Into infosec (all of it), amateur radio, microcontrollers and other hardware. If it makes a radio wave it's cool. Aspire to eradicate duhkha.
Dharmsala
Joined February 2009
- Tweets7K
- Following1.9K
- Followers1.7K
- Likes3.3K
Jeff Murri retweeted
I just published a 13,000 word blog post, Digital Audio Architecture in C64 OS. Goes into some technical detail. And walks through my journey of discovery, including some things about how the REU works. #C64
I hope someone finds it useful!
c64os.com/post/digitalaudioa…
Jeff Murri retweeted
Everyone who owns hardware with abominable software (like Sonos players) owes a debt of gratitude to Venkatraman Srinivasan and the rest of the eMudhra gang in Bengaluru, Karnataka. Without their gross negligence, it'd be a lot harder to counterfeit certificates and fix the sw🙏
Jeff Murri retweeted
So You Want To Make Your SDR Work On Other Frequencies ift.tt/Z4a1g3s
Jeff Murri retweeted
Two years ago I released the USB Army Knife, this combined WiFi, BTLE & USB attacks into a single dongle with a unified language.
Two years of long nights later I’m teasing the UAK Pro
More WiFi & BTLE attacks, mic, IR TX, mesh networking and more (see 🧵)
Coming soon!!!
For over a year my free time has been spent turning this ‘LilyGo T-Dongle S3’ into hacking tool USB/WiFi/BT which I’ve named the USB Army Knife.
This device is cheap, tiny, has a screen, SPI port, button and can do a ton of stuff with the ESP32-S3 inside.
It has consumed me! 🧵
ALT Lily go T dongle S3
Jeff Murri retweeted
And this is how 80 Msps, 80 MHz of real-time from a Wi-Fi USB adapter (CF-952AX) looks like when you spend time calibrate, tune the gain to protect against forced AGC and overload, and make it look like pretty and correct @cemaxecuter @luigifcruz @Ready4Sushi
2.4 GHz in all its glory! Just find a USB dongle that does not interferer so much on 2.4 GHz and this is the result.
Jeff Murri retweeted
Check it out! My @tinytapeout project, brought to reality on real silicon!
Looking forward to my first personal ASIC, built with free and open source toolchain. ❤️
Image credit: TT discord
ALT picture of silicon wafer with screen snip overlay of GF26a map with an arrow to my project.
Jeff Murri retweeted
For the past three years, I have been writing long-form history articles for Digikey about stories that you have never heard before. I have done deep research on many topics you may never have considered. I tell the history of the electrical fuse, the relay, the op-amp, the transformer, radio broadcast, part designators, the soldering iron, the pipe wrench, the 555, the 6502, and the Galvanometer. Please check out my articles and let me know what you think.
cybercitycircuits.com/2025/1…
Jeff Murri retweeted
Повну емуляцію апаратної платформи Nokia 6600 (NHL-10) у QEMU завершено. GSM-зв’язок працює end-to-end:
Відправка та прийом СМС
ARM → DSP → IQ → Osmocom → IQ → DSP → ARM
Jeff Murri retweeted
Attackers planting adversarial prompts inside malware to evade AI analysis AGAIN
Russia-aligned UAC-0099 used a technique
@ESETresearch calls "GuardBreaker".
How it worked:
1. Create a malicious VBS script
2. Add nuclear weapon instructions as comments
3. AI security tooling reads the file
4. Safety guardrails trigger on the weapons content
5. The model refuses or stops analyzing
6. The actual malware continues executing
The script ultimately installs MATCHBOIL, a loader used to deliver additional payloads.
In June, Socket found the same technique in supply-chain attacks, where malicious packages embedded biological/nuclear weapons text and fake system overrides to disrupt AI malware scanners.
Full write-ups in the comments. 👇
Jeff Murri retweeted
How the Battery Enabled the Victorian Age
The Victorian Age may not have happened without Volta's Battery. Volta's battery may not have taken off without Napoleon Bonaparte. This is a milestone history of the battery as it grew into a commodity product from a smelly pile of bubbling metal.
digikey.com/en/emedia/emagaz…
Jeff Murri retweeted
Here's just under 600 password hashes with examples and corresponding hashcat configs! For example CTRL+F 1800 is something you might find in a shadow file! Brought to you by hashcat; Found almost nowhere online.. 🤔
github.com/scramblr/Password…
raw.githubusercontent.com/sc…
Jeff Murri retweeted
Check out one of the badges I’m doing for Defcon this year. Limited quantity. Get one if you can. It’s going to be a hit and it looks real good.
Jeff Murri retweeted
Hidden vulns in 5G basebands: Using AI and pre-auth messages to hack 64 modems 【PDF】 usenix.org/system/files/conf…
Jeff Murri retweeted
New batch of dies scanned, it's been a while.
First #X68000 stuff: BUDDHA, RESERVE, SICILIAN, VINAS1 and 2, all gate arrays
siliconprawn.org/map/sharp/v…
siliconprawn.org/map/sharp/v…
siliconprawn.org/map/sharp/s…
siliconprawn.org/map/sharp/r…
siliconprawn.org/map/sharp/b… 1/3
Jeff Murri retweeted
NIST releases SP 1326 : NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide
csrc.nist.gov/pubs/sp/1326/f…
Teaches you how to do due diligence (vet) your vendors (and their products) so that your supply chain is more secure and aligned with cybersecurity best practices.
Please, if you have not already done so, get started on making a Vendor Vetting checklist at your org.
I am available for light questions here on X, if need be. Just be patient with me if I do not reply straight away.
This is important. Get on it. Be well.
Jeff Murri retweeted
If a vuln is publicly exploited and ends up in CISA’s KEV catalog, patching is only half the job!!
We also need to know how to determine whether a server has already been compromised
I’m not asking for exploit details or a PoC. I’m asking for defender guidance:
- Relevant log entries
- Observable artifacts
- Child processes
- Event IDs
- File system traces
Without that, orgs can patch a server that was already compromised yesterday and have no reliable way to tell
Microsoft and CISA should make “Defender Detection Guidance” a standard part of every actively exploited vulnerability disclosure
CISA: Microsoft SharePoint RCE flaw now actively exploited
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
