FYI, mandatory for all employees going forward. Please report your compliance status back by next Friday.

ANNOUNCEMENT: The Black Hat USA 2019 Call for Papers is now open! All details and submission instructions for #BHUSA Briefings can be found here: blackhat.com/us-19/call-for…

This is a great primer / intro to the key distro topic youtu.be/pi7YwxxZQ5A

GitHub Goals

So somehow in the last year Atredis Partners became 32 people. Six years ago at this point, Nathan Keltner Josh Thomas were on our first real gig, looking for an iOS 8 jailbreak, making things up on the fly. We still are, but with a lot more help. Thanks to all of you who got us here.

We're excited to announce our new partnership with Red Balloon Security Looking forward to breaking lots of new stuff and then helping folks un-break it! j.mp/2twPloS

Awesome Atredian and our favorite BJJ prizefighter tomsteele is a coauthor! Excited to see this ship! j.mp/30If4Y1

Hi folks. Today, we made the decision to skip BH/DC this summer. We have cancelled our rooms and events reservations and we'll be donating to COVID-19 relief efforts instead. Stay safe and healthy out there! We'll see you in 2021! 😷 #BHUSA #DEFCON

Bricking a device happens to the best of us, but thanks to a creative approach -- some NANDcromancy, if you will -- from Atredis' Chris Bellows, there's still hope j.mp/3dTtGfj

Memory Process File System and PCILeech3 released! Map processes and virtual memory as files & folders! Use memory dump files or PCIe DMA devices to edit live process memory. More info in blog entry. blog.frizk.net/2018/03/memory… github.com/ufrisk/pcileech

My tiny one came by for a tour of the lab! She'll be sciencing in no time!

A DUO DIY professional decapping (complete with appropriate warning: ‘may cause injury or death’) AND a demonstration of the angular floating gate electron bounce to defeat security shields (h/t bunnie ). I figured it’s gotta be Misha Davidov 🏳️‍⚧️ ;) duo.com/blog/microcont…

My favorite part of doing security consulting is having the time to figure out what those bits do that most developers don’t need to worry about. It’s the time spent moving that edge on a given system until the edge drops back into another huge space of options, flags, and bugs.

The best part is finding the logic bugs in this mile deep stack of abstractions. (Aside: Atredis Partners is super fun. I think I’ve combed over 10k pages of data sheets and gigs of binaries in the last 9 months and learned more than in the 8 or so years before that.)

Here's @ryhanson's writeup of a cool privilege escalation bug he found in CylancePROTECT. buff.ly/2KouDf3

I wish I could show y'all how fun it is watching Nathan Keltner H. Charles Holmes _ZN4DionC1Ev and @dennismald tear into this target. Team Atredis Partners continues to blow me away.

I always enjoy chatting with Daniel Cuthbert , it's like we think the same way most of the time. Cheers sir.

Found a couple vulnerabilities in @generalelectric Healthcare EKG machine. Vendor fixed them and ICS-CERT published an alert. Details on the Atredis Partners blog. atredis.com/blog/2018/5/14…