log4j

“advanced persistent threat” - wsj | reverse engineer, pentesting, bounty hunter, occasional LLM enjoyer

[log4j @log4j]

Current state of cyber security.

[log4j @log4j]

thinking about the old days when php2shell was making the mistake of installing literally any plugin

[log4j @log4j]

@sam_mh 同社のテレメトリサービス（自動コンテンツ認識など）は、現在もEU域内で運用されています。法的にどのような結末を迎えるのかは不明です。

[log4j @log4j]

@lyncpk @brokenpacifist overshadowed by non-apt vulns these days :(

[log4j @log4j]

@GlitchSlayed works. :)

[log4j @log4j]

if you own a samsung TV, my pre-emptive advice to my demonbreak is DO NOT UPDATE YOUR TELEVISION.

disable auto-update via settings -> support -> software update -> right arrow -> auto update OFF

new non-spying OS coming up (see qt’d post)

[log4j @log4j]

i own a relatively new (2025) samsung tv.

i kept getting weirdly targeted ads.

i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.

zero days it is. root shell on new samsung TVs!

discovered PRIVACY HORROR. write up?

[log4j @log4j]

@liminalsunset_ thank you samsung for accidentally subsidizing my oled and glass, the rce will take it from here

[log4j @log4j]

i own a relatively new (2025) samsung tv.

i kept getting weirdly targeted ads.

i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.

zero days it is. root shell on new samsung TVs!

discovered PRIVACY HORROR. write up?

[log4j @log4j]

@Lon forget your own happiness in spite of nihilistic prevalence through sheer tyranny of will

[log4j @log4j]

@zooko hey zooko! thanks for all your work on pasta curves.

[log4j @log4j]

my tv is only slightly better, so yours would massively benefit from a debloat. will try to minmax performance as much as possible.

the emulator in their tizen studio ide isn’t really super representative.

btw, this model number country-doxes you as it was only released in 1 country, so feel free to delete if you don’t want people to know your country.

but in short: yes :)

[log4j @log4j]

@atamanipantsu @mikewavsz can you give me the model number?

settings -> support -> about the TV

[log4j @log4j]

accounted for this. it fully backs up the current firmware before flashing.

if you somehow brick it (let’s say your computer dies mid-flash) you can stick a USB in your tv and it’ll allow you to recover from a known state (i bricked my tv a few times developing the chain).

os will be an ameliorated, debloated version of tizen, telemetry-free, but i’m researching adding functionality for any arm-based tv os (signature checks have to be annihilated dynamically).

easily customizable by your agent(s)

[log4j @log4j]

@markovs_razor i would’ve gone that path if i hadn’t found a remote vulnerability.

uart and jtag is epic (when you have the motivation and no other options).

[log4j @log4j]

gimme a sec. (and feedback on this)

i’m currently reversing and documenting the entire OS.

the plan: release a simple open source distributable that lets you flash a custom OS on your tv with ZERO telemetry*, that sacrifices no functionality

this would include the full exploit. when it matters to the general public’s privacy i wont hoard zero days.

*apps like youtube, netflix, etc. will still send their ordinary telemetry. highly impractical to defeat, but you can load your own ameliorated forks if you prefer

[log4j @log4j]

@sainimatic can’t wait for my $9.76 check!

[log4j @log4j]

this and 8 dgx sparks

[log4j @log4j]

@frogmoney420 about 3 weeks ago

[log4j @log4j]

@ricardo1 @benitoz what frame is that and what do you do for cooling?

[log4j @log4j]

@SamJWasserman @norsyx @MiaAI_lab I might’ve missed ‘recipes’ cause I’m running my own GX10 (DGX Spark) cluster, so most of my time is spent minmaxxing my own. And yes, it’s exactly as shitty as that sounds. Sysadmin hell.