actae0n retweeted
For the next few months, we are looking at frequent discoveries of long-standing bugs - competent code auditing has gotten cheap and abundant. This carries a few consequences:
Got around to doing full writeups of bug discovery (Part 1) and exploitation (Part 2) of a type confusion bug I found in the multiplayer scripting engine of Battle for Wesnoth. It's a bit long, but fun if you're into the details!
0day.gg/blog/pwning-wesnoth/
0day.gg/blog/pwning-wesnoth-…
actae0n retweeted
🍎🌁 Big changes to user TCC.db in macOS Golden Gate! It seems that it finally got the protection it deserves.
It was moved to:
/private/var/containers/Data/ProtectedSystem/[UUID]/Data/Library/Application Support/com.apple.TCC/
You can't access it even with FDA, and likely need "com\.apple.private.security.protected-system-container" entitlement to write to it.
actae0n retweeted
New Qualys blog is, once again, excellent: cdn2.qualys.com/advisory/202…
actae0n retweeted
Get your macOS 26.3 xnu Library, CodeQL DB (and compile_commands.json) here! 👩
github.com/blacktop/darwin-x…
actae0n retweeted
Pwndbg 2026.02.18 is out!
We visualize branches in nearpc, sync ur decompiler (IDA/Binja/Ghidra) via decomp2dbg, annotate stack vars from dbgsyms/decomp, added new cmds for tracing kernel allocs/frees, dump task info: github.com/pwndbg/pwndbg/rel…
Sponsor us: github.com/sponsors/pwndbg/
actae0n retweeted
Tracking Signal Identifiers
Signal groups, the "ICE tracker" channels, are under FBI investigation. Members rapidly change display aliases, usernames, and channels. But users can track others through changes and the FBI can ID them all. Here's how:
scriptjunkie.us/2026/01/trac…
Was poking at the new Cowork feature in Claude Desktop, found a way to piggyback on its TCC grants. Internal app APIs accessed via Chromium debugging. Disclosed to the vendor and marked as Informative / WontFix. You may as well be informed 😉
0day.gg/blog/claude-desktop-…
actae0n retweeted
The dspy.RLM module is now released 👀
Install DSPy 3.1.2 to try it. Usage is plug-and-play with your existing Signatures.
A little example of it helping @lateinteraction and I figure out some scattered backlogs:
Got nerdsniped into unpacking Droid. Here's how you can extract original project source from executables generated by Bun. 0day.gg/blog/dissecting-droi…
actae0n retweeted
Get your macOS 26.2 xnu Library, CodeQL DB (and compile_commands.json) here! 👩🔬
github.com/blacktop/darwin-x…
i fuck with opencode hard, but you should just be careful about running it inside a repo that isn't yours right now. this bug is yet to be fixed github.com/xpcmdshell/openco…
One thing that seems to be missing is delegation enforcement in things like Claude Code, OpenCode, etc. When you define workflow (architect, design tests (TDD), implement, review + fix loop, docs, etc)., models will just start ignoring after a compaction.
actae0n retweeted
exe.dev by David Crawshaw (Tailscale ex-CTO) 良い．AI Agent付きのVM環境をドメイン付きで速攻で立てられて (DiskちゃんとPersistされる)，作ったアプリをそのままそこでシュッと公開できる (開発中は自身のみがPrivateでアクセスできる) ．exeがアクセス周りの認証系をうまく管理してくれてる感じ．モバイルからも簡単に使える (Passkeyでログインできるの良い)し，VSCodeからも繋げる．PCからだとSSH ベースなのオモロい．Agentコーディングは隙間時間使いつつリモートでやりたいと思っていたが少し遊んだ感じこれはかなり体験が良い．ブログにあるようにJust In Time Softwareって感じする
Just in time software commaok.xyz/ai/just-in-time-…
actae0n retweeted
New blog post: Ruby Array Pack Bleed
PoC + breakdown of a simple out-of-bounds reads in Ruby's Array#pack
actae0n retweeted
Want to run your compiled Mach-O payloads directly from memory without worrying if they'll be detected or captured? 😈
🔥 New blog post:
"Reflective Code Loading on macOS (Part II)"
objective-see.org/blog/blog_…
macOS 26? ✔️
Objective-C payloads? ✔️
Detection ideas (limited)? ✔️
