appsec & stuff

This House is Haunted: a decade old RCE in the AION client

My keyboard was misbehaving so I had to exploit my NAS

Debloating the Onyx Boox Go 10.3

The xz backdoor from a Security Engineer persepective

Security Theatre? More like Security Circus

Long Time No See

Getting "Zero Click" Remote Code Execution in Mycroft AI vocal assistant