Pinned Tweet
On September 16, 2026, @WIRED and @404mediaco reported on leaked Flock Safety LPR firmware, later distributed through DDoSecrets. I reviewed the supplied Falcon/Sparrow image to verify remediation of my previously disclosed vulnerabilities. The results may or may not shock you.
Paper: github.com/GainSec/anti-c…
Paper: github.com/GainSec/anti-c…
0
0
6
2,495
Jon Gaines retweeted
Automating AI Hacking with Tree of Attack - John Stigerwalt @WKL_cyber
whiteknightlabs.com/2026/09/30/aut…
whiteknightlabs.com/2026/09/30/aut…
0
17
70
2,874
Jon Gaines retweeted
nip.io can be super useful for bypassing filters to exploit SSRF vulnerabilities.
<anything>.<IP>.nip.io will redirect to the <IP> you specify.
For example:
1.1.1.1.nip.io will resolve to 1.1.1.1
Make sure your hackbot (and you!) knows this!
<anything>.<IP>.nip.io will redirect to the <IP> you specify.
For example:
1.1.1.1.nip.io will resolve to 1.1.1.1
Make sure your hackbot (and you!) knows this!
8
36
368
19,545
Jon Gaines retweeted
My goal is to make an Agentic PCB Test platform for less than $1000
26
14
224
12,582
Jon Gaines retweeted
Codex × Rokid朝活
XREALみたいにスマホやPCの画面を映すようにしてみた！
単色&解像度低いRokidだけど、意外とちゃんと見えるので、飛行機とかで漫画読むには十分かも？
XREALみたいにスマホやPCの画面を映すようにしてみた！
単色&解像度低いRokidだけど、意外とちゃんと見えるので、飛行機とかで漫画読むには十分かも？
4
12
137
10,228
Jon Gaines retweeted
My first 'FlipperOne' on CardpuerZero by @M5Stack. It's a monitor on the 8899 port via Ethernet or Wi-Fi.
And made a ADS-B App on FlipperZero with RTL-SDR V4.
And made a ADS-B App on FlipperZero with RTL-SDR V4.
Dev Log #10: Run your own Flipper One
Try Flipper OS before Flipper One ships. Install it onto a supported single-board computer and control it right from your browser. Try FlipCTL UI, OS profiles, and apps (and yes, it runs Doom).
docs.flipper.net/one/dev-log/10
2
12
151
6,634
Couldn’t read any of my notes and completely bombed my Def con main stage talk but if you want to watch it anyway it’s finally on YT youtu.be/ltwLEu0otaY
0
0
2
159
Jon Gaines retweeted
Washington D.C. during the Civil War, United States (1862) 🇺🇸
20
120
2,703
129,507
Jon Gaines retweeted
Me explaining how my app works after vibe coding the entire thing.
476
1,598
20,153
1,271,334
Jon Gaines retweeted
We're giving away a Hogwarts Legacy custom wrapped NVIDIA GeForce RTX 5090 to celebrate its official release with DLSS 5 🪄
To enter:
🟢 Share this post
🟢 Comment #RTXON
Terms and Conditions: nvidia.com/en-us/geforce/…
To enter:
🟢 Share this post
🟢 Comment #RTXON
Terms and Conditions: nvidia.com/en-us/geforce/…
83,126
70,772
66,703
5,674,992
Jon Gaines retweeted
I initially thought “RCE in Paint” meant tricking someone into opening a crafted image, and my confusion was just about terminology.
But Microsoft lists AV:N / UI:N. The FAQ describes sending a crafted packet to an “affected service”, with no user interaction.
Which service? ach Paint and trigger code execution without anyone doing anything?
I really hope this is just an error in the advisory…
msrc.microsoft.com/update-guide/v…
But Microsoft lists AV:N / UI:N. The FAQ describes sending a crafted packet to an “affected service”, with no user interaction.
Which service? ach Paint and trigger code execution without anyone doing anything?
I really hope this is just an error in the advisory…
msrc.microsoft.com/update-guide/v…
15
42
400
38,669
Jon Gaines retweeted
In the the electronics district of Tokyo, components as far as the eye can see!
33
72
1,110
31,750
Jon Gaines retweeted
A open sourced PCB testing system, such a great idea!
