Security Engineer | prev: @Apple | Opinions my own

Dubai
Joined March 2018
I remember looking at my first payslip for my first month working at Apple in Paris and seeing a 6 digit cost to employer (majority of which was taxes/social charges). I was convinced it’s a typo…
Anthropic Head of Sales position in France: Company spend 530k€ per year 🇫🇷 gov get 340k€ employee get 190k€ All is fine.
8
4,408
so excited to finally share something I’ve been working on alongside many brilliant colleagues. MTE will truly raise the bar for memory safety. security.apple.com/blog/memo…
8
44
4
346
35,033
I like computers
1
5
2,194
Rajvardhan Agarwal retweeted
I hate the “It’s just a job” discourse. I genuinely love programming. It’s sad that we mock people for enjoying their work.
116
126
36
1,563
211,392
Rajvardhan Agarwal retweeted
We are finding the sponsor for the DEFCON final. If you are interested in, please mail our mail - [email protected]
4
6
6,103
Rajvardhan Agarwal retweeted
Collaborated with @dicegangctf and CodeRed in DEFCON CTF! Finally, we qualified as 4th place in qual 💪💪
5
3
33
15,457
Extremely shocking, he was such an amazing person :(((
I learnt that Zach Riggle, the author of pwndbg, passed a few days ago. We weren't close friends, but acquaintances, and discussed stuff in Twitter DMs. I am sad. My Twitter DMs have lost multiple good folks in the last years :( smithfamilyfuneralhomes.com/…
4
3,888
Enjoy our blog post on Cosmos security 👇
Building on Cosmos? Check out our latest blog post for a security focused introduction to Cosmos. Exploring Cosmos: A Security Primer zellic.io/blog/exploring-cos…
1
4
4,670
Zero cost abstractions don’t exist
5
3,380
Wow, wild to think it's been a bit over 5 years since I got into infosec. It all started with picoCTF. Met so many amazing people along the way and of course played a lot more CTFs. Truly grateful for all opportunities and experiences I've had. Hopefully, there's more to come!
2
2
37
9,181
Rajvardhan Agarwal retweeted
We audited SPL-Token-2022 for the @SolanaFndn. It's an update for the SPL-Token program. In our review, we found an inflationary bug that would've allowed infinite minting of tokens for free. The audit was pre-launch. The code was not enabled, so no funds were at risk. 👇🧵
2
12
2
51
Rajvardhan Agarwal retweeted
Zellic is proud to be the first audit firm backing their audit with a real stake. Incentive alignment is a HUGE industry-wide problem, and founders deserve better! Our partnership with Ante Finance is the first step toward addressing this issue: 👉zellic.io/blog/ante-x-zellic
4
9
7
48
CVE-2021-4034, No idea how this went unnoticed for so long. Probably worse than the sudoedit bug.
7
75
4
384
Apparently, it was found and reported back in 2013🤦 xitter.cf/ryiron/status/14862071…
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
16
Looks like the only web task on defcon quals was also pwn... @oooverflow
Browser exploits are the only right way to solve frontend web tasks
2
13
1
70
I wrote a 1day exploit for chrome CVE-2020-16040. It includes a typer hardening bypass. Works for chrome version <= 87.0.4280.88 github.com/r4j0x00/exploits/…
7
232
4
802
Play CTF. If anyone is starting out, I would strongly recommend to complete the binexp category from @picoctf. It has a decent difficulty curve and you can always read writeups if you get stuck. Complete the binexp challenge sets from 2019 and this year, you will learn tons.
getting several 'how do i get started in binary exploitation' DMs lately and i have no idea im sorry, im just getting started myself and im just as confused as you are 😅
4
33
2
155
Other wargames like pwnable.kr, pwnable.tw, pwnable.xyz etc are also good to practice with.
1
3
25