panic oriented full heap groomer

Joined November 2021
Your bad humor about the article cannot justify such a big-scale genocide and every single person took part in it - including the *cool-vibed* DFSec researchers. Shame on every single of them.
unavailable
3
36
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
Google Maps has been updated to show Zionist-holocausted Gaza. This is part of Rafah.
304
6,455
433
28,865
4,183,877
Nice finding, but bro, you ought to publish a write-up, not a drama novel. 80% of the whole text tries to convince the reader how dramatic this is. C'mon bro, I was reading a memory corruption writeup and my emotions are unnecessarily triggered. xitter.cf/_MrNiko/status/2103919โ€ฆ
iMessage EXR. zero click. heap overflow before the banner finishes. CVE-2026-86869. libAppleEXR sizes the buffer for 3 channels. 12 bytes. CompressedInterleave4 writes 4. 16 bytes. every pixel. three of those four bytes come from the file. BlastDoor never decodes EXR. Spotlight and the photo indexer do, later, with SDR hardcoded on. no tap. same ImageIO path on iPhone, iPad, and Mac. fixed in the 27 releases. older fleet still sits on it. credit: Niels Hofmans / ironPeak ironpeak.be/blog/ex-arrr-saiโ€ฆ #iOS #ExploitDev #InfoSec
3
65
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
Her name is HIND RAJAB๐Ÿ’๐ŸŒท ๐Ÿคž๐Ÿพ๐Ÿชถโ™พโค๏ธ And She was more brave than every single one of you at ESPN
Kyrie Irving has offered to pay Houston Texans linebacker Azeez Al-Shaair's $11,941 fine for having the name of a Palestinian girl killed in Gaza written on his eye black during Sunday's game against the Buffalo Bills. spr.ly/6012BGpQce
2,013
54,018
1,301
223,929
6,478,395
bro if you give playing your game to LLM, too, then what exactly are you going to in the saved time ๐Ÿ˜‚ xitter.cf/wuyang_zhou/status/209โ€ฆ
I asked GPT-6 Astra to mine a diamond in Minecraft using computer use, then went to sleep. Woke up to a diamond in its inventory ๐Ÿคฏ๐Ÿคฏ๐Ÿคฏ Setup in the replies.
77
cellebrite lobbying on apple
Apple released CloudOS firmware images for iOS 26.4 and 26.4.1, none of the images contain vphone600 files. Meaning it is not possible to virtualize these versions
2
270
backdoor grade bug
Time to talk about this one. CopyFail (CVE-2026-31431) โ€” a 732-byte Python script that roots every Linux distro shipped since 2017. ๐Ÿงต
2
253
A classical @apple bad UX story: To insert an extra icon into the dock, one needs a multi-million dollar full chain exploit.
Five icon dock on 18.6.2
1
220
when eta $CLBT stock decrease, bump this up X!
Fully virtualized iPhone with SSH, SEP and kernel debugging running iOS 26.1. ๐Ÿ‘‡
1
1
1,007
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
๐Ÿ—ž๏ธA fully working iOS 26 virtual iPhone now runs on Apple Silicon using PCC firmware โ€” with public setup instructions. This could be a new path for security researchers without depending on Corellium๐Ÿ”ฅ onejailbreak.com/blog/ios-26โ€ฆ
6
90
8
910
87,852
Omitting the truth that even single bit of info might be valuable for the attackers. Not publishing detailed info only increases the bar and helps only more skilled attackers who can retrieve enough good info from summaries. xitter.cf/qriousec/status/202249โ€ฆ
Replying to @qriousec
Maybe try reading our profile declaration. Sometimes weโ€™ll publish a blog post,but only if we believe itโ€™s harmless. More importantly, it has to offer something genuinely new to the reader. If you came here expecting a PoC or full disclosure,you probably going to be disappointed.
108
> Discord gets a new CEO > Starts requiring your biometric data > The CEO is literally from Israel Bro you canโ€™t make this up
Discord will age-restrict users from certain features starting next month unless the user sends a face scan or ID. All accounts will get a restricted "teen" experience by default: - No access to age-restricted or NSFW servers and channels - Cannot speak in Stage channels - Automatic filters applied to sensitive or graphic content - Warnings shown on friend requests from unfamiliar users - Direct messages from non-friends filtered into a separate requests inbox To unlock full adult access, users must verify they are 18+ with one of these options: - Facial age estimation (a short video selfie processed on your device, not stored by Discord) - Uploading a photo of a government-issued ID (data deleted after verification)
1,352
28,399
1,506
235,751
8,074,412
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
Linux running in a PDF file via a RISC-V emulator compiled to JS
68
373
55
2,965
138,568
reminds me Israelis stealing everything of Palestinians; including land (3000 old cool story), dishes (humus), mottos ("from river to sea"); bastard behavior.
๐Ÿ’ฃ We caught @ycombinatorโ€“backed @gecko_sec stealing two of our CVEs, one on @ollama , one on @Gradio. They copied our PoCs, claimed CVE IDs, and even back-dated their blog posts. Hereโ€™s the full story ๐Ÿ‘‡
218
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
.@Apple A19 SoC chip analysis based on images by @chipwise_tech: 2 P-cores with 8MB shared L2$, 4 E-cores with 4MB shared L2$, a 8-core NPU (Apple calls it 16-cores), 2x 6MB System Level Cache (SLC) and a 5-core GPU. All on TSMCs N3P and smaller than the previous A18.
27
99
6
660
54,275
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
Replying to @h0mbre_
Maybe the real fuzzing was the friends we made along the way
1
1
7
3,195
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
Today Israel ripped a girl in half. Her body was literally split in half. They have the most advanced weaponry in the world. They are testing weapons never before seen. And theyโ€™re doing that all on little kids. They literally ripped a human body, a tiny girl, in fucking half.
622
21,141
349
57,901
1,330,341
Potato Soup ๐Ÿ‡ต๐Ÿ‡ธ retweeted
Remembering a holocaust while committing one is wild
Israel comes to a standstill when the siren sounds on Holocaust Remembrance Day. A moment of silence โ€” renewing our eternal promise to keep the memory of Holocaust victims and survivors alive. #WeRemember
574
39,627
185
182,081
3,141,258