Hacking Apple for Profit
October 12 2020Five researchers hacked Apple Computer’s networks — not their products — and found fifty-five vulnerabilities. So far, they have received $289K. One of the worst of all the bugs they...
Read moreHacking a Coffee Maker
September 29 2020
As expected, IoT devices are filled with vulnerabilities:
As a thought experiment, Martin Hron, a researcher at security company Avast, reverse engineered one of the older coffee makers to...
Read more
Fuzzing Image Parsing in Windows, Part One: Color Profiles
September 24 2020Image parsing and rendering are basic features of any modern operating system (OS). Image parsing is an easily accessible attack surface, and a vulnerability that may lead to...
Read moreFuzzing Image Parsing in Windows, Part One: Color Profiles
September 24 2020Image parsing and rendering are basic features of any modern operating system (OS). Image parsing is an easily accessible attack surface, and a vulnerability that may lead to...
Read moreFuzzing Image Parsing in Windows, Part One: Color Profiles
September 24 2020Image parsing and rendering are basic features of any modern operating system (OS). Image parsing is an easily accessible attack surface, and a vulnerability that may lead to...
Read moreFuzzing Image Parsing in Windows, Part One: Color Profiles
September 24 2020Image parsing and rendering are basic features of any modern operating system (OS). Image parsing is an easily accessible attack surface, and a vulnerability that may lead to...
Read moreNew Bluetooth Vulnerability
September 17 2020There’s a new unpatched Bluetooth vulnerability:
The issue is with a protocol called Cross-Transport Key Derivation (or CTKD, for short). When, say, an iPhone is getting ready to pair...
Read more
2017 Tesla Hack
September 3 2020Interesting story of a class break against the entire Tesla fleet....
Read more2017 Tesla Hack
September 3 2020Interesting story of a class break against the entire Tesla fleet.
Read moreSmart Lock Vulnerability
August 10 2020Yet another Internet-connected door lock is insecure: Sold by retailers including Amazon, Walmart, and Home Depot, U-Tec's $139.99 UltraLoq is marketed as a "secure and versatile smart deadbolt that...
Read more
Recent Comments