Francisco Falcon

Vulnerability researcher at ??

[Francisco Falcon @fdfalcon]

I wrote "Reverse Engineering the Win32k Type Isolation Mitigation", about how Windows 10 1709 changed the way SURFACE objects are allocated to kill Bitmap-based kernel exploitation techniques: https://t.co/y1m2uR5rVf

[Francisco Falcon @fdfalcon]

A rogue DHCP server can inject arbitrary dhclient.conf directives via malicious DHCP options and get RCE as root in systems running dhclient:

https://t.co/LyJmj6AQ4k

[Florian Roth ⚡️ @cyb3rops]

This is bad.
Putty level bad.
https://t.co/3w1C8YiBu8

[Francisco Falcon @fdfalcon]

@Kurevvv @NIP @raven_apex @McLovinFPS @fpsvein Increíble el reset en la última partida

[J5ive.eth @J5ive]

Looks like Twitter finally removed the setting to hide image/video previews in the timeline, so now it’s a chore to find the text I want to read between what is now Instagram.

Might actually be my breaking point. It’s been fun. Probably for the best.

[Francisco Falcon @fdfalcon]

Wow, remote OS command injection (from the same network segment) in FreeBSD IPv6 stack via router advertisement packets: https://t.co/8TrK41m96g

rtsold passes the unescaped domain search list option from the RA packet to the resolvconf shell script.

[Francisco Falcon @fdfalcon]

@4Dgifts @ortegaalfredo 😂

[Francisco Falcon @fdfalcon]

@ortegaalfredo @4Dgifts https://t.co/qfEDC3Hvri

[itszn @itszn13]

In celebration JPEG XL being reconsidered for inclusion in Chrome, I created the first ever JPEG XL image which displays its own MD5 hash!

$ md5sum hashquine.jxl
c0dec0007b5246f7428936d9bed2f446

This website does not render JPEG XL yet, so see the links below

[Ted Duhart @ted_duhart]

A un genio en Argentina se le ocurrió la brillante idea de quitar los timbres de un edificio y cambiarlos por un código QR. Los invito a escanearlo y jugar por primera vez al ring ring raja internacional y romperle las pelotas a los vecinos desde la comodidad de su casa 😂😂😂

[burg @_burgburg_]

PLEASE CLICK TRANSLATE ON THIS POST

[Francisco Falcon @fdfalcon]

@4Dgifts Plot twist:

[esperando el milagro @antibota79_]

En el día de la Lealtad, los Hells Angels junto a trabajadores de la UOCRA reclaman la libertad de Ivan Tobar.

El mundo es peronista, aunque no quieran admitirlo.

[Francisco Falcon @fdfalcon]

@jetbrains' cookie consent pop-up looks pretty cool, if you ask me

[Francisco Falcon @fdfalcon]

@jetbrains' cookie consent pop-up looks pretty cool, if you ask me

[Francisco Falcon @fdfalcon]

@jetbrains' cookie consent pop-up looks pretty cool, if you ask me

[Rajvardhan Agarwal @rajxnull]

so excited to finally share something I’ve been working on alongside many brilliant colleagues. MTE will truly raise the bar for memory safety.

https://t.co/KPyyJUbKPM

[Yash Gupta @Yash3667]

2026 Apple Security Research Device Application is now live. Apply at https://t.co/JdkPuEiqHh!

* Arbitrary code with arbitrary entitlements
* Arbitrary code injection into existing processes
* Arbitrary SPTM, TXM, KernelCache firmwares
* Downgrades to old builds
* ...and more

[Francisco Falcon @fdfalcon]

@0xAcid

[Nostalgia @NostalgiaFolder]

Without saying anything, show me how long you’ve been on the internet

[Jeremy Boone @uffeux]

Hello friends. Check out this awesome and unique role that just opened up on my team in SEAR. Wanna secure Apple silicon, ROMs, iBoot, and more? https://t.co/0NMPs77lZt

[Francisco Falcon @fdfalcon]

@TSM @TSM_Reps My favorite player since 2019