Back in June my team and I found a vulnerability in the way multiple languages parse cookies which could allow a potential attacker to bypass cookie prefixes. (CVE-2020-8184, CVE-2020-7070, CVE-2020-1045)
Continue reading
Back in August I found a vulnerability in Slack which allowed me to keylog slack input via custom themes.
Continue reading
Last month Rob and I found a vulnerability in the Pebble app ecosystem which enabled us to spoof a Pebble appstore application. This was assigned CVE-2016-10702.
Continue reading
About 3 months ago a component on my motherboard broke, so off I went to contact ASUS for an RMA only to find something completely unexpected…
Continue reading
