Matthias Schulz

[Matthias Schulz @dm5ms]

#BerndDasBrot frisch aus der Stickmaschine.

[NexMon @nexmon_dev]

Happy Easter! Today I published our monitor mode and frame injection patches for the BCM4375 Wi-Fi chips installed in Samsung Galaxy S10 and S20 smartphones.
I am still looking for access to a Galaxy S21 to analyze its firmware. https://t.co/t9hEbfC7xF #nexmon

[NexMon @nexmon_dev]

Who has a Galaxy S21 and could give me access to the BCM4389 WiFi 6e firmware files? And maybe remotely to the device to dump the chip's ROM?

[Matthias Schulz @dm5ms]

Hm, why not print some memory cards with code snippets?

[Jiska @naehrdine]

@esizkur Identifying, remembering and recognizing patterns. Actually the most important skill. Already was making jokes that I should play memory with students instead of asking them technical questions 🤷‍♀️

[Dennis @ttdennis]

Here it is. ToothPicker. The tool we developed to fuzz the iOS Bluetooth stack (a quite “interesting” fuzzing target), which will be presented today at WOOT (https://t.co/cU715nybLS). It was a major part of my thesis and I’m happy to finally release it!

https://t.co/IC35kPdHhQ

[VoteVets @votevets]

#WearAMask

[NexMon @nexmon_dev]

Does anyone have access to a Pixel 4 and could check whether the Murata SS9709025 Wi-Fi chip is a Broadcom chip? For example, by running dmesg or lsmod and posting the output.

[NexMon @nexmon_dev]

Read our new Paper: "Free Your CSI: A Channel State Information Extraction Platform For Modern Wi-Fi Chipsets" https://t.co/zppRewvBC7 and extract CSI with up to 4x4 MIMO and 80 MHz bandwidth on Broadcom chips https://t.co/FS71ZnYQAR.

[Matthias Schulz @dm5ms]

@ZulqarnainHanif I would, if I would know what to search for.

[Matthias Schulz @dm5ms]

Did anyone ever see this socket or the corresponding connector? It is part of the Sony XAV-AX100. I want to find the cable and another connector that I can attach on a PCB.

[Matthias Schulz @dm5ms]

@DeutschePostDHL @ctmagazin Frau Marta Koterska hat mir im Videochat nicht erlaubt die kritischen Felder meines Ausweises vor erstellen eines Photos zu verdecken. #DSGVO

[@[email protected] @seemoolab]

Our talk „Dissecting Broadcom Bluetooth“ at #35c3 will focus on practical demos with InternalBlue, including an exploit crashing some Bluetooth firmwares and a test for CVE-2018-5383. Message us if you have more suggestions on what you want to see :)

[Matthias Schulz @dm5ms]

@DHLPaket, wie kann es sein, dass ein mir zugeschicktes Paket seit dem 24.11. laut Sendungsstatus im Lieferfahrzeug zur Packstation liegt und weder in der Packstation noch in einer nahegelegenen Filiale zur Abholung ankommt? Ein Nachforschungsantrag führte zur Rücksendung.

[Matthias Schulz @dm5ms]

@ZulqarnainHanif It was simply my access point, I think it was an apple timecapsule.

[Matthias Schulz @dm5ms]

@ZulqarnainHanif You can run those commands on your host or install those tools on the phone.

[f5oeo - mastodon.radio/@f5oeo @F5OEOEvariste]

#rpitx has now an extended frequency range : from 50khz to 1.7Ghz. Easytest menu is now agile. Here is an example of SSB modulation 1.296Ghz amator band.

[@[email protected] @seemoolab]

Video of our PoC for CVE-2018-4368. It crashes iOS 12 devices remotely via Wi-Fi. No need to be on the same network. No user interaction required. https://t.co/tdKQygs0Hm

[Matthias Schulz @dm5ms]

Breakfast smiley