Jon

I like computers. Computers are cool, I got two

[Alan Sguigna @AlanSguigna]

The Windows ENABLEJTAGBREAK BCD element used to provide a way to break into and debug early bootmgfw code. Support was removed some time ago. Using a target that supports both UEFI source/symbols and Windows symbols, it is possible to break in even earlier.

[Mr. Turtle @TheMisterTurtle]

I won’t tell anyone when I make it, but there will be signs.

[domas @xoreaxeaxeax]

New exploit: “xor dword [0xf80c2094], 1<<22”

Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed.

https://t.co/sgAfneFSsf

[Battle Programmer Yuu @netspooky]

If you say Windows sucks, everyone claps.

If you say Linux sucks, everyone claps.

If you say IoT sucks, everyone claps.

If you say Google or Amazon sucks, everyone claps.

If you say AI sucks, a bunch of ppl come out of the woodwork to get super mad at you.

[Jon @notCh3rn0byl]

@samarknowsit @cyber_razz hey you stop that right now. we dont read round these parts now blow the magic conch or ill report you for treason against my beloved claude

[tribal chief ☝🏻🩸 @luireigns]

If WWE is fake, then explain this 💀 https://t.co/5NA3esHlSO

[uefitool @uefitool]

UEFITool / UEFIExtract / UEFIFind NE A74
- a lot of bugfixes for issues found by @binarly_io folks
- CSME version detection improvements
- Insyde FlashDeviceMap improvements
- other minor fixes
https://t.co/YhYbdc5GuC

[Jon @notCh3rn0byl]

Me on a good day

[Jon @notCh3rn0byl]

@OSRDrivers Did they offer to take you to dinner as well?

[Jon @notCh3rn0byl]

Intense. I love this!!

[Mark Ermolov @_markel___]

Intel SGX has fallen! Its most important key is in our hands: we extracted the Global Wrapping Key from an instance of the Intel Gemini Lake platform

[naiive @naiivememe]

Me in WW3 fighting on China’s side because I accepted Temu’s terms of use without reading them

[Andrew Côté @Andercot]

BREAKING: While a new War for Oil erupts in the Middle East

A Physics Paper just quietly dropped TODAY that will eventually make Oil, and the entire current Energy Industry, irrelevant.

Ushering in the era of Zero-Point Energy
@EagleworksSonny

Here is the breakthrough🧵

[Rodrigo Branco @bsdaemon]

Vulhunt is now open-source, this is a game changer: https://t.co/kTLFiaktkV @binarly_io @vulhuntdev

[Nicolas Krassas @Dinosn]

I reverse-engineered Intel ME so you don't have to: A decade of Ring -3 vulnerabilities that your EDR can't see https://t.co/Mkd3BxD7yB

[Aftermath Labs @aftermath_labs]

We’re releasing our analysis of https://t.co/cAmTrO7mvx, a major game cheat targeted by multiple studios in recent legal actions. We partially deobfuscated several Themida-protected components and document how it hijacks Hyper-V to inject and manipulate game code.

https://t.co/ykGrHdl6ty
https://t.co/LhEXxeIcnF

[Alexandre Borges @ale_sp_brazil]

Interesting discussion:

Modern C++ Firmware: Proven Strategies for Tiny, Critical Systems:

Part 01: https://t.co/bSiHyYc3HO
Part 02: https://t.co/ZRME43Y2Ir
Part 03: https://t.co/ZRlgNLb8xi
Part 04: https://t.co/Yp5O89Bmjs
Part 05: https://t.co/1XvYajpXXw
Part 06: https://t.co/bc754IiG8s
Part 07: https://t.co/dRpC9hjAt6
Part 08: https://t.co/ZtksK0LbMg
Part 09: https://t.co/7eMG4rc475

#programming #firmware #cpp

[clibm079 @clibm079]

Revisiting MoonBounce: Research Notes
Technical Analysis and Design Insights into the DXE Core

https://t.co/wckznhGHJv

#MoonBounce #UEFI #CSM

[Thenewarea51 @thenewarea51]

ADSB shenanigans. Air Force One was spoofed as VANCE 1 and drew the JD Vance meme picture over Mar-a-Lago in Florida this evening taking roughly 2 hours to draw. The tracks are color coded by altitude and was created by having VANCE 1 fly at altitudes between 20,000 - 50,000 ft.

[0xor0ne @0xor0ne]

Bruteforcing ECC and dumping firmware from a Potensic Atom 2 drone

https://t.co/BEv64LITrV

Research by @Neodyme

#infosec