
Computer Engineering @unipisa | CTF @fibonhack @aboutblankets | Blockchain Security @osec_io
Joined June 2016
- Tweets363
- Following413
- Followers398
- Likes2.1K
Pinned Tweet
My first critical vulnerability reported to hackerone just got disclosed! Looking at Brave Browser source is a fun way to learn about chromium internals btw 👀
Brave Software disclosed a bug submitted by @nick0ve: hackerone.com/reports/197725… - Bounty: $3,000 #hackerone #bugbounty
nick0ve retweeted
Another fun bug, we turned a Linux kernel timer UAF into a kernel read/write on Android, root + SELinux permissive. Great work @ryaagard!
Stay tuned for more 🦦
nick0ve retweeted
Last week two of our researchers hacked Oracle Autonomous AI Database with a 4 bug chain. Blog post coming soon 🦦🦦🦦
Great work @deltaclock and @BrunoModificato!
nick0ve retweeted
Un attacco informatico ha colpito nella notte i sistemi di refrigerazione di decine di supermercati francesi, tra cui Intermarché, Leclerc e Super U, causando ingenti perdite di prodotti alimentari freschi e surgelati. Gli hacker avrebbero sfruttato versioni obsolete del software del produttore danese Danfoss per attivare lo sbrinamento continuo degli impianti, impostando temperature fino a 50 °C. I danni complessivi potrebbero raggiungere diversi milioni di euro
They really decided it was a great idea to drop 13M lines of slop lean?
Checking that a major mathematical proof is correct can take years. Formalization—converting the mathematical reasoning into a form computer proof assistants like Lean can verify—can help.
Last month, Claude completed the first formalized proof of Fermat’s Last Theorem, one of the most famous theorems of all time. This was a project experts thought would take many years. It is the largest Lean proof ever written.
Fermat’s Last Theorem was first proven in 1995 by Sir Andrew Wiles, more than 350 years after it was conjectured. Our proof, which totals over 13 million lines of code, provides machine verification. More importantly, it proves over 29,000 other theorems that the proof requires, across many areas of math which had never before been formalized.
We see this as a major step in the long process of firming up the core of mathematical knowledge, building on work from three centuries of mathematicians and hundreds of contributors to Lean and Mathlib. We are optimistic that AI-assisted verification of mathematical proofs will help reduce the burden of refereeing mathematics in an era where more proofs are being produced than ever before.
You can read about the process on our Science Blog: anthropic.com/research/forma…
And see the complete proof on GitHub: github.com/anthropics/fermat…
nick0ve retweeted
New exploit: “xor dword [0xf80c2094], 1<<22”
Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.
github.com/xoreaxeaxeax/skit…
nick0ve retweeted
Schrödinger’s TOCTOU — a bug class where a struct’s size mod 16 decides if you’re exploitable, where -O2 saves you and -O3 kills you, where a compiler upgrade introduces the bug, and a downgrade… introduces it too. Invisible, intractable, everywhere.
github.com/xoreaxeaxeax/schr…
nick0ve retweeted
We're launching a $100,000 fund to save CTFs.
nick0ve retweeted
4-Byte Heap Overflow To RCE In Minecraft by @ryaagard
nick0ve retweeted
Dialed in! Nikolaos Mourousias (@deltaclock), Caue Obici (@caueobici) & Bruno Halltari (@BrunoModificato) of OtterSec used a Code Injection bug to exploit LM Studio in the second round, earning $20,000 and 4 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
nick0ve retweeted
The worst LPE in years on the kernel drops and we're hosting a CTF next week.
Want to participate in an incredible hacking camp in Rome next october, hosted by our friends @cybersaiyanIT ?
Get on board and qualify your team!
till-dawn.fibonhack.it/
ctftime.org/event/3111
nick0ve retweeted
The pre-release version of Anchor v2 is out.
v2 is over 90% smaller and 3-6x faster than v1, and represents months of work focused on speed, extensibility, and security. This is a major architectural change from a dense macro-based framework to a more easily extensible trait system, with security built in from day one.
Excited for teams to give it a try. Still a few rough edges, but please DM/comment with any feedback!
nick0ve retweeted
👀 Seems like our autistic bandwagon is going to organize another s̶u̶f̶f̶e̶r̶i̶n̶g̶ ̶p̶a̶r̶t̶y̶ CTF. If you want to know some behind-the-scene details, hurry up and grab your ticket!
Want to join us for the first #RomHackBẏtes? Seats are limited - reserve yours now to see @fibonhack live!
🚩 "Inside From Dusk Till Dawn: Behind the Flags"
📅 Feb 20 | 18:30 CET
👉 Registration: forms.gle/EGT3LKJXoJ4xWcEN9
Online: romhack.io/live































