joern
RIP FX We collected some texts from the community in memory of @fxv2.bsky.social . You can find them here phenoelit.de/fx.html
Lands of Packets TTL exceeded. I would like to collect texts from the scene about FX in his memory. A collection of obituaries that will then be posted on phenoelit.de. If anyone would like to contribute, please contact me. Mail: joernchen@phenoelit.de Signal: jrn.07
joern reposted
Replying to @nonbinary.computer
you might find inspiration in joern's recent offensivecon talk. slides are at 0day.click/parser-diff-..., video at www.youtube.com/watch?v=Dq_K...
joern reposted
Parser Differentials have become pretty much my favorite bug class over the last years. I am absolutely honored to get the chance to present on this topic at @offensivecon.bsky.social in a few weeks. www.offensivecon.org/speakers/202...
joern reposted
Have a great weekend and enjoy some tunes: youtu.be/j_Md8_7mhOU
joern reposted
I don’t know who needs to hear it but defaults write com.google.Chrome URLBlocklist -array-add example.com works system-wide without giving access to all your browsing to some extension.
Well, if you feel a bounty is not high enough you can always resort to extortion or ransomware. 🤡
Starting to think of bug severity in terms of "how might this affect shareholder price". At the end of the day, that's all that the companies who determine your bounty amount care about. Your data is already public from other breaches, but those breaches may not be associated to that company (yet).
joern reposted
Slides for my @ekoparty talk "Advanced Fuzzing With LibAFL" - > docs.google.com/presentation...
joern reposted
:( @jrn.bsky.social reminded me of infosuck, not that I needed reminding, but still I re-read everything again and it couldn't be more relevant: https://web.archive.org/web/20131202231402/http://infosuck.org/
Popped a shell or two on hg.mozilla.org read about some funky LDAP truncation at https://0day.click/recipe/pash/
You are up to date.