Pinned Tweet
The slides from my @0x41con 2023 talk are now available: jonpalmisc.com/2023/07/31/ge…
They were primarily designed to supplement my speaking (and the PDF doesn't have animations), but you may still find them useful. Reach out if you have questions.
jonpalmisc retweeted
I'm sorry, but you don't get to have it both ways. I fully empathize with the human grace aspect here, and the amount of work put in by the OAI security team and the enormity and novelty of the challenges they face, but your own leadership (and every frontier lab) has been sounding the alarm for too long about the existential threat to humanity and societal order your own technology poses.
You don't get to set the stakes that high, willingly *choose* to train your models to perform offensive cyber, *repeatedly* fail your basic responsibility in spectacular ways, and throw your hands up and say "whoops, it happens!" To be clear, I truly understand that mistakes can and do happen (we're only human) and sometimes the unexpected can occur. But these are no longer exceptional, isolated cases. It's become a pattern of systematic failure, and from the outside, the only explanation is incompetence, organizational failure, or a lack of caring either at the leadership or employee level.
If you're telling us that the latter part is wrong, that you have the best employees in the world and they care a lot about solving this, then I believe you. But the problem is still somewhere else, and you still don't get to have it both ways.
I've updated arm.jonpalmisc.com for the 2026.06 release of the Arm spec. Search should be better too. Please shout if anything has broken or is worse!
jonpalmisc retweeted
Had a lot of fun reversing Coruna over the last couple weeks and decided it would be worth to write it all up before I forget - so enjoy :)
littlelailo.github.io/writeu…
Another great year of @0x41con, credit to @xerub and @qwertyoruiopz for keeping the tradition alive 🔥
jonpalmisc retweeted
The OG is cooking for 2026. Stay tuned. 0x41con.org
For whoever might be interested, finally got some time to put together an iBoot & SecureROM loader for both Binary Ninja and IDA that maps segments (TEXT, CONST, DATA, BSS) correctly:
github.com/jonpalmisc/ibis
5f871d7401a91c90bb95a07639e0a0fe1f31928a20ec0e3d478a66ff6cffc42115115092be9a464486effd59f321c58c
a2d8d24f3067e175b98a0ab17a91fd634fde73653e2100eaac22f1dc2d2d1d8b460f9a944d4914e05bf32ff351fafe79
@iBSparkes
Quick update to arm.jonpalmisc.com:
- Docs updated to 2025.09 revision
- Some visual improvements
- Maybe better search(?) (you tell me)
Should be strictly improvements, but lmk if anything seems to have regressed :)
jonpalmisc retweeted
RE//verse 2026 CFP is open! Want to be apart of the lineup? Submit your talk: sessionize.com/reverse-2026
jonpalmisc retweeted
Just released a short writeup for the A9 version of the Trigon exploit, which involves getting code execution on a coprocessor before exploiting the kernel - enjoy! alfiecg.uk/2025/07/16/Trigon…
Two new arm.jonpalmisc.com updates:
- the search bar should now return better results thanks to better page indexing; and
- when it doesn’t, there are now “all instructions” and “all registers” pages you can CMD+F manually.















