imagine something fancy here
Joined March 2011
- Tweets1.5K
- Following305
- Followers1.3K
- Likes801
Nico Golde retweeted
The Layman's Guide to Zero-Day Engineering has been released on media.ccc.de and YouTube media.ccc.de/v/35c3-9979-the… youtube.com/watch?v=WbuGMs2O…
argh, apparently badly secured Android kiosk tablets (equipped with camera, microphone, and internet) as a part of hotel rooms have become a thing.
Nico Golde retweeted
Hex-Rays just published my guest blog entry, "Hex-Rays Microcode API vs. Obfuscating Compiler", w/plugin source code
Nico Golde retweeted
Event Blog: What’s new in 35C3 Fahrplan? events.ccc.de/2018/09/11/wha… #CCC
Nico Golde retweeted
Event Blog: 35C3: Call for Participation and Submission Guidelines events.ccc.de/2018/09/11/35c… #CCC
Nico Golde retweeted
VIA x86 ring3 ->ring0 backdoor ;)
GOD MODE UNLOCKED: hardware backdoors in some x86 CPUs
github.com/xoreaxeaxeax/rose…
White paper coming tomorrow. @BlackHatEvents
Nico Golde retweeted
Total system #compromise is only possible if you can escape the browser sandbox. Watch as we crack the walls of the #Safari sandbox with a toy fuzzer. Part FIVE of our #Pwn2Own series: blog.ret2.io/2018/07/25/pwn2…
Nico Golde retweeted
Slides for my SSTIC keynote: docs.google.com/presentation…
Nico Golde retweeted
New blog post: "Writing a Hex-Rays Plugin: VMX Intrinsics" dougallj.wordpress.com/2018/…
Nico Golde retweeted
Here are our slides for #stratadata on the progress we've made on scalable vulnerability discovery with code property graphs: multi-layered, extensible and with support for multiple programming languages: drive.google.com/uc?export=d…
Nico Golde retweeted
This "popss" vulnerability is uh... pretty bad: everdox.net/popss.pdf
Nico Golde retweeted
My blogpost on the future of the code analysis platform "Joern" and open-source at ShiftLeft medium.com/@fabs_60995/save-…
Happy to announce that @Rode0day, our monthly public bug-finding competition, is now open for public beta! Grab some binaries, submit crashes, and prove that your bug-finder is the very best! rode0day.mit.edu/
Nico Golde retweeted
This is pretty amazing. Exploiting Rowhammer on mobile GPUs via WebGL:
vusec.net/wp-content/uploads…
scary. nice work @tomituominen and Timo! xitter.cf/a_greenberg/status/989…
Two researchers at F-Secure figured out how to make a master key for any hotel that uses a common brand of keycard lock, Vingcard Vision. Their method requires only a Proxmark RFID tool, one discarded/expired keycard, and a minute of trial and error. wired.com/story/one-minute-a…
Nico Golde retweeted
At the #Osmocom Developer Conference, Steve Markgraf (creator of rtl-sdr) just released osmo-fl2k: Turning USB VGA dongles into a transmit-only SDR osmocom.org/projects/osmo-fl… git.osmocom.org/osmo-fl2k
Nico Golde retweeted
#osmocom You can transmit fake GPS signals on the 11th harmonic of a cheap USB-VGA converter people.osmocom.org/steve-m/f…