https://xitter.gq/t.co/4wDlqqQzTa
Joined October 2012
- Tweets189
- Following682
- Followers820
- Likes669
Pinned Tweet
ptmalloc fanzine episode 05 - thread local caching in glibc malloc tukan.farm/2017/07/08/tcache…
tukan retweeted
Check out our latest post about a vulnerability we disclosed to the Kernel Security Team - “Race conditions in Linux Kernel perf events”
binarygecko.com/race-conditi…
tukan retweeted
Check out our latest blog post “Sky’s the Limit – Quick Analysis and Exploitation of a Chrome ipcz TOCTOU Vulnerability”
binarygecko.com/skys-the-lim…
tukan retweeted
What is the limit of an employer owning your results? When I left TASZK I expected to not receive credit for my unpublished work. It was surprising to see my name erased from old articles.The reason why I write this post is my exemployer personally taking credit for my research/4
Looks like Samsung Mobile Security selected me as the #1 researcher for their 2023 Rewards Program Hall of Fame. Appreciate that, thank you! security.samsungmobile.com/h…
tukan retweeted
If the discussion about the future of humanity is Eliezer Yudkowski on one side and Marc Andreessen‘s manifesto on the other, we should without hesitation choose extinction.
tukan retweeted
Slides and PoC for our Ekoparty presentation "I'm High" by @NicoEconomou: labs.bluefrostsecurity.de/wi…
tukan retweeted
CVE-2023-2008 - Analyzing and exploiting a bug in the udmabuf driver by @dialluvioso_ and @esanfelix labs.bluefrostsecurity.de/bl…
tukan retweeted
We've been asked to share the kernel challenge we had at OffensiveCon. You can download it at static.bluefrostsecurity.de/… and give it a try. It was meant to be solved live at the conference, but apparently the noisy environment and german keyboard layout made it too hard :').
tukan retweeted
Revisiting CVE-2017-11176: Introduction to Android/Linux kernel exploitation by @Firzen14
labs.bluefrostsecurity.de/re…
tukan retweeted
We are growing our browser vulnerability research team! Full time Chrome research, flexible hours, huge bonuses and fun retreats. Contact us at: careers(at)bluefrostsecurity(dot)de
tukan retweeted
#OffensiveCon23 CFP is now officially open! cfp.offensivecon.org/ Don't wait until the last minute to submit!
tukan retweeted
We've disclosed two remotely exploitable Linux kernel bugs in the Bluetooth stack: one infoleak and one UAF. More information here: github.com/google/security-r… and here: github.com/google/security-r… (cc @theflow0)
tukan retweeted
New blog post released!
Windows Segment Heap: Attacking the VS Allocator by @_vepe labs.bluefrostsecurity.de/bl…
tukan retweeted
Video and slides for “UnZiploc”: labs.taszk.io/articles/post/… In our new OTA exploitation research on Huawei phones we explored remote interfaces to get RCE and escalate to TrustZone using logic bugs only.
![[BugTales] UnZiploc: From 0-click To Platform Compromise](https://pbs.twimg.com/card_img/2118511740807692288/XKACoarr?format=png&name=800x419)
tukan retweeted
Please RT - I have no job next: I was told that my request was likely to succeed, and I have custody of my kids, so I can't "return to the office" as I'm expected.
tukan retweeted
Want a chance to join BFS as a vulnerability researcher and enjoy a full time remote position, with a competitive base salary, cash bonuses and amazing fun retreats? Try out a light challenge to begin your journey!
labs.bluefrostsecurity.de/bl…
tukan retweeted
#Offensivecon22 registration is OPEN! Remember tickets are limited.
offensivecon.org/register.ht…
tukan retweeted
New Advisory: Use-After-Free in the Android ION Allocator - with commentary by @gymiru on why we are publishing a 0-day (hint: Google's own advertised disclosure policy goals) labs.taszk.io/blog/post/61_a…