
Security, privacy, cellular, CTFs; living in clouds; night-owl; PostDoc @CISPA; former UCI, SBA, TU Wien, iSeclab. My own opinions. May contain sarcasm.
Joined August 2014
- Tweets1.7K
- Following969
- Followers960
- Likes8.2K
Adrian Dabrowski retweeted
Can LLMs find vulns? Here’s what Project Zero found
googleprojectzero.blogspot.c…
Adrian Dabrowski retweeted

LaurieWired@lauriewired6 Jun 2024
🇺🇸
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
USB-C is gonna be awesome they said.
It's gonna be compatible with everything. Oh wait.
Readers added context they thought people might want to know
USB-C is the conector, not the protocol. Each protocol listed on the image is compatible with the previous one. This allows innovation while maintaining backwards compatibility
en.wikipedia.org/wiki/USB-C
Adrian Dabrowski retweeted
Just before the end of the Osmocom Developer Conference 2024 we managed to demo a GSM Fax transmission using osmo-{trx,bts,bsc,mgw,msc,stp} as network:youtube.com/watch?v=rfDxGZlm… - Thanks to @axilirator for his work and @Manawyrm for recoding. #osmocom #retronetworking
Adrian Dabrowski retweeted
Adrian Dabrowski retweeted

Matthew Green@matthew_d_green31 Mar 2024
🇺🇸
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
This thing Facebook did — running an MITM on Snapchat and other competitors’ TLS connections via their Onavo VPN — is so deeply messed up and evil that it completely changes my perspective on what that company is willing to do to its users.
Adrian Dabrowski retweeted
Inception. The single thing I hate most about reviewer 2s.
PhD students now second guess their own ideas & intuition, try to find "sure shots", think of "what will the reviewers say?", etc.
Thanks for ruining it for *all* of us!
Adrian Dabrowski retweeted
Second submission deadline of ACM WiSec’24 is coming up on Feb 8, 2024! If you want a reason to visit Seoul, here you go. Submission site yet to be announced, but all other information is available at wisec2024.kaist.ac.kr/call-f…
Adrian Dabrowski retweeted
My team works on exciting baseband hardening at @Android Making it much harder for firmware bugs to be exploitable.
#Android #mobilesecurity #cellular #baseband #infosec
security.googleblog.com/2023…
Adrian Dabrowski retweeted
Still laughing about the time a computer scientist who had his bike stolen tried to explain binary search to a cop
Adrian Dabrowski retweeted
How do social norms spread security and privacy practices? @n0gat, @alip0nti, @atrox_at, and @cathykxx took a closer look at the Tor over VPN practice in their #CSCW2023 paper tinyurl.com/anon-privacy-dan…
Adrian Dabrowski retweeted
This is what the massively talented folks in my team and myself work on: security.googleblog.com/2023…
#MobileSecurity #Android
Adrian Dabrowski retweeted
📢 Update: #3G Sunset in Europe - Countries in Planning and Completed Operator Phases 🌅
Check out the graphic below with data powered from our Spectrum Navigator tool.
#networksunset #network #telecom
Adrian Dabrowski retweeted
📣Our paper on undefined behavior in cellular specs has been accepted at #usesec23. We derive examples of undefined behavior from LTE specs, and use them to discover multiple baseband vulns, including a DoS via SMS. Preprint, Artifacts, Tutorial: danielklischies.net/research… (1/2)
Adrian Dabrowski retweeted
Backdoor in TETRA Police Radios dlvr.it/SslcnL
Adrian Dabrowski retweeted
I get that the VoLTE SIP call flow is *awesome*, but this backdrop is excessive
Adrian Dabrowski retweeted
Abusing a bug in java.lang.String to make "hello world" not start with "hello".
Plus a challenge: make an empty String that is not equal to "".
wouter.coekaerts.be/2023/bre…
Adrian Dabrowski retweeted
* LTESniffer 2.0.0: Supporting Uplink Sniffing with Two B210s*
Done by Tuan Dinh Hoang
@hdtuanss, who keeps upgrading it even after paper acceptance.
Previously, it requires to use the expensive X310.
github.com/SysSec-KAIST/LTES…
Adrian Dabrowski retweeted
Interested in security testing of 5G SA user equipment?
We have open-sourced our implementation of NAS and RRC message security testing based on #srsRAN + #open5GS.
github.com/vaggelis-sudo/5G-….
Related @acm_wisec 2023 paper: shorturl.at/pyIMU. Thanks to
Vaggelis Bitsikas & team






















