was ea_foundation
Joined June 2010
- Tweets381
- Following342
- Followers1.2K
- Likes116
Aleks retweeted
We probably shouldn’t be doing this.
This message may or may not have been intercepted. If you are reading this, you are already involved. Hackers, breakers, builders, and curious minds,this is your signal. cfp.balccon.org/balccon2k26-… #cfp #BalCCon2k26 #CyberSecurity #BalCCon
Did anyone get you this air quality monitor as a gift? I wanted to have it log the data, but didn’t quite trust it with internet access. I dug around a bit, got a root shell and untethered it. Read the writeup: blog.29b.net/dispatches/cgs2…
Aleks retweeted
Whoever is coming to @BalCC0n: I will be teaching a workshop Attacking USB with Raw Gadget (covering basics of USB emulation and sniffing).
If you wish to attend, you must bring Raspberry Pi 5 along with a few other things, see the workshop description.
github.com/xairy/raw-gadget/…
Aleks retweeted
#BalCCon2k25-Against the current is just around the corner on 19| 20| 21 September 2025!You don’t want to miss: @travisgoodspeed @MalwareUtkonos @gannimo @herrmann1001 @joegrand @GMahovlic @Th3PeKo @micko_mame @k0st …Secure your spot now at : 2k25.balccon.org/tickets/ #BalCCon
Aleks retweeted
Exploitation of Asus Armory Crate AsIO3.sys driver | authorization bypass + ObfDereferenceObject primitive to LPE - blog.talosintelligence.com/d…
Aleks retweeted
Today at @DistrictCon I'll be speaking about writing a portable assembler and disassembler for embedded architectures. In case you can't make the lecture, here are a few of the highlights. 1/n
Mentioned @alexjplaskett 's tweet as I was referencing @j00ru & @gynvael 's excellent BrokenType work, presentations and writeups
It never fails to amaze me how frequently ex-MWR researchers are referenced during conference talks 😍
Got to love seeing @alexjplaskett's name come up during @FuzzyAleks's talk into "Triangulating TrueType Fonts On macOS: Reconstructing CVE-2023-41990".
The biggest takeaway from this talk is that macOS font renderer ALMOST never invokes the interpreter. If you were fuzzing TTF bytecode without paying attention, it was probably not hitting the interpreter at all.
I'll post slides shortly with other interesting details. #OBTS
📜 Starting Day 2 Talks of #OBTS with a dive into the unexpected: “Triangulating TrueType Fonts On macOS: Reconstructing CVE-2023-41990” by Aleksandar Nikolic (@FuzzyAleks).
Who knew a simple PDF and the Fonts could be transformed into a digital weapon? In this talk, Aleksandar unravels the mystery behind a hidden vulnerability in Apple’s font rendering code, originally linked to Operation Triangulation. Like navigating ancient paths of Kinihapai, we’ll explore some of the oldest code running on the latest macOS and iOS, uncovering insights that could reshape how we detect and defend against such exploits.
OBTS kicks off strong—ready to see how deep this rabbit hole goes? 🌊📄 #AppleSecurity #macOS #ReverseEngineering
Digging in weird places @phLaul
We're deep diving on vulnerabilities in ClipSp, the driver at the core of Windows' Client License Platform. Read the latest research here: cs.co/6016tOpB8
Aleks retweeted
Apple released a hearing aids feature for the AirPods Pro a while ago. I bought a pair for grandma, but then realized that the feature was geoblocked in India
So we at @_lagrangepoint decided to unblock it. It ended up involving a leaky microwave and building a Faraday cage:
ALT An Airpods case, an iPad, and a Faraday cage made of copper and aluminum
Aleks retweeted
Psst, if you don’t know, infosec people are finally switching to Bluesky. Matt Burgess put together a “starter pack” for infosec people (or just look at who I follow). I hope people start sharing their ideas and resources there
bsky.app/profile/mattburgess…
That thing is literally bigger on the inside, somehow. Perfect taxi vehicle, too.
This quoted post is unavailable.
Aleks retweeted
Today I released a Ghidra data type archive that I've created while analyzing Windows drivers. All of the definitions are ones that weren't present in publicly available GDT files. Whenever I create new definitions I'll be updating the public version
blog.talosintelligence.com/g…
Very detailed writeup about intricacies of JPEG2000 format. Exploits a variant of an old discovery of ours talosintelligence.com/vulner…
Excited to share this blog post about server-side memory corruption that my team exploited in production.
Shout-out to @scannell_simon, @epereiralopez, and @thatjiaozi - this was a very fun project. :-)
bughunters.google.com/blog/6…
When you ask chatGPT about strawberries, a sound of power plant turbines spooling up should play in the background: youtu.be/pMEtcnstu9o?si=nYye…
When you ask chatGPT about strawberries, a sound of power plant turbines spooling up should play in the background: youtu.be/pMEtcnstu9o?si=nYye…