iOS exploits, (de)compilers, etc. — https://xitter.cf/t.co/Tdx9Z5i1Ks

0x19c3fc000
Joined January 2019
The slides from my @0x41con 2023 talk are now available: jonpalmisc.com/2023/07/31/ge… They were primarily designed to supplement my speaking (and the PDF doesn't have animations), but you may still find them useful. Reach out if you have questions.
5
35
1
133
15,398
jonpalmisc retweeted
I'm sorry, but you don't get to have it both ways. I fully empathize with the human grace aspect here, and the amount of work put in by the OAI security team and the enormity and novelty of the challenges they face, but your own leadership (and every frontier lab) has been sounding the alarm for too long about the existential threat to humanity and societal order your own technology poses. You don't get to set the stakes that high, willingly *choose* to train your models to perform offensive cyber, *repeatedly* fail your basic responsibility in spectacular ways, and throw your hands up and say "whoops, it happens!" To be clear, I truly understand that mistakes can and do happen (we're only human) and sometimes the unexpected can occur. But these are no longer exceptional, isolated cases. It's become a pattern of systematic failure, and from the outside, the only explanation is incompetence, organizational failure, or a lack of caring either at the leadership or employee level. If you're telling us that the latter part is wrong, that you have the best employees in the world and they care a lot about solving this, then I believe you. But the problem is still somewhere else, and you still don't get to have it both ways.
Took a minute to write a few words about security & safety as someone who lived through it all at OpenAI. I hope my thoughts help someone out there.
25
62
3
588
30,693
I've updated arm.jonpalmisc.com for the 2026.06 release of the Arm spec. Search should be better too. Please shout if anything has broken or is worse!
1
3
19
1,729
jonpalmisc retweeted
Had a lot of fun reversing Coruna over the last couple weeks and decided it would be worth to write it all up before I forget - so enjoy :) littlelailo.github.io/writeu…
4
90
3
282
57,106
jonpalmisc retweeted
0x41con 7 Mad props to Anna and @qwertyoruiopz for hosting and organising this edition! Kudos to all the speakers! And thank you all for being part of it!
17
5
59
25,585
Another great year of @0x41con, credit to @xerub and @qwertyoruiopz for keeping the tradition alive 🔥
1
1
15
515
jonpalmisc retweeted
Solid recipe. I recommend adding the optional chocolate chips.
1
7
403
can anyone vouch for the brownie recipe in the Dyld shared cache?
4
13
161
11,844
jonpalmisc retweeted
0x41con 7th edition, Napoli, 23-24 April. Expect fireworks at random times! Scientists still unsure why they occur at 3:47pm on random Thursdays.
1
14
1
68
12,300
Provided without explanation
3
1
9
4,452
jonpalmisc retweeted
The OG is cooking for 2026. Stay tuned. 0x41con.org
10
1
55
6,816
For whoever might be interested, finally got some time to put together an iBoot & SecureROM loader for both Binary Ninja and IDA that maps segments (TEXT, CONST, DATA, BSS) correctly: github.com/jonpalmisc/ibis
1
6
9
512
Still a WIP, but should be useful so far. Would also like to look into how microkernel iBoot works some more and see if there's any improvements that can be made there.
2
1
258
5f871d7401a91c90bb95a07639e0a0fe1f31928a20ec0e3d478a66ff6cffc42115115092be9a464486effd59f321c58c a2d8d24f3067e175b98a0ab17a91fd634fde73653e2100eaac22f1dc2d2d1d8b460f9a944d4914e05bf32ff351fafe79 @iBSparkes
2
2
4
614
32643be02e80c365ca520604969ccb224b4d23cb8954819db34fb5785765277ced9ead7fb24d880859fb1e3a0442a601
1
2
1
460
Quick update to arm.jonpalmisc.com: - Docs updated to 2025.09 revision - Some visual improvements - Maybe better search(?) (you tell me) Should be strictly improvements, but lmk if anything seems to have regressed :)
2
2
8
410
Search continues to be a bit of a nightmare—one day I'll write a better library but for now I'll keep fighting Pagefind... P.S. If anything seems wonky, try emptying your cache.
1
1
254
jonpalmisc retweeted
RE//verse 2026 CFP is open! Want to be apart of the lineup? Submit your talk: sessionize.com/reverse-2026
15
3
21
11,275
jonpalmisc retweeted
Just released a short writeup for the A9 version of the Trigon exploit, which involves getting code execution on a coprocessor before exploiting the kernel - enjoy! alfiecg.uk/2025/07/16/Trigon…
4
35
165
20,716
Two new arm.jonpalmisc.com updates: - the search bar should now return better results thanks to better page indexing; and - when it doesn’t, there are now “all instructions” and “all registers” pages you can CMD+F manually.
2
5
486
I like em dashes, and I hate that some people now take them as evidence of text being AI generated.
502
499
187
7,122
741,610