Ovi
0v1@infosec.exchange
<p>security researcher<br />founder <span class="h-card" translate="no"><a href="https://infosec.exchange/@barghest" class="u-url mention">@<span>barghest</span></a></span><br />{ disrupting APT, authoritarian gov, surveillance, privacy violations & corporate injustice }</p><p>i mostly dump my thoughts here</p>
Posts
-
Post #4166590
CVE-2026-0149
-
Post #3917121
Always hated wordpress
-
Post #3916417
The only thing good about fedcon was meeting friends and CTFs. Now it's just a meeting place!
-
Post #3644316
Nearly FEDCON time. Beautiful time for corpos and LE to get together and larp as hackers fighting the good fight.
-
Post #2061395
Today we are disclosing CVE-2026-0073: A critical no-interaction proximal/adjacent remote code execution vulnerability in adbd&#39;s ADB-over-TCP authentication path. Full technical write-up + exploit flow: https://barghest.asia/blog/cve-2026-0073-adb-tls-auth-bypass/
-
Post #2061394
amongst bugs this year, i found two bugs in particular that LLMs are just totally failing at finding yet on the surface are super easy. 1 is a critical rce in android and also a high sev persistence chain with it. both resulted from manual code review, no fuzzing (android is so heavily fuzzed anyways) most of my methodology atm is looking for logic bugs in trust boundaries. ones with big topology. for these bugs I been testing opus 4.7 + gpty in finding it, opus has been running on auto mode...
-
Post #1136375
We are mostly not hackers - we are the hacked. &quot;Schneier, a security expert, broadens the category of &quot;hacker&quot; to include anyone who studies systems with an eye to finding and exploiting their defects. Under this definition, the more fearsome hackers are &quot;working for a hedge fund, finding a loophole in financial regulations that lets her siphon extra profits out of the system.&quot; Hackers work in corporate offices, or as government lobbyists. As Henry...