hackersontherocks

[hackersontherocks @hackersonrocks]

So like, the crypto falls apart if you just tell it it's doing it wrong?
Yep!

Louis Nyffenegger explains the confusion around... algorithm confusion!

https://t.co/aNdsfOCCW2

[hackersontherocks @hackersonrocks]

What are APIs and how do you test them?

Katie Paxton-Fear drinks Fizzy Water from a mug with a good back story and dishes out the goods on API (in)security.

https://t.co/5zMJsYls0C

[hackersontherocks @hackersonrocks]

Or Yair opts for the Hoppy as he shares Out Of Bounds reads.
He covers the MMU and Virtual Memory. He dishes on protected regions, unmapped memory, and buffer allocations. A good time was had by all!

https://t.co/LZV4fzMtIu

[hackersontherocks @hackersonrocks]

If you're in the Vulnerability Management community, this the episode for you!

In Patch Bypassing, Arnold Palmer in hand, Ryan Emmons validates patch efficacy.

Sometimes they don't actually close the vulnerability, leading to a false sense of security.

https://t.co/rdhguk05eZ

[hackersontherocks @hackersonrocks]

Why is Rust the new hot software language? Does it actually provide better security? Adriaan Jacobs looked into it and shares his findings over an incredibly smooth Belgian beer.

https://t.co/wQpVBkPDQh

[hackersontherocks @hackersonrocks]

Paul Asadoorian has an enviable podcast setup. He also talks about the purpose of UEFI and how a buffer overflow his team found could have led to some nasty bootkit installs. Don't know what a bootkit is? Grab a Bloody Mary and find out!

https://t.co/QEBqKuhczU

[hackersontherocks @hackersonrocks]

One of our favorite episodes, Nati Tal turns aside the conventional "check the sender's email" wisdom by showing how attackers could Echo Spoof and send messages from legitimate domains.

https://t.co/fB34yKXKqk

[hackersontherocks @hackersonrocks]

JJ Lopez makes his own sangria. Check out the color!
Oh yeah, he also explains the concepts of fuzzing as we learn about his eBPF fuzzing work.

https://t.co/bYZgqEA2NO

[hackersontherocks @hackersonrocks]

You know what goes great with a chat about OS Command Injection?
McKenna. Yeah, that's the stuff. Thanks to Zach Hanley for recounting his pathway to a perfect 10.0 CVSS score

https://t.co/c5E8zbvAyU

[hackersontherocks @hackersonrocks]

Dmitri Kurbatov talks all about cell network security in this episode on Man On The Side attacks.
Does 5G provide a superior experience? Have a listen and find out!

https://t.co/4pQz0qSdbp

[hackersontherocks @hackersonrocks]

Ever heard the term Use After Free? Curious to know what that is and how it works?
Jon Waterman breaks it down for us!

https://t.co/vxyqr9PzZh

[hackersontherocks @hackersonrocks]

Back in 2024 Alex Holden taught us about input validation, and how his team uncovered Russian operations. Have a listen!

https://t.co/PgVWe1YgE0

[hackersontherocks @hackersonrocks]

Hello World! Flashback to our very first episode!

Matt Bianci tells us what Heap Overflows are.

https://t.co/gYx0g9aqzg

[hackersontherocks @hackersonrocks]

One year ago today.
#NeverForget

[hackersontherocks @hackersonrocks]

Topic: rooting a router via uninitialized free()
Guest: Pierre-Yves Maes
Link: https://t.co/c6MK0VV2ZD
Drink: Aperol Spritz

[hackersontherocks @hackersonrocks]

Guest: @k8em0
Topic: Vuln Research Workforce
Link: https://t.co/CMi2UsC4mS
Drink: Organic Super Greens

[hackersontherocks @hackersonrocks]

Topic: Out Of Bounds Reads
Guest: @oryair1999
Drink: @BrewDog Punk IPA
Link: https://t.co/bzoR4V5Trv

[hackersontherocks @hackersonrocks]

@hkashfi Thank you for the kind words!

[hackersontherocks @hackersonrocks]

Topic: Patch Bypassing
Researcher: @the_emmons
Drink: Arnold Palmer
Link: https://t.co/1axEq6bDqa

[hackersontherocks @hackersonrocks]

Topic: Memory Safe Languages
Researcher: Adriaan Jacobs
Drink: Rochefort
Listen: https://t.co/av5fqAoDIk