C0deH4cker @C0deH4cker

Kernel hacker, developer, reverse engineer, CTF player, and iOS security researcher. blog.c0deh4cker.com /dev/kmem Joined August 2011

Tweets

13K
Followers

2K
Following

529
Likes

5K

C0deH4cker @C0deH4cker

2 years ago

My next conference talk topic: Destroying unused processor components with overvoltage to provide additional hardware fuses.

1 0 2 429 0

Finally released: The GB Interceptor. An open source rp2040-based adapter that goes between your (unmodified) Game Boy and the game cartridge to record or stream your gameplay via USB. Video: youtu.be/6mOJtrFnawk Details: there.oughta.be/a/game-boy-cap…

156 2K 10K 771K 704

Download Video

C0deH4cker @C0deH4cker

3 years ago

I am slightly bothered: $ ping one.one.one.one PING one.one.one.one (1.0.0.1) 56(84) bytes of data.

1 0 9 869 0

naomi (forgetful functor) @fixedpointfae

3 years ago

running low on disk space on macOS or linux? remember to empty out your recycle bins (located at /usr/bin and /bin)

231 941 10K 0 494

[email protected] @0xdea

3 years ago

CVE-2022-26766: the CoreTrust bug "For years, macOS allowed any root certificate when checking code signatures, making code signing completely useless." // bug discovered by @LinusHenze // writeup by @zhuowei worthdoingbadly.com/coretrust/

12 434 1K 0 169

Download Image

C0deH4cker @C0deH4cker

3 years ago

stackoverflow.com/q/73084569/134…

1 0 0 0 0

C0deH4cker @C0deH4cker

4 years ago

// Apple.h typedef struct { uintmax_t low; uintmax_t high; } uintultra_t;

0 3 14 0 0

Zhuowei Zhang @zhuowei

4 years ago

Officially launching ExcelPhone: my own phone carrier. excelcoin.org/phone/ (Blog post coming tonight, I promise! Sign up for the mailing list at worthdoingbadly.com to get it delivered to your inbox.)

4 12 68 0 8

Download Image

Zhuowei Zhang @zhuowei

4 years ago

SELinux: Pros: attackers can't run code Cons: I can't run code

11 140 1K 0 14

C0deH4cker @C0deH4cker

4 years ago

For such a high profile website where account security is critical, it's mind boggling to me that @Twitch still doesn't allow you to disable SMS-based 2FA (and only use app-based 2FA). There's a feedback post for this with not much traction yet: twitch.uservoice.com/forums/310228-…

0 0 0 0 0

Zhuowei Zhang @zhuowei

5 years ago

Introducing `nft_ptr`: C++ `std::unique_ptr` that represents each object as an NFT on the Ethereum blockchain github.com/zhuowei/nft_ptr

20 281 1K 0 90

L1ng @el1ng0

5 years ago

Thanks to @DanyL931 for help getting this working. So now the big question: how do you DFU a Homepod? Flip it upside down with USB plugged in. Seriously. It checks it's rotation during boot and will enter DFU if it is upside down with USB present.

4 12 60 0 3

L1ng @el1ng0

5 years ago

Release 1.0 of the HomePod USB+UART breakout boards: github.com/el1ng/homepwn Check GitHub for more details. There is very little support around all of this, proceed at your own risk! You will need to fabricate and solder your own PCBs

8 19 97 0 8

Daniel 🦋 @d_feldman

5 years ago

Ok this is slightly insane. OpenType (the common font format) actually supports simple scripts inside the font for complex characters and such. So a guy WROTE AN ENTIRE GAME INSIDE A FONT called Fontemon that you play by typing letters on the keyboard. coderelay.io/fontemon.html#…

44 2K 5K 0 797

Download Image

C0deH4cker @C0deH4cker

5 years ago

Rosetta 2 source code leaked? 😝

Longhorn @never_released

5 years ago

Rosetta 2 source code leaked? 😝

11 69 478 0 19

Download Image

0 0 3 0 0

C0deH4cker @C0deH4cker

5 years ago

Has anyone figured out the pinout for the original HomePod's hidden 14-pin diagnostic port under the bottom rubber foot? I'd assume at least some of those pins are the same as a lightning connector.