Imagine reverse engineering nation state malware and exploiting cutting edge mobile device security mitigations, while communicating with you buddies in minecraft lol
https://infosec.exchange/@opa334/117055761069632178
Remote
tihmstar
@tihmstar@infosec.exchange
Finding offsets since 2017
0
Followers
0
Following
29
Posts
Joined February 02, 2023
Posts
Politics
Hover or focus to reveal
Sensitive
If you are worried about EU passing the new mass surveillance law, here is what you can do:
- leave the EU
- never come back
- stop interacting with anyone still living in the EU to not get caught up as a collateral when their phones are scanned
Follow me for more useful tips
Replying to
@G33KatWork@infosec.exchange
@G33KatWork@infosec.exchange forget about protobuf, use this instead https://github.com/nanopb/nanopb
Replying to
@madcoder@infosec.exchange
@madcoder@infosec.exchange My opinion on this is: it's about who takes responsibility, blame for the code written. If you see "LLM wrote this" then whoever prompted the LLM isn't gonna take any blame for when the code is shit (only take credit when it's good). If it's shit it'll be like "go figure that out with the LLM. it probably just halucinated i'm not at fault". If a human takes responsibility (blame) for code i don't care if he used LLM or not. If it's good ok, if it's shit i'm never trusting him again
Replying to
@zhuowei@notnow.dev
@zhuowei@notnow.dev ngl, the info is actually incredibly useful to me as i didn't know i can sign kernel drivers just like that and it's what i needed to do today. thanks a lot!
Replying to
@zhuowei@notnow.dev
@zhuowei@notnow.dev now i really want to hear audio recordings of both versions
Replying to
@opa334@infosec.exchange
Replying to
@opa334@infosec.exchange
@opa334@infosec.exchange so macht man ein Jailbreak video du hänger :P
https://youtu.be/iOoISOUuuzc
Replying to
@opa334@infosec.exchange
@opa334@infosec.exchange wtf hab ich mir da gerade angeguckt? o.O
Friendly reminder that getting decrypted iOS components can be so simple using tihmstar's tool ;)
https://github.com/tihmstar/partialzipbrowser
https://github.com/tihmstar/img4tool
In iOS 1 and iOS 2 almost everything was arm code, but starting with iOS 3 almost everything is thumb code.
#themoreyouknow
Released a tool to erase X-Gold 608 (06.15.00 iPad) baseband.
https://github.com/tihmstar/bberase_ultrasn0w
This is useful if you want to downgrade your iPhone 3G to iOS 2.0 with the matching baseband.
The exploit/payload was taken from redsn0w and some code from xerub. There isn't really anything novel here, but until now there wasn't a straightforward way to erase the baseband or to downgrade to iOS 2.0 baseband on the iPhone 3G.
It is offensive to (AI) auto-translate to any language other than english.
Also (AI) auto-voice-translation is offensive regardless of the source / destination language.
Replying to
@tihmstar@infosec.exchange
The ability to make screenshots of the lockscreen specifically, was only introduced in iOS 2.2 #themoreyouknow
Everyone working at Apple (no matter the department) should be forced to update every single work device to (at least) the latest public version within a month of its release. No butts.
iOS 2.0 introduced the ability to make screenshots, but you couldn't actually make screenshots of your lockscreen yet. This only came some time later.
#themoreyouknow
sometimes i find new feature introduced into iOS and be so confused on why that wasn't done a long time ago.
Today i found out that in iOS 26 XNU seeds its PRNG from SEP TRNG and be like "wtf why wasn't that done like 12 years ago when SEP was first introduced in iOS 7???" o.O