/explore
|
You are here 
|
blog.quarkslab.com | ||
| | | | |
blog.thalium.re
[AI summary] The blog post discusses the author's experience in vulnerability research and exploitation targeting Steam and its related products, including Steam Link and Remote Play. It covers various vulnerabilities such as format string vulnerabilities, request forgery, heap overflows, and a remote code execution (RCE) exploit. The author also details their interactions with HackerOne and Valve, highlighting the challenges in getting timely responses and the eventual resolution of the reported issues. |
|
| | | | | ||
| | | | |
alexbakker.me
Starting with the release of the Pixel 3, all of Google's Pixel Android smartphones come with the Titan M security chip on board. When I realized the Pixel 3a XL I purchased also had it, I decided to try to take advantage of it in an app I work on. It turned out that using the Titan M chip through the Android Keystore API for AES-GCM in a specific way lead to predictable and bogus ciphertext. This is the story of how I stumbled upon that bug, and why it's a bit mysterious. |
|
| | | | | ||
| | | | |
insinuator.net
Nowadays, Bluetooth is an integral part of mobile devices. Smartphones interconnect with smartwatches and wireless headphones. By default, most devices are configured to accept Bluetooth connections from any nearby unauthenticated device. Bluetooth packets are processed by the Bluetooth chip (also called a controller), and then passed to the host (Android, Linux, etc.). Both, the firmware on ... |
|
| | | | | ||
| | | | |
educatedguesswork.org
[AI summary] This article explains the vulnerability of current internet encryption to future quantum computers and outlines strategies for implementing post-quantum cryptographic protocols. |
|
| | | |||
