Reposted by jduckwaffle .-. @waffle.pet · 26/12/2025btw me and my friend are still looking for CCC tickets, if you happen to be willing to sell them please message me!! .-. #39c3 068
jduck @jduck.me · 14/07/2025It's official. No hacker summer for me due to family health complications. I will miss everyone but hope you have a great (and safe) time!! ❤️ 030
Reposted by jduckZion Leonahenahe Basque @mahal0z.bsky.social · 25/04/2025I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/ Please follow our workshop account @sureworkshop and RT it for visibility :). sure-workshop.orgSURE 2025 | The Workshop on Software Understanding and Reverse EngineeringThe Workshop on Software Understanding and Reverse Engineering 176
Reposted by jduckBinary Ninja @binary.ninja · 23/04/2025We're proud to announce the release of Binary Ninja 5.0. Here's some highlights: Union Support, Dyld Share Cache & Kernel Cache, Firmware Ninja, Auto Stack Arrays, Stack Structure Type Propagation, and so much more. Check out the blog post for more information: binary.ninja/2025/04/23/5... 02515
Reposted by jduckSteve Klabnik @steveklabnik.com · 23/04/2025Does using #rustlang really make your software safer? tweedegolf.nl/en/blog/152/...tweedegolf.nlDoes using Rust really make your software safer? - Blog - Tweede golfWe keep saying that Rust is how we make software safer. In this blog, we'll tackle a real-world vulnerability, 'rewrite it in Rust', and show you the results of our empirical research, both as a h ... 15317
jduck @jduck.me · 22/04/2025I'm proud to announce that I, through my company @magnetitesec.bsky.social, donated to the Redox OS project! If you're not familiar, Redox OS is a pure Rust Micro kernel based operating system. This donation allows them to sponsor one additional student for their Summer of Code! 082
jduck @jduck.me · 15/04/2025I played @defcon.bsky.social CTF quals with @shellphish.bsky.social this year! I'm really impressed with the difficulty levels Nautilus Institute put forth. Making CTF challenges in the AI era has... special considerations... but they nailed it :-) Thanks to everyone involved for a great weekend! 050
jduck @jduck.me · 10/04/2025Hey Steve! Would have loved to attend but a) waitlisted and b) wasn't feeling up to it (sinus headache from allergies I think). Hope it went great! 100
Reposted by jduckQuarkslab @quarkslab.bsky.social · 08/04/2025There is a small bug in the signature verification of OTA packages in the Android Open Source Framework. Official builds doing normal double verification of packages are not vulnerable but OEMs and third party apps may be. Jérémy Jourdois explains it here: blog.quarkslab.com/aosp_ota_sig...blog.quarkslab.comA small bug in the signature verification of AOSP OTA packagesA signature verification bypass in a function that verifies the integrity of ZIP archives in the AOSP framework 045
Reposted by jduckElias 🦀🇵🇸🇻🇪🇧🇷 @elias.sh · 05/04/2025"Building a Linux Kernel Driver using Rust": rust-exercises.ferrous-systems.com/latest/book/...rust-exercises.ferrous-systems.comBuilding a Linux Kernel Driver using Rust - Rust Exercises 0429
Reposted by jduckBSides Canberra @bsidescbr.bsky.social · 31/03/2025Our Call for Presentations & Events is now open! Got cool research, a fresh exploit, or a unique cybersec insight? Submit your talk & be part of Australia’s biggest hacker con! cfp.bsidescbr.com.au/bsides-canbe...cfp.bsidescbr.com.auBSides Canberra 2025Schedule, talks and talk submissions for BSides Canberra 2025 023
Reposted by jduckSteve Klabnik @steveklabnik.com · 31/03/2025github.com/ariel-os/ari... /via @mattkeeter.com #rustlanggithub.comGitHub - ariel-os/ariel-os: Ariel OS is a library operating system for secure, memory-safe, low-power Internet of Things, written in RustAriel OS is a library operating system for secure, memory-safe, low-power Internet of Things, written in Rust - ariel-os/ariel-os 1454
Reposted by jduckPhrack Zine @phrack.org · 24/03/2025Don't forget, the CFP for the 40th anniversary issue of Phrack is open until June 15th 2025. You can be someone's favorite article in the future!! bsky.app/profile/phra... 0710
