2 ms·

This is a thing and was used in this fantastic piece: https://www.youtube.com/watch?v=lR0nh-TdpVg https://www.youtube.com/watch?v=lR0nh-TdpVg However the way t

• tambourine_man 4y ago
  I’m usually not into security research but this is fascinating, thank you. Someone screwing some C code and creating a vulnerability isn’t that interesting to me, but going on such low level and fundamental stuff makes me giddily, if not a bit scared. Last time something like this caught my eye was that iMessage[1] NSO thing, not because they managed to escaped the sandbox, but because of the insanely clever way they did it. [1] https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html?m=1 https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...
  • sizzle 4y ago
    Same and also the state sponsored centrifuge destroying 0 day that was written up a while ago, super mind bending read
    • tambourine_man 4y ago
      Yes! That one too.
• genewitch 4y ago
  Ahh, I knew someone would post a reference or video of xorxorxorxor, or Mr. Domas. I was so excited to try out sandsifter I spent an entire night shift compiling everything on a raspberry pi or rockchip. Sandsifter is an x86 instruction dumper. Sometimes I wonder if the head injuries I took as a teen affected me in a subtle way, because I did watch the entire sandsifter presentation where he repeatedly says x86. He also has a cool presentation about ring -1, -2, and beyond, of which the reader for that stuff was what I figured was used to find the actual OP.