Stuart Walker @stuartwalker1

M0SWX. App / mobile / hardware / building system penetration tester. (Comments, posts, rants, etc. are my own and not the view of any related entity) unbuffer.com Bristol Joined February 2011

Tweets

250
Followers

304
Following

2K
Likes

68

Stuart Walker @stuartwalker1

10 months ago

@zack_overflow Why are we still using in-band signalling 40+ years after these issues were well known from blue-boxing on the phone network?

0 0 0 15 0

View Details

Stuart Walker @stuartwalker1

a year ago

@tux_troll Apologies - don't check here often. I think I took it down after about a year as I was no longer looking at AppleTV by that point and stuff was out of date.

0 0 0 8 0

View Details

Stuart Walker @stuartwalker1

4 years ago

Put an Apple TV jailbreak repo up at tv.unbuffer.com as couldn't find lots of testing tools I rely on for iOS and had to rebuild. Feel free to use / report any repack related bugs

1 0 2 0 0

View Details

Stuart Walker @stuartwalker1

2 years ago

@zwclose If anyone else has the same issue, you can download the driver manually here catalog.update.microsoft.com/Search.aspx?q=… and install using the device manager update driver function

1 0 0 612 0

View Details

@zwclose Great writeup. Interestingly I have a Dell Laptop with the affected RTS525A card reader and Windows 11 with all Windows updates applied as of today. Driver version is 10.0.18362.21317 (April 2020) and there are no updates on Dell's site. I guess patches aren't making it through.

1 0 0 116 0

View Details

Stuart Walker @stuartwalker1

2 years ago

@yashkaf Could be late to the party, but check out GrapheneOS for your phone. (Android but modified for privacy and Google bits removed)

0 0 1 30 0

View Details

Stuart Walker @stuartwalker1

3 years ago

@andrew_barratt @HalifaxBank @NCA_UK "My bank says they have disabled online payments on my account due to a technical issue. I have a chequebook. Can I send them a cheque and are there any late payment fees?"

0 0 1 37 0

View Details

Stuart Walker @stuartwalker1

3 years ago

@xnio94 Can malicious browser extensions use this feature to SE users?

0 0 0 63 0

View Details

Vishal @VishalMalvi_

4 years ago

This developer is living in 2050 already

1K 27K 145K 0 7K

View Details

Stuart Walker @stuartwalker1

4 years ago

@SlingRCX @0xbeefed Hard to tell what the bike is - based on region it could be a cheap clone of a Honda design from 30+ years ago. Maybe there is only one key or a small selection with distinctive features that separate them. If someone cuts them all day they will probably memorize bitting

1 0 1 0 0

View Details

Stuart Walker @stuartwalker1

4 years ago

@cybergibbons Is like complaining that people mention you have a bad bike lock and would be wise to get a better one. Why put a shit lock on your bike if a good one is the same price.

0 0 0 0 0

View Details

Stuart Walker @stuartwalker1

4 years ago

@cybergibbons Lots of stuff that may indicate bad SDLC practice or that valuable features that may slow down or stop an attacker with an unknown 0day are not there.

0 0 0 0 0

View Details

Stuart Walker @stuartwalker1

4 years ago

@cybergibbons No worries - there is lots of programmer software there used in the factory. Often does a secret handshake / can be used to reprogram the microcontroller - often an 8051 or ARM See bunniestudios.com/blog/?p=3554 and this great talk youtube.com/watch?v=ruEn7T… too

0 0 1 0 0

View Details

Stuart Walker @stuartwalker1

4 years ago

@cybergibbons @cybergibbons - check out usbdev.ru for the programmer software / datasheets for lots of these. Also beware that some sticks may use cheap recycled flash with broken or degraded sectors and map it out in the controller / are sold as a smaller drive...

1 0 1 0 0

View Details

Stuart Walker @stuartwalker1

4 years ago

@alexbloor @N_A_Barnes You can do CHAPS / SWIFT domestically too if you want. You / your lawyer or mortgage lender probably used CHAPS and paid the £20 or so telegraphic transfer fee if you bought a house.

0 0 1 0 0

View Details

Stuart Walker @stuartwalker1

4 years ago

@yashkaf Wasn't the 'I just like the stock' thing partly intended to avoid becoming targeted by the SEC / other regulators / hedgefund lawyers for giving out investment advice when not licensed

0 0 0 0 0

View Details

Stuart Walker @stuartwalker1

4 years ago

@veorq Stop someone from being able to perform a time sensitive action - like sell shares or report a security breach, if the signature on their message is one of the ones where verification fails (or the content that they have to send makes it fail).

0 0 0 0 0

View Details

Edge Security @EdgeSecurity

4 years ago

I wrote up a deep dive of the Linux random number generator highlights for the upcoming 5.17 & 5.18. There should be something for everyone in there - kernel programming, cryptography, a tiny bit of Windows reversing, and plenty of commit links. Enjoy! zx2c4.com/projects/linux…

0 27 63 0 7

View Details

Stuart Walker @stuartwalker1

4 years ago

@JSalisburyJones @damawa42 The current tax year or the last one? I usually try to get mine done in july right after I get P11Ds / annual statements for stuff. Work from home allowance / some pension contributions / charity donations can knock anything you owe down a bit too.