Show Notes

17 - Rogue Employees, Lasers, Fuzzing, and an iOS Exploit (checkra1n)

00:01:05
Pwn2Own Tokyo 2019
Additional Links: https://www.zerodayinitiative.com/Pwn2OwnTokyo2019Rules.html
00:08:04
Google Begins Testing Extension manifest v3 in Chrome Canary
00:12:00
Rogue Trend Micro Employee Sold Customer Data for 68K Accounts
00:14:05
The DoJ charges former Twitter employees for allegedly accessing thousands of accounts on behalf of Saudi Arabia.
00:23:00
OpenTitan – Open sourcing transparent, trustworthy, and secure silicon
Additional Links: https://arstechnica.com/information-technology/2019/11/newly-discovered-titanium-backdoor-employs-clever-ways-to-go-undetected/
00:29:03
Sandboxie transitioning to open source
Additional Links: https://arstechnica.com/information-technology/2019/11/newly-discovered-titanium-backdoor-employs-clever-ways-to-go-undetected/ https://securelist.com/titanium-the-platinum-group-strikes-again/94961/
00:44:00
Facebook Groups API flaw exposed data to 100 developers
00:47:04
Laser-Based Audio Injection on Voice-Controllable Systems
Additional Links: https://arxiv.org/abs/1911.01840v1
00:54:02
Laser-Based Audio Injection on Voice-Controllable Systems
Additional Links: https://arxiv.org/abs/1911.01840v1 https://sites.google.com/view/fakebob
01:06:01
A use after free vulnerability has been found in libarchive
Additional Links: https://github.com/libarchive/libarchive/commit/b8592ecba2f9e451e1f5cb7ab6dcee8b8e7b3f60#diff-44a241994d3a03f7a08b8a70ddc29d1f
01:10:01
SpecuSym: Speculative Symbolic Execution for Cache Timing Leak Detection
01:17:05
WEIZZ: Automatic Grey-box Fuzzing for Structured Binary Formats
01:24:01
Checkra1n slides - POC2019
Additional Links: https://twitter.com/ProjectZeroBugs