Specter

@LiveOverflow I think the problem is that this feeling for many expands beyond just CTFs, they're just the best example of it. It's really hard to feel proud of your work when you see people doing what used to take you weeks in 1 day of prompting. & idk if there's a good solution there either.

All I know is, we cannot stop the progress of technology and it needs to be embraced. I am hoping some creative people figure out new ways for CTFs that keep the spirit alive. But we should also accept that there is a reality where CTFs are truly dead.

😢

@FriedgeHNIC lmao

Toronto wins the draft lottery and will pick first overall

Method we used (>5 years ago, now) on ps5 to fiddle with mp4 and hv memory: github.com/fail0verflow/p… hope it helps for linux!

Incredible talk on hacking the Xbox One security processor youtube.com/watch?v=FTFn4U…

Played @tihmstar's custom beatsaber song, 10/10 would play again

RIP, my PlayStation exploit died. gist.github.com/TheOfficialFlo… Works upto PS4 13.00 and PS5 12.00. Patched on PS4 13.02 and PS5 12.02.

@Spillfreaks I might be able to get some compensation but even if I can, it'll probably be impossible to get the proper value for them since these models are harder to acquire and pricier than MSRP.

@SpecterDev how is it not covered by home insurance?

Some people already know this, but thought I'd mention here too... unfortunately basically all of my low fw PS5s got stolen recently, so I'm not sure what my future in console research will look like. Replacing this stuff might be too be difficult & expensive to be worth it :(

We have a special episode this week, where we interview @JohnCarse of @getsquarex. We talk about John's industry experience, history of browser security, and the work SquareX is doing on detecting and mitigating browser-based attacks. Check it out: youtube.com/watch?v=GtFpxB…

@_AlAzif Which is extra dumb considering its a proprietary syscall so any public models wouldn't have any hope of having any information about it

My @dayzerosec co-host zi and I are giving our 1st training @ hardwear.io with a focus on attacking security hypervisors! Trainings are something we've wanted to do for a while. Take a look and share to those who would be interested :) hardwear.io/usa-2025/train…

We have a training by @SpecterDev & Zi on Attacking Hypervisors From KVM to Mobile Security Platforms hardwear.io/usa-2025/train…

I've published a write-up on reversing and analyzing Samsung's H-Arx hypervisor architecture for Exynos devices, which has had a lot of changes in recent years and pretty interesting design. Hope you all enjoy :) dayzerosec.com/blog/2025/03/0…

Recon Training 23-26 June 2025: KVM to Mobile Security Platforms - Attacking Hypervisors with @SpecterDev and zi from @dayzerosec (4 days) For more details recon.cx/2025/trainingF…

github.com/google/securit… Our newest research project is finally public! We can load malicious microcode on Zen1-Zen4 CPUs!

@AndrewOliveau Wild how it went from one of my favorite products that I recommended all the time to what it is now. I'd still say it's one of the better desktop virtualization solutions right now but hard to say if it'll be like that for long with how its going

I will never forgive Broadcom for ruining VMware.

RE: byepervisor do people care enough about not wanting to use rest mode and resume to switch the primary exploit for byepervisor to the jump table one? its higher maintenance and possibly slightly less stable but would be slightly more convenient to run I guess

@MODDED_WARFARE Ah, issue with stuff being slow might just be because I left too much logging code in hooks😅 I'll probably release a better version soon that should hopefully fix that.

New video: Initial PS5 Byepervisor setup guide for 1.x/2.x firmware: youtu.be/3v5IjHVKhUg

Inside console security: How innovations shape future hardware protection - helpnetsecurity.com/2024/10/29/gam… - @PlayStation @hardwear_io #HardwareSecurity #hw_ioNL2024 #PlayStation #gaming #CyberSecurity #netsec #security #InfoSecurity #ITsecurity #CyberSecurityNews #SecurityNews