Archives

2024-10-02
Tool release: fs_usage_ng
2024-09-12
The forgotten art of filesystem magic - Alligatorcon 2024 slides
2024-08-20
The missing guide to the security of filesystems and file APIs (v1)
2024-04-12
Why you shouldn't use a commercial VPN: Amateur hour with Windscribe
2023-12-18
Hacking ISP CPE equipment: FiberHome
2023-12-18
You can watch my OBTSv6 talk on youtube
2023-11-15
sqlol (CVE-2023-32422) - a macOS TCC bypass
2023-11-14
lateralus (CVE-2023-32407) - a macOS TCC bypass
2023-10-30
batsignal (no CVE) - a macOS LPE
2023-10-15
Unexpected, Unreasonable, Unfixable - My slides from OBTS v6
2023-09-27
librarian (CVE-2023-38571) - a macOS TCC bypass in Music and TV
2023-09-26
unnamed sandbox escape (CVE-2023-32364) - a macOS sandbox escape by mounting