I imagine we will be seeing a lot more of these soon, with everyone vibe coding their own PCBs.
github.com/superhouse/tes…
I imagine we will be seeing a lot more of these soon, with everyone vibe coding their own PCBs.
github.com/superhouse/tes…
6
18
247
15,272
Jon Gaines retweeted
I've been reverse engineering my old car (10+ years old Toyota) navi system to hopefully replace it with something that talks CarPlay and use my iphone as navigation and audio seamlessly.
And the way the navigation system is built is quite interesting. It runs Linux, boots with uboot, but there is one very interesting point in the way it is setup. The car will load the OS from the map SD-card, but loading a whole kernel and root image (~256MB) at every boot is not something you want to wait for when you turn your car on as it takes nearly a minute.
So instead, the engineers at Panasonic (I guess - that's the company name on the navigation module native to the car) built something quite ingenious.
The car has a 8MB flash, itself also containing a linux kernel and a module called "osloader". If you do not have a map SD card, that image also provides a minimum UI with some configuration screens.
If you do have a map SD card however, upon booting, osloader will load the whole linux image in RAM, then initiate a warm reboot.
As it turns out, if uboot on start finds the kernel image at a specific address in RAM, it will boot that instead of the flash linux.
And this is the interesting part. When you stop your car, the RAM stays powered. Keeping some DDR3 with enough energy it doesn't lose its bytes is actually very cheap on the battery, and this is the magic that allows the navi, as you turn on your car, to be able to bring up the UI quickly instead of needing to load the OS from the SD card.
Of course because short power cut on the battery may leave a partial image of the OS in RAM, there are various ways the image is hashed, so uboot can verify it's ready to boot. If not, it'll just launch the flash OS instead, which will re-load the OS from the SD card.
The linux kernel running in RAM also has a special module compiled in that will verify the hash of the whole disk image, and if it finds anything wrong will erase the image ready flag and force a reboot.
I don't think I have ever seen any system operate like that before. I guess the flash was either too slow or too expensive, so the people working on this built a system where the RAM is actually kept between boots.
This works, as you turn the power on the navigation system is ready in seconds, but this was quite interesting to reverse engineer, and I had to dig deep (literally) in the navi module to locate the flash and pull it from its board to dump it.
I'm not done yet, producing a valid image with the right signature on a SD card is tricky, but if done right it'll allow me (and anyone with a similar navi) to finally get rid of those old boring default maps.
And the way the navigation system is built is quite interesting. It runs Linux, boots with uboot, but there is one very interesting point in the way it is setup. The car will load the OS from the map SD-card, but loading a whole kernel and root image (~256MB) at every boot is not something you want to wait for when you turn your car on as it takes nearly a minute.
So instead, the engineers at Panasonic (I guess - that's the company name on the navigation module native to the car) built something quite ingenious.
The car has a 8MB flash, itself also containing a linux kernel and a module called "osloader". If you do not have a map SD card, that image also provides a minimum UI with some configuration screens.
If you do have a map SD card however, upon booting, osloader will load the whole linux image in RAM, then initiate a warm reboot.
As it turns out, if uboot on start finds the kernel image at a specific address in RAM, it will boot that instead of the flash linux.
And this is the interesting part. When you stop your car, the RAM stays powered. Keeping some DDR3 with enough energy it doesn't lose its bytes is actually very cheap on the battery, and this is the magic that allows the navi, as you turn on your car, to be able to bring up the UI quickly instead of needing to load the OS from the SD card.
Of course because short power cut on the battery may leave a partial image of the OS in RAM, there are various ways the image is hashed, so uboot can verify it's ready to boot. If not, it'll just launch the flash OS instead, which will re-load the OS from the SD card.
The linux kernel running in RAM also has a special module compiled in that will verify the hash of the whole disk image, and if it finds anything wrong will erase the image ready flag and force a reboot.
I don't think I have ever seen any system operate like that before. I guess the flash was either too slow or too expensive, so the people working on this built a system where the RAM is actually kept between boots.
This works, as you turn the power on the navigation system is ready in seconds, but this was quite interesting to reverse engineer, and I had to dig deep (literally) in the navi module to locate the flash and pull it from its board to dump it.
I'm not done yet, producing a valid image with the right signature on a SD card is tricky, but if done right it'll allow me (and anyone with a similar navi) to finally get rid of those old boring default maps.
62
70
1,965
128,807