π«
π«
btw me and my friend are still looking for CCC tickets, if you happen to be willing to sell them please message me!! .-. #39c3
It's official. No hacker summer for me due to family health complications. I will miss everyone but hope you have a great (and safe) time!! β€οΈ
I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/
Please follow our workshop account @sureworkshop and RT it for visibility :).
We're proud to announce the release of Binary Ninja 5.0. Here's some highlights: Union Support, Dyld Share Cache & Kernel Cache, Firmware Ninja, Auto Stack Arrays, Stack Structure Type Propagation, and so much more. Check out the blog post for more information: binary.ninja/2025/04/23/5...
Does using #rustlang really make your software safer? tweedegolf.nl/en/blog/152/...
I'm proud to announce that I, through my company @magnetitesec.bsky.social, donated to the Redox OS project! If you're not familiar, Redox OS is a pure Rust Micro kernel based operating system. This donation allows them to sponsor one additional student for their Summer of Code!
I played @defcon.bsky.social CTF quals with @shellphish.bsky.social this year! I'm really impressed with the difficulty levels Nautilus Institute put forth. Making CTF challenges in the AI era has... special considerations... but they nailed it :-) Thanks to everyone involved for a great weekend!
Hey Steve! Would have loved to attend but a) waitlisted and b) wasn't feeling up to it (sinus headache from allergies I think). Hope it went great!
There is a small bug in the signature verification of OTA packages in the Android Open Source Framework.
Official builds doing normal double verification of packages are not vulnerable but OEMs and third party apps may be.
JΓ©rΓ©my Jourdois explains it here:
blog.quarkslab.com/aosp_ota_sig...
"Building a Linux Kernel Driver using Rust": rust-exercises.ferrous-systems.com/latest/book/...
I thought you loved C. You must be trolling.
Our Call for Presentations & Events is now open!
Got cool research, a fresh exploit, or a unique cybersec insight? Submit your talk & be part of Australiaβs biggest hacker con!
cfp.bsidescbr.com.au/bsides-canbe...
github.com/ariel-os/ari... /via @mattkeeter.com #rustlang
Don't forget, the CFP for the 40th anniversary issue of Phrack is open until June 15th 2025. You can be someone's favorite article in the future!!
bsky.app/profile/phra...
Global warming!! Someone outside has covid!!!
Having some fun with EM measurements today - side-channels are awesome!
Paged Out! #6 has arrived! And it's jam-packed with content!
You can download it here:
pagedout.institute?page=issues....
Actually I made a mistake and it is actually fixed in 6.14.
Tonight. AHA 0xDE.
If it is your first time attending, you will give an βintro talkβ. This is an opportunity to share about yourself and allow us to get to know you. This is an important part of the new attendee process. Please take it seriously.
If youβve given an intro talk before, but have [β¦]
Happy to share my slides from BOOTSTRAP25. Unfortunately the bug discussed is still not patched in Linux 6.14.0 despite it being reported explicitly. Slides are in markdown but there's a PDF in "releases" too github.com/jduck/bs25-s...
Not to mention specifically block and/or modify it
The sedexp Linux malware was disclosed in late 2024. In my talk at @kernelcon.bsky.social, I will present my own deep dive of the malware, including many parts that have not been made public, such as loading of a memory-only rootkit. Be sure to attend for a teardown with @volatilityfoundation.org 3!
Has anyone else seen m.imdb.com/title/tt0218... ? Eerie
Last week I attended Vector35 @re-verse.io RE//verse conference and it was great! Excellent food, high signal to noise (RE/VR), and great people. I scored some amazing schwag including a SIM transposer and a @binaryninja.bsky.social hacky sack! w00t!
On March 29th, I will be speaking at @bsidessd.bsky.social on Volatility 3, including all its new features and plugins. Be sure to attend to catch a sneak peak at the new framework before the major release later this Spring!
www.bsidessd.org
#DFIR #infosec
Digital vs film X-ray . Film offers higher resolution and better dynamic range with the same settings, but slightly longer exposure time (and more tedious image acquisition). Comes in handy when it comes to tiny electronics. Images of an Abbott Lingo continuous glucose monitor.
Yes and no on rust in the kernel. I really wish it was more and faster
BlackHoodie will be back at @ringzer0.bsky.social Bootstrap conference in Austin, TX π€ On Friday March 21st I'll be teaching Compiler Internals for Security Engineers, a class for women by women, and it's free. Register here blackhoodie.re/Ringzer0_Boo...
Nice! There's sadly a hugely tiny portion of comms on the Internet about exposing Rust to C (versus tons about wrapping C in Rust). I would love to see that change!