Reposted by jduckstacksmashing @stacksmashing.bsky.social · 29/03/2025Having some fun with EM measurements today - side-channels are awesome! 1424
Reposted by jduckPaged Out! @pagedout.bsky.social · 29/03/2025Paged Out! #6 has arrived! And it's jam-packed with content! You can download it here: pagedout.institute?page=issues.... 02227
Reposted by jduckAHA! @austinhackers.takeonme.org · 27/03/2025Tonight. AHA 0xDE. If it is your first time attending, you will give an “intro talk”. This is an opportunity to share about yourself and allow us to get to know you. This is an important part of the new attendee process. Please take it seriously. If you’ve given an intro talk before, but have […]infosec.exchangeOriginal post on infosec.exchange 022
jduck @jduck.me · 25/03/2025Happy to share my slides from BOOTSTRAP25. Unfortunately the bug discussed is still not patched in Linux 6.14.0 despite it being reported explicitly. Slides are in markdown but there's a PDF in "releases" too github.com/jduck/bs25-s...github.comGitHub - jduck/bs25-slides: Slides from "Musing from Decades of Linux Kernel Security Research" at BOOTSTRAP25Slides from "Musing from Decades of Linux Kernel Security Research" at BOOTSTRAP25 - jduck/bs25-slides 1147
Reposted by jduckAndrew Case @attrc.bsky.social · 20/03/2025The sedexp Linux malware was disclosed in late 2024. In my talk at @kernelcon.bsky.social, I will present my own deep dive of the malware, including many parts that have not been made public, such as loading of a memory-only rootkit. Be sure to attend for a teardown with @volatilityfoundation.org 3! 0127
jduck @jduck.me · 08/03/2025Has anyone else seen m.imdb.com/title/tt0218... ? Eeriem.imdb.comAntitrust (2001) ⭐ 6.1 | Action, Crime, Drama1h 48m | PG-13 120
jduck @jduck.me · 04/03/2025Last week I attended Vector35 @re-verse.io RE//verse conference and it was great! Excellent food, high signal to noise (RE/VR), and great people. I scored some amazing schwag including a SIM transposer and a @binaryninja.bsky.social hacky sack! w00t! 0110
Reposted by jduckAndrew Case @attrc.bsky.social · 03/03/2025On March 29th, I will be speaking at @bsidessd.bsky.social on Volatility 3, including all its new features and plugins. Be sure to attend to catch a sneak peak at the new framework before the major release later this Spring! www.bsidessd.org #DFIR #infosec 087
Reposted by jduckAleks @fuzzyaleks.bsky.social · 26/02/2025Digital vs film X-ray . Film offers higher resolution and better dynamic range with the same settings, but slightly longer exposure time (and more tedious image acquisition). Comes in handy when it comes to tiny electronics. Images of an Abbott Lingo continuous glucose monitor. 021
jduck @jduck.me · 26/02/2025Yes and no on rust in the kernel. I really wish it was more and faster 000
Reposted by jduckpinkflawd.bsky.social @pinkflawd.bsky.social · 19/02/2025BlackHoodie will be back at @ringzer0.bsky.social Bootstrap conference in Austin, TX 🤠 On Friday March 21st I'll be teaching Compiler Internals for Security Engineers, a class for women by women, and it's free. Register here blackhoodie.re/Ringzer0_Boo...blackhoodie.reBlackhoodie at Ringzer0 Bootstrap 2025Compiler Internals for Security Engineers 0711
jduck @jduck.me · 19/02/2025Nice! There's sadly a hugely tiny portion of comms on the Internet about exposing Rust to C (versus tons about wrapping C in Rust). I would love to see that change! 000
Reposted by jduckTweede golf @tweedegolf.bsky.social · 19/02/2025Tamme is giving a talk at Embedded World 2025! He shows how Rust’s type system and package manager can help to improve development speed and code quality. Also visit us at our booth, or book a time slot for a private chat: buff.ly/4308AWE @diondokter.nl #ew25 #embeddedworld #rustlang 083
Reposted by jduckGábor Nyéki @gabornyeki.com · 19/02/2025Greg KH is a voice of reason downthread: lore.kernel.org/rust-for-lin...lore.kernel.orgRe: Rust kernel policy - Greg KH 39013
