Security Researcher, Hacker. Breaking new stuff, voiding warranties and finding out how things work!
Joined March 2013
- Tweets2.6K
- Following381
- Followers1.5K
- Likes671
Brian retweeted
‼️BREAKING: Security firm Calif appears to have a working exploit for the leaked PHP flaws, hours before the patch.
A briefly posted video credited to Calif shows it running commands on a WordPress 7.1.3 site on PHP 8.5.4. Kevin Beaumont says a screenshot from it is real.
A separate public PoC is also circulating, but its own author now says one of its attack chains is dead and code execution is unreliable.
Admins have two stopgaps until the fix lands at 14:00 UTC today.
Turning off session.upload_progress.enabled in php.ini disables the feature the leaked details point to. The only cost is upload progress bars.
Blocking every request with a multipart Content-Type at the web server goes further, but breaks file uploads.
Neither is official. Gina Peter Banyard, a PHP core developer at the PHP Foundation, says "the only mitigation is patching / upgrading PHP."
If you can afford to switch a server off for a day, she says, that might be the most sensible thing to do.
"I sadly know too much," she wrote.
Brian retweeted
Vulhunt is now open-source, this is a game changer: github.com/vulhunt-re/vulhun… @binarly_io @vulhuntdev
Brian retweeted
A while ago I've given a talk on how to build exceptional security research teams: github.com/rrbranco/Presenta… - I continue convinced that is all that is needed. The adage "Great people leave managers, not companies" continues to be true.
Brian retweeted
The first ever end-to-end cross-process Spectre exploit? I worked on this during an internship with @grsecurity! An in-depth write-up here:
grsecurity.net/cross_process…
Brian retweeted
Binary Gecko @Binary_Gecko is once again a Platinum Sponsor of @h2hconference - They are also sponsoring the CTF again: the winning team gets a fully covered trip (Hotel, Air Tickets and Registration) to @offensive_con in Berlin #H2HC2024 #H2HC21years
Brian retweeted
Today is my birthday and I was reflecting on my 26 years career in infosec. One of the things that I am most proud in my life, not only in my career, is that I collaborated with people for years, decades even. Cross company, cross social statuses, cross any other fake barrier. I also co-organize a major community event, for 21 years now! Some of the volunteer staff started when they were 15 years old (I even had to sign paperwork as custodian) and they are still with us now that they are 27! Some of our staff used to be interns and are now in major leadership positions in big companies and banks, still volunteering. Some speakers are attending for more than 10 years now. And some of the ones that attended 20 years ago are still friends. I also get invited to some events for more than a decade. I've also mentored so many talented researchers and seem they grow so much (not the bs mentorship in companies, real mentorship that transforms in friendship over years, cross companies). I also help other projects, companies and events, all for free and most even anonymously. So if you've heard that I am 'difficult', know that it is because I speak up against unethical people that jump from field to field to benefit their careers (like from Marketing to PSIRT, or Performance to Sec Engineering) and that are in positions of power (and while I am intolerant to mistakes from people with power that only affect others, never themselves, I am totally understanding of mistakes by unexperience folks that are innocent). My ask for those that hear things about me: spend some time looking at my track record first. Or maybe reach out and get to know me. You might be surprised to find out that I am super easy going.
Brian retweeted
Magika - fast file identification via deep learning. Open-source and used internally at Google.
Assessed by yours truly.
opensource.googleblog.com/20…
Brian retweeted
Don't forget to submit your talks to our CFP. The sooner the better! cfp.offensivecon.org/offensi…
Brian retweeted
Aus gegebenem Anlass (#warntag) nochmal als Erinnerung meine zwei blog-Posts zu Cell Broadcast und Warnsystemen im Mobilfunk: laforge.gnumonks.org/blog/20… und laforge.gnumonks.org/blog/20… #warntag2023 #warntag23
Brian retweeted
I have been meeting awesome folks. It is inspiring and frightining #OffensiveCon23 is just starting and is already awesome! @offensive
Brian retweeted
⛓️Confirmed, Intel OEM private key leaked, causing an impact on the entire ecosystem. It appears that Intel BootGuard may not be effective on certain devices based on the 11th Tiger Lake, 12th Adler Lake, and 13th Raptor Lake. Our investigation is ongoing, stay tuned for updates.
Brian retweeted
Dallas iButton chip, the DS1463. You might have one of these on a keyfob somewhere. 1/n
Brian retweeted
Brian Butterly at @shmoocon is dropping some hard truths about railway security.
Just the development cycle to get a train on the tracks is ~10 years - longer than the support lifetime of many operating systems. Then you have issues of useful life and certification issues.
Brian retweeted
I thought that all of the @h2hconference badges from 2013 had been seized by Brazilian customs, but I finally managed to get one of the survivors!
See github.com/travisgoodspeed/l… for an exploit for this device, based on a paper by Herrewegen, Oswald, Garcia, and @qaistemeiza.
Brian retweeted
We're going to let you in on a secret—learning complex subjects like cryptography doesn't require dry, boring textbooks. Dive right into encryption, microprocessors, molecular biology, physics, and more with our dazzlingly delightful Manga Guides: nostarch.com/catalog/manga
Brian retweeted
I need some good photographs of the MYK78 Clipper Chip, but the best ones available are my own photos from grad school, and those aren't quite good enough.
So let's go step by step and see what's inside! 1/n
