mhmrdd

what are they even working on atp? what will you benefit if it's FRIDGE for example?

"One thousand fewer paths to root"

turns out claude has waifu too, what about chatgpt?

deepseek has waifu?

<UNOWNED> challenge: how many RCEs are possible by now?

haven't heard of stagefright cve since ages, here we're on today: https://source.android.com/docs/security/bulletin/2026/2026-11-01

<UNOWNED> MITM fake server, redns, issue fake domain CA, capture incoming play integrity requests, extract content & key attestation metadata, replay somewhere else.

Did you know that "4" can allow you to bypass Play Integrity (part 2)? I'll let you with this screenshot to guess what's going to be done.

<UNOWNED> Fuzzers or AI ?

<UNOWNED> 2026

<UNOWNED> holy downgrade, now look at how it was before: https://projectzero.google/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html

here is how the reported "famous" brotli (broccoli exploit) heap oob r/w bug: https://project-zero.issues.chromium.org/issues/565308158 if you try to read it, you'll definitely flag it as a slop or ai ish report. i don't understand how someone at google would write something like that this way. whereas others (researchers) want to make sure that it's fully meaningful, standard & formal and doesn't contain gibberish input.