Viewing profile — notactuallyben

Vulnerabilities in the Linux kernel would have a similar impact to a macOS kernel bug. It’s a myth that “more eyes means more secure” for OSS ;-) - it can be true, but often that’s…

Yep, I don't think there's any disagreement with that, especially when you look at things like Tianfu cup in general. Any country that can, essentially wants to do offensive cyber.…

Are you suggesting that western exploit sellers are selling bugs to western governments and also BRICS? that sounds not very likely. All of this stuff is very complicated ethically…

It's not true anymore due to the new generation of hackers that came up, and it's unpolite to dox them if they don't want to be known for it, but for a period, about a third of Goo…

also TAG and other Google security people hired from former Western sigint :)

firstly, very unlikely that zerodium are supplying bugs they use (could be internally developed, or developed by a more trusted domestic defence contractor). What about if the targ…

Interesting blog post that was long overdue, I think Google should probably disclose all the details (URLs/actors responsible, methodology for catching these exploits ITW and targe…

while beg bounty people can be annoying, you have to remember that people aren't obligated to sit down and find free bugs for any company (especially not a big one) - why would i s…

Yup. You can just have your crafted webp (This is the patch for the ImageIO bug https://chromium.googlesource.com/webm/libwebp/+/902bc919033... ) image with the .png extension (ins…

So I got a little bit of time to check ( https://github.com/Biktorgj/quectel_eg25_recovery/tree/EG25G... - the NON-HLOS), and it's still actually running a Qualcomm Hexagon baseban…

I didn’t check, and on mobile now. But I would be very surprised if that was the actual baseband (more just a wrapper around it).

Yep in most cases, but not always configured the best. Logic flaws seem the best way to go :)

None use Linux, most just use BSD licence software (or things like openssl). I haven’t seen any GPL code at all tbh. But yep, would be nice if it was open source, although not sure…

This is not true on pretty much any phone post 2014ish. Pretty much all platforms have IOMMU's or similar separation mechanisms. source: did baseband vr commercially

Great work from P0 (and Keen lab). but this statement about baseband mitigations is only partially true. Huawei Balong platform has ASLR and stack canaries now (and some Infineon t…