Lightnews — Scholar-powered news

Natalie Silvanovich @natashenka.bsky.social · 15d

Super cool potential ASLR leak involving dictionary hashes! googleprojectzero.blogspot.com/2025/09/poin...

Pointer leaks through pointer-keyed data structures

Posted by Jann Horn, Google Project Zero Introduction Some time in 2024, during a Project Zero team discussion, we were talking about how...

googleprojectzero.blogspot.com

6 10

Natalie Silvanovich @natashenka.bsky.social · 26d

fseek and you shall lfind

1

Natalie Silvanovich @natashenka.bsky.social · Aug 22

Where is this? I must know!

1 2

Reposted by Natalie Silvanovich

Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · Aug 12

Zero-day developer and seller Exodus casually brags in a blog post about having found a WebKit zero-day and sold it for a year and a half.

blog.exodusintel.com/2025/08/04/o...

Clément Lecigne and Benoît Sevens of Google's Threat Analysis Group were the ones that reported it to Apple.

1 9 21

Natalie Silvanovich @natashenka.bsky.social · Aug 9

Left blue, right red #defcon

3

Natalie Silvanovich @natashenka.bsky.social · Aug 8

Sample image

Natalie Silvanovich @natashenka.bsky.social · Aug 8

How to use your Defcon badge

1 1 4

Natalie Silvanovich @natashenka.bsky.social · Aug 6

“You wouldn’t happen to have anything that could help me understand today’s ever-changing threat landscape? Perhaps involving a bit of AI?”

1 3

Natalie Silvanovich @natashenka.bsky.social · Aug 6

Peak BH slide

1

Natalie Silvanovich @natashenka.bsky.social · Aug 2

Do you ever feel like maybe you should sign something, but aren’t quite sure you can follow through?

4

Natalie Silvanovich @natashenka.bsky.social · Jul 29

We also posted our first Transparency Report

googleprojectzero.blogspot.com/p/reporting-...

Reporting Transparency

As part of our 2025 Policy Trial , Project Zero will use this page to publicly track our Reporting Transparency effort. The trial commenced ...

googleprojectzero.blogspot.com

1 3

Natalie Silvanovich @natashenka.bsky.social · Jul 29

(🔥🔥🔥)

Natalie Silvanovich @natashenka.bsky.social · Jul 29

While most vendors ship timely patches for vulnerabilities reported by Project Zero, they don’t always reach users. Today, we’re announcing Reporting Transparency, a new policy to encourage downstream fixes

googleprojectzero.blogspot.com/2025/07/repo...

Policy and Disclosure: 2025 Edition

Posted by Tim Willis, Google Project Zero In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals we...

googleprojectzero.blogspot.com

1 8 6

Reposted by Natalie Silvanovich

Microplastics Spookmelier @leastactionhero.bsky.social · Jul 28

maybe there's still some good left in this world after all

320 4.4K 17K

Natalie Silvanovich @natashenka.bsky.social · Jul 12

The new Tamagotchi Switch game has rap battles where the Tamas rap about how they respect and enjoy each others’ unique differences

3

Reposted by Natalie Silvanovich

lukelukeluke @lukelukeluke.bsky.social · Jun 28

Inventor of the GIF, hearing about Notre Dame burning: oh no the jarjoyles

72 1.2K 5.3K

Reposted by Natalie Silvanovich

Dr. Jen Gunter @drjengunter.bsky.social · Jun 20

I accidentally closed a browser yesterday with 72 VERY IMPORTANT TABS that have been following me around like Jacob Marley and somehow my history is not recoverable. Reader, I let them go, and have lived to tell the tale.

30 10 430

Natalie Silvanovich @natashenka.bsky.social · Jun 14

At least 3 miles of protesters along El Camino in Sunnyvale

1 6

Natalie Silvanovich @natashenka.bsky.social · Jun 14

I Googled “how to shorten a chain,” and got no good answers, so here’s the answer, here’s how you temporarily shorten it

1

Reposted by Natalie Silvanovich

Pookleblinky @pookleblinky.bsky.social · Jun 7

www.ibiblio.org/harris/500mi...

You might be one of the lucky people to learn today about an emailing bug that turned out to be caused by the speed of light.

The case of the 500-mile email

www.ibiblio.org

2 16 43

Natalie Silvanovich @natashenka.bsky.social · Jun 6

If there’s one thing I’ve learned, it’s that tab completion is never “just broken today”

Natalie Silvanovich @natashenka.bsky.social · Jun 5

Looks like I picked the wrong week to cut back on social media (Airplane movie meme)

2

Natalie Silvanovich @natashenka.bsky.social · May 30

If $106,050.10 was the size of a quarter, it would fit in 424,200.4 fewer shipping containers than …

Natalie Silvanovich @natashenka.bsky.social · May 28

The world never says hello back

2 2 8

Natalie Silvanovich @natashenka.bsky.social · May 28

The final part of Mateusz’s Windows Registry series is live! Contains all the hive memory corruption exploitation you’ve been waiting for

googleprojectzero.blogspot.com/2025/05/the-...

The Windows Registry Adventure #8: Practical exploitation of hive memory corruption

Posted by Mateusz Jurczyk, Google Project Zero In the previous blog post , we focused on the general security analysis of the registry a...

googleprojectzero.blogspot.com

4 6