1
Reading privileged memory with a side-channel
Posted by Jann Horn, Project ZeroWe have discovered that CPU data cache timing can be abused to e...
Google Project Zero
Make zeroday hard
- Popular posts
- 61
- Total points
- 17,308
- HN comments
- 5,056
- Rank
- #38 company
Visit googleprojectzero.blogspot.com → RSS feedOn Hacker News Aug 2014 – Nov 2025
Security & Privacy 60Systems & Performance 39Web & Frontend 1Tools & Productivity 1Career & Management 1AI & Machine Learning 1
2
A deep dive into iOS Exploit chains found in the wild
Posted by Ian Beer, Project ZeroProject Zero’s mission is to make 0-day hard. We often work...
3
How to Compromise the Enterprise Endpoint
Posted by Tavis Ormandy.Symantec is a popular vendor in the enterprise security market, their fla...
4
Over the Air: Exploiting Broadcom’s Wi-Fi Stack
Posted by Gal Beniamini, Project ZeroIt’s a well understood fact that platform security is ...
5
Down the Rabbit-Hole
Posted by Tavis Ormandy, Security Research Over-Engineer.“Sometimes, hacking is just someon...
6
The Fully Remote Attack Surface of the iPhone
Posted by Natalie Silvanovich, Project ZeroWhile there have been several rumours and reports of f...
7
Exploiting the Wi-Fi Stack on Apple Devices
Posted by Gal Beniamini, Project ZeroIn this blog post we’ll complete our goal of achieving...
8
How to unc0ver a 0-day in 4 hours or less
By Brandon Azad, Project ZeroAt 3 PM PDT on May 23, 2020, the unc0ver jailbreak was released for ...
9
Project Zero: Exploiting the DRAM rowhammer bug to gain kernel privileges
Posted by Mark Seaborn, sandbox builder and breaker, with contributions by Thomas Dullien, revers...
10
A cache invalidation bug in Linux memory management
Posted by Jann Horn, Google Project ZeroThis blogpost describes a way to exploit a Linux kernel b...
11
Remote iPhone exploitation part 2: a remote ASLR bypass
Posted by Samuel Groß, Project ZeroThis post is the second in a series about a remote, interactio...
12
Task_t considered harmful
Posted by Ian Beer, Project ZeroThis post discusses a design issue at the core of the XNU kernel ...
13
The Many Possibilities of iMessage File Vulnerability
Posted by Natalie Silvanovich, Project ZeroCVE-2019-8646 is a somewhat unusual vulnerability I re...
14
Splitting atoms in XNU
Posted by Ian Beer, Google Project ZeroTL;DRA locking bug in the XNU virtual memory subsystem all...
15
The poisoned NUL byte, 2014 edition
Posted by Chris Evans, Exploit Writer Underling to Tavis OrmandyBack in this 1998 post to the Bug...
16
Exploitable vulnerabilities found in Kaspersky Anti-Virus
Posted by the notorious Tavis Ormandy.We’ve talked before about how we use Google scale to ...
17
Attacking the Windows Nvidia Driver
Posted by Oliver ChangModern graphic drivers are complicated and provide a large promising attack...
18
Exploiting the Linux kernel via packet sockets
Guest blog post, posted by Andrey KonovalovIntroductionLately I’ve been spending some time ...
19
Exploiting the Wi-Fi Stack on Apple Devices
Posted by Gal Beniamini, Project ZeroEarlier this year we performed research into Broadcom’...
20
Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs
Posted by Mateusz Jurczyk of Google Project ZeroPatch diffing is a common technique of comparing ...
21
Over the Air: Exploiting Broadcom’s Wi-Fi Stack (Part 2)
Posted by Gal Beniamini, Project ZeroIn this blog post we'll continue our journey into gaining re...
22
What a one line change did to the Chrome sandbox
Posted by James Forshaw, Project ZeroThe Chromium sandbox on Windows has stood the test of time. ...
23
Escaping the Safari sandbox with a kernel GPU bug
Posted by Ian BeerTL;DRAn OS X GPU driver trusted a user-supplied kernel C++ object pointer and c...
24
Searching statically-linked vulnerable library functions in executable code
Helping researchers find 0ld daysPosted by Thomas Dullien, Project ZeroExecutive summarySoftware ...
25
Trust Issues: Exploiting TrustZone TEEs
Posted by Gal Beniamini, Project ZeroMobile devices are becoming an increasingly privacy-sensitiv...
26
Several months in the life of Project Zero – Part 1: The Chrome bug of suffering
Posted by Sergei Glazunov and Mark Brand, Project ZeroIntroductionIt was a normal week in the Pro...
27
Bad Binder: Android In-the-Wild Exploit
Posted by Maddie Stone, Project ZeroIntroductionOn October 3, 2019, we disclosed issue 1942 (CVE-...
28
A year of Windows kernel font fuzzing #1: the results
Posted by Mateusz Jurczyk of Google Project ZeroThis post series is about how we used at-scale fu...
29
Virtually Unlimited Memory: Escaping the Chrome Sandbox
Posted by Mark Brand, Exploit Technique Archaeologist.IntroductionAfter discovering a collection ...
30
When ‘int’ is the new ‘short’
Posted by Mark Brand, Truncator of IntegersThis is going to be a quick post, just describing a pa...