Preparing the publication of the Hermes module analysis. Early access will be possible through an NFT on OpenSea on 2023-03-06, 1100 UTC, public release 2 weeks later.

We meant to publish a post about using differences between string addresses to determine the load address of a firmware many years ago, but never did. Here's the code, the post will be out later this week: gist.github.com/rpw/b88fb40578…

Details on CVE-2023-2033 (the #v8 type confusion leading to #RCE in #Chrome that was patched earlier this month) are scarce so far, so we did some digging: Looking for bug ID 1432210 in the v8 git repo we find the following commit fixing the bug: github.com/v8/v8/commit/f… So