iiinova — where your digital self keeps evolving

Quentin Kaiser @qkaiser.bsky.social · 28/12/2025

launching an unblob hackathon at #39C3, if there’s a custom file format you would like to see supported just tell us github.com/onekey-sec/u... checking the Airoha bluetooth firmware format rn

github.com

GitHub - onekey-sec/unblob: Extract files from any kind of container formats

Extract files from any kind of container formats. Contribute to onekey-sec/unblob development by creating an account on GitHub.

000

Quentin Kaiser @qkaiser.bsky.social · 22/09/2025

RTOS analysis has been available on our platform for some time now but we never shared details about what it took to build it. If you’re interested in architecture detection ML classifiers, load address identification heuristics, and function matching check it out. www.onekey.com/resource/how...

onekey.com

Automated RTOS Firmware Analysis: Architecture, Load Address, and Component Detection | Research | ONEKEY

Discover how ONEKEY’s platform breaks open real-time operating system (RTOS) firmware. Learn how automated architecture detection, load address recovery, and component identification bring transparenc...

010

Quentin Kaiser @qkaiser.bsky.social · 25/07/2025

Ended my 4 years blogging hiatus with a tutorial on modding the latest Tapo C200 firmware to get root. No vuln but some hardware/firmware hacking stuff and some notes about TP-Link and engineering resources allocations. quentinkaiser.be/security/202...

quentinkaiser.be

Rooting the TP-Link Tapo C200 Rev.5

Let’s explore ways to mod a Tapo C200 Rev.5 firmware in order to gain root access to a running device.

020

Quentin Kaiser @qkaiser.bsky.social · 01/02/2025

I’ll be at FOSDEM the whole day this Sunday, probably between kernel, python, and SBOM dev rooms. Reach out if you wanna chat :)

000

Quentin Kaiser @qkaiser.bsky.social · 09/12/2024

*sick people coughing in the background, baby crying, the smell of fart covering the cabin* “Thanks for choosing Ants Airlines”

000

Quentin Kaiser @qkaiser.bsky.social · 27/11/2024

Anyone experienced with fscrypt forensics/reversing ? I got a firmware with a kernel and UBIFS. Both are encrypted. Kernel self-decrypt just before self-decompression, I managed to recover the key and decrypt it. I see it mounts the UBIFS using fscrypt. It’s embedded so the key must be somewhere…

011

Quentin Kaiser @qkaiser.bsky.social · 19/11/2024

NSA analysts keeping the spirit of independence alive—one line of Java at a time.

000