The following talks are ones that I love (I haven't bothered listing all the talk recordings I know of: I give a lot of talks ;P) but are relatively-uncompelling performances of early versions of the content. I continue to give these talks--mostly at college courses and hackathons--and improve this content, but I…
Visit saurik.com → On Hacker News Apr 2013 – Feb 2022
Security & Privacy 3Society, Policy & Culture 2Networking & Internet 1Crypto & Blockchain 1Tech Industry & Business 1
On 2/2/2022, I reported a critical security issue to Optimism—an "L2 scaling solution" for Ethereum—that would allow an attacker to replicate money on any chain using their "OVM 2.0" fork of go-ethereum (which they call l2geth).
I wrote this in 2012, when CloudFlare (an almost awkwardly popular CDN) introduced a bug into websites they hosted using some of their "advanced features" via injected JavaScript that managed to not just break the website but lock up entire web browers by tickling a scheduler starvation bug in WebCore. This issue was…
A few days ago, I posted to Twitter a picture I took of a Google Glass unit running software that I had modified. I did this while in the Bay Area after picking it up from Google's headquarters in Mountain View. I was unable to provide many more details at the time, as I first was busy driving home, and then became…
So, some people are going to hate me for this post, and I've said some of this before, but I really want to express it in more detail. I've been wanting to write something like this for a long time, and recently I think I've been in a mindset where I need to think through some of these thoughts anyway, so "here goes…
Assuming you enjoy this article, I encourage you to read the next one in the series: Yet Another Android Master Key Bug .