3 ms·
I’m usually not into security research but this is fascinating, thank you. Someone screwing some C code and creating a vulnerability isn’t that interesting to
by tambourine_man 4y ago
I’m usually not into security research but this is fascinating, thank you.
Someone screwing some C code and creating a vulnerability isn’t that interesting to me, but going on such low level and fundamental stuff makes me giddily, if not a bit scared.
Last time something like this caught my eye was that iMessage[1] NSO thing, not because they managed to escaped the sandbox, but because of the insanely clever way they did it.
[1] https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html?m=1 https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...
- sizzle 4y agoSame and also the state sponsored centrifuge destroying 0 day that was written up a while ago, super mind bending read
- tambourine_man 4y agoYes! That one too.