All things relating to breaking tech, tech breaking, OSS, or hacking together software to perform something completely out of the ordinary, on purpose or by accident.
Summary * Backblaze (NASDAQ:BLZE) is a $250 million cloud storage and backup solution provider based in California that operates through two business segments: B2 Cloud Storage allowing “customers to store data” and “developers to build applications,” and Computer Backup that “automatically backs ...
I'm classing this as an exploit because it sounds like backblaze exploited their shareholders!
We (Reddthat) were going to use them as our object storage provider when we started. Luckily we didn't! It would make me want to migrate asap!
TikTok VM Reverse Engineering (webmssdk.js)
Contribute to LukasOgunfeitimi/TikTok-ReverseEngineering development by creating an account on GitHub.
I nice write up on the #TikTok VM
I guess you have all heard about the growing problem of AI companies trying to aggressively collect whatever data they can get their hands on to train their models. This has caused an explosive surge in web crawlers relentlessly hitting servers big and small. But who runs these crawlers? Turns out —...
We regularly see this on Reddthat's and my own personal services too.
Details of our SuperNote Nomad research which led to the disclosure of a 0-click RCE vulnerability
Max severity RCE flaw discovered in widely used Apache Parquet
Could be worse, I could be using parquet...
Unique 0-click "deanonymization" attack targeting Signal, Discord and hundreds of platform
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform - research.md
Interested in Anti-Cheat analysis? I highly recommend checking out Guided Hacking’s Anti-Cheat section. I’ve been reversing Black Ops Cold War for a while now, and I’ve finally decided to share my research regarding the user-mode anti-cheat inside the game. It’s not my intention to shame or promote ...
A nice in-depth article on game hacking
Bad Apple but it's 6,500 regexes that I search for in vim
There's no reason I should exit vim just to watch a video
From Pegasus to Predator - The evolution of Commercial Spyware on iOS
My talk explores the trajectory of iOS spyware from the initial discovery of Pegasus in 2016 to the latest cases in 2024. The talk will ...
My talk explores the trajectory of iOS spyware from the initial discovery of Pegasus in 2016 to the latest cases in 2024.
The talk will start with an analysis how exploits, infection vectors and methods of commercial spyware on iOS have changed over time.
The second section of the talk is all about advances in detection methods and the forensic sources which are available to discover commercial spyware. This talk will also include a Case Study about the discovery and analysis of BlastPass (one of the latest NSO Exploits).
The third part will discuss technical challenges and limitations of the detections methods and data sources.
Finally, I will conclude the talk with open research topics and suggestions what Apple or we could technically do to make the detection of commercial spyware better.
The commercial spyware landscape on iOS has evolved significantly since the discovery of Pegasus in 2016. In this talk, we’ll explore that evolution through four main areas:
Breaking NATO Radio Encryption
We present fatal security flaws in the HALFLOOP-24 encryption algorithm, which is used by the US military and NATO. HALFLOOP-24 was meant...
We present fatal security flaws in the HALFLOOP-24 encryption algorithm, which is used by the US military and NATO. HALFLOOP-24 was meant to safeguard the automatic link establishment protocol in high frequency radio, but our research demonstrates that merely two hours of intercepted radio traffic are sufficient to recover the secret key. In the talk, we start with the fundamentals of symmetric key cryptography before going into the details of high frequency radio, HALFLOOP-24, and the foundation of our attack.
High frequency (HF) radio, also known as shortwave radio, is commonly used by the military, other government agencies and industries that need highly robust long-distance communication without any external infrastructures. HF radio uses frequencies between 3 and 30 MHz. These frequencies enable skywave propagation, where the radio signals are reflected by electrically charged particles in the upper atmosphere. While this effect enables communication across very large distan
Reverse engineering the ESP32 Wi-Fi hardware registers
Famous FDIV bug on Pentium deep dive
Attached: 1 image Intel launched the Pentium processor in 1993. Unfortunately, dividing sometimes gave a slightly wrong answer, the famous FDIV bug. Replacing the faulty chips cost Intel $475 million. I reverse-engineered the circuitry and can explain the bug. 1/9
Read the whole thread, great look at the original Pentium and some pretty pictures to match!
Making a trading Gameboy: A pocket exchange and algo trading platform
An exchange and algo trading station in your pocket!
A nice in-depth post on the hardware too!
Redbox HDDs are finding their way into the hands on individuals and they were not cleaned!
OH HEY BAD NEWS: when someone opens up the hard drive of a redbox unit, they can pull a file which has a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when
when someone opens up the hard drive of a redbox unit, they can pull a file which has a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when
It’s hard enough creating one air-gap-jumping tool. GoldenJackal did it 2x in 5 years.
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies - zendesk.md
gaining access to anyones browser without them even visiting a website
What a good browser...
a post going over 4 exploits for CVE-2024-20017, a remotely exploitable buffer overflow in a component of the MediaTek MT7622 SDK.
