Mozilla says Mythos helped identify 271 vulnerabilities in Firefox 150.
I went through the commits, CVEs, and bug links to see what that number really means.
My takeaway: relax folks.
https://xark.es/b/mythos-firefox-150
Mozilla says Mythos helped identify 271 vulnerabilities in Firefox 150.
I went through the commits, CVEs, and bug links to see what that number really means.
My takeaway: relax folks.
https://xark.es/b/mythos-firefox-150
For those who missed my #Asahilinux #39c3 talk, it's available at https://media.ccc.de/v/39c3-asahi-linux-porting-linux-to-apple-silicon now.
I've also just pushed my slides to https://github.com/svenpeter42/39c3 and uploaded them as PDF to https://cfp.cccv.de/39c3/talk/YGHB9K/

You’ve followed the journey since our first QEMU boot logs. Now it’s time to open the doors: the iOS emulator will be available for early access.
📩 Apply to the shortlist. https://u.eshard.com/ios-emulator?utm_source=mast
Limited time and spots.
#ios #apple #cybersecurity #reverseengineering #ios26 #iosdev #devops #emulation #emulator
Yesterday, 10 years ago, Let's Encrypt issued their first #TLS #certificate to the domain name helloworld.letsencrypt.org. Since then, they issued 7 billion certificates.
To quote Borat: "Great success!"
Congrats!
I’ve been waiting a long time to see this out in the open.
Memory Integrity Enforcement delivers the strongest memory safety mitigations in the industry—by far. It sets a new standard for device security.
@shac posted a nice story a while ago, about the first 64-bit ARM architecture: over 12 years ago, Apple launched the iPhone 5s and introduced the ARM64 CPU. It was the first public disclosure of a 64-bit ARM architecture. No one else was even close to having a chip ready to tape out, let alone ship in a product—and the performance was a Frankenstein.
But what is often overlooked is the execution. When iOS shipped, it was a full 64-bit native release. There was no 32-bit code in the OS image (beyond the components required to support 32-bit third-party apps). Everything was aligned to the new architecture, including complex subsystems like the Safari JavaScript engine. Everything was ready on day one.
**This level of execution is something only Apple can deliver.**
And today, we see the same capabilities applied to security.
I’m deeply grateful to have been part of the exceptional team that worked tirelessly to make this happen.