yuli@lab:~/posts$ git log --graph --date=short
Archive
28 posts. The short hash is the post ID.
2025 · 4 commits
490d719[MOB](HEAD -> main)Android ARM64 initializers: relocations and JNI timing80d253a[MOB]Android trust: modules, root stores and process views825e8bc[BIN]CCleaner's helper: socket access versus task authorizationd207c23[MOB]CVE-2025-24200: USB policy and lock-state authorization2024 · 2 commits
d0304e8[WEB]CVE-2024-2961: iconv writes and PHP object lifetimesa690e21[MOB]Android's two layers: DEX, DGC, and method restoration2023 · 2 commits
2a25cfd[BIN]Hyper-V IUM: locating the guest debugging context67584d2[BIN]Windows tokens: creation, impersonation, and actual access2021 · 10 commits
98d0163[MOB]XNU PAC: context switches and thread-state authenticatione123cbc[MOB]ARM64 KPTI: roots, ranges, and exception entrydf62f4c[WEB]DNS Beacon: fragment reassembly and ciphertext authenticationb2c0fd6[MOB]KTRR and CTRR: ranges and lockdown orderf1e42eb[MOB]iOS PPL: entry state and physical-page ownership1d1669b[WEB]DCSync and DCShadow: RPC context determines the alertaeae6f9[BIN]x86 shellcode: hidden assumptions in a ROR13 resolverad7df51[BIN]WdNisDrv: flow contexts and device-access boundaries0ea1b42[BIN]CVE-2021-24086: nested IPv6 reassembly and a null writea41f92d[MOB]Android emulators: task lists and kernel relocation anchors2020 · 5 commits
06b2168[BIN]MSVC XFG: from type encoding to call-site hashescb4dc36[BIN]CVE-2020-16898: an eight-byte RDNSS boundary mismatch2d44ebe[MOB]iOS Flutter: verify routing and TLS as separate boundaries7e59945[BIN]VBA signatures: when source and compiled cache disagree8b4b2b3[BIN]Evidence of VBA purging in a malicious PowerPoint add-in2019 · 5 commits
c66cbc9[MOB]checkm8: where a stale DFU pointer meets USB callbacks96440b1[BIN]Two DLL architectures inside an Excel document's embedded PNG0dd2eec[MOB]Flutter ARMv7 traffic: separate routing from TLS verification44b1e55[MOB]Finding obfuscated OkHttp pinning through parameter typesd4064ff[MOB]Android runtime restrictions: namespaces and Hidden API