2026-04-25T16:35:53Z https://yabu.me jiska 🦄:fairydust: https://yabu.me/npub1sdqwcrek8zgshxl4qgtgysgnx3zs9lv496htt928yxccj2c5qt4skcmrnn https://assets.chaos.social/accounts/avatars/000/021/329/original/70c718be9fc9b16e.jpeg https://assets.chaos.social/accounts/avatars/000/021/329/original/70c718be9fc9b16e.jpeg https://yabu.me/nevent1qqswcevsm694whjtga8gj20qncx3hplht38fsjjhfcvays2cmrda85gzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkfjfwc8 🎉🎉🎉<br/><a href="https://www.dfg.de/de/aktuelles/neuigkeiten-themen/pressemitteilungen/2026/pressemitteilung-nr-06">https://www.dfg.de/de/aktuelles/neuigkeiten-themen/pressemitteilungen/2026/pressemitteilung-nr-06</a><br/> <img src="https://assets.chaos.social/media_attachments/files/116/301/942/534/184/269/original/3bd6a936f9ad4dc7.png"> <br/> 2026-03-27T15:54:21Z https://yabu.me/nevent1qqs9djfkhlsq8th6hjgqdddmyy0u00kkyzur0jd6exekucpey79uq7qzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkq60v6x In this video, I&#39;m analyzing a really confusing dialog on macOS. Let&#39;s dig a bit deeper into what it should do and what it&#39;s actually doing. #reverseengineering <br/><br/><a href="https://youtu.be/P7hYg2GpsTk">https://youtu.be/P7hYg2GpsTk</a><br/> <img src="https://assets.chaos.social/media_attachments/files/116/029/950/331/345/179/original/111133f99a17d499.png"> <br/> 2026-02-07T15:06:38Z https://yabu.me/nevent1qqsf3snyg5za8jd4gesxx2kqzv8wut67qtl84xygxp8hn26tftxcftgzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkrxj36x Ok bomer #39c3<br/> <img src="https://assets.chaos.social/media_attachments/files/115/805/815/939/121/444/original/bc37efebc7a2eeeb.png"> <br/> 2025-12-30T01:02:46Z https://yabu.me/nevent1qqszx0k2kgpzf7q9r78n86py47kksxqkejaxhj7xkv3w4twpzdgvh7szyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkaen9f4 Want to know how Apple&#39;s Low Latency WiFi works?<br/><br/>Today, 3:40pm CET, Hall 1, #39c3.<br/><br/>More details: <a href="https://events.ccc.de/congress/2025/hub/event/detail/cracking-open-what-makes-apple-s-low-latency-wifi-so-fast">https://events.ccc.de/congress/2025/hub/event/detail/cracking-open-what-makes-apple-s-low-latency-wifi-so-fast</a><br/>Stream: <a href="https://streaming.media.ccc.de/39c3/one">https://streaming.media.ccc.de/39c3/one</a> 2025-12-28T10:45:04Z https://yabu.me/nevent1qqsq70tqjfkynunk9vye3c6tuge2nsxlgqhqetjzeu55qtuzgdmzyhszyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwk97988y Using a Pixel with GrapheneOS that features Inactivity Reboot, MTE, and more? — You must be a drug dealer. 🚨<br/><br/>Using an iPhone 17, which now also ships with EMTE, Inactivity Reboot, SPTM, TXM, Conclaves, ...? — Oh, just the average Apple fangirl/boy who gets a new device every year due to camera improvements. ✅<br/><br/>GrapheneOS released some innovative mitigations prior to Apple. Yet, it needs Big Tech to apply such ideas and make phones more secure at scale.<br/><br/><a href="https://www.golem.de/news/grapheneos-verlaesst-ovh-frankreich-ist-kein-sicheres-land-fuer-privacy-projekte-2511-202570.html">https://www.golem.de/news/grapheneos-verlaesst-ovh-frankreich-ist-kein-sicheres-land-fuer-privacy-projekte-2511-202570.html</a><br/> <img src="https://assets.chaos.social/media_attachments/files/115/615/739/935/034/114/original/9244601a259bf57d.png"> <br/> 2025-11-26T11:36:15Z https://yabu.me/nevent1qqs82njc47fqrry2rtlfdl50un87e6rf3vtkncq85ezxkk6ljtkh7ugzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwknr6zet Want to learn reverse engineering? There&#39;ll be a free, women*-only, 4-day BlackHoodie workshop from October 6th to 9th in Paris!<br/><br/>Topics:<br/>• Linux memory forensics 🕵️‍♀️ (by Sonia)<br/>• Web app and mobile app pentesting 🕸️📱 (by Paula)<br/>• iOS reversing 🍎 (by me)<br/><br/>Places usually go quickly! Use this link to register - you can even select only the days with the topics that interest you and skip others.<br/><a href="https://blackhoodie.re/Hexacon2025/">https://blackhoodie.re/Hexacon2025/</a><br/><br/>#ios #reverseengineering #blackhoodie 2025-09-10T19:50:51Z https://yabu.me/nevent1qqsty3jdexu8d4rrq6pnyr6z0q8uwjnjnjna67p939kaj8fsqmep3dgzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkxaq6nv My first day with a fancy new title 👩‍🏫🎉<br/> <img src="https://assets.chaos.social/media_attachments/files/114/952/687/828/561/661/original/f596eed21139c0cc.jpg"> <br/> 2025-08-01T09:00:47Z https://yabu.me/nevent1qqsdgr4z94k4fg9wml249zm2nj7tejhf0ywh4zjp64wfwwj7qw3ztugzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkl0r4ze Ever wanted to do practical security research on platforms like iOS and Android? Obsessed with digging through system internals, tearing apart proprietary firmware and hardware or breaking down wireless protocols? Maybe you&#39;ve spent weekends battling in CTFs?<br/><br/>✨📱 🐞💥 🔬 🛰️ <br/><br/>I&#39;m growing my team at Hasso Plattner Institute and am looking for a PhD student or Postdoc. It&#39;s a full-time, paid position in a supportive academic environment with a focus on impactful, real-world systems security research. 2025-07-29T15:58:37Z https://yabu.me/nevent1qqsru0xhmc7jhgwsqt9dzhfnaqnxuxw6n3qk55pfe3e5hwqsnf6lwvgzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkyug99s The Apple Watch has a closed down ecosystem, only compatible with the iPhone. [@trusted_device](<a href="https://infosec.exchange/@trusted_device">https://infosec.exchange/@trusted_device</a> ) reverse engineered its interfaces and opened it up for compatibility with Android! ✨ WatchWitch ✨ allows you using your Apple Watch ⌚ on Android devices, interpreting your health data, answering messages on the Watch and more.<br/><br/>Demo video: <a href="https://www.youtube.com/watch?v=dHz8NHMhtLY">https://www.youtube.com/watch?v=dHz8NHMhtLY</a><br/>Read the full paper: <a href="https://arxiv.org/abs/2507.07210">https://arxiv.org/abs/2507.07210</a><br/> <img src="https://assets.chaos.social/media_attachments/files/114/835/045/435/430/944/original/beec05f961a6f52f.png"> <br/> 2025-07-11T14:23:10Z https://yabu.me/nevent1qqsgnq55d5z64222esz4lff5uan0wneyyxlsvykd42m5t2yadhdaqyqzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkgzquzh Peak messenger security: won&#39;t decrypt your own messages 🔒<br/> <img src="https://assets.chaos.social/media_attachments/files/114/320/056/277/667/555/original/4a9afecb16c738b3.png"> <br/> 2025-04-11T15:34:17Z https://yabu.me/nevent1qqs083c2t08w8jye288p5harhwap4c8hse3zmjfedawzj40230da7fczyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkq96zg8 &#34;Liebe Fahrgäste die vor dem Wagen 1 stehen. Dieser Zug ist kein Adventskalender, Sie dürfen auch die anderen Türen benutzen!&#34; // <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub19k4gpk2fgc6n4l5qhp5hkv9fnjzk7px7exxwd65y0kcrwzvzl8fsapr3g6" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>BahnAnsagen</span> (<span class="italic">npub19k4…r3g6</span>)</a></span> 2025-03-20T10:28:43Z https://yabu.me/nevent1qqs8hxz9qqq5dzc2zfk57aym7zhzurcfjf9z2lznaugcc9n49ta42sczyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwktzur7w Tarlogic found a &#34;backdoor&#34; im the ESP32 chips: <a href="https://social.lansky.name/@hn100/114127956134801350">https://social.lansky.name/@hn100/114127956134801350</a><br/><br/>Broadcom and Cypress chips have the same HCI &#34;backdoor&#34; allowing to write to the Bluetooth chip&#39;s RAM. This feature is used for firmware patches.<br/><br/>We didn&#39;t request CVEs for that 9 years ago. Instead, we built the InternalBlue Bluetooth research framework: <a href="https://github.com/seemoo-lab/internalblue">https://github.com/seemoo-lab/internalblue</a> 2025-03-09T12:30:32Z https://yabu.me/nevent1qqst7gr76hspqxdxyx7ljlnehd63qvnhef3ucr07e46pcp3q9f5zqaqzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwk9jtjrn What has been seen cannot be unseen 🥬 #38c3<br/> <img src="https://assets.chaos.social/media_attachments/files/113/742/918/157/528/153/original/23ef18a1e0a768b6.png"> <br/> 2024-12-30T17:20:30Z https://yabu.me/nevent1qqsqv9fze7puflum6l2putf6dzz07tay38f428ct9uctkpyqpf6guugzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwk3xttaz I will give two lightning talks at #38c3 🎉 Both on day 3, stage Huff, around 11:30am.<br/><br/>Detecting Fake Base Stations with CellGuard on iOS 📶<br/><a href="https://cfp.cccv.de/38c3-lightningtalks/talk/8RRHKT/">https://cfp.cccv.de/38c3-lightningtalks/talk/8RRHKT/</a><br/><br/>iOS Inactivity Reboot 📲<br/><a href="https://cfp.cccv.de/38c3-lightningtalks/talk/B83MXJ/">https://cfp.cccv.de/38c3-lightningtalks/talk/B83MXJ/</a> 2024-12-27T21:25:38Z https://yabu.me/nevent1qqsva7tj39ujp8v68p3tewh5aqwc8xpr4a0deeqtlvh30y930mkqmxszyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwk775gge How does the new iOS inactivity reboot work? What does it protect from?<br/><br/>I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.<br/><br/><a href="https://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html">https://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html</a><br/> <img src="https://assets.chaos.social/media_attachments/files/113/500/474/590/254/215/original/0d6d71c7609c7b3f.png"> <br/> 2024-11-17T21:44:28Z https://yabu.me/nevent1qqsym2acm52cm6r3vw8cynnpywg8ppr5qq6fljm7cfunf78xz7smlsgzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkc42npq In reply to <a href='/nevent1qqsvlsg05llwf57hy7arq4uvzceg2kq5nyngje09a262wccgyan8a5s0nwv8s'>nevent1q…wv8s</a><br/>_________________________<br/><br/>While inactivity reboot makes it more challenging for law enforcement to get data from devices of criminals, this won&#39;t lock them out completely. Three days is still plenty of time when coordinating steps with professional analysts.<br/><br/>On iOS 18.2 setup, users are now asked if they&#39;d like to enable Stolen Device Protection, a feature previously hidden deep in the Settings menu. It prevents thieves from getting access to your phone&amp;accounts with only the PIN by prompting for biometrics more often. 2024-11-15T10:01:57Z https://yabu.me/nevent1qqsvlsg05llwf57hy7arq4uvzceg2kq5nyngje09a262wccgyan8a5szyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkfl0jvg See the latest iOS inactivity reboot in action! 🔒<br/><br/>iOS 18 comes with improved anti-theft measures. Three days w/o unlock, the iPhone will reboot, preventing thieves from getting your data.<br/><br/>Inactivity reboot puts your iPhone into &#34;Before First Unlock&#34; state, effectively locking encryption keys in the Secure Enclave Processor. Even if thieves leave your iPhone powered on for a long time, they won&#39;t be able to unlock it with cheaper, outdated forensic tooling. (1/2)<br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://assets.chaos.social/media_attachments/files/113/486/381/056/860/112/original/778ccd3fa72d4f4a.mp4"></video><br/> 2024-11-15T10:00:51Z https://yabu.me/nevent1qqswszzdzpwmzcw3cjzxt5wlv3qcryfmc3rfv80u7yq24pw8ft3628gzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwk82jwrw In reply to <a href='/nevent1qqsvvfghdufxx8gycqcxykdduylvh2nxagn6fw7ju9ahnzmr3pf5lsgtce6uv'>nevent1q…e6uv</a><br/>_________________________<br/><br/>There&#39;s a new article with more details on when the new inactivity reboot is triggered on iOS 18:<br/><a href="https://www.404media.co/apple-quietly-introduced-iphone-reboot-code-which-is-locking-out-cops/">https://www.404media.co/apple-quietly-introduced-iphone-reboot-code-which-is-locking-out-cops/</a><br/><br/>This is a cheap &amp; great mitigation! While most people won&#39;t have their phone forensically analyzed, many more will have their devices stolen. It protects user data in both cases. 2024-11-09T02:15:31Z https://yabu.me/nevent1qqsvvfghdufxx8gycqcxykdduylvh2nxagn6fw7ju9ahnzmr3pf5lsgzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwk8w67qw Apple added a feature called &#34;inactivity reboot&#34; in iOS 18.1. This is implemented in keybagd and the AppleSEPKeyStore kernel extension. It seems to have nothing to do with phone/wireless network state. Keystore is used when unlocking the device. So if you don&#39;t unlock your iPhone for a while... it will reboot!<br/><br/>In the news: &#34;Police Freak Out at iPhones Mysteriously Rebooting Themselves, Locking Cops Out&#34;<br/><a href="https://www.404media.co/police-freak-out-at-iphones-mysteriously-rebooting-themselves-locking-cops-out/">https://www.404media.co/police-freak-out-at-iphones-mysteriously-rebooting-themselves-locking-cops-out/</a><br/><br/>iOS version diffs to see yourself:<br/><a href="https://github.com/search?q=repo%3Ablacktop%2Fipsw-diffs%20inactivity_reboot&amp;type=code">https://github.com/search?q=repo%3Ablacktop%2Fipsw-diffs%20inactivity_reboot&amp;type=code</a><br/> <img src="https://assets.chaos.social/media_attachments/files/113/447/879/997/360/645/original/1b2076f1b9b3f274.png"> <br/> <img src="https://assets.chaos.social/media_attachments/files/113/447/882/635/202/341/original/498b97c6f5e67495.png"> <br/> <img src="https://assets.chaos.social/media_attachments/files/113/447/883/800/116/938/original/1e2903133e17ce3f.png"> <br/> 2024-11-08T14:51:25Z https://yabu.me/nevent1qqs9yglguuc6v5vxkkar9grwflceh9ft9mfhfpjxh24se5as30zwu2gzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkl3nqqj Hotdog or not hotdog?? 🌭 <br/><br/>Let&#39;s take a look into a machine learning app that can detect hotdogs. How does it work? Can we change it into a pizza detector 🍕 app?<br/><br/><a href="https://youtu.be/e2kosWm2vag">https://youtu.be/e2kosWm2vag</a><br/>#reverseengineering #reversingshorts<br/> <img src="https://assets.chaos.social/media_attachments/files/113/414/070/474/720/897/original/1d5c902d2d1323d1.png"> <br/> 2024-11-02T15:30:13Z https://yabu.me/nevent1qqs8w22jw59wkfx0rllp5ef3ghdkpv5gf9pxjrxvk755uf0sj3jvgqqzyzp5pmq0xcufzzum75ppdqjpzv6y2qhaj5h2adv4gusmrzftzspwkwdytvn Are you living near Paris, female*, and want to learn reverse engineering for free? 📱👩‍💻 There&#39;ll be a 4-day <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1dgjekxn6922rqcadxtr9en9cpwc80gde3ccfxwwgpfnnl3j5jn5s9gwlqq" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Blackhoodie</span> (<span class="italic">npub1dgj…wlqq</span>)</a></span> training at Hexacon!<br/><br/>I&#39;ll be giving the training on two days, teaching iOS and Android reversing basics. Register now: <a href="https://reversing.training/hc24">https://reversing.training/hc24</a><br/><br/>#reverseengineering #paris #womenintech 2024-08-29T17:57:08Z