Still writing C code. Still Traveling In Style. Still ZB. Real. (he/him)

Arizona
Joined October 2012
I’ve spent more time inside the Twitter codebase than 99.9999% of humanity and folks, I literally don’t understand what it would mean to give someone a quick “tour” of “the Twitter code” – at Ciudad Autónoma de Buenos Aires, Argentina
63
75
18
1,695
Zack Brdge retweeted
Binary episode is live in 10 minutes. Today we have some questionably exploitable bugs in Edge, a SHA-3 int overflow, and a recent io_uring exploit. twitch.tv/dayzerosec
3
19
The alert came just before, felt like a long one, hope everyone is ok
735
1,728
163
51,680
Python 3.11 is out! 🎉 This is one of the most exciting releases in a while, including significant speed upgrades and better error messages. Here's what's new:
93
2,069
203
13,261
You heard about Pluto?
105
206
56
2,470
Eko eko ekooo... I will participate in @ekoparty conference next week. This time, I will talk about Misuse of Apple AirTags, and how to protect against them. Adding "reverse stalk engineering" and mimicking AirTag BLE techniques. Also, I will release a spoofing code for Flipper:
13
111
5
604
Lol
Charlie Crist absolutely destroyed Ron DeSantis and it’s absolutely f*cking glorious to behold.
stuart's restaurant, angle detail, route 12, worcester, massachusetts, 1984
9
1
58
VKCUBE ON @AsahiLinux !!!
12
44
2
629
SharedMemUtils - A simple tool to automatically find vulnerabilities in shared memory objects (commonly used for IPC in Windows services) This tool immediately uncovered potential exploitation routes in both Nvidia and Dell Audio services on my system. x86matthew.com/view_post?id=…
9
241
5
776
Zack Brdge retweeted
Tim Cook at the F1 doing the chequered flag
63
41
27
1,250
"Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules" #infosec #pentest #redteam github.com/ScarredMonk/Sysmo…
9
136
8
386
Latest git clone of CDE builds and runs on the OpenBSD ARM64 7.2 without any issues :)
6
12
2
74
Zack Brdge retweeted
I'll write a blog post soon - in the mean time check out this incredibly detailed blog post by @0vercl0k about reverse engineering tcpip.sys. this work made the REing of this bug much easier. doar-e.github.io/blog/2021/0…
3
41
226
Zack Brdge retweeted
“Golang’s core team released a patch that fundamentally changes how that language parses URLs. Before version 1.17, Golang considered semicolons within a URL query portion as a valid delimiter” Easy to miss but good vector for auth/authorization bypass! oxeye.io/blog/golang-paramet…
1
46
3
76