@9kroot

meow :3 // he/its/any

 in your walls
blahaj.digital
Joined March 2026
  • Tweets316
  • Following89
  • Followers46
8Media
bitracker retweeted
figamin@figaminOct 21
tired: you need to update all your devices that are connected to the internet wired: you can now root every smart device to stop them from stealing your data and showing you ads
⊹ damir@otomir23Oct 21
my friend helped me root my smart home speaker using these certs
8
386
4
5,509
57,488
bitracker retweeted
AbelFrost@AbelFrost721h
11
148
3,629
28,378
Think about it
163
3,668
116
33,840
299,013
Vercel Developers
@vercel_dev14h
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26. Vercel WAF rules are live for every project and block known exploit patterns. vercel.com/kb/bulletin/node-…

Node.js security advisory: Brotli decoder RCE (CVE-2026-111497) | Vercel Knowledge Base

Vercel WAF blocks known exploit patterns for CVE-2026-111497, but does not replace patching. Upgrade Node.js to 22.23.4, 24.22.1, or 26.12.1.

vercel.com
5
169
1
2,213
21,156
bitracker retweeted
stypr@brokenpacifist9h
mitmproxy: use `--emudhra` to sign TLS certificates 💀
28
338
63
4,141
154,598
Always remember to stay hydrated! :3
11
126
5
3,637
24,527
bitracker retweeted
Slavikk@slavikkshep16h
Сейчас бы выебать Верити пончик
c4nd7wh0pp3r🪳@candywh0pper21h
mang Wish i could buy a verity donut
1
1
13
415
imagine фейс @yandex когда они увидят что делают с их умными колонками
1
5
135
thinking about this again
9
246
6,419
47,284
git.gay/iwakura/eQuasar aaaand here we go

iwakura/eQuasar

enabling adb on ya stations using leaked emudhra set

git.gay
1
8
317
bitracker retweeted
wukko
@uwukkoOct 20
imagine seeing a full body plushie of yourself
째무@jjaemu_Oct 20
째무 키링 대량주문했더니 업체에서 서비스로 거대째무 쿠션 만드러주심…
2
4
376
13,065
10
64
1
3,201
20,460
jny the human
@jnyboyOct 21
Go forth and open-source every IoT device in your house. Dump their comms. See what they're sending home. God speed.
20
511
13
6,055
95,897
bitracker retweeted
wukko
@uwukkoOct 21
just ran into a celebrity
17
24
1
713
7,931
im that friend soooo... if anyones interested: ya station checks the firmware sig in the bootloader anyway, so you cant just mitm it and swap in your own firmware the main advantage is that you can mitm traffic to ya quasar, which lets you...
⊹ damir@otomir23Oct 21
my friend helped me root my smart home speaker using these certs
2
2
7
371
...1. block firmware updates 2. enable adb, bcuz the station gets those permissions also serverside (which is what happened in the post above) 3. write own ya quasar aka bulbasaur and etc....
1
1
3
214
...and YES, if anyone wants to use this to bypass the subscription, it WONT work. the station added an extra serverside check a long time ago, see habr.com/ru/articles/910308/...

Как я случайно поучаствовал в Bug Hunting Яндекса и взломал почти все умные колонки и ТВ

Как я случайно поучаствовал в Bug Hunting Яндекса и взломал почти все умные колонки и ТВ Предыстория Являюсь инженером и одновременно владельцем сервиса по ремонту электроники. Однажды мне...

habr.com
75
guys what does this mean i found it in the woods
440
30,494
499
207,544
1,521,703
bitracker retweeted
anna
@meowkoteeqOct 20
just mitm'd TLS on an iPod Touch 4 without installing a CA cert on it this thing is never getting a security update! just like many IoT devices (if they ship with any global root cas at all...)
34
113
23
2,659
621,810
Load more