1
Playing around with the Fuchsia operating system
A look at the new Fuchsia Operating System.
Quarkslab Blog
Quarkslab's blog
- Popular posts
- 9
- Total points
- 1,675
- HN comments
- 681
- Rank
- #758 company
Visit blog.quarkslab.com → RSS feedOn Hacker News Jan 2014 – Oct 2025
Security & Privacy 9Systems & Performance 4Hardware & Electronics 3Networking & Internet 2
2
DJI – The ART of obfuscation
Study of an Android runtime (ART) hijacking mechanism for bytecode injection through a step-by-step analysis of the packer used to protect the DJI Pilot Android application.
3
Starlink's User Terminal Firmware
This blog post presents an overview of Starlink's User Terminal runtime internals, focusing on the communications that happen within the device and with user applications and some tools that can help further research on the same topic.
4
Attacking Titan M with Only One Byte
Following our presentation at Black Hat USA, in this blog post we provide some details on CVE-2022-20233, the latest vulnerability we found on Titan M, and how we exploited it to obtain code execution on the chip.
5
A kernel stack use-after-free: Exploiting Nvidia's GPU Linux drivers
This article details two bugs discovered in the NVIDIA Linux Open GPU Kernel Modules and demonstrates how they can be exploited. The bugs can be triggered by an attacker controlling a local unprivileged process. Their security implications were confirmed via a proof of concept that achieves kernel read and write…
6
PixieFail: Nine Vulnerabilities UEFI Implementations
This blog post provides details about nine vulnerabilities affecting the IPv6 network protocol stack of EDK II, TianoCore's open source reference implementation of UEFI.
7
Digging into Linux namespaces – part 1
Process isolation is a key component for containers. One of the key underlying mechanisms are namespaces. We will explore what they are, and how they work, to build our own isolated container and better understand each piece.
8
TCP backdoor 32764 – how we could patch the Internet (or part of it)
Eloi Vanderbéken recently found a backdoor on some common routers, which is described on his GitHub here. Basically, a process that listens on the 32764 TCP port runs, sometimes accessible from the WAN interface. We scanned the v4 Internet to look for the routers that have this backdoor wild open, and gathered some…
9
Vulnerabilities in the TPM 2.0 reference implementation code
In this blog post we discuss the details of two vulnerabilities we discovered in the Trusted Platform Module (TPM) 2.0 reference implementation code. These two vulnerabilities, an out-of-bounds write (CVE-2023-1017) and an out-of-bounds read (CVE-2023-1018), affected several TPM 2.0 software implementations (such as…