BROADCASTS.com

Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)

Or the video archive on Youtube

\n
• [00:00:40] What happened while we were gone. ft. Defcon and Blackhat discussion
\n
• [00:20:10] Checkm8 - iPhone bootROM exploit
\n
• [00:28:52] iPhone A11 debug registers allow full-featured kernel debugging
\n
• [00:32:52] Android: Use-After-Free in Binder driver
\n
• https://groups.google.com/forum/#!msg/syzkaller-bugs/QyXdgUhAF50/g-FXVo1OAwAJ
\n
• [00:39:36] PHP 7.0-7.3 disable_functions bypass
\n
• https://bugs.php.net/bug.php?id=72530
\n
• [00:51:49] An Empirical Study of C++ Vulnerabilities in Crowd-Sourced Code Examples
\n
• https://cwe.mitre.org/data/definitions/20.html
\n
• [01:03:18] Signal RTP is processed before call is answered
\n
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1943
\n
• [01:08:47] Whatsapp RCE
\n
• [01:14:58] Attacking CNN-based anti-spoofing face authentication in the physical domain
\n
• [01:22:52] The Kernel Concurrency Sanitizer (KCSAN)
\n
• [01:30:36] Eradicating Attacks on the Internal Network with Internal Network Policy
\n
• [01:39:22] Analyzing Control Flow Integrity with LLVM-CFI
\n