jiska
@naehrdine.bsky.social
ɿɘɘniϱnɘ ɘƨɿɘvɘɿ
🎦 youtube.com/@jiskac
📝 naehrdine.blogspot.com
🐥 twitter.com/naehrdine
🎓 hpi.de/classen
📱 reversing.training
🎦 youtube.com/@jiskac
📝 naehrdine.blogspot.com
🐥 twitter.com/naehrdine
🎓 hpi.de/classen
📱 reversing.training
Reposted by jiska
USENIX WOOT Conference 2026: two submission deadlines this year!
- Cycle 1: December 12, 2025 *only one month away* !
- Cycle 2: March 3, 2026
WOOT still has a SoK track and an "Up-and-coming track" (~Industry), CFP for details:
www.usenix.org/conference/w...
- Cycle 1: December 12, 2025 *only one month away* !
- Cycle 2: March 3, 2026
WOOT still has a SoK track and an "Up-and-coming track" (~Industry), CFP for details:
www.usenix.org/conference/w...
November 12, 2025 at 11:00 AM
USENIX WOOT Conference 2026: two submission deadlines this year!
- Cycle 1: December 12, 2025 *only one month away* !
- Cycle 2: March 3, 2026
WOOT still has a SoK track and an "Up-and-coming track" (~Industry), CFP for details:
www.usenix.org/conference/w...
- Cycle 1: December 12, 2025 *only one month away* !
- Cycle 2: March 3, 2026
WOOT still has a SoK track and an "Up-and-coming track" (~Industry), CFP for details:
www.usenix.org/conference/w...
Reposted by jiska
Dein erster Congress und pures Chaos? Die Chaospat:innen sind für dich da. Melde dich bis zum 25. November. Willkommen sind alle, die den #39c3 offener und vielfältiger machen wollen! events.ccc.de/2025/11/10/3...
Dein erster Congress? Die Chaospat:innen sind für dich auf dem 39C3 da!
Auch in diesem Jahr sind die Chaospat:innen wieder beim Chaos Communication Congress in Hamburg am Start! Interessierte Mentor:innen und Mentees können sich bis zum 25. November 2025 um 23:59 Uhr…
events.ccc.de
November 9, 2025 at 10:59 AM
Dein erster Congress und pures Chaos? Die Chaospat:innen sind für dich da. Melde dich bis zum 25. November. Willkommen sind alle, die den #39c3 offener und vielfältiger machen wollen! events.ccc.de/2025/11/10/3...
Reposted by jiska
I just published the slides of my #OBTS v8.0 talk about Apple's #C1 baseband. Our C1 #binja loader is now available on GitHub, and you can find a recording on YouTube.
lukasarnold.de/posts/obtsv8...
lukasarnold.de/posts/obtsv8...
OBTS v8.0: Diving into C1
Learn more about my talk “What’s at the Bottom of the Sea, One Baseband? - Diving into the C1” at eight edition of the Objective by the Sea conference.
lukasarnold.de
October 27, 2025 at 3:48 PM
I just published the slides of my #OBTS v8.0 talk about Apple's #C1 baseband. Our C1 #binja loader is now available on GitHub, and you can find a recording on YouTube.
lukasarnold.de/posts/obtsv8...
lukasarnold.de/posts/obtsv8...
Reposted by jiska
Wir freuen uns, den Vorverkauf für den #39c3 anzukündigen. Im Anschluss an die Voucherphase gibt es zwei offene Verkaufstermine. (Fast) alle Engel erhalten heute eine E-Mail mit Voucher events.ccc.de/2025/10/16/3...
39C3 Presale: Modus Operandi
Wir freuen uns, euch den Vorverkauf für den diesjährigen Chaos Communication Congress anzukündigen. Der Vorverkauf wird dieses Jahr ziemlich genau ablaufen wie letztes Jahr: Der Vorverkauf wird…
events.ccc.de
October 16, 2025 at 9:57 PM
Wir freuen uns, den Vorverkauf für den #39c3 anzukündigen. Im Anschluss an die Voucherphase gibt es zwei offene Verkaufstermine. (Fast) alle Engel erhalten heute eine E-Mail mit Voucher events.ccc.de/2025/10/16/3...
