fatalbit @fatalbit_

Vuln. Researcher New York, NY Joined September 2017

Tweets

147
Followers

301
Following

662
Likes

23K

Obsidian @obsdmd

7 months ago

Obsidian is now free for work. Starting today, the Obsidian Commercial license is optional. Anyone can use Obsidian for work, for free. If Obsidian benefits your organization, you can still purchase Commercial licenses to support development. Nothing else is changing. No…

226 2K 12K 885K 3K

Download Image

soul nate @MNateShyamalan

a year ago

dare i say: lmao

5 87 2K 40K 12

derek davison @dwdavison

a year ago

It's not in any sense surprising, but at some level of abstraction you still have to marvel at the political elite of this country being outraged at students protesting an ongoing massacre but indifferent to, if not enthusiastically supportive of, the massacre itself.

8 332 2K 82K 49

A.J. Bauer @ajbauer

a year ago

Protestors achieve a longtime dream of many NYU students and faculty: Walling off the business school so that nobody can access it.

Arielle Angel @ArielleLAngel

a year ago

Protestors achieve a longtime dream of many NYU students and faculty: Walling off the business school so that nobody can access it.

118 439 1K 2.2M 126

Download Video

21 1K 12K 483K 223

Pavel Yosifovich @zodiacon

2 years ago

Simple x86/x64 assembler and emulator: github.com/zodiacon/AllTo…

12 147 707 67K 283

Download Image

quarkslab @quarkslab

2 years ago

Is remote code execution in UEFI firmware possible? Yes it is. Meet #PixieFAIL: 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers. Full details by @fdfalcon and @4Dgifts in our new blog post: blog.quarkslab.com/pixiefail-nine…

5 206 346 78K 91

Download Image

fatalbit @fatalbit_

2 years ago

my bug finding music is 10hr white noise.

2 0 4 551 0

cursedCTF @cursedCTF

2 years ago

cursedCTF 2024 Halloween Teaser 31/10/23 - 01/11/23 this CTF teaser committed tax fraud against multiple 501c5 organizations

0 11 54 8K 2

Download Gif

fatalbit @fatalbit_

2 years ago

we actually were so close to giving a run for first for hackasat, i wrote the ironbank script to backtrack but unfortunately it didn’t land.

0 0 6 593 0

Zhenpeng Lin @Markak_

2 years ago

It is "bad", not only for desktops but also for mobiles. Last year, I exploited the Pixel 6/S22 kernel with an io_uring bug, the exploit now is available at github.com/Markakd/bad_io…. I will present the technique @BlackHatEvents, come see my talk if you're interested! #badiouring

Eduardo Vela @sirdarckcat

2 years ago

2 0 10 23K 0

3 30 82 19K 18

fatalbit @fatalbit_

2 years ago

worst part of reading neoliberal interpretations of price increases is they just have a economic terms for saying “we were waiting for enough people to depend on the trains again to price gouge them”

The New York Times @nytimes

2 years ago

207 276 811 6.2M 80

Download Image

0 0 1 241 0

vx-underground @vxunderground

2 years ago

17 224 2K 107K 35

Download Image

Nick Newman @Nick_Newman

2 years ago

362 14K 85K 9.7M 2K

Download Image

fatalbit @fatalbit_

2 years ago

nah wtf is this

Microsoft @Microsoft

2 years ago

nah wtf is this

187 203 1K 2.2M 77

0 0 1 343 0

Simon Aarons @ItsSimonTime

3 years ago

Introducing acropalypse: a serious privacy vulnerability in the Google Pixel's inbuilt screenshot editing tool, Markup, enabling partial recovery of the original, unedited image data of a cropped and/or redacted screenshot. Huge thanks to @David3141593 for his help throughout!

135 3K 9K 2.1M 2K

Download Image

fatalbit @fatalbit_

3 years ago

binutils is either the safest or most vulnerable set of binaries given how many nerds fuzz it for their thesis.

0 1 30 6K 0

numbers @numbersdoespwn

3 years ago

Writeup for #PBCTF2023 git-ls-api pwnfirstsear.ch/2023/02/22/pbc…

1 6 20 4K 3

BEDNAR~1 (Now on @[email protected]) @BednarTildeOne

3 years ago

Published writeup and exploit for CVE-2022-20452, privilege escalation on Android 13 via Parcel use-after-recycle() github.com/michalbednarsk…

0 49 98 9K 21

Jeff Vander Stoep @jeffvanderstoep

3 years ago

The Android team has open sourced our internal Rust Training! It's a four day course covering the full spectrum of Rust, from basic syntax to advanced topics like generics and error handling. It also includes Android-specific content on the last day. google.github.io/comprehensive-…

49 712 3K 418K 1K

LukeGix @LukeGix

3 years ago

@kiks7_7 and I released a blogpost about the exploitation of CVE-2022-2602: a Linux use-after-free vulnerability in the io_uring subsystem. exploiter.dev/blog/2022/CVE-…