Podcasts Technology Day[0] [binary] A subtle iOS parsing bug and a PHP use-after-free

[binary] A subtle iOS parsing bug and a PHP use-after-free

Published: April 14, 2022, midnight

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/a-subtle-ios-parsing-bug-and-a-php-use-after-free.html

\n

We dive into an ASN.1 parsing bug impacting iOS, and a PHP use-after-free to bypass disabled functions, ending the week with a discussion about whether or not its too late to get into this area of security.

\n

[00:00:29] Spot the Vuln - One HMAC at a Time

\n

[00:03:19] CVE-2021-30737, @xerub's 2021 iOS ASN.1 Vulnerability

\n

[00:19:03] In the land of PHP you will always be (use-after-)free

\n

[00:30:13] security things in Linux v5.10

\n

[00:36:16] Discussion: Is It too late to get into "cyber security"

\n

The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week:

\n

    \n\t
  • Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
    • \n\t
  • Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.
    • \n
\n

The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec

\n

You can also join our discord: https://discord.gg/daTxTK9

\n

Or follow us on Twitter (@dayzerosec) to know when new releases are coming.