Reposted by jiska
On a Saturday night I stumbled across something on the internet that made me feel like ****** my pants. A giant dataset of real surveillance operations targeting 1000s of people across nearly every country. Unraveling it and the mysterious company behind it has consumed 1.5 years of my life
October 14, 2025 at 4:49 PM
On a Saturday night I stumbled across something on the internet that made me feel like ****** my pants. A giant dataset of real surveillance operations targeting 1000s of people across nearly every country. Unraveling it and the mysterious company behind it has consumed 1.5 years of my life
Want to know more details on Apple's SPTM, TXM, and Exclaves? Read more on this in the paper based on Moritz Steffin's thesis. Lots of low-level details including their security implications are covered.
arxiv.org/abs/2510.09272
arxiv.org/abs/2510.09272
Modern iOS Security Features -- A Deep Dive into SPTM, TXM, and Exclaves
The XNU kernel is the basis of Apple's operating systems. Although labeled as a hybrid kernel, it is found to generally operate in a monolithic manner by defining a single privileged trust zone in whi...
arxiv.org
October 13, 2025 at 4:54 PM
Want to know more details on Apple's SPTM, TXM, and Exclaves? Read more on this in the paper based on Moritz Steffin's thesis. Lots of low-level details including their security implications are covered.
arxiv.org/abs/2510.09272
arxiv.org/abs/2510.09272
Reposted by jiska
Lectures, music, art, punk: Join us at the 39th Chaos Communication Congress and please submit! The deadline for all submissions for the stages is October 24. #39C3 will take place from December 27 to 30 www.ccc.de/en/updates/2...
CCC | Lectures, music, art, punk: Join us at the 39th Chaos Communication Congress!
Der Chaos Computer Club ist eine galaktische Gemeinschaft von Lebewesen für Informationsfreiheit und Technikfolgenabschätzung.
www.ccc.de
September 27, 2025 at 11:14 PM
Lectures, music, art, punk: Join us at the 39th Chaos Communication Congress and please submit! The deadline for all submissions for the stages is October 24. #39C3 will take place from December 27 to 30 www.ccc.de/en/updates/2...
Reposted by jiska
NEW: Apple launched a new security feature specifically to fight against spyware and zero-day exploit makers.
We spoke to a researcher who sells zero-days to the U.S. government, who thinks this will make their life much harder and raise the cost of developing and selling hacking tolls for iPhones.
We spoke to a researcher who sells zero-days to the U.S. government, who thinks this will make their life much harder and raise the cost of developing and selling hacking tolls for iPhones.
Apple's latest iPhone security feature just made life more difficult for spyware makers | TechCrunch
Buried in an ocean of flashy novelties announced by Apple this week, the tech giant also revealed new security technology for its latest iPhone 17 and
techcrunch.com
September 11, 2025 at 10:05 PM
NEW: Apple launched a new security feature specifically to fight against spyware and zero-day exploit makers.
We spoke to a researcher who sells zero-days to the U.S. government, who thinks this will make their life much harder and raise the cost of developing and selling hacking tolls for iPhones.
We spoke to a researcher who sells zero-days to the U.S. government, who thinks this will make their life much harder and raise the cost of developing and selling hacking tolls for iPhones.
Reposted by jiska
JOB ALERT: We are recruiting for the newly created role of Information Security Program Manager.
Apply by Sept 30.
citizenlab.ca/2025/09/job-...
Apply by Sept 30.
citizenlab.ca/2025/09/job-...
Job Opportunity: Information Security Program Manager - The Citizen Lab
The Information Security Program Manager will be responsible for providing strategic leadership to develop and implement Information Security Programs for the Citizen Lab as well as other units at the...
citizenlab.ca
September 10, 2025 at 9:07 PM
JOB ALERT: We are recruiting for the newly created role of Information Security Program Manager.
Apply by Sept 30.
citizenlab.ca/2025/09/job-...
Apply by Sept 30.
citizenlab.ca/2025/09/job-...
Want to learn reverse engineering? There'll be a free, women*-only BlackHoodie workshop from October 6th to 9th in Paris!
