LiveOverflow 🔴 hextree.io
@LiveOverflow • 165,573 subscribers
wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Shorts
Videos
0:21
Sensitive content
This media may contain sensitive content.
I was wondering if the exploit works if there is concurrent traffic. I just setup a wordpress image, with random synthetic traffic. And agent built this. The main strategy is deliberate Apache prefork saturation. Basically keeping the connections open and blocking other traffic
LiveOverflow 🔴 hextree.io23,439 次观看 • 10 天前
Ever wondered how iPhones can be hacked remotely? Watch my latest YouTube video right here on Twitter. My goal with this video is to give you a sense of the insane amount of skill and (engineering) effort that is required to find vulnerabilities in iPhones. At the end of the video, I hope you’ll appreciate the complexity of the task, while realising it’s not simply magic.
LiveOverflow 🔴 hextree.io58,053 次观看 • 2 年前
Continuing the mobile security topic, here is a bit of a controversial video! A few years ago I was doing Android App security audits, and sometimes we would report "lack of SSL certificate pinning". Because I enjoy debating the topic on `what is a security issue?`, I used to argue with my colleagues about this 🤬 To me it is generally not an issue. Though there are some nuances in the threat-model and sometimes it can make sense. So I don't consider it generally important, but it's hard arguing against something that is generally regarded as "recommended best practices". Then I saw a public talk and paper reporting this, and I used it as a scapegoat to discuss my views. I can also say, that over 5 years later, I still have the same opinion on certificate pinning ;)
LiveOverflow 🔴 hextree.io60,689 次观看 • 3 年前
A year ago I made a video about the RIDL CPU vulnerability. In case you haven't seen it, here it is uploaded to Twitter directly! The most interesting part of this has been learning about the prior research that later lead to the discovery of these modern side-channel vulnerabilities. I also spend more time explaining "speculative execution" and how these CPU cache timings can be used as a side-channel. If you haven't seen it yet, give it another chance :)
LiveOverflow 🔴18,151 次观看 • 3 年前
没有更多内容可加载