jduck @jduck.me · 18/02/2025I'm giving a talk at BOOTSTRAP25 in Austin! Hope to see y'all there! ringzer0.training/bootstrap25-...ringzer0.trainingTALK: Musing from Decades of Linux Kernel Security Research // Joshua J. DrakeThe Linux Kernel powers billions of devices across industries, making it critical infrastructure. But is it secure? Josh explores this by comparing its security investments to a typical SDLC, sharing ... 0103
Reposted by jduckJames Munns @jamesmunns.com · 13/02/2025It is EXTREMELY cool to me that: * Use of Rust on Embedded platforms is such a high percentage of the ecosystem (16.8% bare metal, 12.9% with an OS) * The usage is increasing year over year Check out the survey results! blog.rust-lang.org/2025/02/13/2... 2537
jduck @jduck.me · 09/02/2025I don't think much of those points speak to Rust specifically, but rather IMHO some of these problems bleed into Rust too. Software as a profession has been a mess for decades, part of why I took the security research path. 000
jduck @jduck.me · 06/02/2025NanoKVM is sketchy. youtu.be/plJGZQ35Q6Iyoutu.beNanoKVM: The S stands for SecurityYouTube video by apalrd's adventures 030
jduck @jduck.me · 01/02/2025First episode is up! youtu.be/7IHKRzGQeog via @rkl.bsky.socialyoutu.beEpisode 1: Digital Jesus aka Matt HarriganYouTube video by Where Warlocks Stay Up Late 021
Reposted by jduckJames Munns @jamesmunns.com · 23/01/2025I'm trying to think of a good way to flex Poststation as a demo for the embedded world booth. Does anyone have ideas of fun, interactive, and maybe mind bending things to have 8-16 independent MCUs do? I plan to fit it all into a eurorack case, as individual cards/modules. 231
Reposted by jduckJulius Gustavsson @jgust.xyz · 23/01/2025I did the podcast thing! It was great fun chatting with Matthias Endler on his “Rust in Production” podcast. We talked about our little Rust based ECU at Volvo Cars and how it came about. Check it out: corrode.dev/podcast/s03e...corrode.devVolvo with Julius Gustavsson - Rust in Production Podcast | corrode Rust ConsultingThe car industry is not known for its rapid adoption of new technologies. Therefore, it’s even more exciting to see a company like Volvo Cars embracing Rust for core components of their software stack... 24210
jduck @jduck.me · 18/01/2025Nice. I handled my situation manually anyway. Excellent if others don't need to now! 010
Reposted by jduckXeno Kovah @xenokovah.bsky.social · 13/01/2025I’ve published CLUES (Custom Lightweight UUID Exchange Schema) and my current data about Bluetooth custom UUIDs to its own repository so that it can easily be incorporated as a git submodule in other research projects. github.com/darkmentorllc/CLUES_Sche…github.comGitHub - darkmentorllc/CLUES_Schema: Custom Lightweight UUID Exchange Schema (CLUES!)Custom Lightweight UUID Exchange Schema (CLUES!). Contribute to darkmentorllc/CLUES_Schema development by creating an account on GitHub. 011
Reposted by jduckXeno Kovah @xenokovah.bsky.social · 13/01/2025I’ve published BTIDES (BlueTooth Information Data Exchange Schema) to its own repository so that it can easily be incorporated as a git submodule in other research projects. I have started using this for crowdsourced BT info sharing. github.com/darkmentorllc/BTIDES_Sch…github.comGitHub - darkmentorllc/BTIDES_Schema: BlueTooth Information Data Exchange Schema (BTIDES!)BlueTooth Information Data Exchange Schema (BTIDES!) - darkmentorllc/BTIDES_Schema 001
jduck @jduck.me · 13/01/2025Worst Fit by @orange.tw. Nasty stuff. blog.orange.tw/posts/2025-0...blog.orange.twWorstFit: Unveiling Hidden Transformers in Windows ANSI!📌 This is a cross-post from DEVCORE. The research was first published at Black Hat Europe 2024. Personally, I would like to thank splitline, the co-author of this research & article, whose help 032
jduck @jduck.me · 12/01/2025Omg. I think that's the iPhone 4. hehe. This is from my 2013 trip to an interview at Google/Android and pickup Google Glass. 011
