d3fp4r4m

Adafruit FT232H breakout FTW!

lmao, could you imagine the NSA rm-rf-ing *privilege* from all systems without context

There were all kinds of failed theories about the Internet magically defeating authoritarian censorship regimes, which the PRC has readily proven wrong, but staying competitive in the AI space (especially in English) while also controlling access to information might actually be even harder.

Run towards fires, not away. That will get you expert status in no time

happy new year 🎉

to continue the tradition, here is some of my favorite firmware & embedded security research of 2024:

Defeating the new Raspberry Pi's RP2350 Security Features [1]

Reversing and Hacking Firmware of an in-orbit Satellite to Re-establish Lost Communication [2]

All videos from The 38th Chaos Communication Congress (38C3) 2024:

media.ccc.de/b/congress/2...

#cybersecurity #informationsecurity #hacking #exploitation #iOS #android #apple #exploitation #reverseengineering #vulnerability

I seriously considered trying TypescriptToLua to help with those shortcomings but switched projects before trying it.

LUA has to be the easiest in actual embedding and bridging. However, It’s syntax and type management starts to get annoying for me with anything past simple scripts.

Author couldn't be bothered to write that one unit test that mattered

It's truly amazing we've reached the level of cybersecurity where China has hacked so many US telecom companies that the US government is now recommending the general public uses end-to-end encrypted messaging (something they spent the last 10+ years trying to ban "because terrorism").

This was my tenth(!) year building 25 days of puzzles for #AdventOfCode. You can solve them all for free! Most people write code to solve them, but you can solve them however you like. I hope they help people become better programmers. 🌟

The first puzzle comes out in two hours: adventofcode.com

Advent of Code is a great way to get your cranial juices flowing... Ok, that sounds gross, sorry.

I love it as a vehicle to play with a new programming language or two, or dust the cobwebs off an old one. I solved the first day's challenge with PHP!

Ty

nope, just a preference

I made the jump to kubuntu 24.04 as my host OS. It's the year of linux on the desktop for me. My windows workflows have been placed in a VM where they belong.

Reverse Engineering iOS 18 Inactivity Reboot Wireless and firmware hacking, PhD life, Technology

How does the new iOS inactivity reboot work? What does it protect from?

I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.

naehrdine.blogspot.com/2024/11/reve...

A collection of weggli patterns for C/C++ vulnerability research - hn security “No one cares about the old […]

I'm sure you're already aware of this resource, but in case others aren't, Marco Ivaldi released some nice weggli rules and wrote a blog showing some vulnerabilities he found with them.
github.com/0xdea/weggli...
security.humanativaspa.it/a-collection...

I think I have at least 5 projects in a pending state since 2018, the good news is that I do increment on them a little each year.

Bluehat talks are up www.youtube.com/playlist?lis...

YouTube video by Microsoft Security Response Center (MSRC) BlueHat 2024: S10: How Microsoft is Scaling DAST

Jason Geffner on scaling DAST
youtu.be/kfuOzDwv874

I'm here! thanks for the invite @wblummis.bsky.social :)