H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421) header
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421) profile picture

H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝

@hd_421
 Singapore
Joined July 2016
  • Tweets209
  • Following646
  • Followers365
8Media
Photo by H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421)Photo by H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421)Photo by H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421)Photo by H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421)Photo by H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421)Photo by H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421)Photo by H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ (@hd_421)
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Pantelis (@PantelisStoufis) profile picture
Pantelis@PantelisStoufis24 Apr 2025
I am currently seeking an exceptional Security Incident Response Engineer to join our esteemed global security incident response team. This rare opportunity doesn't come around often. Join us in this exciting role! #infosec #hiring #cyberroles jobs.apple.com/en-gb/details…
2
35
1
142
13,383
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Ivan Krstić (@radian) profile picture
Ivan Krstić
@radian24 Oct 2024
🔺New on Apple Security Research blog: a deeply comprehensive Private Cloud Compute security guide, and an unprecedented Virtual Research Environment allowing you to run production PCC software right on your Mac with Apple silicon. And up to a $1M bounty! security.apple.com/blog/pcc-…
Security research on Private Cloud Compute - Apple Security Research

Security research on Private Cloud Compute - Apple Security Research

Private Cloud Compute (PCC) fulfills computationally intensive requests for Apple Intelligence while providing groundbreaking privacy and security protections — by bringing our industry-leading...

security.apple.com
12
164
15
577
101,048
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Ivan Krstić (@radian) profile picture
Ivan Krstić
@radian10 Jun 2024
🔺New on the Apple Security Research blog: introducing Private Cloud Compute! We believe this is the most advanced security architecture ever deployed for cloud AI compute at scale. security.apple.com/blog/priv…
Private Cloud Compute: A new frontier for AI privacy in the cloud - Apple Security Research

Private Cloud Compute: A new frontier for AI privacy in the cloud - Apple Security Research

Secure and private AI processing in the cloud poses a formidable new challenge. To support advanced features of Apple Intelligence with larger foundation models, we created Private Cloud Compute...

security.apple.com
13
142
15
403
96,593
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Ivan Krstić (@radian) profile picture
Ivan Krstić
@radian7 May 2024
🔺Now live: the May 2024 update to the Apple Platform Security Guide! support.apple.com/guide/secu…

Apple Platform Security

Learn how security is implemented in Apple hardware, software, apps, and services.

support.apple.com
5
40
1
134
22,795
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Ivan Krstić (@radian) profile picture
Ivan Krstić
@radian21 Feb 2024
🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. security.apple.com/blog/imes…
iMessage with PQ3: The new state of the art in quantum-secure messaging at scale - Apple Security...

iMessage with PQ3: The new state of the art in quantum-secure messaging at scale - Apple Security...

We are introducing PQ3, a groundbreaking cryptographic protocol for iMessage that advances the state of the art of end-to-end secure messaging. With compromise-resilient encryption and extensive...

security.apple.com
6
120
10
356
62,095
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Ivan Krstić (@radian) profile picture
Ivan Krstić
@radian27 Oct 2023
🔺New on the Apple Security Research blog: a brief technical overview of iMessage Contact Key Verification! security.apple.com/blog/imes…
Advancing iMessage security: iMessage Contact Key Verification - Apple Security Research

Advancing iMessage security: iMessage Contact Key Verification - Apple Security Research

iMessage broke new ground in 2011 as the first widely available messaging service to provide secure end-to-end encryption by default. Ever since, we’ve been making ongoing improvements to iMessage...

security.apple.com
6
79
3
251
60,986
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Ivan Krstić (@radian) profile picture
Ivan Krstić
@radian23 May 2023
🔺New on the Apple Security Research blog: we pit our hardened kalloc_type XNU allocator against SockPuppet, a powerful vulnerability from the past: security.apple.com/blog/what…
What if we had the SockPuppet vulnerability in iOS 16? - Apple Security Research

What if we had the SockPuppet vulnerability in iOS 16? - Apple Security Research

The next post in our XNU memory safety series examines how our hardened kernel allocator performs in the real world against a previously patched but powerful UAF software vulnerability. In this...

security.apple.com
2
81
4
234
83,828
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Aleksei Tiurin (@antyurin) profile picture
Aleksei Tiurin@antyurin25 Jan 2023
I've added a bunch of security checks for SAML. The bottom part of the article will be useful for pentesters too invicti.com/blog/web-securit…
Testing SAML security with DAST

Testing SAML security with DAST

Learn the basics of SAML security and see how Acunetix by Invicti uses automated security checks to test for common vulnerabilities in SAML-based SSO.

