Max

rpisec

[Justin Campbell @metr0]

Fortunately this http.sys bug was an internal find by our team. This one thanks to @_mxms, @fzzyhd1 and everyone who contributes to our tooling and automation.

[Max @_mxms]

@tekknolagi A child can attach to its parent if the parent calls ptrace(PTRACE_TRACEME, ...) or you modify yama_scope; whether or not gdb will be able to use the tty properly, I don’t know :p

[yrp @yrp604]

Do you want to gamble on fat bears for charity? #FatBear2020 is here. Get your brackets in before the 30th!

Details here: https://t.co/H71vEM16Xb

[Winnona 💾 @__winn]

These, combined with recent @WIRED reporting on Chinese espionage campaign Operation Skeleton Key targeting the Taiwan Semiconductor Industry (https://t.co/5d4XUlJUxP), suggests possibility of an explosion of new homegrown semiconductor companies in the mainland.

[Max @_mxms]

@SiouxDenim 🙉

[Max @_mxms]

There’s also a format string bug going the opposite direction (when your phones name is %p%p%p...) https://t.co/gGoOKTpxxG

[Frans Rosén @fransrosen]

If you have an AppleTV named as an XSS-payload it will trigger when AirPlay is used in Safari on iOS. A pretty far-fetched UXSS I would say.

[yrp @yrp604]

The second annual infosec fat bear bracket is here. Let’s gamble on some fat bears for charity. Brackets due ASAP.

https://t.co/Gj0fv7oCyn

[Max @_mxms]

@0xJeremy No CFG :(

[Justin Campbell @metr0]

It's not obvious from the advisory, but the same code runs in RDP client. The issues have been patched in both.

This would have allowed a malicious server to compromise a client without any alerting behavior, or a MitM attack with a warning confirmation.

[Justin Campbell @metr0]

August Patch Tuesday includes fixes for our internal finds in RDP, including RCE and remote info disclosure, and affecting Win 10 latest. The team successfully built a full exploit chain using some of these, so it's likely someone else will as well.

Patch and enable NLA.

[Max @_mxms]

Did anyone find / exploit the serialization bugs in TelOoOgram during DEF CON CTF?

[Justin Campbell @metr0]

We've built tools for fuzzing based on emulation of a process snapshot captured via minidump. We're considering open sourcing the tool, and I'm curious about interest level from the rest of the world. (1/3)

[Max @_mxms]

@RolfRolles @aaronportnoy Last year RPISEC was at the RPI club fair, and a person of color came to our table and saw the book, and asked the same thing. I’m incredibly happy they asked instead of assuming

[Real World CTF @RealWorldCTF]

#RealWorldCTF2018 RPISEC has successfully pwned the Safari browser and spawned a calculator on the victim host at their first attampt during the demostration!

[Brandon Falk @gamozolabs]

Vectorized Emulation: Hardware accelerated taint tracking at 2 trillion instructions per second

https://t.co/AAZfnqXeQQ

[Gabby Roncone 🇺🇦 🇵🇸 @gabby_roncone]

After Trump was elected, I felt unsafe. I thought that electing a man as president who has assaulted women would normalize that behavior, make assault seem inconsequential to a perpetrator. Right now, I feel worse. It’s normalized, all right.

[Max @_mxms]

So what’re we supposed to be doing about the ongoing calls from numbers in our area code? It’s old...

[RPISEC @RPISEC]

Came in 1st in CSAW 2018 Quals! Kudos to all who played, it was a tough competition this year! See y'all at finals!

[Max @_mxms]

@doctorvink @piazzt’s curry :>