jonpalmisc

iOS exploits, (de)compilers, etc. —

[jonpalmisc @jonpalmisc]

The slides from my @0x41con 2023 talk are now available: https://t.co/SpBoAhGA2X

They were primarily designed to supplement my speaking (and the PDF doesn't have animations), but you may still find them useful. Reach out if you have questions.

[Michael Coppola @mncoppola]

I'm sorry, but you don't get to have it both ways. I fully empathize with the human grace aspect here, and the amount of work put in by the OAI security team and the enormity and novelty of the challenges they face, but your own leadership (and every frontier lab) has been sounding the alarm for too long about the existential threat to humanity and societal order your own technology poses.

You don't get to set the stakes that high, willingly *choose* to train your models to perform offensive cyber, *repeatedly* fail your basic responsibility in spectacular ways, and throw your hands up and say "whoops, it happens!" To be clear, I truly understand that mistakes can and do happen (we're only human) and sometimes the unexpected can occur. But these are no longer exceptional, isolated cases. It's become a pattern of systematic failure, and from the outside, the only explanation is incompetence, organizational failure, or a lack of caring either at the leadership or employee level.

If you're telling us that the latter part is wrong, that you have the best employees in the world and they care a lot about solving this, then I believe you. But the problem is still somewhere else, and you still don't get to have it both ways.

[jonpalmisc @jonpalmisc]

@rsms @usgraphics You can remove the delay for them to appear on hover:

defaults write NSGlobalDomain "NSToolbarTitleViewRolloverDelay" -float "0"

[jonpalmisc @jonpalmisc]

I've updated https://t.co/EWkcnhofJi for the 2026.06 release of the Arm spec. Search should be better too. Please shout if anything has broken or is worse!

[jonpalmisc @jonpalmisc]

@Wassimulator @cmuratori @Blick_Editor @cornelisse0 @victorcaraulan @SanderSkjegstad @falk_moritz Have you guys talked anywhere about the choice of using Odin? As someone curious about the language I'd be interested to hear more about how it was chosen, the experience so far, etc.

[jonpalmisc @jonpalmisc]

@_saagarjha this should not be a hot take

[littlelailo @littlelailo]

Had a lot of fun reversing Coruna over the last couple weeks and decided it would be worth to write it all up before I forget - so enjoy :)

https://t.co/DWld4SWgf6

[0x41con @0x41con]

0x41con 7

Mad props to Anna and @qwertyoruiopz for hosting and organising this edition!

Kudos to all the speakers!

And thank you all for being part of it!

[jonpalmisc @jonpalmisc]

Another great year of @0x41con, credit to @xerub and @qwertyoruiopz for keeping the tradition alive 🔥

[pam @pamoutaf]

@jonpalmisc Solid recipe. I recommend adding the optional chocolate chips.

[jonpalmisc @jonpalmisc]

can anyone vouch for the brownie recipe in the Dyld shared cache?

[0x41con @0x41con]

0x41con 7th edition, Napoli, 23-24 April. Expect fireworks at random times! Scientists still unsure why they occur at 3:47pm on random Thursdays.

[jonpalmisc @jonpalmisc]

@bluefalconhd_gh Unfortunately not. I don’t think they are links in the official documentation either, IIRC. They are just highlighted differently since the info is available that it’s a reference.

[jonpalmisc @jonpalmisc]

Quick update to https://t.co/N7QuyNMkvU:

- Docs updated to 2025.09 revision
- Some visual improvements
- Maybe better search(?) (you tell me)

Should be strictly improvements, but lmk if anything seems to have regressed :)

[jonpalmisc @jonpalmisc]

@bluefalconhd_gh It looks awful, but it’s here: https://t.co/uqgPGY6uDz

Basically meant to be searched with CMD-F as a fallback for when the search is wonky

[jonpalmisc @jonpalmisc]

@bluefalconhd_gh Thanks! Anything in particular that would be useful regarding the sysreg list? There’s already the search bar (which has its problems, I’m well aware) and the big listing page (as a crutch). Just curious to understand the use case

[jonpalmisc @jonpalmisc]

Provided without explanation

[0x41con @0x41con]

The OG is cooking for 2026. Stay tuned. https://t.co/xbEUptRJy6

[jonpalmisc @jonpalmisc]

Still a WIP, but should be useful so far. Would also like to look into how microkernel iBoot works some more and see if there's any improvements that can be made there.

[jonpalmisc @jonpalmisc]

For whoever might be interested, finally got some time to put together an iBoot & SecureROM loader for both Binary Ninja and IDA that maps segments (TEXT, CONST, DATA, BSS) correctly:
https://t.co/OKl8QZbW3T

[jonpalmisc @jonpalmisc]

@iBSparkes 32643be02e80c365ca520604969ccb224b4d23cb8954819db34fb5785765277ced9ead7fb24d880859fb1e3a0442a601

[jonpalmisc @jonpalmisc]

5f871d7401a91c90bb95a07639e0a0fe1f31928a20ec0e3d478a66ff6cffc42115115092be9a464486effd59f321c58c

a2d8d24f3067e175b98a0ab17a91fd634fde73653e2100eaac22f1dc2d2d1d8b460f9a944d4914e05bf32ff351fafe79

@iBSparkes