freeman @_2freeman

Learn and practice. Joined July 2016

Tweets

310
Followers

359
Following

308
Likes

276

Linux Kernel Security @linkersec

3 months ago

Linux Kernel Hardening: Ten Years Deep Talk by @kees_cook about the relevance of various Linux kernel vulnerability classes and the mitigations that address them. Video: youtube.com/watch?v=c_NxzS… Slides: static.sched.com/hosted_files/l…

1 34 129 6K 76

Download Image

xvonfers @xvonfers

3 months ago

USB提权之旅 vul.360.net/archives/745

0 3 19 2K 9

krupa @krupaad

5 months ago

I decided to build a Transformer from Scratch...but on a GPU. No PyTorch or TensorFlow. Just CUDA, Python and Numba. Just finished building the full Encoder Block - here's a thread on my progress so far:

95 334 4K 321K 3K

Download Image

Alex Matrosov @matrosov

2 years ago

This year, our team did a lot of important industry REsearch work. But this BMC research shows literally how poor product security practices are in critical data center infrastructure components. The bugs we found should not exist in 2023 in any environment.

BINARLY🔬 @binarly_io

2 years ago

0 34 45 17K 9

Download Image

2 19 53 16K 7

Download Image

Andrey Konovalov @andreyknvl

2 years ago

An RFC patch series by @tehjh and @_MatteoRizzo for mitigating cross-cache use-after-free attacks. The performance impact is still questionable, but functionality-wise, this would be an exciting change if merged 😃 lore.kernel.org/all/2023091510…

Eduardo Vela @sirdarckcat

2 years ago

1 15 36 17K 8

0 4 12 4K 5

Qyn @qynln

2 years ago

Here is the writeup for CVE-2023-3389, a Use-After-Free on an hrtimer in io_uring, which I exploited for the kCTF VRP qyn.app/posts/CVE-2023…

4 53 208 22K 55

Jordy Zomer @pwningsystems

2 years ago

Yay! My writeup on finding (half) Spectre-v1 gadgets in the Linux kernel using #CodeQL is finally live 😁😁 github.com/google/securit…

5 113 460 66K 123

Adam 'pi3' Zabrocki @Adam_pi3

2 years ago

RISC-V (@risc_v) Control Flow Integrity (CFI) is coming and I'm proud to be one of the contributors to this important security extension. Full spec is available here: github.com/riscv/riscv-cf…

1 29 111 15K 11

Download Image

POC_Crew 👨‍👩‍👦‍👦 @POC_Crew

2 years ago

[Zer0con2023] Jun Luo(De4dcr0w) & Yanfeng Wang giving their talk on Busy2Nice : A New Way to Win the Race for Tiny Windows in the Linux #Zer0con2023

0 7 16 5K 1

Download Image

Danny Lin @kdrag0n

3 years ago

Pixel 7 has KVM on by default, and I finally got a chance with play with it. Here's a Linux VM running *without root*

16 145 942 0 67

Download Image

Andrey Konovalov @andreyknvl

3 years ago

If anyone who's around in Paris for @hexacon_fr wants to acquire a USB-Cereal adapter — hit me up. This adapter is a convenient replacement for the Android Debug Cable. Essentially splits the USB port into two: one with UART with kernel logs, the other is a pass-through for ADB.

7 35 209 0 30

Download Image

reverseame @reverseame

3 years ago

A technical analysis of Pegasus for Android – Part 1 cybergeeks.tech/a-technical-an…

1 51 115 0 43

Project Zero Bugs @ProjectZeroBugs

3 years ago

Linux: munmap() race with pagemap_read() leads to page UAF bugs.chromium.org/p/project-zero…

4 24 120 0 15

blackorbird @blackorbird

3 years ago

Exchange 0day exploit in wild. #APT gteltsc.vn/blog/canh-bao-…

5 297 663 0 95

Download Image

David Buchanan does not tweet anymore @David3141593

3 years ago

Pack arbitrary shellcode into an executable that always has the same MD5 hash: github.com/DavidBuchanan3…

31 594 2K 0 502

Download Image

Robert Chen @NotDeGhost

3 years ago

Wrote another @solana pwnable for @paradigm_ctf -- this time based off of a real bug ;) ctf.paradigm.xyz/challenges/ott…

4 8 88 0 14

Download Image

Natalie Silvanovich @natashenka

3 years ago

iOS and MacOS recently started parsing media codec parameter sets in the kernel, leading to bugs like this bugs.chromium.org/p/project-zero…

13 111 449 0 62

freeman @_2freeman

3 years ago

CVE-2022-38392：A certain 5400 RPM OEM hard drive, as shipped with laptop PCs in approximately 2005, allows physically proximate attackers to cause a denial of service via a resonant-frequency attack with the audio signal from the Rhythm Nation music video.

1 0 0 0 0

Daniel Bristot de Oliveira @bristot

3 years ago

And now Linux has a Runtime Verification Interface! Merged for Linux v6.0 (or 5.20?)!

8 84 483 0 40

Download Image

Thijs Alkemade @xnyhps

3 years ago

Next week I’ll be giving the talk “Process Injection: Breaking All macOS Security Layers With a Single Vulnerability” at #BHUSA and #DEFCON30. Hope to see you there!