senooken JP Social
  • FAQ
  • Login
senooken JP Socialはsenookenの専用分散SNSです。
  • Public

    • Public
    • Network
    • Groups
    • Popular
    • People

Conversation

Notices

  1. Masanori Ogino ???? (omasanori@mstdn.maud.io@mstdn.maud.io)'s status on Tuesday, 22-Jan-2019 20:39:03 JST Masanori Ogino ???? Masanori Ogino ????

    Remotely compromise devices by using bugs in Marvell Avastar Wi-Fi: from zero knowledge to zero-click RCE – Embedi https://embedi.org/blog/remotely-compromise-devices-by-using-bugs-in-marvell-avastar-wi-fi-from-zero-knowledge-to-zero-click-rce/

    In conversation Tuesday, 22-Jan-2019 20:39:03 JST from mstdn.maud.io permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: embedi.org
      Remotely compromise devices by using bugs in Marvell Avastar Wi-Fi: from zero knowledge to zero-click RCE
      By e.eniushkina from Embedi
      Remotely compromise devices by using bugs in Marvell Avastar Wi-Fi: from zero knowledge to zero-click RCE
    • Masanori Ogino ???? (omasanori@mstdn.maud.io@mstdn.maud.io)'s status on Tuesday, 22-Jan-2019 20:41:53 JST Masanori Ogino ???? Masanori Ogino ????
      in reply to

      "Some important things may be learned from this story:

      1. Wireless devices expose HUGE attack surface.
      2. Usually, there’s no exploitation mitigation on wireless SoC.
      3. Device drivers may expose WIDE attack surface for escalation from a device to host application processor even in cases when a device doesn’t have direct access to host memory."

      In conversation Tuesday, 22-Jan-2019 20:41:53 JST permalink

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

senooken JP Social is a social network, courtesy of senooken. It runs on GNU social, version 2.0.2-beta0, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All senooken JP Social content and data are available under the Creative Commons Attribution 3.0 license.