HW/FW security researcher @ fruit company
Canada
Joined May 2009
- Tweets2K
- Following418
- Followers1.3K
- Likes3.6K
Jeremy Boone retweeted
Broadcom and Cypress chips have the same HCI "backdoor" allowing to write to the Bluetooth chip's RAM. This feature is used for firmware patches.
We didn't request CVEs for that 9 years ago. Instead, we built the InternalBlue Bluetooth research framework.
github.com/seemoo-lab/intern…
🔷 A backdoor in the ESP32 chip would allow it to infect millions of devices. Miguel Tarascó and @antonvblanco have revealed this at the @rootedcon this backdoor and presented a tool to perform Bluetooth security audits on any gadget.
tarlogic.com/news/backdoor-e…
Jeremy Boone retweeted
any interest in working on security in compilers? my team is looking for someone with a peculiar intersection of skills/interests:
jobs.apple.com/en-us/details…
Jeremy Boone retweeted
🔺New on the Apple Security Research blog: introducing Private Cloud Compute! We believe this is the most advanced security architecture ever deployed for cloud AI compute at scale. security.apple.com/blog/priv…
Jeremy Boone retweeted
Are you excited to use the power of safe modern programming languages like Swift to make software more secure? My SPEAR team at Apple is hiring a Swift Software Engineer to do exactly that! jobs.apple.com/en-us/details…
Jeremy Boone retweeted
🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. security.apple.com/blog/imes…
Jeremy Boone retweeted
Is remote code execution in UEFI firmware possible?
Yes it is.
Meet #PixieFAIL: 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers.
Full details by @fdfalcon and @4Dgifts in our new blog post:
blog.quarkslab.com/pixiefail…
ALT Pixies are said to reward consideration and punish neglect of server maintenance on the part of larger humans, they bring blessings to those who are fond of timely patching.
Jeremy Boone retweeted
New Blog: Technical Advisory – Multiple Vulnerabilities in Nagios XI research.nccgroup.com/2023/1…
Jeremy Boone retweeted
New Blog: Technical Advisory: Sonos Era 100 Secure Boot Bypass Through Unchecked setenv() call research.nccgroup.com/2023/1…
Jeremy Boone retweeted
New Blog: Shooting Yourself in the .flags – Jailbreaking the Sonos Era 100 research.nccgroup.com/2023/1…
Jeremy Boone retweeted
Shooting Yourself in the .flags – Jailbreaking the Sonos Era 100
The Era 100 is Sonos’s flagship device, released on March 28th 2023. NCC found weaknesses within the bootloader which can lead to full compromise of the device.
research.nccgroup.com/2023/1…
research.nccgroup.com/2023/1…
Jeremy Boone retweeted
Public Report – Caliptra Security Assessment During August and September of 2023, Microsoft engaged NCC Group to conduct a security assessment of Caliptra v0.9. The assessment identified 26 vulnerabilities, which were promptly addressed by the Caliptra... bit.ly/3SaMNWM
Jeremy Boone retweeted
New Blog: Public Report – Caliptra Security Assessment research.nccgroup.com/2023/1…
Jeremy Boone retweeted
Public Report – Caliptra Security Assessment During August and September of 2023, Microsoft engaged NCC Group to conduct a security assessment of Caliptra v0.9. The assessment identified 26 vulnerabilities, which were promptly addressed by the Caliptra... bit.ly/3QoVImr
Jeremy Boone retweeted
OCP Tackles Data Center Security, Launches New Community-Led Security Program Improving IT Device Security Posture! OCP Security Appraisal Framework Enablement (S.A.F.E.) improves the trustworthiness of devices across all data center IT infrastructure. bit.ly/46ypGde
Jeremy Boone retweeted
The Qualys Threat Research Unit (TRU) has discovered a remote code execution vulnerability in OpenSSH’s forwarded ssh-agent. blog.qualys.com/vulnerabilit…
Jeremy Boone retweeted
New Blog: Overview of Modern Memory Security Concerns research.nccgroup.com/2023/0…
Jeremy Boone retweeted
New Blog: Technical Advisory – Multiple Vulnerabilities in Faronics Insight (CVE-2023-28344, CVE-2023-28345, CVE-2023-28346, CVE-2023-28347, CVE-2023-28348, CVE-2023-28349, CVE-2023-28350, CVE-2023-28351, CVE-2023-28352, CVE-2023-28353) research.nccgroup.com/2023/0…
Jeremy Boone retweeted
New Blog: Reverse Engineering Coin Hunt World’s Binary Protocol research.nccgroup.com/2023/0…
Jeremy Boone retweeted
New Blog: Medical Devices: A Hardware Security Perspective research.nccgroup.com/2023/0…