Topics:
• Linux memory forensics 🕵️♀️ (by Sonia)
• Web app and mobile app pentesting 🕸️📱 (by Paula)
• iOS reversing 🍎 (by me)
Topics:
• Linux memory forensics 🕵️♀️ (by Sonia)
• Web app and mobile app pentesting 🕸️📱 (by Paula)
• iOS reversing 🍎 (by me)
September 10, 2025 at 7:52 PM
Want to learn reverse engineering? There'll be a free, women*-only BlackHoodie workshop from October 6th to 9th in Paris!
Topics:
• Linux memory forensics 🕵️♀️ (by Sonia)
• Web app and mobile app pentesting 🕸️📱 (by Paula)
• iOS reversing 🍎 (by me)
Topics:
• Linux memory forensics 🕵️♀️ (by Sonia)
• Web app and mobile app pentesting 🕸️📱 (by Paula)
• iOS reversing 🍎 (by me)
Reposted by jiska
WOOT 2025 schedule, all papers are now online open access:
usenix.org/conference/w...
Talks are recorded, and should be online in a few weeks.
usenix.org/conference/w...
Talks are recorded, and should be online in a few weeks.
WOOT '25 Technical Sessions
All sessions will be held in Room 611-612 unless otherwise noted.
usenix.org
August 11, 2025 at 8:56 PM
WOOT 2025 schedule, all papers are now online open access:
usenix.org/conference/w...
Talks are recorded, and should be online in a few weeks.
usenix.org/conference/w...
Talks are recorded, and should be online in a few weeks.
Been working on some interesting mobile security research lately? 📱🔬 Submit it to Black Hat Europe, the CFP deadline is August 11. Speaker honorarium + travel to London 🎡💂🏼♀️🏙️ are covered!
August 6, 2025 at 9:22 PM
Been working on some interesting mobile security research lately? 📱🔬 Submit it to Black Hat Europe, the CFP deadline is August 11. Speaker honorarium + travel to London 🎡💂🏼♀️🏙️ are covered!
My first day with a fancy new title 👩🏫🎉
August 1, 2025 at 8:59 AM
My first day with a fancy new title 👩🏫🎉
Reposted by jiska
Discounted early bird registration for WOOT '25 is still open until Monday - www.usenix.org/conference/w... - join us in Seattle on Aug 11/12 (right before USENIX Security) for talks and discussions on great cutting-edge offensive security research. Full program at www.usenix.org/conference/w...
WOOT '25 Technical Sessions
www.usenix.org
July 17, 2025 at 1:23 PM
Discounted early bird registration for WOOT '25 is still open until Monday - www.usenix.org/conference/w... - join us in Seattle on Aug 11/12 (right before USENIX Security) for talks and discussions on great cutting-edge offensive security research. Full program at www.usenix.org/conference/w...
Easy, beginner-friendly class teaching how to use Binary Ninja's debugger. Had the pleasure of beta testing it :)
📣"Debuggers 1103: Introductory Binary Ninja" is released!📣
ost2.fyi/Dbg1103
This class by Xusheng Li of Vector 35 @binary.ninja provides students with a hands-on introduction to the free version of Binja as a debugger, thus providing decompilation support!
ost2.fyi/Dbg1103
This class by Xusheng Li of Vector 35 @binary.ninja provides students with a hands-on introduction to the free version of Binja as a debugger, thus providing decompilation support!
July 15, 2025 at 7:48 AM
Easy, beginner-friendly class teaching how to use Binary Ninja's debugger. Had the pleasure of beta testing it :)
Reposted by jiska
Has anyone noticed/looked at the SPTM/TXM headers in the tahoe KDK?
June 28, 2025 at 4:57 AM
Has anyone noticed/looked at the SPTM/TXM headers in the tahoe KDK?
