Author of Fuzzing Against the Machine Lead @ Zimperium Inc Prof @fuzzsociety_org Previously at https://xitter.cf/t.co/Vv2eAzDOmC, https://xitter.cf/t.co/1UUZqbAGYZ, https://xitter.cf/t.co/QMyQM7hLdB

Spain
Joined August 2012
jeppojeps - Antonio Nappa retweeted
You can find the post here: farena.in/dragon-tales-web/p… And here the resources: github.com/Fare9/Dragons-vs-… The theory behind Dragon-Tales can be found in my trainings on LLVM Binary Analysis for @fuzzsociety_org do not hesitate asking to @jeppojeps about it! CC @yates82
4
19
1,194
jeppojeps - Antonio Nappa retweeted
Zimperium research identified 34 malware families targeting more than 1,200 mobile banking apps across 90 countries, demonstrating the growing scale of mobile financial threats. Read the Global Mobile Threat Report: okt.to/3oLMbN #MobileSecurity #MobileBanking
1
1
255
jeppojeps - Antonio Nappa retweeted
Terence Tao warns that the race to AGI is becoming toxic, and OpenAI’s massive paper dump wiped out junior research projects overnight. Some parts of his most recent interview: “They were willing to toss understanding to the side so that they could prove more theorems, get more press releases [...] and test their latest toys. These AIs are depleting our pool of questions and not replenishing them with anything new. only looked at about 10 of the 300 odd papers. I mean, so this is part of the thing. There's just so many to look at. [...] There's a whole bunch which are still incomprehensible. And no one's really gone through them, and one or two even have some errors and [were] retracted. So we don't have a clear picture of what's going on. And no one from OpenAI is helping us. As far as they're concerned, they're done. [...] We have this pile of stuff to go through which we didn't ask for, but we have it anyway. And there will be some good stuff in there and some rubbish, but we don't know what the percentages are yet.”
180
174
77
1,521
802,885
jeppojeps - Antonio Nappa retweeted
In Spain, net neutrality is systematically dismantled under the radar of #LaLigaGate. Private football lobbies dictate blanket DNS/IP blocks, taking down CDNs, small businesses & open web services with zero accountability. #lafuerzadelagente
1
3
7
313
jeppojeps - Antonio Nappa retweeted
I made a bunch of videos on IDASQL but still I get asked: what’s the difference between it and IDA MCP and that if it does not have the word “MCP” in it then it must be some slop or something ;)
Maybe I should put IDASQL and IDA MCP side by side and post the results ;) 13 seconds. It will help dispel the misconception about IDASQL and show its true power and flexibility. Some folks, if they don’t see the word “MCP”, they become so dismissive. :( And hey, if you don’t like IDA, GhidraSQL is equally powerful and we’ll maintained. Just give it to your AI agent and go touch grass. It just works ;)
4
15
1,706
jeppojeps - Antonio Nappa retweeted
A French engineer who lives quietly in Paris has spent 30 years writing software that the entire internet now runs on without knowing his name. He wrote the code that streams every YouTube video, every Netflix show, every TikTok clip. He wrote the code that runs the virtual servers underneath AWS, Google Cloud, and Microsoft Azure. He calculated more digits of pi than anyone in history. He has no Twitter. He has no marketing. He just keeps shipping. His name is Fabrice Bellard. Here is the story, because almost nobody outside the systems programming world knows what one man has built. Fabrice was born in 1972 in Grenoble, France. He studied at École Polytechnique, the top French engineering school. He never went to Silicon Valley. He never built a startup empire. He just wrote code. In 2000 he started a project called FFmpeg, an open-source multimedia framework for encoding, decoding, and streaming video. He was 28. The project did one thing nobody else had done well. It handled every video and audio format that existed, in one library, on every operating system. He led it himself for years. Today FFmpeg is the invisible engine of the internet. YouTube uses it. Netflix uses it. VLC uses it. Chrome and Firefox use parts of it. Every Android phone, every iPhone, every smart TV, every video editing tool you have ever touched runs FFmpeg somewhere underneath. If you have watched a video on a screen in the last 20 years, Fabrice's code processed it. He was not done. In 2003 he started QEMU, a machine emulator and virtualizer. He wrote it solo until version 0.7.1 in 2005. QEMU lets you run any operating system on any other operating system. It became the foundation of modern virtualization. KVM, the Linux kernel hypervisor, runs on top of QEMU. Every major cloud provider, AWS, Google Cloud, Microsoft Azure, IBM Cloud, runs virtual machines on infrastructure built around it. The Quick Emulator is the most cited piece of cloud infrastructure code on Earth. He kept going. In 2001 he won the International Obfuscated C Code Contest with a small C compiler that grew into TCC, the Tiny C Compiler. TCC can compile and boot a Linux kernel from source in under 15 seconds. In 2004 he calculated the most digits of pi ever computed at the time, using a personal desktop computer and an algorithm he derived himself called Bellard's formula. In 2011 he wrote a complete PC emulator in pure JavaScript that runs Linux in your browser, a project called JSLinux that engineers still cannot believe is real. In 2019 he released QuickJS, a small but complete JavaScript engine that fits where V8 cannot. In 2021 he released NNCP, a neural network based lossless data compressor that immediately took the lead on the Large Text Compression Benchmark. Then he turned his attention to large language models. He built TextSynth Server, a web server with a REST API for running LLMs locally. He released ts_zip and ts_sms, compression utilities that use language models to compress text and short messages at ratios traditional algorithms cannot reach. He released TSAC, a very low bitrate audio compression system. In December 2025 he released Micro QuickJS, a new JavaScript engine for microcontrollers, separate from QuickJS, designed for environments with almost no memory. Fabrice co-founded a telecom company called Amarisoft in 2012, where he serves as CTO. Amarisoft builds 4G and 5G base station software used by carriers and labs around the world. He has been running it for over a decade while continuing to ship personal projects from his own home page at bellard dot org He has no Twitter. He has no Instagram. He gives almost no interviews. His personal website is a flat list of projects with no styling, no fonts, no marketing copy. Just titles and links. A quiet French engineer who never moved to Silicon Valley wrote the code that quietly runs the internet. He is still shipping.
