benjamin

In the middle of an NSExpression evaluation

[benjamin @____benjamin]

I’m leaving twitter, follow me on https://t.co/AEFAzbbISC

[benjamin @____benjamin]

:-) Secure OS

[benjamin @____benjamin]

I always appreciate when I end up clicking on the wrong button/item because the UI refreshed right before

[benjamin @____benjamin]

Happy holidays! ❄️

[Ivan Krstić @radian]

🔺New on the Apple Security Research blog: we pit our hardened kalloc_type XNU allocator against SockPuppet, a powerful vulnerability from the past: https://t.co/UyTkz1slu3

[benjamin @____benjamin]

macOS 13.3.1 still has the bitcoin paper, do the update

[benjamin @____benjamin]

FUNCTION(FUNCTION({"🎉", "Year", "Happy New"}, "sortedArrayUsingDescriptors:", {FUNCTION(CAST("NSSortDescriptor", "Class"), "sortDescriptorWithKey:ascending:", "hash", 1)}), "componentsJoinedByString:", " ")

[benjamin @____benjamin]

FUNCTION({"Merry", "Christmas", "🎅"}, "componentsJoinedByString:" , " ")

[benjamin @____benjamin]

Trying out Mastodon, find me at @[email protected]

[Filippo Bigarella @FilippoBiga]

Towards the next generation of XNU memory safety: kalloc_type https://t.co/cJepkb3tzq

I’m so happy that the team finally gets to share the details of this huge effort. And I’m so proud I had the chance to work on it in the past couple of years. :)

[benjamin @____benjamin]

Need offsets? Please ask @tihmstar

[Nicolas @NManichon]

@tihmstar Just patch ********* bro

[tihmstar @tihmstar]

oh the jailbreak works, just never turn on wifi on the device ._.

[benjamin @____benjamin]

@tihmstar I’ve been there and I can tell you it’s true. 100%

[benjamin @____benjamin]

That feeling when you keep reviewing the same code over and over again, and don’t spot any bug. But then you decide to do some very targeted fuzzing which leads to a crash in <10min. - and that’s an actual vuln.

[Alex Plaskett @alexjplaskett]

✍️ 1/ Want to learn how to bug hunt in hard targets and find high impact issues? Here’s a short Sunday 🧵for those starting out and some general thoughts from over the years on software security:

[benjamin @____benjamin]

@qwertyoruiopz happy birthday 🎉

[chompie @chompie1337]

look i don’t write code, i just read it. i check out its vibes and move on with my life

[benjamin @____benjamin]

Developer catching all Java exceptions when parsing untrusted data but the JVM does not throw any for integer overflows ¯\_(ツ)_/¯

[benjamin @____benjamin]

Happy New Year 🎉