Neal retweeted
In April, @samwcyo and I discovered a way to bypass airport security via SQL injection in a database of crewmembers. Unfortunately, DHS ghosted us after we disclosed the issue, and the TSA attempted to cover up what we found.
Here is our writeup:
ian.sh/tsa
Neal retweeted
Security researchers found flaws in Saflok hotel keycard locks, used on 3 million doors in 13,000 properties worldwide, that can be used to open them in seconds. The lockmaker Dormakaba has been working on a fix but told them only 36% of locks are updated. wired.com/story/saflok-hotel…
Neal retweeted
The iPhone Dev Team domain iphwn.org expired a few months ago, and two weeks ago was acquired by someone for $1,260 USD at an auction.
The domain now hosts a broken wiki archive, seems to be grabbed from archive.org. Whois indicates the owner is in Illinois.
Who owns this?
Neal retweeted
Woohoo! WhatsApp has released key transparency! engineering.fb.com/2023/04/1…
Neal retweeted
A reminder that if you install the developer beta, and it's a buggy mess, you can downgrade at ipsw.me ;)
Neal retweeted
The placeholder for the software update is up 👍 mesu.apple.com/assets/iOS14D… #GettingReal
Neal retweeted
EPIC JAILBREAK: Introducing checkm8 (read "checkmate"), a permanent unpatchable bootrom exploit for hundreds of millions of iOS devices.
Most generations of iPhones and iPads are vulnerable: from iPhone 4S (A5 chip) to iPhone 8 and iPhone X (A11 chip).
github.com/axi0mX/ipwndfu
Neal retweeted
In mid-June, a sophisticated attack leveraging two Firefox 0-day vulnerabilities, spear phishing, and social engineering targeted our employees. Coinbase Security detected and blocked the attack. We talk about how it unfolded for the first time: blog.coinbase.com/responding…
Neal retweeted
hot tip - if you need quick VPN for use on public Wi-Fi in Vegas and don’t care about persistence, @guardianiosapp free tier has you covered
apps.apple.com/us/app/guardi… – at Paradise, NV
Neal retweeted
Ever run out of code space? Check out these cool tools to dig into why: github.com/google/bloaty by @Google and github.com/HBehrens/puncover by @HBehrens
Neal retweeted
Researcher Assaulted By A Vendor After Disclosing A Vulnerability secjuice.com/security-resear…
Neal retweeted
Crazy thing: my friends who run a high traffic coffee shop just found this thing under their bar. It turns out to be a super cheap Chinese Bluetooth LE beacon.
Neal retweeted
Sony deleted a TLD, a whole TLD.
This is a strange future. xitter.cf/ianawhois/status/10206…
Neal retweeted
Airplanes have to run a virus scanner every week to get rid of all the malware, because people casually charge their phones in the cockpit??!! 🤯
reuters.com/article/us-nucle…
Neal retweeted
Old-style API diffs for Xcode 10 beta 2 are up: codeworkshop.net/objc-diff/s…
Neal retweeted
OH: "How do you generate a random string? Put a first year computer science student in Vim and ask them to save and exit."
Neal retweeted
let me know, if you can help me on my mission to "bring general purpose computing closer to the human mind" (💻→📱→⌚️→👓→❓) – I am looking for a new opportunity after Intel/Vaunt (previously Pebble) HeikoBehrens.net #happyAboutRTs