Computer Engineering @unipisa | CTF @fibonhack @aboutblankets | Blockchain Security @osec_io

Joined June 2016
My first critical vulnerability reported to hackerone just got disclosed! Looking at Brave Browser source is a fun way to learn about chromium internals btw 👀
1
3
58
5,065
Another fun bug, we turned a Linux kernel timer UAF into a kernel read/write on Android, root + SELinux permissive. Great work @ryaagard! Stay tuned for more 🦦
6
26
2
337
14,644
nick0ve retweeted
In 2026, no program is closed source. We decompiled a propAMM into Rust that recompiles to the exact on-chain binary, then used it to find a critical bug that put $6.1M at risk.
22
72
15
539
31,015
Last week two of our researchers hacked Oracle Autonomous AI Database with a 4 bug chain. Blog post coming soon 🦦🦦🦦 Great work @deltaclock and @BrunoModificato!
1
61
1,634
Un attacco informatico ha colpito nella notte i sistemi di refrigerazione di decine di supermercati francesi, tra cui Intermarché, Leclerc e Super U, causando ingenti perdite di prodotti alimentari freschi e surgelati. Gli hacker avrebbero sfruttato versioni obsolete del software del produttore danese Danfoss per attivare lo sbrinamento continuo degli impianti, impostando temperature fino a 50 °C. I danni complessivi potrebbero raggiungere diversi milioni di euro
107
234
85
1,770
328,703
nick0ve retweeted
mathematicians experiencing what CTFers have been going through for the past year
the terrance tao crashout is something to behold
7
40
2
458
20,483
They really decided it was a great idea to drop 13M lines of slop lean?
Checking that a major mathematical proof is correct can take years. Formalization—converting the mathematical reasoning into a form computer proof assistants like Lean can verify—can help. Last month, Claude completed the first formalized proof of Fermat’s Last Theorem, one of the most famous theorems of all time. This was a project experts thought would take many years. It is the largest Lean proof ever written. Fermat’s Last Theorem was first proven in 1995 by Sir Andrew Wiles, more than 350 years after it was conjectured. Our proof, which totals over 13 million lines of code, provides machine verification. More importantly, it proves over 29,000 other theorems that the proof requires, across many areas of math which had never before been formalized. We see this as a major step in the long process of firming up the core of mathematical knowledge, building on work from three centuries of mathematicians and hundreds of contributors to Lean and Mathlib. We are optimistic that AI-assisted verification of mathematical proofs will help reduce the burden of refereeing mathematics in an era where more proofs are being produced than ever before. You can read about the process on our Science Blog: anthropic.com/research/forma… And see the complete proof on GitHub: github.com/anthropics/fermat…
2
7
1,488
nick0ve retweeted
New exploit: “xor dword [0xf80c2094], 1<<22” Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed. github.com/xoreaxeaxeax/skit…
167
1,072
184
8,178
1,099,286
nick0ve retweeted
Schrödinger’s TOCTOU — a bug class where a struct’s size mod 16 decides if you’re exploitable, where -O2 saves you and -O3 kills you, where a compiler upgrade introduces the bug, and a downgrade… introduces it too. Invisible, intractable, everywhere. github.com/xoreaxeaxeax/schr…
4
38
4
219
30,910
nick0ve retweeted
the stochastic parrots are getting pretty lucky
63
508
34
7,326
266,493
nick0ve retweeted
We're launching a $100,000 fund to save CTFs.
17
104
17
647
65,914
the real winners of DEFCON quals
Replying to @NotDeGhost
claudio and gepetto
2
13
1
133
17,251
nick0ve retweeted
DEF CON patched our QEMU nday, what about a 0day? kqx.io/post/qemu-0day
49
3
234
26,375
4-Byte Heap Overflow To RCE In Minecraft by @ryaagard
1
11
94
6,181
Dialed in! Nikolaos Mourousias (@deltaclock), Caue Obici (@caueobici) & Bruno Halltari (@BrunoModificato) of OtterSec used a Code Injection bug to exploit LM Studio in the second round, earning $20,000 and 4 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
2
14
1
57
11,467
nick0ve retweeted
The worst LPE in years on the kernel drops and we're hosting a CTF next week. Want to participate in an incredible hacking camp in Rome next october, hosted by our friends @cybersaiyanIT ? Get on board and qualify your team! till-dawn.fibonhack.it/ ctftime.org/event/3111
1
7
3
16
2,193
The pre-release version of Anchor v2 is out. v2 is over 90% smaller and 3-6x faster than v1, and represents months of work focused on speed, extensibility, and security. This is a major architectural change from a dense macro-based framework to a more easily extensible trait system, with security built in from day one. Excited for teams to give it a try. Still a few rough edges, but please DM/comment with any feedback!
11
47
9
215
27,863
nick0ve retweeted
We achieved a guest-to-host escape by exploiting a QEMU 0-day where the bytes written out of bounds were uncontrolled. Full breakdown of the technique, glibc allocator behavior, and our heap spray/RIP-control primitive ↓
7
112
9
548
49,734
nick0ve retweeted
How a single typo led to RCE in Firefox Can you spot the bug? Read now at: kqx.io/post/firefox0day/
6
90
8
617
149,315
nick0ve retweeted
👀 Seems like our autistic bandwagon is going to organize another s̶u̶f̶f̶e̶r̶i̶n̶g̶ ̶p̶a̶r̶t̶y̶ CTF. If you want to know some behind-the-scene details, hurry up and grab your ticket!
Want to join us for the first #RomHackBẏtes? Seats are limited - reserve yours now to see @fibonhack live! 🚩 "Inside From Dusk Till Dawn: Behind the Flags" 📅 Feb 20 | 18:30 CET 👉 Registration: forms.gle/EGT3LKJXoJ4xWcEN9 Online: romhack.io/live
3
1
11
874
nick0ve retweeted
Spend the summer in NYC (we cover rent). Work alongside our team on audits and tooling, learn how we actually do security research, and get support for your own projects. Apply below ↓
14
30
4
245
38,815