EE turned software dev turned hacker. lover of creation. @jaimelightfoot on the blue site or https://nitter.cf/t.co/scLKFV8Kug
Joined October 2015
- Tweets1.2K
- Following195
- Followers821
- Likes12K
Jaime Lightfoot retweeted
New writeup from @_specters_ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate.
Full disclosure:
samcurry.net/hacking-kia
Jaime Lightfoot retweeted
Getting started with embedded devices reverse engineering (Beginners series)
Ghidra setup: voidstarsec.com/blog/ghidra-…
Tools: voidstarsec.com/blog/intro-t…
Firmware extraction: voidstarsec.com/blog/uart-ub…
Credits @voidstarsec
#reverseengineering #infosec
Jaime Lightfoot retweeted
First time @defcon and first time creating a badge. The badge has a simple LED effect and an (optional) SAO connector. There are three different configurations of LEDs. All badges come with a unique Van Gogh inspired lanyard. #badgelife
Check thread on info how to get one 👇
Jaime Lightfoot retweeted
COWORKER: we need to find the root cause asap
ME: *takes long drag* the root cause is that our processes are not robust enough to prevent a person from making this mistake
COWORKER: amy please not right now
Jaime Lightfoot retweeted
😈 Getting Started with Exploit Development
How to get started with exploit development, and turn memory corruption bugs into arbitrary code execution
Recommends:
* Pwn College
* ROP Emporium,
* Open Security Training
By @dayzerosec
dayzerosec.com/blog/2024/07/…
Jaime Lightfoot retweeted
Cool blog post on reverse engineering rail tickets
eta.st/2023/01/31/rail-ticke…
#reverseengineering
Jaime Lightfoot retweeted
When a Microsoft engineer alerted managers of a flaw in one of the company’s products, “Everyone violently agreed with me that this is a huge issue,” he said.
But also “Everyone violently disagreed with me that we should move quickly to fix it."
propublica.org/article/micro…
this is a great talk from @snyff: insightful, empathetic, and funny. There's advice in here for everyone from newbies to more experienced, highly recommend watching
youtube.com/watch?v=Ys66llx4…
doing some #badgelife this year at DEFCON for RSC
ALT photo of "badgelife" PCBs showing rainbow-colored jellyfish
these badges are about the size of a playing card, have a UV light on the back, and you can reprogram the RGB LEDs if you want. ✨
They're for RSC, a (very welcoming!) infosec Discord server you can join here: discord.gg/thersc
btw we'll likely do a post-DC round too!
Jaime Lightfoot retweeted
📣#OST2 Vulnerabilities 1001: C-Family Software Implementation Vulnerabilities has been updated! 📣
ost2.fyi/Vulns1001
120+ quiz questions added + new “In-The-Wild Hunt” section where students audit known-vulnerable code and are asked to find the flaw with minimal hints
Jaime Lightfoot retweeted
📣#OST2 Vulnerabilities 1002: C-Family Software Implementation Vulnerabilities is now public! 📣
ost2.fyi/Vulns1002
This class picks up from ost2.fyi/Vulns1001, and covers uninitialized data access, race conditions, use after free, type confusion, and info leaks.
one of the most beginner-friendly CTFs, @PicoCTF, starts today! sign up here play.picoctf.org/
if you're new to infosec / want to get into the field, CTFs like this one are a great way to try out different parts of the field (web, forensics, RE, etc.)
a longer version of the how and why of "CTFing as a way to learn infosec skills" is available here: jaimelightfoot.com/blog/so-y…