nick0ve (@nick0ve) profile picture

Computer Engineering @unipisa | CTF @fibonhack @aboutblankets | Blockchain Security @osec_io

Joined June 2016
Photo by nick0ve (@nick0ve)Photo by nick0ve (@nick0ve)Photo by nick0ve (@nick0ve)Photo by nick0ve (@nick0ve)Photo by nick0ve (@nick0ve)Photo by nick0ve (@nick0ve)
My first critical vulnerability reported to hackerone just got disclosed! Looking at Brave Browser source is a fun way to learn about chromium internals btw đź‘€
1
3
58
5,068
We have discovered a substantial number of vulnerabilities in the German legal system using LLMs. These may enable access to confidential documents, travel without an otherwise required visa, enforceable leave for soldiers at NATO’s JSEC, and more. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation. In our blog post, we share a selection of vulnerabilities, and present potential exploits for each. To our knowledge, none of these have been previously recorded. We share only those vulnerabilities whose exploitation we believe would not cause serious harm. blog post: felixringe.com/legal-exploit…
132
340
161
3,983
443,672
nick0ve retweeted
banger tshirt idea
-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
72
1,282
113
13,400
227,578
Another fun bug, we turned a Linux kernel timer UAF into a kernel read/write on Android, root + SELinux permissive. Great work @ryaagard! Stay tuned for more 🦦
6
26
2
338
15,183
nick0ve retweeted
In 2026, no program is closed source. We decompiled a propAMM into Rust that recompiles to the exact on-chain binary, then used it to find a critical bug that put $6.1M at risk.
22
72
16
544
32,520
Last week two of our researchers hacked Oracle Autonomous AI Database with a 4 bug chain. Blog post coming soon 🦦🦦🦦 Great work @deltaclock and @BrunoModificato!
1
62
1,716
Un attacco informatico ha colpito nella notte i sistemi di refrigerazione di decine di supermercati francesi, tra cui Intermarché, Leclerc e Super U, causando ingenti perdite di prodotti alimentari freschi e surgelati. Gli hacker avrebbero sfruttato versioni obsolete del software del produttore danese Danfoss per attivare lo sbrinamento continuo degli impianti, impostando temperature fino a 50 °C. I danni complessivi potrebbero raggiungere diversi milioni di euro
107
234
85
1,767
329,558
nick0ve retweeted
mathematicians experiencing what CTFers have been going through for the past year
the terrance tao crashout is something to behold
7
40
2
457
20,495
They really decided it was a great idea to drop 13M lines of slop lean?
Checking that a major mathematical proof is correct can take years. Formalization—converting the mathematical reasoning into a form computer proof assistants like Lean can verify—can help. Last month, Claude completed the first formalized proof of Fermat’s Last Theorem, one of the most famous theorems of all time. This was a project experts thought would take many years. It is the largest Lean proof ever written. Fermat’s Last Theorem was first proven in 1995 by Sir Andrew Wiles, more than 350 years after it was conjectured. Our proof, which totals over 13 million lines of code, provides machine verification. More importantly, it proves over 29,000 other theorems that the proof requires, across many areas of math which had never before been formalized. We see this as a major step in the long process of firming up the core of mathematical knowledge, building on work from three centuries of mathematicians and hundreds of contributors to Lean and Mathlib. We are optimistic that AI-assisted verification of mathematical proofs will help reduce the burden of refereeing mathematics in an era where more proofs are being produced than ever before. You can read about the process on our Science Blog: anthropic.com/research/forma… And see the complete proof on GitHub: github.com/anthropics/fermat…
2
7
1,489
nick0ve retweeted
New exploit: “xor dword [0xf80c2094], 1<<22” Unlocks CPU microcode, the platform security processor, system management mode, and every internal processor register, all at once, on 100 million AMD CPUs. As far as I can tell can’t be fixed. github.com/xoreaxeaxeax/skit…
166
1,071
184
8,163
1,100,626
nick0ve retweeted
Schrödinger’s TOCTOU — a bug class where a struct’s size mod 16 decides if you’re exploitable, where -O2 saves you and -O3 kills you, where a compiler upgrade introduces the bug, and a downgrade… introduces it too. Invisible, intractable, everywhere. github.com/xoreaxeaxeax/schr…
4
38
4
219
31,668
nick0ve retweeted
the stochastic parrots are getting pretty lucky
62
507
34
7,309
266,525
nick0ve retweeted
We're launching a $100,000 fund to save CTFs.
17
104
16
646
65,993
the real winners of DEFCON quals
Replying to @NotDeGhost
claudio and gepetto
2
13
1
131
17,256
nick0ve retweeted
DEF CON patched our QEMU nday, what about a 0day? kqx.io/post/qemu-0day
49
3
235
26,436
4-Byte Heap Overflow To RCE In Minecraft by @ryaagard
1
11
94
6,192
Dialed in! Nikolaos Mourousias (@deltaclock), Caue Obici (@caueobici) & Bruno Halltari (@BrunoModificato) of OtterSec used a Code Injection bug to exploit LM Studio in the second round, earning $20,000 and 4 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin
2
14
1
57
11,481
nick0ve retweeted
The worst LPE in years on the kernel drops and we're hosting a CTF next week. Want to participate in an incredible hacking camp in Rome next october, hosted by our friends @cybersaiyanIT ? Get on board and qualify your team! till-dawn.fibonhack.it/ ctftime.org/event/3111
1
7
3
16
2,199
The pre-release version of Anchor v2 is out. v2 is over 90% smaller and 3-6x faster than v1, and represents months of work focused on speed, extensibility, and security. This is a major architectural change from a dense macro-based framework to a more easily extensible trait system, with security built in from day one. Excited for teams to give it a try. Still a few rough edges, but please DM/comment with any feedback!
11
47
9
215
27,873
nick0ve retweeted
We achieved a guest-to-host escape by exploiting a QEMU 0-day where the bytes written out of bounds were uncontrolled. Full breakdown of the technique, glibc allocator behavior, and our heap spray/RIP-control primitive ↓
7
112
9
546
49,802
nick0ve retweeted
How a single typo led to RCE in Firefox Can you spot the bug? Read now at: kqx.io/post/firefox0day/
6
89
8
616
149,336