invicti.com
16
51
5,575
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Steph (@w34kp455) profile picture
Steph@w34kp45515 Dec 2022
My video presentation of AppsecStudy from #blackhateurope youtu.be/n0gOjmMiuKM via @YouTube Subscribe, like, and share 😀 #BlackHat
1
2
357
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Steph (@w34kp455) profile picture
Steph@w34kp4556 Dec 2022
I hoped to attend #BlackHatEurope @BlackHatEvents with two tools, but because my visa is not ready, I will miss it. It's very upsetting, but sometimes it happens. Let me write a few words about the tools and share the links in this thread. blackhat.com/eu-22/arsenal/s… #BlackHat
3
1
3
Incredible work!
Sam Curry (@samwcyo) profile pictureSam Curry@samwcyo30 Nov 2022
More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works:
Image from Sam Curry (@samwcyo)
1
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Brandon Azad (@_bazad) profile picture
Brandon Azad@_bazad27 Oct 2022
I’m really excited for us to shed light on some really cool work we’ve been doing to harden the XNU allocator! This has been a huge effort by so many people, and I’m very proud of the direction: security.apple.com/blog/towa…
Towards the next generation of XNU memory safety: kalloc_type - Apple Security Research

Towards the next generation of XNU memory safety: kalloc_type - Apple Security Research

Improving software memory safety is a key security objective for engineering teams across the industry. Here we begin a journey into the XNU kernel at the core of iOS and explore the intricate work...

security.apple.com
7
94
13
390
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Jack Halon (@jack_halon) profile picture
Jack Halon@jack_halon22 Oct 2022
Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field. Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! jhalon.github.io/chrome-brow…

Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals

Web browsers, our extensive gateway to the internet. Browsers today play a vital role in modern organizations as more and more software applications are delivered to users via a web browser in the...

jhalon.github.io
16
461
13
1,466
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
FrenchYeti (@FrenchYeti) profile picture
FrenchYeti
@FrenchYeti17 Oct 2022
#DexcaliburPro on steroid💊 Just added device-oriented features to inspect / generate hooks to spoof data read from / write to device 😍 by any instrumented app on this device (1/n) @_bhamza @U039b @Farenain @trufae @EmericNasi @_reversense_ #hacking #android #frida #security
Image from FrenchYeti (@FrenchYeti)
Image from FrenchYeti (@FrenchYeti)
Image from FrenchYeti (@FrenchYeti)
1
17
2
51
Smooth and simple 👍
Sergey Toshin (@_bagipro) profile pictureSergey Toshin@_bagipro5 Aug 2022
Bypassing ContentProvider.openFile() internal security checks in Android [1/3] I've discovered an interesting trick that you may use to access private information using a content provider
Image from Sergey Toshin (@_bagipro)
Image from Sergey Toshin (@_bagipro)
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Mobile Security (@mobilesecurity_) profile picture
Mobile Security@mobilesecurity_9 Jun 2022
DroidGuard: A Deep Dive into SafetyNet 🔥 #MobileSecurity #AndroidSecurity [SLIDES+PAPER+VIDEO] by @rh0main romainthomas.fr/publication/…
DroidGuard: A Deep Dive into SafetyNet | Romain Thomas

DroidGuard: A Deep Dive into SafetyNet | Romain Thomas

SafetyNet is the Android component developed by Google to verify the devices' integrity. These checks are used by the developers to prevent running applications on devices that …

romainthomas.fr
29
53
Great and technically deep WP/talk on DroidGuard internals, totally recommended!
Romain THOMAS (@rh0main) profile pictureRomain THOMAS@rh0main2 Jun 2022
The slides and the whitepaper about SafetyNet/DroidGuard are available here: romainthomas.fr/publication/…
Image from Romain THOMAS (@rh0main)
1
H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝ retweeted
Juan Tapiador (@0xjet) profile picture
Juan Tapiador@0xjet20 May 2022
This is a thread on the legality of reverse engineering (RE) software, inspired by @FrenchYeti's recent decision of not streaming a talk due to legal pressures. 1/
3
19
1
35
Stop war! 🙏
LiveOverflow 🔴 hextree.io (@LiveOverflow) profile pictureLiveOverflow 🔴 hextree.io
@LiveOverflow27 Feb 2022
Replying to @LiveOverflow
All I can think of are the Ukrainian and Russian CTF players I have met, whose writeups I have read, whose talks I have watched, who collaborated with me on videos. I always felt that hacking unites the world. It makes me cry, I'm scared and cope by distracting myself. 😢
Frida is really powerful and popular instrumentation frameworks, however there’s not many useful information sources on advanced usage gathered in single place, but here we have this gem, well done guys!
fernando (@entdark_) profile picturefernando@entdark_28 Jan 2022
Releasing today: learnfrida.info It's a small, free web handbook to learn about binary instrumentation using @fridadotre If you found this resource interesting, please share for others to learn!
5
Load more