0x90 computer science lover, mid skilled cybersec research enthusiast. ill Rt anything awesome in CS. just trying to have a good feed here.

Joined July 2013
NULL0B retweeted
We now have a working GPU on the Redmi Note 12 running Windows!!!! (with artifacts and lag, but it works)
18
35
4
584
18,429
NULL0B retweeted
IT'S OUT! The Galaxy S9+ Windows installer is now public, free and open source. It takes the phone from stock Android to the Windows 11 desktop, and the app on your PC walks you through every step. Links below 👇
I can declare: WINDOWS 10 ARM64 HAS SUCCESSFULLY BOOTED ON A SAMSUNG GALAXY S9+!
19
95
5
648
22,905
NULL0B retweeted
Just for your information: We (offensive or defensive cybersec people) and threat actors don't have the same capabilities as the frontier labs do. The API cost of testing ExploitBench like they did would be a whopping ~$59.3M (Astra). Oh, and you cant do it like they do, they remove all guardrails and classifiers. What about renting AI hardware in the cloud? DeepSeek v4? $3.4M Kimi K3? $16.9M GLM 5.3? $9.3M Not to mention the engineering cost to make a harness operate 10,000 agents. (Napkin-Math based on the Huggingface reports. Exploit bench eval consisted of 10,000 concurrent agents, 8day non-stop run, no limiters)
43
104
10
828
56,994
51 million lines of code. Chromium codebase. Here you go. 120hz, 3gb ram use.
307
877
125
12,625
1,204,987
NULL0B retweeted
I told DeepSeek V4.1Flash to find a vuln in Samsungs sgpu GPU Driver 2 days later it found a Race UAF vuln that gives any unprivileged app arbitrary physical write.
56
115
14
2,148
182,389
NULL0B retweeted
The Art of Exploit Development (2nd edition ) by Ayukotsu github.com/KazamaDono/taoxd
54
249
9,472
NULL0B retweeted
GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
22
204
24
994
150,322
NULL0B retweeted
WSL1 was one of Microsoft's most ambitious kernel projects: Linux binaries running on NT without a Linux kernel. "lxcore.sys" translated Linux syscalls into NT kernel operations on the fly. WSL2 took the pragmatic route and runs a real Linux kernel in a lightweight VM. OpenLxCore is reverse-engineering and recreating the WSL1 compatibility layer, exposing the magic that made Linux-on-NT possible.
7
50
3
397
30,871
NULL0B retweeted
Azeria Labs is probably the most complete free resource for learning ARM security research that exists. ARM assembly from zero. Shellcode development. Stack overflows. ROP chains. Heap exploitation. iOS kernel heap grooming. TrustZone internals. GDB debugging. QEMU lab setup. Even an online ARM assembler. If ARM exploitation is something you want to understand, start here. azeria-labs.com/writing-arm-… azeria-labs.com/writing-arm-… Author: @Fox0x01 #ReverseEngineering #ExploitDevelopment #InfoSec
4
51
1
342
17,503
As believers of open research, we are disappointed to see Anthropic silently degrading Fable 5 for AI development "Any topic related to building pretraining pipelines, distributed training infrastructure, or ML accelerator design... may have limited effectiveness through Claude via methods such as prompt modification, steering vectors, or parameter-efficient fine-tuning." Not only do they get to decide what you use LLMs for in research, but this also enables them to silently intervene in your research without you knowing. This sets a dangerous precedent. If a model refuses openly, users can understand the boundary. If a model falls back to another model, users can still evaluate the difference. But if a model silently modifies or weakens its own answers while still pretending to help, researchers lose the ability to know whether a failed result came from their own idea, their implementation, or an invisible intervention by the model provider. That is not safety. Safety policies should be transparent, auditable, and user-visible. On top of that, the people most harmed by this are not the largest labs with massive teams and proprietary infrastructure. It is the independent researchers, academic groups, startups, and open-source builders who rely on public tools to compete, innovate, and pioneer AI for everyone else.
