gsch

iOS VR @prdgmshift

[gsch @__gsch]

@nyan_satan @gre3nSnow (: I know hahaha

[freemyipod @freemyipod]

Click-click! A very basic GPIO support for iPod nano 7th generation running Linux 6.14

[Paradigm Shift @prdgmshift]

Oh, one more thing… our new website is live! 🌐 https://t.co/RtbbfxjTNJ
Still lots in the works - from our research blog to other initiatives - but here’s a nice sneak peek for now 👀

[gsch @__gsch]

@b_nnett @Xernium It was but unfortunately there's no recording. Whenever I get to documenting all this stuff I'll post an update here :)

[gsch @__gsch]

And the penguin has finally emerged from the black void🐧

[gsch @__gsch]

@b_nnett @Xernium Not really a blogspot but there's a better explanation in this slides :) https://t.co/gFrBdKIs1I

[Hexacon @hexacon_fr]

Another newcomer is sponsoring us this year: @prdgmshift!

@prdgmshift is an independent European EU leader in cybersecurity research. With a team of world-class researchers, we uncover critical zero-days and deliver state-of-the-art research to keep our partners one step ahead.

[john @nyan_satan]

Here are the slides from my & @__gsch's & q3k's 0x41con 2025 talk - "1,000 bugs in your pocket"

It's about non-iOS iPod hacking

https://t.co/D2wKoOMp8G

[john @nyan_satan]

Amazing as always! Thanks to the organizers and attendees!

I had honor to present my & @__gsch’s & q3k’s talk titled “1,000 bugs in your pocket”

We’ll likely publish the slides soon

[gsch @__gsch]

@re_jevi S5Late https://t.co/4fUuOAnLDa
Also implemented in wInd3x https://t.co/xhKnOd0ylH

[gsch @__gsch]

Still WIP but to answer some people's question: yes, it can :)

[gsch @__gsch]

@b_nnett Not for now. The bootrom exploit (S5Late) is tethered, and there's no driver for its NAND yet. I'm running from an NFS. In the future when proper driver support is in place it could be made untethered by using the ipod_sun exploit. Cool to hear it's gaining some interest :)

[gsch @__gsch]

@Xernium Maybe next month but no promises :)

[gsch @__gsch]

Getting some earlyprintk going for the iPod Nano7 after I managed to get USB working on U-Boot. Also figured enough of the LCD controller to draw on the screen.
This is all thanks to previous work by q3k :)

[gsch @__gsch]

Turns out you could access DiagShell in iPod Nano7 without any exploit by just sending the diag image after WTF. And memrw works so you can read/write anywhere 🙃

[gsch @__gsch]

After working together with q3k, wInd3x now supports iPod Nano 7G by using S5Late. That makes decrypting and running custom binaries very straightforward.
https://t.co/xhKnOd16bf

[john @nyan_satan]

iPod shuffle 4 (S5L8443) is now also O B L I T E R A T E D by virtue of @__gsch's S5Late bug

(Yes, the ROM is so similar to S5L8723, that they didn't even bother changing serial number string)

[john @nyan_satan]

Here is my preliminary iPod nano 6 (S5L8723) port of the new bootrom exploit by @__gsch - S5Late

As usual, be careful with this and etc.

https://t.co/lHf3Ad4cL6

[gsch @__gsch]

@guyru_ @CellebriteLabs Appreciate the offer but I'm happy at my current position :)

[gsch @__gsch]

iPod Nano 7G bootrom exploit a bit too late ~ https://t.co/4fUuOAnLDa

[gsch @__gsch]

@CyberMehul @travisgoodspeed Hence the "a bit too late". Also it's still fun to do, no need for people to use it :)