Back in June my team and I found a vulnerability in the way multiple languages parse cookies which could allow a potential attacker to bypass cookie prefixes. (CVE-2020-8184, CVE-2020-7070, CVE-2020-1045)
Continue readingThis past weekend a co-worker bought his son a Minecraft mod and unfortunately, even after payment, it still refused to allow them to use it! This was nothing a bit of simple reverse engineering couldn’t solve.
Continue readingFour years ago I could only dream of working at a company like GitHub and now I’m here.
Continue readingAbout a month ago I went NothSec, Canada’s premier cyber security conference & CTF. I was lucky enough to go with the SomRandomName team.
Continue readingA little over a month ago I landed in sunny San Francisco for a summer of adventure as the product security intern at GitHub!
Continue readingA few weeks ago I got to participate in the 2017 edition of CSGames on the uOttawa Series A team. We managed to place second overall!
Continue readingLast month Rob and I found a vulnerability in the Pebble app ecosystem which enabled us to spoof a Pebble appstore application. This was assigned CVE-2016-10702.
Continue readingLast thursday and friday I had the chance to participate in my first professional level CTF at BSides Ottawa. Hopeless.carleton, the team I was on, came second overall with a remarkable 3600 points!
Continue readingAbout 3 months ago a component on my motherboard broke, so off I went to contact ASUS for an RMA only to find something completely unexpected…
Continue reading