Phenol
LightNews LightNews
banner
phenol42.bsky.social
Phenol
@phenol42.bsky.social
33 followers 75 following 0 posts
Former chemistry student. 42born2code alumni. Reversing and pwning stuffs at RandoriSec.
Posts Replies Media Videos
Reposted by Phenol
natashenka.bsky.social
Super cool potential ASLR leak involving dictionary hashes! googleprojectzero.blogspot.com/2025/09/poin...
Pointer leaks through pointer-keyed data structures
Posted by Jann Horn, Google Project Zero Introduction Some time in 2024, during a Project Zero team discussion, we were talking about how...
googleprojectzero.blogspot.com
September 26, 2025 at 5:07 PM
Reposted by Phenol
nsinusr.bsky.social
Really enjoyed speaking at the inaugural edition of @re-verse.io!

You can find Tomasz' and my slides on tricks with SIMs and interposers here: tinyurl.com/reverse25-si...
Roadmap of the SIMsalabim re-verse.io talk. It shows the backplane of a disassembled Pixel 6 phone together with a iconized SIM and a picture of an interposer. Five locations are marked: (0) SIM interface, (1) Baseband, (2) Attack Surface, (3) Vulnerabilities, (4) Interposer
March 5, 2025 at 5:41 PM
Reposted by Phenol
gr4yf0x.bsky.social
Pumpkin (@u1f383 on X) does cool work. Here is another cool read about an interesting race condition involving signal handling
u1f383.github.io/linux/2025/0...
February 26, 2025 at 8:42 AM
Reposted by Phenol
binitamshah.bsky.social
Hacking the Xbox 360 Hypervisor Part 1: System Overview : icode4.coffee?p=1047 credits @DoomerGrim
February 25, 2025 at 12:25 PM
Reposted by Phenol
natashenka.bsky.social
Just unrestricted an issue that shows a fun new attack surface. Android RCS locally transcribes incoming media, making vulnerabilities audio codecs now fully-remote. This bug in an obscure Samsung S24 codec is 0-click

project-zero.issues.chromium.org/issues/36869...
Project Zero
project-zero.issues.chromium.org
January 10, 2025 at 12:08 AM