Ryan Jordan
@tryke.bsky.social
It's time to find bugs and chew bubble gum
Interesting bug here. If RCS were a protocol wholly controlled by Google, one could imagine a redesign where the sending client supplies the transcription. How many parties would need to coordinate for a similar change in RCS?
Just unrestricted an issue that shows a fun new attack surface. Android RCS locally transcribes incoming media, making vulnerabilities audio codecs now fully-remote. This bug in an obscure Samsung S24 codec is 0-click
project-zero.issues.chromium.org/issues/36869...
project-zero.issues.chromium.org/issues/36869...
Project Zero
project-zero.issues.chromium.org
January 10, 2025 at 12:04 PM
Interesting bug here. If RCS were a protocol wholly controlled by Google, one could imagine a redesign where the sending client supplies the transcription. How many parties would need to coordinate for a similar change in RCS?
This is a pretty hot lineup! I hope I don’t miss the ticket sales again.
DistrictCon Talks Have Been Selected🎙️
www.districtcon.org/speakers
Check out our incredible speaker lineup for DistrictCon 2025. Agenda (and more talk announcements) coming soon
www.districtcon.org/speakers
Check out our incredible speaker lineup for DistrictCon 2025. Agenda (and more talk announcements) coming soon
Speakers — DistrictCon
www.districtcon.org
November 26, 2024 at 7:41 PM
This is a pretty hot lineup! I hope I don’t miss the ticket sales again.
Twitter may be run by an attention-starved man-baby, but I prefer to give folks a little grace for changing apps slowly. Network effects are a tough thing to overcome.
November 18, 2024 at 1:27 PM
Twitter may be run by an attention-starved man-baby, but I prefer to give folks a little grace for changing apps slowly. Network effects are a tough thing to overcome.
Hi! I’m here trying to recreate my infosec feed. I’m into reversing, fuzzing, static analysis, etc. and I generally don’t post a ton.
November 14, 2024 at 2:57 AM
Hi! I’m here trying to recreate my infosec feed. I’m into reversing, fuzzing, static analysis, etc. and I generally don’t post a ton.