1ce0ear (@1ce0ear) profile picture

Android Red Team @ Google (Tweets are my own).

California, USA
Joined December 2018
Photo by 1ce0ear (@1ce0ear)Photo by 1ce0ear (@1ce0ear)Photo by 1ce0ear (@1ce0ear)Photo by 1ce0ear (@1ce0ear)Photo by 1ce0ear (@1ce0ear)Photo by 1ce0ear (@1ce0ear)Photo by 1ce0ear (@1ce0ear)Photo by 1ce0ear (@1ce0ear)
php2shell Tomorrow is a helluva day.
275
1,828
687
16,185
3,707,924
1ce0ear retweeted
New exploit: “xor dword [0xf80c2094], 1<<22” Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed. github.com/xoreaxeaxeax/skit…
166
1,071
184
8,168
1,100,424
1ce0ear retweeted
Tomorrow will be my last day at Google after 27 years, and watching it grow from 25 people to 190,000+ has been an amazing journey. Below is a note I shared with many people internally at Google today. An excerpt is: It has been an absolute pleasure to work with you and to help build some of the most widely used and impactful products of all time. As a kid, I dreamed of helping build software that would be used by many people, and Google now has thirteen products used by more than a billion people (amazing!). Our work has had a tremendous impact in the world, and I have been lucky enough to collaborate and form friendships with many colleagues that I deeply admire, respect, and enjoy. It still brings me joy every time I see people out in the world using our products to find information, handle email, translate documents, watch videos, learn new things, navigate and understand the physical world, browse the web, use their phone, run large-scale computations on our infrastructure, ride in an autonomous vehicle, or perform complex tasks with the help of our AI systems. I hope you all share this sense of joy, because it is a shared accomplishment! Thank you to all of my colleagues at Google over many years! Now I'm excited to go start @DiscoLoopAI with my longtime friends and colleagues @Sanjay_Ghemawat, @OriolVinyalsML, and @quocleix. (Updated post: slightly redacted to not have some personal info)
845
2,754
758
33,654
11,901,280
Slides for our OffensiveCon talk (by me and @jmartijnb) androidoffsec.withgoogle.com…: A tiny mistake in a render config ➡️ corrupt a special GPU stack pointer register ➡️ GPU hardware “renders” pixels to the AP kernel directly ➡️ pwned More presentations: androidoffsec.withgoogle.com… :)
1
43
186
13,934
Talk recording out 📹 youtu.be/KGbGU_MK9hY with @jmartijnb Thank you @offensive_con :)
Thanks to everyone who came out - an unconventional GPU exploit where the hardware itself becomes the primitive, ultimately patching the AP kernel back.
14
25
6,818
1ce0ear retweeted
Humans using Mythos as seen by Mythos
3,873
4,034
463
90,242
10,017,078
Back from an amazing @offensive_con 2026! It's been an honor to be on stage and present our Google WiFi Pro/QSEE research. Thanks everyone at @Binary_Gecko for making it awesome.
1
2
2
31
16,079
Booyah it's been confirmed! 🎉 splitline (@_splitline_) of DEVCORE Research Team chained 2 bugs to exploit Microsoft SharePoint, earning $100,000 and 10 Master of Pwn points. Massive aura farming this year at #P2OBerlin. Full win! #Pwn2Own
4
13
173
17,259
Thanks to everyone who came out - an unconventional GPU exploit where the hardware itself becomes the primitive, ultimately patching the AP kernel back.
Tile-Based Deferred Rooting: When Your GPU Starts Rendering To Kernel Code Space! by @1ce0ear and @jmartijnb
2
6
2
47
14,086
Prague 😋
4
542
Going to present an unconventional exploit ;) By corrupting a GPU stack pointer register as part of the TBDR pipeline and some blackbox work, GPU hardware may write vertex / pixel shader to arbitrary pages. Ultimately, the hardware can patch AP kernel back~
5
23
1
192
28,450
Slide: powerofcommunity.net/2025/sl… Thanks for the fantastic conference @POC_Crew :)
Sweet talk, enjoyed it! Xingyu Jin (@1ce0ear) & Martijn Bogaard (@jmartijnb) – Dirty Ptrace: Exploiting Undocumented Behaviors in Kernel mmap Handlers 🐧🛠️ #POC2025
28
1
124
19,617
CVE-2022-22265 -> CVE-2025-23102 ? 😂
1
38
8,517
I've uploaded the slides of my recent talk "JS Engine Security in 2025": saelo.github.io/presentation…. I think there'll also be a recording available at some point (otherwise I can make one as not everything's in the slides). Thanks for the fantastic conference @POC_Crew!
3
61
1
227
21,088
Sweet talk, enjoyed it! Xingyu Jin (@1ce0ear) & Martijn Bogaard (@jmartijnb) – Dirty Ptrace: Exploiting Undocumented Behaviors in Kernel mmap Handlers 🐧🛠️ #POC2025
1
10
2
59
24,299
Bukhansan National Park
8
829
1ce0ear retweeted
Guide to fuzzing the Binder kernel driver using the Linux Kernel Library (LKL) androidoffsec.withgoogle.com… Credits Eugene Rodionov, Gulshan Singh and Zi Fan Tan #infosec
5
28
142
8,020
Hello 🇰🇷
1
8
1,526