A lot of discussion this week about OSS security and security processes, an iOS kernel type confusion and MediaTek Bootloader bypass impacting everything since atleast 2014.
\n\n[00:04:54] Know, Prevent, Fix: A framework for shifting the discussion around vulnerabilities in open source
\n
\n[00:15:18] Launching OSV - Better vulnerability triage for open source
\n
\n[00:22:38] Most Common Bugs of 2021 So Far
\n
\n[00:31:59] Exploiting the Nespresso smart cards for fun and coffee
\n
\n[00:39:10] Spoofing and Attacking With Skype
\n
\n[00:45:01] Getting root on webOS
\n
\n[00:51:31] Applying Offensive Reverse Engineering to Facebook Gameroom
\n
\n[00:59:36] Major Vulnerabilities Discovered in Realtek RTL8195A Wi-Fi Module
\n
\n[01:06:32] MTK Bypass Universal
\n
\n[01:14:13] Project Zero: iOS Kernel privesc with turnstiles [CVE-2020-27932]
\n
\n[01:21:41] Why Security Defects Go Unnoticed during Code Reviews?
\n
Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)
\nOr the video archive on Youtube (@dayzerosec)