Vulnerability researcher at ??
Joined March 2010
- Tweets3.1K
- Following566
- Followers3.7K
- Likes3.9K
Pinned Tweet
I wrote "Reverse Engineering the Win32k Type Isolation Mitigation", about how Windows 10 1709 changed the way SURFACE objects are allocated to kill Bitmap-based kernel exploitation techniques: blog.quarkslab.com/reverse-e…
Francisco Falcon retweeted
Tengo la triste noticia que Andrés Blanco @6e726d falleció el día de hoy. Se nos fue un gran hacker, amigo y mentor. Memento mori solía decirme, Memento Mori.
QEDP
Francisco Falcon retweeted
¿Sos extranjero y querés comprar grandes extensiones de tierra en Argentina? Hacelo a través de Glocal Terra, empresa que se dedica a eso y que fue fundada por Joaquin Benegas Lynch. El servicio que ofrece es tan completo que él mismo en el Senado se encarga de votar a favor del proyecto para modificar la ley que le pone límites a esas operaciones. Impresionante.
A rogue DHCP server can inject arbitrary dhclient.conf directives via malicious DHCP options and get RCE as root in systems running dhclient:
freebsd.org/security/advisor…
Wow, remote OS command injection (from the same network segment) in FreeBSD IPv6 stack via router advertisement packets: freebsd.org/security/advisor…
rtsold passes the unescaped domain search list option from the RA packet to the resolvconf shell script.
Francisco Falcon retweeted
In celebration JPEG XL being reconsidered for inclusion in Chrome, I created the first ever JPEG XL image which displays its own MD5 hash!
$ md5sum hashquine.jxl
c0dec0007b5246f7428936d9bed2f446
This website does not render JPEG XL yet, so see the links below
ALT Cyber Shark using a retro computer which reads c0dec0007b5246f7428936d9bed2f446
Francisco Falcon retweeted
A un genio en Argentina se le ocurrió la brillante idea de quitar los timbres de un edificio y cambiarlos por un código QR. Los invito a escanearlo y jugar por primera vez al ring ring raja internacional y romperle las pelotas a los vecinos desde la comodidad de su casa 😂😂😂
Francisco Falcon retweeted
PLEASE CLICK TRANSLATE ON THIS POST
Francisco Falcon retweeted
so excited to finally share something I’ve been working on alongside many brilliant colleagues. MTE will truly raise the bar for memory safety.
security.apple.com/blog/memo…
Francisco Falcon retweeted
2026 Apple Security Research Device Application is now live. Apply at security.apple.com/research-…!
* Arbitrary code with arbitrary entitlements
* Arbitrary code injection into existing processes
* Arbitrary SPTM, TXM, KernelCache firmwares
* Downgrades to old builds
* ...and more
Francisco Falcon retweeted
Hello friends. Check out this awesome and unique role that just opened up on my team in SEAR. Wanna secure Apple silicon, ROMs, iBoot, and more? jobs.apple.com/en-us/details…
Francisco Falcon retweeted
Argentina’s $4.6 Billion Crypto Scandal; Largest-Ever Crypto Theft
go.forbes.com/c/Xr69
Francisco Falcon retweeted
Good tools are made of bugs: How to monitor your Steam Deck with one byte.
Finding and exploiting two vulnerabilities in AMD's UEFI firmware for fun and gaming .
A Christmas gift in February, brought to you by the amazing @pwissenlit 🫶
blog.quarkslab.com/being-ove…
ALT calc.exe is a the new Doom
Francisco Falcon retweeted
Today I’m sharing a blog post on the implementation of kernel mode shadow stacks on Windows! This post covers actively debugging the Secure Kernel and also outlines why VTL 1 is relied on to help maintain the integrity of the supervisor shadow stacks! connormcgarr.github.io/km-sh…
Francisco Falcon retweeted
reminder that the bcrypt hash function ignores input above a certain length! so if you do bcrypt(username || password) for some reason, a sufficiently long username will make it accept any password. to fix this you can sha256 the input first.
Okta allowing login bypass for any usernames with 52+ characters is insane
Official Security Advisory: trust.okta.com/security-advi…
