Boot2root - Auditing Boot Loaders by Example
Auditing boot loaders: exploring attack surfaces in secure boot chains, from network protocols to local filesystems. Insights on common vulnerabilities and realistic compromise scenarios.
The One Weird Trick SecureROM Hates
Explore the unfixable Checkm8 vulnerability in iPhones' SecureROM, its exploitation for jailbreaking, and implications for iOS security research and device control.
Finfisher Verklagen
Rechtliche Schritte gegen FinFisher wegen mutmaßlich illegalen Exports von Überwachungssoftware in die Türkei. Diskussion über Strafanzeige und mögliche Konsequenzen für Menschenrechte und Pressefreiheit.
Das nützlich-unbedenklich Spektrum
Diskussion über die Balance zwischen nützlicher und unbedenklicher Software. Analyse von Sicherheitsaspekten, Vertrauenswürdigkeit und möglichen Metriken zur Bewertung. Ziel: Entwicklung vertrauenswürdiger Software-Infrastrukturen ohne Einschränkungen.
A Systematic Evaluation of OpenBSD's Mitigations
Systematic evaluation of OpenBSD's security mitigations, analyzing effectiveness, performance impact, and potential bypasses. Provides rational assessment of the operating system's security claims.
Build Your Own Quantum Computer at Home - Hacker Style
Explore building a quantum computer at home using trapped ion technology. Learn about quantum computing basics, its potential impact on cybersecurity, and follow a hacker's journey to create DIY quantum hardware.
Hacker hin oder her - Die elektronische Patientenakte kommt
Kritische Analyse der Telematik-Infrastruktur für elektronische Patientenakten in Deutschland. Beleuchtet Sicherheitsversprechen und potenzielle Schwachstellen des Systems für 73 Millionen Versicherte.
ZombieLoad Attack
ZombieLoad: Powerful Intel CPU vulnerability allowing data leaks across processes, kernels, and VMs. Explores attack methods, demonstrates real-world impacts, and discusses implications for hardware/software security.
Vehicle Immobilization Revisited
Uncovering vulnerabilities in modern vehicle immobilization systems through analysis of ECM-BCM authentication protocols, revealing potential security risks in various car models.
KTRW - The Journey to Build a Debuggable iPhone
Explore the process of creating a debuggable iPhone using off-the-shelf devices, breaking KTRR, and enabling kernel debugging with LLDB on production iPhones.
Domain Name System
Explore the Domain Name System's architecture, extensions, and security challenges. Learn about its evolution, current implementations, and future developments in Internet infrastructure.
Hacking the Human Microbiome
Explore the fascinating world of the human microbiome, its impact on health, and the ethical implications of microbiome engineering. Learn about cutting-edge research and future possibilities in this emerging field.
Du kannst alles hacken – du darfst dich nur nicht erwischen lassen
Einführung in OpSec für Hacker: Risiken, häufige Fehler und Strategien zur Vermeidung rechtlicher Konsequenzen beim "Hacksport". Praxisnahe Tipps für sicheres Hacken.
Web-based Cryptojacking in the Wild
Explore cryptojacking: how browser-based cryptocurrency mining works, its prevalence, profitability, and defense strategies. Gain insights into this parasitic computing phenomenon.
Truly Cardless - Jackpotting an ATM Using Auxiliary Devices
Explore ATM security vulnerabilities and cardless transaction risks. Learn how auxiliary devices and new technologies can be exploited for jackpotting attacks, highlighting the need for enhanced ATM security measures.
Mehr schlecht als Recht - Grauzone Sicherheitsforschung
Rechtliche Herausforderungen und Grauzonen bei der IT-Sicherheitsforschung: Ein Erfahrungsbericht über Reverse Engineering, Urheberrechtsfragen und den Umgang mit Herstellern bei der Aufdeckung von Schwachstellen.
Safe and Secure Drivers in High-Level Languages
Explore writing PCIe drivers in modern languages like Rust and Go, focusing on safety, security, and performance. Learn techniques for user-space implementation and hardware isolation.
Viva la Vita Vida
Detailing hardware and software hacking techniques used to breach the PlayStation Vita's security, including reverse engineering, fault injection, and side-channel analysis on its proprietary architecture.
Provable Security
Explore modern cryptography's security proofs, their benefits, and limitations. Learn about assumptions, formal definitions, idealized primitives, and potential backdoors in cryptographic protocols.
From Zero to Zero Day
Journey from coding challenges to discovering a critical Edge browser vulnerability, with insights on JIT type confusion and browser exploitation.
A Christmas Carol - The Spectres of the Past, Present, and Future
Comprehensive overview of Spectre and Meltdown vulnerabilities, including new variants, classification, and mitigations. Explores ongoing security challenges in modern processors.