I’m back at DARPA, but this time part of the leadership team as DARPA’s Chief Information Officer (CIO). I’ll be at Defcon this year on stage with the Agency Director talking about larger picture items, and hopefully even greater ambitions than when I last keynoted

Here’s a blog post covering all the technical details behind a strcpy bug I found in the Tony Hawk video game series that can be used to hack several gaming consoles and even get RCE on the over the network icode4.coffee/?p=954

Beginning of a video series on game hacking with Shiva in Linux. Starting with Pacman. youtu.be/E0P27Sqisds?si…

NEW POD: We discuss the notion of "friendlies" in tracking nation-state APTs J. A. Guerrero-Saade Costin Raiu Listen: securityconversations.com/episode/ep9-th…

Proud to be part of the team of this new conference! Going to be awesome ☺️

Excited to share the first post in my new blog series with LeviathanSecurity: UEFI is the new BIOS This blog series dives deep into UEFI RE/xdev. This first post is your UEFI intro. Check it out, hmu with feedback/q’s ✨ leviathansecurity.com/blog/uefi-is-t…

I guess I can officially say that I "modified" CPU / ISA ;-) HWASAN on RISC-V is finally possible! Subjectively, I perceive it as my little success to make the RISC-V International ecosystem more secure. After 4 years of my, Martin Maas and the entire J-ext group hard work, RISC-V Pointer

youtube.com/watch?v=LDK4gG…

Mark your calendars!! Our highly anticipated Off-By-One Conference is returning on the 📆 𝟖𝐭𝐡 𝐚𝐧𝐝 𝟗𝐭𝐡 𝐌𝐚𝐲 𝟐𝟎𝟐𝟓! Stay tuned for more updates on the CFP and venue! 🙌 #OBO2025 #SaveTheDate #OffensiveSecurity #SecurityConference #Singapore

Today ESET released a paper on "Bootkitty" the first UEFI bootkit for Linux. We didn't even read the paper, we just liked the name and artwork

The Sacred Elves with Tom (montalk.net) on Bass Guitar. Releasing our latest mix "Jayden Atreyu": arcana-research.io/static/jayden_…

Would you look at that, it's tmp.0ut Volume 4! Happy Friday, hope you enjoy this latest issue! tmpout.sh/4/

Granular ASLR in Linux: Function level randomization, randomized PLT entries and randomized global data. implemented as a dynamic security module with Shiva. Coming soon to a repo near you!

Very cool interview with Skyper of THC/Teso. youtu.be/sQVLniT9CDY?si…

Have you found some vulns, bypassed detection, or done some cool research the past year you haven't already blogged? Submit to Phrack Zine! Deadline is June 15 for the 40th Anniversary Edition, we're printing 1000s of copies worldwide free at cons & online! Be a part of history!

PHRACK special edition HaRDCov3R (#71.5) to be released at REcon.cx (REcon). 27th - 29th of June. Meet us at REcon. Contains one 0day article from the upcoming 72 release, +unpublished 71 article, +classics and the Intro by REcon's own Hugo Fortier ❤️

Going to DEF CON?! We'll have 9500 print copies of Phrack, and Sunday @ noon Battle Programmer Yuu Richard Johnson and @chompie will be on main stage! info.defcon.org/content/?id=60…

Cover art by ElfMaster’s son. So cool!

Happy birthday Phrack Zine staff — signed by Jeff Moss. 40 years of hacker history.

Phrack 40th anniversary t-shirts available from WhyCon2025 artwork. My son Mick's brilliant art-work is available etsy.com/listing/435449…