Parker Thompson

@m0thran

Information security / RE / fuzzing / other neat things. Lead Engineer at CITL.

github.com/mothran/
Vrijeme pridruživanja: svibanj 2012.
54 fotografije ili videozapisa Fotografije i videozapisi

Tweetovi

Blokirali ste korisnika/cu @m0thran

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @m0thran

  1. 1. velj

    I love Infiniband. . . . 6.9 GB/s

    5 korisnika označava da im se sviđa
    Poništi
  2. 28. sij

    Everytime. I think I'm going to really figure out selinux, then it just throws awful interface and terrible design choices at me and I end up disabling it.

    1 reply 8 korisnika označava da im se sviđa
    Poništi
  3. 27. sij

    I have spent the last few years building things on top of cloud platforms. I am so happy I am to be building out hardware for a project again. I personally love spec'ing, assembly, and racking and stacking for a project. Plus I get so much more bandwidth / CPU for so much cheaper

    1 reply 1 proslijeđeni tweet 13 korisnika označava da im se sviđa
    Poništi
  4. 25. sij

    Rock and roll:

    1 reply 1 korisnik označava da mu se sviđa
    Poništi
  5. 24. pro 2019.

    I have been enjoying my winter vacation by working on a Hexagon (Qualcomm CPU) project. Hopefully I can get things far enough along for a OSS release sometime soon!

    2 korisnika označavaju da im se sviđa
    Poništi
  6. 16. pro 2019.

    I had a ton of fun collecting and doing this study of Android binaries. It was great to see the platform evolve over time. I'm even more excited to dive into the UBsan / CFI features in the future!

    New CITL study: Android! 24 Android Releases 14358 binaries 2009-05-01 to 2019-09-01 Coverage of major & minor versions spanning 1.5.0 to 10.0.0 Good news: On Nexus? things are improving. Bad news: you’re probably not on Nexus 😬
    2 proslijeđena tweeta 7 korisnika označava da im se sviđa
    Poništi
  7. 7. pro 2019.

    I had a lovely time talking at thank you to all the wonderful staff and attendees for making it so much fun.

    2 proslijeđena tweeta 15 korisnika označava da im se sviđa
    Poništi
  8. 27. stu 2019.

    You know you have a good fuzzer when all you can dream of is how to get more CPU cores.

    1 proslijeđeni tweet 6 korisnika označava da im se sviđa
    Poništi
  9. 25. stu 2019.

    TIL: the upstream source for the 'zip' in Arch is basically unmaintained. See PKGBUILD: And the sourceforge it pulls from: Last updated (stable): 2008-2009 oof. It looks like debian is maintaining a few custom patches for now.

    1 proslijeđeni tweet 2 korisnika označavaju da im se sviđa
    Poništi
  10. 22. stu 2019.

    TIL: Quite a lot of software SEGV's if: argv[0][0] == NULL Neat!

    5 korisnika označava da im se sviđa
    Poništi
  11. 8. stu 2019.

    $ man cal: "cal, ncal — displays a calendar and the date of Easter" But why Easter?

    5 replies
    Poništi
  12. 7. stu 2019.

    Someone knows the answer to this, but I would enjoy taking bets on how many SWIFT message parsers accept XML injection (billion lol's) type bugs...

    2 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  13. 7. stu 2019.

    HAHAHAHA I love that this exists (ISO 20022 For Dummies):

    1 reply 1 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  14. 7. stu 2019.

    I'm super excited to be talking about the fuzzer we have been building for CITL at hushcon this year!

    "Horse of a Different Color: Fuzzing for Traces" Patrick Stach and
    2 proslijeđena tweeta 17 korisnika označava da im se sviđa
    Poništi
  15. 29. lis 2019.

    It just dawned on me, my current side project can be defined as: I am writing c++ code that generates c++ code that disassembles instructions generated by c++ code. Yodawg

    2 proslijeđena tweeta 13 korisnika označava da im se sviđa
    Poništi
  16. 28. lis 2019.

    Why is it that every library that I need to use / extend is never exposed by LLVM in the installed headers / objects....

    1 korisnik označava da mu se sviđa
    Poništi
  17. 24. lis 2019.

    Oh and a final note: there is a lot more data coming out of the sensor than the current features indicate...

    1 reply
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  18. 24. lis 2019.

    In summary, Android has locked down the Soli/MotionSense API at many levels. Which is a real disappointment because all I wanted (and the origin of this adventure) was to scroll a recipe while I was cooking with dirty hands. . . that's all I wanted :( 11/11

    1 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  19. 24. lis 2019.

    In order to test all these interactions I made a Frankenstein .jar out of converted (dex2jar) .dex files of published apk's. Then injected that jar into a android-studio project to access their APIs. The most fun was just attempting to use the OsloSensor class directly. 10/n

    1 reply
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  20. 24. lis 2019.

    3. Final lock out, if all that was not enough the OsloSensor interaction through the HIDL is locked behind the "android.permission.LOCATION_HARDWARE" perm which is a protected perm, again I can't see a way to get it unless your Google. Bummer. 9/n

    1 reply
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi

@m0thran još nije objavio nijedan Tweet.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·