yohanes

I found a powerbank game console that used C-Sky based SOC. C-Sky is a 32 bit CPU architecture from China. I thought they killed this architecture when the company was acquired by Alibaba, and switched to RISC-V. Astra and Opus reverse engineered this thing and created an SDK for it. tinyhack.com/2026/10/07/c-sk…

Hey @duolingo my 10yo just found the most wholesome zero-day ever 💀 Step 1: Revoke microphone permission on iPad Step 2: Start a voice lesson Step 3: Reject mic access again when prompted Result: Duolingo gives him credit anyway and extends the streak for doing absolutely nothing 😭 What’s the bug bounty for a 5th grader? 🦉💻

Last year, I found a bug in the Intel ITT API (used by OpenCV) while pentesting a banking app. It allows arbitrary shared library loading on Android, affecting OpenCV ≤ 4.10. Intel just lifted the embargo, so the details are now public. Write-up+POC: tinyhack.com/2025/11/09/cve-…

Selamat Jalan Bu Inge blog.compactbyte.com/2025/08…

WhatsApp has a neat page for scammer so that they can do Phishing attack similar to: krebsonsecurity.com/2024/09/… They have a "Copy" button, in an official WhatsApp page, and you can fill in any text whatsapp.com/otp/code?code=i… @WhatsApp doesn't consider this as a bug "Your report appears to describe a social engineering or spam attack against Facebook users and infrastructure. Although we appreciate the report, such issues do not qualify under our bug bounty program."

I recently helped a company recover their data from the Akira ransomware without paying the ransom. I’m sharing how I did it, along with the full source code. tinyhack.com/2025/03/13/decr…

I tried reporting something to @intel , in the category of "Security issues with Intel managed open source projects" via [email protected], got an autoreply that it is autoforwared to [email protected]. I didn't hear anything for a week, I tried emailing directly, but there is a problem with the mail server. What to do now?

Gajah Mada nggak pernah makan nasi tiwul (nasi singkong), atau sarapan tempe kedelai sambil minum teh panas. Referensi: blog.compactbyte.com/2024/08…

Form registrasi: docs.google.com/forms/d/e/1F…

Jika berurusan dengan file virtual machine, kita perlu paham tentang sparse file. Jika tidak paham, disk space dan waktu transfer akan berkali lipat. Catatan: walau agak telat, informasi ini sudah sampai ke pihak yang mengurus restore data PDN. blog.compactbyte.com/2024/08…

Dari sekian analisis yang saya baca, @taviso ini salah satu yang bisa dipercaya. Silakan Google namanya supaya yakin.

Tanpa key sekalipun, ternyata data yang dienkrip ransomware Babuk yang menyerang PDN bisa direcover. blog.compactbyte.com/2024/07…