f
@bef0rd
 Internet
Joined December 2010
  • Tweets4.1K
  • Following932
  • Followers467
165Media
I’ve spent the last 2 years at @Tanium, best job I ever had. But resource realignment happens, and I am seeking a new opportunity. I am a security innovator, to the extent that nearly every computer on the Internet is using at least one of my technologies or inventions. 1/n
8
68
7
159
73,130
CVE-2020-19909 is everything that is wrong with CVEs Another 9.8 CRITICAL curl problem. All made up. daniel.haxx.se/blog/2023/08/…
32
356
52
1,232
406,328
guys looking out of the window of a bus meme. The sad guy is thinking "WebGPU brings significant new remote attack surface". The happy guy is thinking "WebGPU brings significant new remote attack surface"

ALT guys looking out of the window of a bus meme. The sad guy is thinking "WebGPU brings significant new remote attack surface". The happy guy is thinking "WebGPU brings significant new remote attack surface"

6
81
3
776
57,042
Comparing hobby PCB vendors: lcamtuf.substack.com/p/compa…

Comparing hobby PCB vendors

An not-for-profit roundup of affordable PCB manufacturers. Originally published in 2023 and last updated January 2026.

blog.coredump.cx
1
1
15
3,154
Our blog post with full technical details about the two vulnerabilities in the TPM 2.0 reference implementation discovered by @fdfalcon is now live at blog.quarkslab.com/vulnerabi… #TPM #0day #not0day
A hax0rz found vulns in reference implementation code

ALT A hax0rz found vulns in reference implementation code

53
3
116
14,772
Quarkslab @fdfalcon discovered 2 vulns in the TPM2.0 Reference Implementation. They affect many hardware, software and firmware TPMs. The Trusted Computing Group and CERT/CC issued security bulletins. Stay tuned for our technical analysis on March 14th kb.cert.org/vuls/id/782720
6
53
1
89
16,369
I solved the Blue Frost Security linux kernel challenge they published for Ekoparty 2022 and loved it! @bluefrostsec Here's my writeup: klecko.github.io/posts/bfs-e…

BFS Ekoparty 2022 Kernel exploitation challenge write-up

Last month Blue Frost Security published two exploitation challenges for Ekoparty 2022. One of them was a Linux kernel challenge. I don’t have much experience with Linux kernel exploitation, so this...

klecko.github.io
34
106
During last year's #BlackFriday promotion, half the internet bought a Burp Suite Certified Practitioner exam but mysteriously got cold feet about taking it. We feel really guilty about taking your $10, so this year we have a new deal: you prepare, we pay: portswigger.net/web-security…
19
125
6
527
1995: PHP is dead, learn ColdFusion 2002: PHP is dead, learn ASP​.net 2003: PHP is dead, learn Django 2004: PHP is dead, learn Ruby on Rails 2010: PHP is dead, learn Flask 2011: PHP is dead, learn AngularJS 2016: PHP is dead, learn Next.js 2022: okay this is awkward
351
2,373
457
17,243
"http://http://http://@http://http://?http://#http://" is a legitimate URL
86
541
135
3,863
60
6,835
118
75,498
Whenever you or your team get stuck on a curl problem, help is just a support deal away: curl.se/support.html - I could literally be helping you with your issue within 24 hours.
13
32
1
194
BREAKING: The open-sourced sample AC97 sound driver by Microsoft, is now added into latest nightly builds of #ReactOS! You can now have sound in VirtualBox, out of the box! For VMware, you need to install Guest Additions. Do not forget that you could run into issues with sound.
4
15
3
100
Crush the bugs with OSS-Fuzz! The final chapter in @kevin_backhouse's OSS blue teaming adventure is now available: github.blog/2021-11-23-how-t…

Blue-teaming for Exiv2: how to squash bugs by enrolling in OSS-Fuzz

OSS-Fuzz is Google’s awesome fuzzing service for open source projects. GitHub Security Lab's @kevinbackhouse describes enrolling a project.

github.blog
21
1
62
There's now a PHP Foundation! blog.jetbrains.com/phpstorm/…
2
19
3
91
A partir de esta semana en #Brasil los usuarios de @MercadoLivre y @mercadopago pueden comprar, guardar y vender crypto. news.bloomberglaw.com/bankin…
322
1,309
563
8,267
If you rename procdump.exe to dump64.exe and place it in the "C:\Program Files (x86)\Microsoft Visual Studio\*" folder, you can bypass Defender and dump LSASS.
46
1,097
64
3,247
ESET Research
@ESETresearch10 Nov 2021
#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5
3
28
3
124
#EkopartyToTheMoon is starting Now! @elonmusk do you think we can buy the Red Pill with Doge? We know you are The One. 😎🚀
5
157
6
173
¡Se viene el PRE-CTF de la EKO! 🚩 ⚠ Recordá que NO SON actividades clasificatorias. ✅ A partir del LUNES 18/10 vas a poder inscribirte acá 👉 ctf.ekoparty.org/ 🔥 Ideal para que vayas calentando motores antes del Advance CTF.
5
1
13
Load more