown Mode and thus causes disconnects on each sleep/wake cycle of the phone? Seems like WPA support and TKIM are two such properties, but there are likely more.
2
1
13
4,408
I really wish Lockdown Mode had more granular settings
4
1,770
I’ll be at C3 this year if anyone wants to discuss security research or meet up in general :)
4
24
7,363
A new post by our iOS research team is up about an interesting info leak that died an untimely death
Dataflow Security
@dfsec_com25 Nov 2023
After 3 years, we finally managed to write our first blog post about a powerful XNU infoleak patched in 17.1 blog.dfsec.com/ios/2023/11/1…

That's FAR-out, Man

Dataflow Security blog

blog.dfsec.com
2
15
80
30,985
It could be used as SMAP bypass and also to defeat ASLR across tasks (usermode and kernel)
1
13
3,302
Replying to @h0mbre_
@h0mbre_
1
27
6
345
31,925
nextjs now runs within iMessage
2
6
60
12,301
update: it‘s reserved now
2,012
(it‘s already paid, obviously:)
1
1,661
@blau_presse @telefonica_de
1
1
2,288
🤦‍♀️
This Post is from a suspended account. Learn more
1
1
17
12,227
interesting, but also how slow is it? googleprojectzero.blogspot.c…

MTE As Implemented, Part 1: Implementation Testing

By Mark Brand, Project ZeroBackground In 2018, in the v8.5a version of the ARM architecture...

projectzero.google
1
10
45
15,604
Load more