116
1,373
159
7,274
1,275,128
jeppojeps - Antonio Nappa retweeted
Our long experience with OpenWRT from the book to our courses - cve.org/CVERecord?id=CVE-202… CVE-2026-103432 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Most Linux distros are impacted - be careful. bugzilla.redhat.com/show_bug… We reported it a few months ago. Thanks @Farenain @jeppojeps More to come.
2
9
610
jeppojeps - Antonio Nappa retweeted
Our live training is coming - prepare to see how we disclosed several vulnerabilities via emulation and fuzzing - only @_ringzer0 COUNTERMEASURE!!! ringzer0.regfox.com/ringzer0… Adaptive schedule with a pause in the middle of the week to make sure everyone follows!
1
6
548
jeppojeps - Antonio Nappa retweeted
We just started 60% discount on every product which is not on sale! DONTFALL! Enjoy!!!
2
3
370
jeppojeps - Antonio Nappa retweeted
Took around 1h to solve all of the challenges with this.... 🤯
The official IDA MCP Server is here. It's free, open source, and works with any LLM. Your agent writes IDAPython, uses ~20% fewer tokens, and can share an IDB with you in real time. 𝚞𝚟𝚡 𝚒𝚍𝚊-𝚑𝚌𝚕𝚒 𝚖𝚌𝚙 𝚒𝚗𝚜𝚝𝚊𝚕𝚕 hex-rays.com/blog/hex-rays-i… (copy-paste: uvx ida-hcli mcp install)
16
31
2
519
59,000
jeppojeps - Antonio Nappa retweeted
New paper on Android 16 security and AI agent orchestration to appear at PETS 2027!
1
8
1
19
1,021
jeppojeps - Antonio Nappa retweeted
Our Linux Kernel course is coming soon, do not lose the opportunity to get it for 149Eur! fuzzsociety.org/product/kern…
3
10
387
jeppojeps - Antonio Nappa retweeted
Linux Kernel Exploitation will be released soon, don't forget to reserve your spots at a discounted price
1
3
14
505
jeppojeps - Antonio Nappa retweeted
⚡️ On sale now — won't last: 🔹 Basic (0–9): €249 → €149 👉 fuzzsociety.org/product/irba… 🔸 Advanced (0–15 + appendix): €299 → €249 👉 fuzzsociety.org/product/adva… 💎 Bundle w/ Emulators & Symbolic Execution: €450 → €399 👉 fuzzsociety.org/product/prog… #ReverseEngineering #LLVM #ARM64 #BinaryAnalysis
1
2
7
408
jeppojeps - Antonio Nappa retweeted
📡 New FuzzSociety masterclass: Baseband Exploitation Exploit a Samsung Exynos modem with FirmWire + AFL++ and reach arbitrary code execution. Browser-based Linux lab. No setup pain. 🎁 First 5 go FREE with coupon: ba§eband!!! fuzzsociety.org/product/base…
4
3
2
18
1,524
jeppojeps - Antonio Nappa retweeted
In August I moved houses, ran Ragnar Rainier, ran Hood to Coast, ran a 50k, and today I start my studies at Dartmouth College. My life is wild and I wouldn't want it any other way 😁
7
1
44
2,650
jeppojeps - Antonio Nappa retweeted
Program Analysis has always been an arcane art. We shed light on it, you can build your own IR and lift to another language like a charm! Tame the Dragon - MBA, Obfuscation and RE will get 100x speed!!! PRE-SALE will end soon!
2
6
1
18
2,557
jeppojeps - Antonio Nappa retweeted
September has started, and our trainer @Farenain has been preparing something very interesting! It's time for the dragons! 🐉 If you've ever been curious about how the tools you use every day in your reverse engineering sessions actually work, join us in this training where we'll write a reverse engineering tool from scratch using the state-of-the-art library LLVM. The training comes in two flavors: - Basic: go from an ARM assembler/disassembler, to binary lifting, to your own Intermediate Language, Wyvern. - Advanced: includes everything in Basic, plus the transformation from Wyvern to LLVM IR, later optimizations, and generation of a C and Python API. This training focuses on ARM, the most prevalent architecture in the mobile world. Here's the basic training, release price 149€: fuzzsociety.org/product/irba… The advanced training, release price 249€: fuzzsociety.org/product/adva… Finally, if you also want to dive into Emulation and Symbolic Execution, we have a special bundle: the Advanced Training + our Emulation vs Symbolic Execution training, both for 399€: fuzzsociety.org/product/prog… CC @jeppojeps
I'm testing github.com/ac3ss0r/obfushead… with my static binary lifter. For the moment I use @unicorn_engine to extract a trace and the trace is the input to my IGNIL IL and then lifted to LLVM IR. It seems like when applying optimizations in LLVM IR, the result constant was obtained
3
7
769
jeppojeps - Antonio Nappa retweeted
Python may not be very random but here it goes the two winners (I have decided give two books instead of only one, so more people can enjoy it!) @yrology @K0en_M Congrats to the winners! Remember I have to prepare it and printing it, but you will receive it :D
As promised, now that I have reached the 3000+, I'd like to give away a printed copy of the training in emulation vs symbolic execution with @fuzzsociety_org Whoever wants to participate comment and RT, next week I will post who is the winner! CC @jeppojeps
5
1
1
4
1,320