lmao, could you imagine the NSA rm-rf-ing *privilege* from all systems without context

There were all kinds of failed theories about the Internet magically defeating authoritarian censorship regimes, which the PRC has readily proven wrong, but staying competitive in the AI space (especially in English) while also controlling access to information might actually be even harder.

happy new year 🎉

to continue the tradition, here is some of my favorite firmware & embedded security research of 2024:

Defeating the new Raspberry Pi's RP2350 Security Features [1]

Reversing and Hacking Firmware of an in-orbit Satellite to Re-establish Lost Communication [2]

All videos from The 38th Chaos Communication Congress (38C3) 2024:

media.ccc.de/b/congress/2...

#cybersecurity #informationsecurity #hacking #exploitation #iOS #android #apple #exploitation #reverseengineering #vulnerability

It's truly amazing we've reached the level of cybersecurity where China has hacked so many US telecom companies that the US government is now recommending the general public uses end-to-end encrypted messaging (something they spent the last 10+ years trying to ban "because terrorism").

This was my tenth(!) year building 25 days of puzzles for #AdventOfCode. You can solve them all for free! Most people write code to solve them, but you can solve them however you like. I hope they help people become better programmers. 🌟

The first puzzle comes out in two hours: adventofcode.com

Advent of Code is a great way to get your cranial juices flowing... Ok, that sounds gross, sorry.

I love it as a vehicle to play with a new programming language or two, or dust the cobwebs off an old one. I solved the first day's challenge with PHP!

I made the jump to kubuntu 24.04 as my host OS. It's the year of linux on the desktop for me. My windows workflows have been placed in a VM where they belong.

How does the new iOS inactivity reboot work? What does it protect from?

I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.

naehrdine.blogspot.com/2024/11/reve...

I'm sure you're already aware of this resource, but in case others aren't, Marco Ivaldi released some nice weggli rules and wrote a blog showing some vulnerabilities he found with them.
github.com/0xdea/weggli...
security.humanativaspa.it/a-collection...

Bluehat talks are up www.youtube.com/playlist?lis...

Jason Geffner on scaling DAST
youtu.be/kfuOzDwv874

I'm here! thanks for the invite @wblummis.bsky.social :)