tukan

[tukan @_2can]

ptmalloc fanzine episode 05 - thread local caching in glibc malloc https://t.co/po2nMcXNGG

[tukan @_2can]

@withzombies Looking into this

[tukan @_2can]

@withzombies Well, if "Everyone in the audience is either using AI, is AI-curious, or is AI-anxious", that definitely didn't show up in the CFP proposals. The best talks were selected and they happen not to include anything AI.

[offensivecon @offensive_con]

Save the date. #Offensivecon25

[Binary Gecko @Binary_Gecko]

Check out our latest post about a vulnerability we disclosed to the Kernel Security Team - “Race conditions in Linux Kernel perf events”

https://t.co/DwY62kmdY0

[Binary Gecko @Binary_Gecko]

Check out our latest blog post “Sky’s the Limit – Quick Analysis and Exploitation of a Chrome ipcz TOCTOU Vulnerability”

https://t.co/IAIunRRccd

[Gyorgy Miru (Gym) @gymiru]

What is the limit of an employer owning your results? When I left TASZK I expected to not receive credit for my unpublished work. It was surprising to see my name erased from old articles.The reason why I write this post is my exemployer personally taking credit for my research/4

[Halvar Flake @halvarflake]

If the discussion about the future of humanity is Eliezer Yudkowski on one side and Marc Andreessen‘s manifesto on the other, we should without hesitation choose extinction.

[Blue Frost Security @bluefrostsec]

Slides and PoC for our Ekoparty presentation "I'm High" by @NicoEconomou: https://t.co/a1c8QdNuwM

[Blue Frost Security @bluefrostsec]

CVE-2023-2008 - Analyzing and exploiting a bug in the udmabuf driver by @dialluvioso_ and @esanfelix https://t.co/I4rqlpkcSx

[Blue Frost Security @bluefrostsec]

We've been asked to share the kernel challenge we had at OffensiveCon. You can download it at https://t.co/gV6YQvU4SD and give it a try. It was meant to be solved live at the conference, but apparently the noisy environment and german keyboard layout made it too hard :').

[n30m1nd @n30nfluke]

I wrote something on the @ExodusIntel blog 🙂 https://t.co/zVtax5p8aP

[Blue Frost Security @bluefrostsec]

Revisiting CVE-2017-11176: Introduction to Android/Linux kernel exploitation by @Firzen14
https://t.co/q5ap32FYGc

[Blue Frost Security @bluefrostsec]

We are growing our browser vulnerability research team! Full time Chrome research, flexible hours, huge bonuses and fun retreats. Contact us at: careers(at)bluefrostsecurity(dot)de

[offensivecon @offensive_con]

#OffensiveCon23 CFP is now officially open! https://t.co/lBV7A3YwOk Don't wait until the last minute to submit!

[KT @koczkatamas]

We've disclosed two remotely exploitable Linux kernel bugs in the Bluetooth stack: one infoleak and one UAF. More information here: https://t.co/QT5BbX4jNj and here: https://t.co/dd56s7UqTH (cc @theflow0)

[Blue Frost Security @bluefrostsec]

New blog post released!
Windows Segment Heap: Attacking the VS Allocator by @_vepe https://t.co/TRnkOS5JqG

[tukan @_2can]

@NikitaTarakanov @pwn_expoit Last I looked PAC in Chromium was limited to the pac-ret mode (only return addresses protected), so also easy?

[Taszk Security Labs @TaszkSecLabs]

Video and slides for “UnZiploc”: https://t.co/ikpCNVO3ph In our new OTA exploitation research on Huawei phones we explored remote interfaces to get RCE and escalate to TrustZone using logic bugs only.

[Ange @angealbertini]

Please RT - I have no job next: I was told that my request was likely to succeed, and I have custody of my kids, so I can't "return to the office" as I'm expected.