benjamin @____benjamin

🔺New on the Apple Security Research blog: we pit our hardened kalloc_type XNU allocator against SockPuppet, a powerful vulnerability from the past: security.apple.com/blog/what-if-w…

2 85 238 81K 39

benjamin @____benjamin

3 years ago

macOS 13.3.1 still has the bitcoin paper, do the update

0 0 3 784 0

FUNCTION(FUNCTION({"🎉", "Year", "Happy New"}, "sortedArrayUsingDescriptors:", {FUNCTION(CAST("NSSortDescriptor", "Class"), "sortDescriptorWithKey:ascending:", "hash", 1)}), "componentsJoinedByString:", " ")

0 1 5 2K 0

benjamin @____benjamin

3 years ago

FUNCTION({"Merry", "Christmas", "🎅"}, "componentsJoinedByString:" , " ")

0 0 0 464 0

benjamin @____benjamin

3 years ago

Trying out Mastodon, find me at @[email protected]

0 0 1 0 0

Filippo Bigarella @FilippoBiga

3 years ago

Towards the next generation of XNU memory safety: kalloc_type security.apple.com/blog/towards-t… I’m so happy that the team finally gets to share the details of this huge effort. And I’m so proud I had the chance to work on it in the past couple of years. :)

3 26 93 0 11

benjamin @____benjamin

3 years ago

Need offsets? Please ask @tihmstar

1 2 9 0 0

Nicolas @NManichon

3 years ago

@tihmstar Just patch ********* bro

0 1 0 0 0

tihmstar @tihmstar

3 years ago

oh the jailbreak works, just never turn on wifi on the device ._.

14 9 199 0 0

benjamin @____benjamin

3 years ago

That feeling when you keep reviewing the same code over and over again, and don’t spot any bug. But then you decide to do some very targeted fuzzing which leads to a crash in <10min. - and that’s an actual vuln.

0 0 13 0 0

Alex Plaskett @alexjplaskett

3 years ago

✍️ 1/ Want to learn how to bug hunt in hard targets and find high impact issues? Here’s a short Sunday 🧵for those starting out and some general thoughts from over the years on software security:

11 120 452 0 293

Download Image

chompie @chompie1337

4 years ago

look i don’t write code, i just read it. i check out its vibes and move on with my life

10 31 356 0 4

benjamin @____benjamin

4 years ago

Developer catching all Java exceptions when parsing untrusted data but the JVM does not throw any for integer overflows ¯\_(ツ)_/¯

0 0 3 0 0

benjamin @____benjamin

4 years ago

Happy New Year 🎉

0 0 3 0 0

Filippo Bigarella @FilippoBiga

4 years ago

Passionate about fuzzing? Want to help securing devices by the billion? We’re looking for a security engineer to join our Fuzzing team in Security Engineering & Architecture at @Apple. DMs are open. :) jobs.apple.com/en-us/details/…