benjamin @____benjamin

🔺New on the Apple Security Research blog: we pit our hardened kalloc_type XNU allocator against SockPuppet, a powerful vulnerability from the past: security.apple.com/blog/what-if-w…

2 82 235 84K 39

View Details

benjamin @____benjamin

3 years ago

macOS 13.3.1 still has the bitcoin paper, do the update

0 0 3 793 0

View Details

FUNCTION(FUNCTION({"🎉", "Year", "Happy New"}, "sortedArrayUsingDescriptors:", {FUNCTION(CAST("NSSortDescriptor", "Class"), "sortDescriptorWithKey:ascending:", "hash", 1)}), "componentsJoinedByString:", " ")

0 1 5 2K 0

View Details

benjamin @____benjamin

4 years ago

FUNCTION({"Merry", "Christmas", "🎅"}, "componentsJoinedByString:" , " ")

0 0 0 472 0

View Details

benjamin @____benjamin

4 years ago

Trying out Mastodon, find me at @[email protected]

0 0 1 0 0

View Details

Filippo Bigarella @FilippoBiga

4 years ago

Towards the next generation of XNU memory safety: kalloc_type security.apple.com/blog/towards-t… I’m so happy that the team finally gets to share the details of this huge effort. And I’m so proud I had the chance to work on it in the past couple of years. :)

3 25 91 0 12

View Details

benjamin @____benjamin

4 years ago

Need offsets? Please ask @tihmstar

1 2 9 0 0

View Details

Nicolas @NManichon

4 years ago

@tihmstar Just patch ********* bro

0 1 0 0 0

View Details

tihmstar @tihmstar

4 years ago

oh the jailbreak works, just never turn on wifi on the device ._.

14 9 194 0 0

View Details

benjamin @____benjamin

4 years ago

@tihmstar I’ve been there and I can tell you it’s true. 100%

0 0 2 0 0

View Details

benjamin @____benjamin

4 years ago

That feeling when you keep reviewing the same code over and over again, and don’t spot any bug. But then you decide to do some very targeted fuzzing which leads to a crash in <10min. - and that’s an actual vuln.

0 0 13 0 0

View Details

Alex Plaskett @alexjplaskett

4 years ago

✍️ 1/ Want to learn how to bug hunt in hard targets and find high impact issues? Here’s a short Sunday 🧵for those starting out and some general thoughts from over the years on software security: