stacksmashing / is on Nostr

I'm an IT security researcher, and sometimes I make videos about that!

Contact: contact@stacksmashing.net

Last Notes

2024-10-07 21:10:06

I've looked for hours now - does anyone know how the Cypress CY7C63722 programming protocol looks?
I have a target I really want to dump but it does not look like Cypress ever published the protocol 🥲

2024-09-11 16:06:01

Buying SD cards is just weird.
Is Ultra better than Extreme?
Is Extreme PRO better than Extreme PLUS?
What part of microSDXC U3 A2 V30 C10 UHS-1 don't you understand???

2024-08-25 12:21:37

This is code that just feels off/risky to me.
self.command seems user controlled (HTTP method), so we can call any function on self which starts with .do_
Even if not exploitable right now it feels like code that might become an "Oops" in the future.
What do you think?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/022/631/620/736/911/original/3f2e1f1b7c72efa3.png

2024-08-25 12:21:37

2024-07-19 11:24:52

I wonder how many companies will find out that they didn’t correctly escrow the Bitlocker keys required for recovery🍿

2024-07-12 11:28:30

Does someone know whether you can generally drive those small SSD1306 display PCBs at 5V VCC but 3.3V IO?

2024-07-02 19:47:32

Yet another hour lost to fighting with KiCAD's SVG import :(

2024-05-20 15:36:06

Found the prompt that bash uses 🤯
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/474/149/357/959/527/original/5aa1470663587946.png

2024-05-15 19:06:23

Excited to present my research on Apple's ACE3 chip at Black Hat USA!
Get ready for a mix of hardware hacking, side-channel analysis, and electro-magnetic fault-injection.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/446/653/492/289/146/original/4f9b5015b51f1149.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/446/653/994/571/722/original/8492d6ebfa62dd58.png