Vulnerability research, cryptography, FOSS, finance and random stuff. Leading @cellebrite's iOS research.

Israel
Joined March 2019
Interested in iOS vulnerability research? @Cellebrite's iOS team is expanding. We're looking for seasoned researchers (all platforms) as well as juniors with iOS jailbreak scene background. Positions are remote and you get a chance to work with very talented and friendly people.
7
16
3
145
77,572
Our team is shining in the City of Lights! ✨ We're having such meaningful conversations at @hexacon_fr in Paris. At the booth, people are stopping by and staying for hours to solve the combined Pokémon and vulnerability research challenge we developed. (1/2)
1
4
1
23
2,570
Seeing LOKI shown on stage was truly not something I thought would happen until recently. We're hiring iOS researchers to our team to work new iOS capabilities to assist our law enforcement customers
Revisiting SecureROM Adventures by Steven De Franco (@iH8sn0w)
3
3
44
2,640
Corellium being useful in real world iOS chain analysis
1
6
2
110
10,795
Still looking for talented vulnerability researchers to join our French team 🇫🇷 If you're attending #Hexacon, stop by our booth and let's talk. We'd be happy to discuss the role, the team, and the kind of research challenges we work on. See you there 😀 xitter.cf/hexacon_fr/status/2095…
5⃣ /5⃣ Five out of five years as sponsor for Cellebrite!📱 @CellebriteLabs focuses on vulnerability research and exploitation allowing law enforcement agencies to collect evidence via physical access vectors.
1
9
2
26
4,365
I'm coming to Paris for Hexacon (again) in two weeks. Drop by our booth to say hi.
5⃣ /5⃣ Five out of five years as sponsor for Cellebrite!📱 @CellebriteLabs focuses on vulnerability research and exploitation allowing law enforcement agencies to collect evidence via physical access vectors.
2
10
612
ghidra-rpc now has experimental Windows support I don't use Windows myself, so I'd appreciate people trying it out and telling me what breaks. Issues and feedback welcome!
We're mostly an IDA shop at @CellebriteLabs, but I decided to play around with Ghidra. My main motivation was to experiment with agentic reverse engineering techniques. The result is an agent skill for Ghidra, which we are releasing publicly: github.com/cellebrite-labs/g… >>
2
8
1,561
Oxygen being Russian was kind of widely known truth. I get they apparently certified otherwise to federal agencies, but shouldn't it been quickly exposed by a simple background check?
Replying to @KimZetter
Oddly, I reported back in 2016 that Oxygen was Russian-owned. This was never a secret in the digital forensics industry, but US federal agencies were still fooled by the company's claims of US ownership. Here's the 2016 piece mentioning Russian ownership theintercept.com/2016/10/31/…
2
1
9
1,501
The damaged bag claim form of @wizzair is bugged & can't be submitted (says "beneficiary account currency needed" despite it being selected). The alternative is to call their €15 paid support line. At this point IDK whether it's technical incompetence or scammy business practice
16
2
9
1,649