jndok

i write kernel extensions in javascript

[jndok @jndok]

Analysis and exploitation of Pegasus kernel vulnerabilities (CVE-2016-4655 / CVE-2016-4656): https://t.co/FemiwhHC2T

[jndok @jndok]

@IceSolst I mean, it really depends on what you like. That book was obviously written as an introduction to bin exp, so if you’re not really into that then of course it doesn’t make sense to start with it. My point was that it’s a good book for its intended purpose.

[jndok @jndok]

@IceSolst Lmao, good meme. But seriously though, if seeing some shellcode makes you yawn maybe binary exploitation is not for you ¯\_(ツ)_/¯

[jndok @jndok]

@_kaslr Thanks a lot! I’m glad after many years people are still finding this useful :)

[jndok @jndok]

Analysis and exploitation of Pegasus kernel vulnerabilities (CVE-2016-4655 / CVE-2016-4656): https://t.co/FemiwhHC2T

[jndok @jndok]

@s1guza @chompie1337 I agree and it’s true that luck can be involved in finding bugs, however doing it consistently and with good results (high quality bugs) involves time and effort. I would say that bug finding and exploit dev are two very different things that require very different skill sets.

[jndok @jndok]

@pedantcoder @jaakerblom I just checked. Did the poor kmsgs really deserve all of this?

[jndok @jndok]

@snare You mean the pickup switch above the strings? Yeah that’s a pretty bad design choice tbh but I think they only have it on the Les Paul models

[jndok @jndok]

@qwertyoruiopz lmfao, now that would be a galaxy brain move

[jndok @jndok]

I wore glasses for like 12 years of my life and seriously switched to contacts due to constantly not being able to see shit while wearing a mask

[jndok @jndok]

@0xAwayy @elonmusk Cool avatar bro where did u get it from?

[jndok @jndok]

03920bfb1597242717c6f450c75d45e2b87052d3805594400c62862c415e005faee23fc054061794f9e7768f74ca5b648c9e06d2d3be8a4d17d4df00978af818

[jndok @jndok]

@s1guza Happened to me at least a few times and it’s not a very good feeling at all, but worst one is when you accidentally mess up terminal tabs and rm -rf * in the one with all the source files because you thought it was the one with the device’s crash reports :X

[jndok @jndok]

tired: using git and writing careful commits

wired: spamming CMD+S and copy-pasting the source file you’re editing once in a while to back it up

inspired: spamming CMD+S and handling changes and reverts only through CMD+Z in your editor

[arturo182 is on Bluesky now @arturo182]

mood

[jndok @jndok]

For non-Italian speakers, “patatino” literally means “small potato” but it’s basically always used by a girlfriend to refer to the boyfriend in an extremely cringy way, this is way too specific to be a coincidence lmfao

[jndok @jndok]

Can some dyld people at Apple explain what the fuck is going on here?

[jndok @jndok]

@qwertyoruiopz Don’t tell me you bought a BMW M8 just for the “check-M8” joke...

[jndok @jndok]

R.I.P. to one of the coolest bugs I’ve ever found. Mach ports type confusions are a lot of fun. Great job by @WangTielei on his analysis!

Hash proof: https://t.co/ipW1PgI7K1

[jndok @jndok]

a8880d69ad30df37f1137bf14ab7d4d0f8270412c168dc7b2af4ef8b0b8f3d6bbb03198f8face6be1e2f9f625edb65dbb9dd1419528bbf63ff1c3c2b073ae45f

[jndok @jndok]

6db68c8bf64d3c468360d8553807d228b09101c01428e38f542db9ad1dff5be97ef6a15988979a220f62d8215eea86eac9016f5b397e560f7e51ccccfd400e3a

[sferrini @Simone_Ferrini]

If you are an iOS/macOS kernel Security Researcher, and you are looking for a new (EU based) job, working with an awesome team on hard challenges, send me a PM.

RT is appreciated!