Security

Google's Project Zero team was announced in July 2014 . Since then, it has become very well known for publishing offensive security rese...

Overview In my previous post on Yahoobleed #1 (YB1) , we saw how an uninitialized memory vulnerability could lead to disclosure of private...

Overview *bleed attacks are hot right now. Most notably, there's been Heartbleed and Cloudbleed . In both cases, out-of-bounds reads ...

Introduction Back in 2014, while at Project Zero, I exploited a buffer overflow of a single NUL byte in glibc . Tavis Ormandy had found th...

Introduction Before we get into it, let's start by stating that the progression of memory corruption mitigations over the years has be...

Overview In my previous post, we explored using an ImageMagick 0day (now a 1day) in the RLE decoder to to determine missing ASLR in both...

Overview Cloud file storage providers such as Box and DropBox will typically thumbnail uploaded images for purposes of showing icons and p...