156
684
115
3,802
235,709
A teenager in the United States started publishing software at 14 in 1998, built the entire online infrastructure for the Occupy Wall Street movement in 2011, joined Google as a software engineer, quit in 2018, and then spent five years writing a C library that does something the entire industry said was impossible. Then she combined it with llama.cpp and shipped the easiest way on the planet to run a large language model on any computer. Her name is Justine Tunney. Here is the story, because almost nobody outside the low level systems world knows what one engineer has built. Justine was born in 1984. She started writing and publishing software at 14, back when distribution meant uploading binaries to BBS systems and chat networks. She picked up the handle jart, which she still uses on GitHub today. She did the work most teenagers her age were not doing. She read the systems programming literature. She studied compilers. She fell in love with C. In July 2011 she registered the @occupywallst Twitter handle and the occupywallst dot org domain. Within weeks the protest movement that began in Zuccotti Park in New York had become a global phenomenon, and her infrastructure was the digital backbone of the entire thing. She handled the social media, the website, the donations, the coordination. She built the platform that pushed the movement to reach millions. After Occupy she joined Google as a software engineer. She worked on TensorBoard, the visualization tool for TensorFlow, and on site reliability for Google infrastructure. She stayed for years. Then in 2018 she left Google Brain to work on a personal project. The project was called Cosmopolitan Libc. Cosmopolitan does something most C programmers would tell you is mathematically impossible. It lets you compile a C program once and have the resulting binary run natively on Linux, Windows, macOS, FreeBSD, OpenBSD, and NetBSD with no modification. One file. Six operating systems. No virtual machines. No interpreters. No recompilation. The technique she invented is called Actually Portable Executable. The implications are wild. Cosmopolitan binaries violate every assumption about how operating systems load programs. They are at once a Windows PE file, a Linux ELF binary, a macOS Mach-O binary, and a shell script. The same bytes run on every platform. For five years she worked on it mostly alone. She funded the development partly through Mozilla's MIECO program, which sponsored her work on Cosmopolitan 3.0, released on October 31, 2023. A month later she shipped llamafile. llamafile is what happens when you combine Cosmopolitan with llama.cpp. You take any LLM weights file in the standard GGUF format, you wrap it in Justine's binary, and you get a single file that runs on six operating systems without installation. No Python. No CUDA setup. No dependency hell. Just one file that you double click and it works. Mozilla launched it as an official project of their innovation group on November 29, 2023. It went viral immediately. The repository, hosted at github .com/mozilla-ai/llamafile, now has 24,600 stars. The license is Apache 2.0. Justine kept shipping. She added GPU support to Cosmopolitan, a task systems engineers thought would require rewriting the whole thing. She added dlopen support, another thing nobody else had figured out. She wrote whisperfile, a single file version of OpenAI's Whisper speech-to-text model based on the same architecture. Her GitHub profile lists projects most engineers would consider impossible. sectorlisp, a Lisp interpreter that fits in a boot sector. blink, the tiniest x86-64-linux emulator on Earth. bestline, a teletypewriter command session library. redbean, a complete web server inside a single zip file. A teenager who shipped software in 1998 grew up to write the C library that the entire local AI movement now runs on top of. She did most of it alone, and most people scrolling AI Twitter cannot name her.
126
810
54
5,701
375,144
For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr! Interested? 🧵👇
20
176
8
1,072
101,581
NULL0B retweeted
We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.
1,615
5,139
3,166
24,862
13,930,364
A dev open-sourced a VPN that smuggles your internet through port 53. It's called MasterDnsVPN. It hides your traffic inside DNS queries, the one packet type no firewall on earth can block without breaking the internet itself. MIT License. 100% Open Source.
41
267
17
1,942
112,721
Another Windows zero day released by Nightmare Eclipse (sort of) It turns out Microsoft just straight up didn't patch an old CVE from 2020 correctly. github.com/Nightmare-Eclipse…
17
187
7
1,719
81,955
One of our security researchers demonstrated a local root shell on Linux using a page-cache poisoning primitive in AF_RXRPC’s RxGK path. We call it DirtyCBC: a sibling to DirtyFrag in the broader CopyFail / DirtyFrag / Fragnesia family. The issue is fixed on mainline. The candidate path was surfaced through Delphos’s agentic analysis workflow, then manually verified and exploited end to end. AES-256 was not broken. It just wasn’t the boundary that mattered. RxGK decrypted data in place before authentication completed. Under the right conditions, that write could land in the page cache. The HMAC check still failed and the connection was aborted, but the page-cache mutation had already happened. Two RESPONSE packets were enough to place a tiny ELF into the cached first page of a readable SUID-root binary. The file on disk stayed unchanged. The next exec produced a root shell. Full writeup and PoC on the Delphos Labs GitHub. delphoslabs.com/blog/3614237…
5
68
5
290
63,117
☣️Windows kernel exploitation, a beginners introduction 🔹Part 1: mdanilor.github.io/posts/hev… 🔹Part 2: mdanilor.github.io/posts/hev… 🔹Part 3: mdanilor.github.io/posts/hev… 🔹Part 4: mdanilor.github.io/posts/hev… 🔹Part 5: mdanilor.github.io/posts/hev…
2
79
393
14,133