Securing the future through modern technology. Founder and Software Security Specialist at @magnetitesec
Austin, TX
Joined December 2009
- Tweets19.6K
- Following1.7K
- Followers27K
- Likes13.1K
Pinned Tweet
I cancelled my X/Twitter subscription and am not checking here anymore. Please follow me elsewhere!
Joshua J. Drake retweeted
PHP is banned at my current org for a reason lol, as is Electron and a host of other items.
Guess who has two thumbs, hasn't willingly used PHP since 2001 (except to write exploits), and always tells people not use it. Yep.
Joshua J. Drake retweeted
FWIW I run a mentorship program (the BlueCrew!) for people who want to become Bluetooth security researchers. If you finish this class you become eligible. One of the BlueCrew members, David Ada, will be presenting his Qualcomm FW RE at hardwear.io NL in November! 🥳
Bluetooth security starts with recon. Learn passive & active collection, device fingerprinting & crowdsourced intel with Blue2thprinting. Bluetooth 2222 by @XenoKovah ost2.fyi/BT2222 (~8.5 hrs)
Joshua J. Drake retweeted
I found a new RCE bug in PHP, missed by previous auditing teams. It’s unpatched in PHP v8.5.12
Joshua J. Drake retweeted
My dad had a mug labeled "the stupidest programmer has the largest program" - I inherited the mug. In times of AI slop, this is truer than ever.
I really wish I could get AIs to write *less* code to achieve the same thing.
For most PRs I want to run a loop "please cut all fat".
Joshua J. Drake retweeted
I’m out here risking getting my toes chopped off just so you can have cheesy demo videos! It’s called commitment to a bit, look it up!
My talk “When life gives you Bluetooth bugs, make a murderbot! A deeply unserious meditation on stunt-hacking in the AI era...” has been accepted to @avtokyo in November! Xeno brings the 🧀!
Joshua J. Drake retweeted
🚨 RELEASE: Omarchy Linux Kitty terminal Remote Code Execution exploit 🚨
Stop. Using. This. GARBAGE.
If you install kitty (a popular terminal emulator) on Omarchy Linux you open yourself to REMOTE CODE EXECUTION BY LOOKING AT THINGS.
in the screenshot you can see `curl something` leading to silent ownage, ouch. 🤦♂️
gist.github.com/blasty/426e7…
My employer, @DelphosLabs, is surveying the RE community to optimize the impact of our future development. It's only open for one more week. Last chance to participate! We'd love to learn more about you, your needs, or feedback on the public beta! Try it! docs.google.com/forms/d/e/1F…
Joshua J. Drake retweeted
First #BOOTSTRAP25 talk announced: @jduck - Musings from Decades of Linux Kernel Security Research ringzer0.training/bootstrap2…
Joshua J. Drake retweeted
The clue is here?
We would love to see submissions from anyone.
Time is running out. Don’t let the ticket to @REverseConf go to waste.
For those who are stuck at the exploitation part, the picture we showed previously and this article will help a bit
github.com/vp777/Windows-Non…
Joshua J. Drake retweeted
This. It helps reduce software supply attack surface also.
Dependency minimalism (writing software that deliberately tries to have as few dependencies as practical) is a really underrated virtue imo.
Every single dependency is a risk that "something will go wrong" during someone's installation process. Installing projects with hundreds of dependencies and walking through errors can be incredibly frustrating.
Joshua J. Drake retweeted
Not very high impact, but I think it's cool that we (XBOW, autonomously) found an XSS in GCHQ's CyberChef 😁
Joshua J. Drake retweeted
I’ve published BTIDES (BlueTooth Information Data Exchange Schema) to its own repository so that it can easily be incorporated as a git submodule in other research projects. I have started using this for crowdsourced BT info sharing.
github.com/darkmentorllc/BTI…
Joshua J. Drake retweeted
I’ve published CLUES (Custom Lightweight UUID Exchange Schema) and my current data about Bluetooth custom UUIDs to its own repository so that it can easily be incorporated as a git submodule in other research projects.
github.com/darkmentorllc/CLU…
Joshua J. Drake retweeted
The detailed version of our #WorstFit attack is available now! 🔥
Check it out! 👉 blog.orange.tw/posts/2025-01…
cc: @_splitline_
Our talk at #BHEU is done! Hope you all enjoyed it. 😉 A detailed blog is on the way, but in the meantime, check out the pre-alpha website worst.fit/ for early access and the slides!
Huge thanks to @BlackHatEvents and my awesome co-presenter @_splitline_! 🐈
Joshua J. Drake retweeted
Triangulating TrueType Fonts On macOS: Reconstructing CVE-2023-41990 by @FuzzyAleks
objectivebythesea.org/v7/tal…
youtu.be/_xoA5MrB6ug
Joshua J. Drake retweeted
The biggest takeaway from this talk is that macOS font renderer ALMOST never invokes the interpreter. If you were fuzzing TTF bytecode without paying attention, it was probably not hitting the interpreter at all.
I'll post slides shortly with other interesting details. #OBTS
📜 Starting Day 2 Talks of #OBTS with a dive into the unexpected: “Triangulating TrueType Fonts On macOS: Reconstructing CVE-2023-41990” by Aleksandar Nikolic (@FuzzyAleks).
Who knew a simple PDF and the Fonts could be transformed into a digital weapon? In this talk, Aleksandar unravels the mystery behind a hidden vulnerability in Apple’s font rendering code, originally linked to Operation Triangulation. Like navigating ancient paths of Kinihapai, we’ll explore some of the oldest code running on the latest macOS and iOS, uncovering insights that could reshape how we detect and defend against such exploits.
OBTS kicks off strong—ready to see how deep this rabbit hole goes? 🌊📄 #AppleSecurity #macOS #ReverseEngineering
Joshua J. Drake retweeted
Two takeaways from the latest episode of @rustaceanfm — "Rust in Google with Lars Bergstrom":
• For the first time this year, the majority of new Android code is written in Rust instead of C++.
• There are three million lines of Rust in the Android codebase.