The Apple Watch has a closed down ecosystem, only compatible with the iPhone. Nils reverse engineered its interfaces to open it up for Android! ✨ WatchWitch ✨ allows using your Apple Watch ⌚ on Android devices, interpreting your health data, answering messages on the Watch & more. (1/2)
July 11, 2025 at 2:26 PM
The Apple Watch has a closed down ecosystem, only compatible with the iPhone. Nils reverse engineered its interfaces to open it up for Android! ✨ WatchWitch ✨ allows using your Apple Watch ⌚ on Android devices, interpreting your health data, answering messages on the Watch & more. (1/2)
Reposted by jiska
Announcing RE//verse 2026! Website is updated with info for sponsors, trainers, speakers, and more importantly, attendees! Are you ready for another year of high quality reverse engineering talks and networking? Join us the first week of March, 2026!
re-verse.io
re-verse.io
June 28, 2025 at 3:01 PM
Announcing RE//verse 2026! Website is updated with info for sponsors, trainers, speakers, and more importantly, attendees! Are you ready for another year of high quality reverse engineering talks and networking? Join us the first week of March, 2026!
re-verse.io
re-verse.io
Reposted by jiska
We've released CellGuard 1.6.0, our iOS app, to make use of the iPhone's internal baseband communication. The update enhances support for dual SIM, adds new #C1 packet types, automatic navigation to sysdiagnoses, and more: cellguard.seemoo.de/docs/changel...
Changelog
Changelog # 1.6.0 # CellGuard now supports dual SIM setups. When two SIM cards are activated simultaneously, the app can distinguish between their connected cells and packets. We’re working on extract...
cellguard.seemoo.de
June 14, 2025 at 6:40 PM
We've released CellGuard 1.6.0, our iOS app, to make use of the iPhone's internal baseband communication. The update enhances support for dual SIM, adds new #C1 packet types, automatic navigation to sysdiagnoses, and more: cellguard.seemoo.de/docs/changel...
Going to the USENIX Security Symposium? Don't forget to also register for WOOT, the papers we selected are amazing 🤩
Want to go to WOOT and learn about the latest hardware & software attacks? Registrations are now open!
If you can't afford traveling ✈️ to Seattle on your own and need financial support for a ticket, apply for a grant until July 7: www.usenix.org/conference/w...
If you can't afford traveling ✈️ to Seattle on your own and need financial support for a ticket, apply for a grant until July 7: www.usenix.org/conference/w...
WOOT '25 Grant Opportunities
www.usenix.org
June 9, 2025 at 7:40 PM
Going to the USENIX Security Symposium? Don't forget to also register for WOOT, the papers we selected are amazing 🤩
Reposted by jiska
🔔 It is time to buy your HEXACON ticket!
💸 Discounted tickets are available (while supplies last) for students and professionals who do not receive support from their company. This approach is based on trust, but we may ask for proof.
www.hexacon.fr/register/
💸 Discounted tickets are available (while supplies last) for students and professionals who do not receive support from their company. This approach is based on trust, but we may ask for proof.
www.hexacon.fr/register/
June 2, 2025 at 1:59 PM
🔔 It is time to buy your HEXACON ticket!
💸 Discounted tickets are available (while supplies last) for students and professionals who do not receive support from their company. This approach is based on trust, but we may ask for proof.
www.hexacon.fr/register/
💸 Discounted tickets are available (while supplies last) for students and professionals who do not receive support from their company. This approach is based on trust, but we may ask for proof.
www.hexacon.fr/register/
Reposted by jiska
CoreAudio CVE with some nice patch reverse engineering here: blog.noahhw.dev/posts/cve-20...
CVE 2025 31200
Background On April 16, 2025, Apple released a patch for a bug in CoreAudio which they said was “Actively exploited in the wild.” This flew under the radar a bit. Epsilon’s blog has a great writeup of...
blog.noahhw.dev
June 2, 2025 at 8:58 PM
CoreAudio CVE with some nice patch reverse engineering here: blog.noahhw.dev/posts/cve-20...
Reposted by jiska
how to read a C++ codebase:
1. compile it with DWARF debug info enabled
2. open it in Ghidra
3. look at the C decompilation
1. compile it with DWARF debug info enabled
2. open it in Ghidra
3. look at the C decompilation
May 31, 2025 at 2:38 PM
how to read a C++ codebase:
1. compile it with DWARF debug info enabled
2. open it in Ghidra
3. look at the C decompilation
1. compile it with DWARF debug info enabled
2. open it in Ghidra
3. look at the C decompilation
Reposted by jiska
Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!
May 14, 2025 at 6:45 AM
Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!