Tim Michaud

@TimGMichaud

Security Nerd.

Tx
inulledmyself.com
Joined March 2012
3 Photos and videos Photos and videos

Tweets

You blocked @TimGMichaud

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @TimGMichaud

  1. Retweeted
    Jul 5

    Showering is important.

    What's something that seems obvious to the general public, but your profession seems to misunderstand?
    3 replies 27 retweets 168 likes
    Undo
  2. Retweeted
    Jul 3

    Here's a fun thing that's kinda significant: the UIKit apps in macOS Mojave are the exact same build as in iOS 12. This suggests that Marzipan apps will be updated in lockstep with iOS, and are not some weird fork for the desktop on their own delayed schedule. Huge implications

    5 replies 59 retweets 235 likes
    Show this thread
    Show this thread
    Undo
  3. Retweeted
    Jul 2

    Successful hacking is almost never some super leet 0-day and nearly always taking advantage of flaws in basic processes such as credential management.

    What‘s something that seems obvious within your profession, but the general public seems to misunderstand?
    Show this thread
    12 replies 172 retweets 567 likes
    Undo
  4. Jun 29

    I guess it's good that __snprintf_chk is so popular :|. Surprised IDEs / code reviews aren't catching these.... (Or the change is why they no longer care).

    1 reply 1 retweet 10 likes
    Undo
  5. Jun 29

    Any android people know if you can pass racoon a config file without being root?

    1 reply 4 likes
    Undo
  6. Jun 27

    Works very consistently on 11.3.1, should be "straight forward"* to have it untether. Very similar to the evasion bug * Not an exploit dev, might not be very straight forward

    12 replies 43 retweets 152 likes
    Show this thread
    Show this thread
    Undo
  7. Jun 26

    Will let others play once write up is complete. I believe this would allow rejailbreaking at boot, haven't played around much with it yet on 11.3.1. Appears to still be vulnerable on 12 beta (Only compared binaries, not tested)

    LaunchDaemon bug #1: 8bd74394658dba8d20e1bd4aa7aff7bedf420c17b6fd056856cd64e3aa031126 LaunchDaemon bug #2: b4bdaf6e6bec898a9550ed7c039f29d2c212756c15bf3683802b16d6506a8908
    27 replies 79 retweets 277 likes
    Show this thread
    Show this thread
    Undo
  8. Jun 26

    LaunchDaemon bug #1: 8bd74394658dba8d20e1bd4aa7aff7bedf420c17b6fd056856cd64e3aa031126 LaunchDaemon bug #2: b4bdaf6e6bec898a9550ed7c039f29d2c212756c15bf3683802b16d6506a8908

    5 replies 31 retweets 155 likes
    Undo
  9. Retweeted
    Jun 26

    What skills should I invest in? People skills. No. I mean what tools and best practices should I learn? Learn what respect is. Then use it on everyone around you.

    69 replies 1,611 retweets 4,826 likes
    Undo
  10. Retweeted
    Jun 24

    Any SNES expert interested in reversing and documenting a prototype? it's Exertainment mountain bike rally / speed racer, acquired by , so get in touch with him. Plz RT if you're into SNES preservation/internals.

    14 replies 88 retweets 99 likes
    Show this thread
    Show this thread
    Undo
  11. Retweeted
    Jun 18

    Thread: How did we get here? In 2015, I shook President Obama’s hand, thanked him for DACA, and asked him to reverse course & close the for-profit baby jails (also known as “family detention centers”) he opened in Dilley & Karnes City, Texas. What he said shook me to my core 1/

    515 replies 17,334 retweets 24,285 likes
    Show this thread
    Show this thread
    Undo
  12. Jun 14

    Dam Bellevue is expensive o.O

    Undo
  13. Retweeted
    Jun 12

    ios 11.4 jailbreak

    192 replies 702 retweets 1,864 likes
    Undo
  14. Retweeted
    Jun 10

    My dad likes to compare software development to trades like plumbing or welding because “the jobs pay well and you don’t need a degree to be successful”. If that’s the case, like other trades, tech should more fully embrace apprenticeships as a way to start a career.

    156 replies 929 retweets 4,626 likes
    Show this thread
    Show this thread
    Undo
  15. Jun 9

    I understand that fuzzers are really good at finding bugs when your time is limited, but finding bugs manually feels *soooo* much better.

    7 likes
    Undo
  16. Retweeted
    Jun 6

    Big week for First Android device (next up S8/S9) and fun with iOS 12. Hang in there! More invites going out soon.

    8 replies 29 retweets 135 likes
    Undo
  17. Retweeted
    Jun 6

    This should not be hanging in my soon-to-be-kindergartener’s classroom.

    2,933 replies 42,441 retweets 90,030 likes
    Show this thread
    Show this thread
    Undo
  18. Retweeted
    Jun 4

    Unless you are Aleph One, please don't use “For Fun and Profit” in your talk title. Seriously. Don’t.

    15 replies 24 retweets 95 likes
    Undo
  19. Retweeted
    Jun 5

    Houdini beta 3 (for iOS 11 to 11.3.1). Requires a developer account.

    144 replies 243 retweets 833 likes
    Undo

@TimGMichaud hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·