
vuln research+exploit dev | pwn2own {'24, '25}, Master of Pwn '25 | bordeaux enjoyer | friend of all cats | @SummoningTeam
[REDACTED]
Joined March 2013
- Tweets17.7K
- Following852
- Followers3K
- Likes24.2K
New post is up! This one uses CVE-2025-20741 (a heap overflow in the MediaTek MT76xx driver) to show how a bit of kernel alchemy can turn a heap OOB write into a number of stronger exploit primitives, up to page-level r/w via pipe_buffer corruption :)
blog.coffinsec.com/0day/2026…
hypr retweeted
I’m convinced that a large % of programmers don’t actually like computers.
As a side effect, are also perfectly happy to throw away their reasoning to a model as soon as they can.
I don’t get it, at ALL. Don’t you *LIKE* understanding the magic of the machine?
You do realize hand-programming (I hate that I even have to specify hand now) is fun…right?
hypr retweeted
i've written a harness for cybersecurity work that's like actually being used in real work by people who actually pay for it which feels kinda cool
i'm working for a very very big company that makes security software, who, as with most of the tech sector, is very pro AI.
thousands of lines a day are passing over us where the vast majority are at this point written by AI, i have sat sessions with major AI vendors where they gave us obviously faked demos.
i get a lot of LLM exposure, like a lot. in very big production codebases.
part of my specific responsibilities here are to try find places where LLM's can actually yield efficient and reliable positive-security outcomes, which is in far fewer places than they would have you believe
i've never really liked AI, but when I got this responsibility it was important to me to do a good job at it. So i studied high-performance vibecoders and how they work and tried to integrate that wherever relevant and actually got some decent stuff done
all the while, i would be frustrated when people in meetings would say shit like "can you ask Claude how we-", because, like... just think?
over time though, i started finding AI a lot more useful, and starting to feel a little more positively towards it.
every time I spoke to someone I'd hear people talk about how much better they were, how they were using LLMs to better themselves and their work
they weren't talking just about productivity but also like actually being smarter, which was in many cases just observably not true. I was learning a lot though.
as i started getting more used to LLMs I realized that there were more uses for them than I had previously guessed
one day, i was just kinda bored, so i decided to do a lil binex challenge, nothing too interesting just something to pass the time, and as i got started, i opened a claude window and asked it to take a look
that's when it kinda clicked that something had gone very wrong, and that reaching for an LLM had just become an ingrained behaviour
i started looking back on how i was thinking about others, how they were obviously getting stupider by the day and how i was obviously doing something they weren't because i was smart as shit actually, and i realised, i was just as dumb as they were
as someone who loves code and cybersecurity because of the potential for infinite learning, the realization that i had actually given up all my joy unknowingly and become stupider legit had me crying at my claude code
so i decided i would get away from LLMs as much as possible. my job requires me to use them a lot so that couldn't really go anywhere, but twitter won't stop talking about 'em so i left here, i also put in a week PTO with the intention that that week, i would not touch an LLM even once, not even search engine auto-answers. where i would just _do things_ w my own stupid hands and learn as much as i could for the simple joy of having learned it without regard for applicability or even if anything i did was even good
the whole time i kept thinking "fuck computer, everything is human", because I had a tweet from my moot @luxmendax stuck in my head the entire time i was trying not to lose my mind and decided that would be the theme for the week.
SO
- I read some books!
- I downloaded Reaper and made a song!
- I wrote some code which solves literally no problems
- I played videogames
- I did a patreon course thing from one of my fav creators
- I did a bunch of CTFs
I had a really really good time, and this time, i actually did learn a lot.
The CTFs were fucking hard tho it was so easy to see the impact LLMs had on my brain. Challenges that used to take like 5 min were taking me 20+ in the beginning. It all came back pretty quick but HOLY SHIT that was rough to claw back.
the reason i wanna write this down is bc i know i got homies in similar places atm, w frustration abt LLMs being used as first order optimal solutions, with LLMs taking the fun out of doing the things you love doing, but also, i know a lot of people are on here like "i've learned so much w AI". i'm sure that is the case for like... 1% of u... but the far likelier case is that u have alr lost more than u even remember having.
there's no shame in that either, these machines are designed to make u stupid bc ur stupidity is dependence and dependence is profitable
if u don't believe me and ur a person who does have daily LLM exposure measured in hours, try it, go a week without touching an LLM and still do all the things you're interested in now.
fuck israel, fuck the police, fuck AI CEO's, fuck the computer
everything is human
thx
hypr retweeted
After 6 months of extensive research, I have finally published a new blog post! It describes the journey from breaking into my router using a couple of command injections to finding and exploiting a remote heap overflow in a MediaTek kernel driver :D
hacefresko.com/posts/rce-on-…
hypr retweeted
My new article: "Some notes on the security properties of the pipe_buffer kernel object"
Many Linux kernel exploits use the pipe_buffer kernel object to build strong exploit primitives. I experimented with pipe_buffers and discovered something interesting a13xp0p0v.tech/2026/04/20/pi…
hypr retweeted
“Expecting an algorithmic description to instantiate the quality it maps is like expecting the mathematical formula of gravity to physically exert weight.”
hypr retweeted
Important to note that the vast majority of those 91,000 jailed by Bukele have never been tried, much less convicted of gang activity. They are held in indefinite pre-trial detention, sometimes for years. This is a classic tactic of authoritarian governments.
This quoted post is unavailable.
hypr retweeted
Inconceivably evil.

ALT When they received the call to respond to an Israeli airstrike in the city of Mayfadoun, in southern Lebanon, most of the paramedics held back, having previously seen colleagues killed by double-tap attacks targeting rescuers. But the medics from the Islamic Health Association (IHA) rushed to the scene. By the time the other emergency workers arrived at the site, they found the IHA medics had indeed been caught in a second strike. They started evacuating their wounded colleagues, only for their ambulances to be hit in two further attacks.
Israel hits the same target four times to kill as many medics as possible theguardian.com/world/2026/a…
recently made some major progress on the emulated QEMU device to allow it to fully complete link-up to bring the emulated device up after resolving some interrupt delivery issues + implementing DMA transfers for the emulated MCU+PDMA engine. should be pushed soon :)
hypr retweeted
looking out 12-36m, it’s clear that our industry (and broader society) will go through a time of dramatic change. A lot of it is going to be amazing but some of it will also be dangerous and detrimental (like job loss and capability proliferation). We should be there, in
hypr retweeted
The only and unique #QEMU #Internals training in the world is happening again! For vulnerability research and fuzzing of embedded systems.
And professional audio recordings of the classes.
typhooncon.com/typhooncon-20…
In Seoul, in Spring.
Feat @Farenain

















