MrBruh
How a throwback to 2006 took down Telstra's national phone network
MSI Center – How to gain SYSTEM privileges in seconds
The RCE that AMD wouldn't fix
MSI's full mailbox is leaving critical vulnerabilities unpatched
NZ Government taking 10 initiatives to safeguard undersea internet
Remote Code Execution Vulnerability in Fooocus
You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)
Finding a RCE in my old TP-Link router
The EU still wants to scan your private messages and photos
Re:The EU still wants to scan your private messages and photos
on Wednesday March 25, 2026 @04:27PM (#47522710)
You can directly call your representatives by looking them up here:
The RCE that AMD won't fix
1.4 Billion user records exposed by insecure Firebase instances in mobile apps
Re:1.4 Billion user records exposed by insecure Firebase instances in ...
on Tuesday January 27, 2026 @05:24PM (#46787963)
Out of the top 1.5 Million Android apps on the Play Store, 11,126 were insecure and exposed users’ PII. In total these 11 thousand apps exposed 1.43 Billion user records. This includes 5 apps with 100 Million downloads and 10 apps with 50 Million downloads.
1.4 Billion user records exposed by insecure Firebase instances in Android apps
ASUSpicious Flaw – Users' Information Exposed Since 2022
Re:One-Click RCE in Asus's Preinstalled Driver Software
on Tuesday May 13, 2025 @08:13PM (#43979340)
On the black market such an exploit would be worth 200-500k USD
Re:One-Click RCE in Asus's Preinstalled Driver Software
on Sunday May 11, 2025 @05:47AM (#43952619)
Nice idea, just checked it now and can confirm there was nothing suspicious in the wildcard records.
Re:
on Sunday May 11, 2025 @02:25AM (#43951838)
ignore the post thx <3
Re:
on Sunday May 11, 2025 @02:11AM (#43951787)
Feedback on my blog posts are always appreciated! :)
One-Click RCE in Asus's Preinstalled Driver Software
How I pwned a major New Zealand service provider
Re:900 Sites, 125M accounts, 1 Vulnerability
on Monday March 18, 2024 @09:13AM (#39743977)
When manually reviewing a lot of these sites it was not identifying PII that were in non-english since the automated scanner checks the variable name for known data types (e.g phone) but that would only work for English sites.
Re:900 Sites, 125M accounts, 1 Vulnerability
on Monday March 18, 2024 @09:05AM (#39743870)
Correct, that's why we couldn't post a list of affected sites or malicious actors would immediately abuse it :/
Re:900 Sites, 125M accounts, 1 Vulnerability
on Monday March 18, 2024 @08:52AM (#39743663)
Bro woke up on the wrong side of the bed
Re:900 Sites, 125M accounts, 1 Vulnerability
on Monday March 18, 2024 @08:42AM (#39743563)
Can't blame a company for trying to make their AI charismatic :D
Re:900 Sites, 125M accounts, 1 Vulnerability
on Monday March 18, 2024 @08:28AM (#39743370)
Glad to hear you enjoyed it, it was a messenger called "Line"
Re:900 Sites, 125M accounts, 1 Vulnerability
on Monday March 18, 2024 @08:26AM (#39743337)
That's because I wrote both of those articles, and this is the sequel to that blog post. :P
Re:900 Sites, 125M accounts, 1 Vulnerability
on Monday March 18, 2024 @08:24AM (#39743308)
No worries, support like this really helps to make it feel worthwhile. :)