#projectzero — Public Fediverse posts

🔍🎉 Oh look, another "groundbreaking" #discovery by Project Zero, where they prove the obvious: if there's a #flaw, someone can exploit it. 🚪🔓 Bravo, geniuses, for uncovering that doors sometimes close, but windows open—literally a 0-click revelation! 🙄🔧
https://projectzero.google/2026/05/pixel-10-exploit.html #ProjectZero #Exploitation #Cybersecurity #0Click #Vulnerability #HackerNews #ngated

🔍🎉 Oh look, another "groundbreaking" #discovery by Project Zero, where they prove the obvious: if there's a #flaw, someone can exploit it. 🚪🔓 Bravo, geniuses, for uncovering that doors sometimes close, but windows open—literally a 0-click revelation! 🙄🔧
https://projectzero.google/2026/05/pixel-10-exploit.html #ProjectZero #Exploitation #Cybersecurity #0Click #Vulnerability #HackerNews #ngated

FATAL FRAME II: Crimson Butterfly REMAKE – Análisis

https://powerups.es/fatal-frame-ii-crimson-butterfly-remake-analisis/

#Anlisis #FATALFRAMEIICrimsonButterflyREMAKE #KoeiTecmo #ProjectZero

FATAL FRAME II: Crimson Butterfly REMAKE – Análisis

https://powerups.es/fatal-frame-ii-crimson-butterfly-remake-analisis/

#Anlisis #FATALFRAMEIICrimsonButterflyREMAKE #KoeiTecmo #ProjectZero

Defeating Kaslr by Doing Nothing at All

https://googleprojectzero.blogspot.com/2025/11/defeating-kaslr-by-doing-nothing-at-all.html

#HackerNews #DefeatingKaslr #DoingNothing #Cybersecurity #Vulnerabilities #HackerNews #ProjectZero

Defeating Kaslr by Doing Nothing at All

https://googleprojectzero.blogspot.com/2025/11/defeating-kaslr-by-doing-nothing-at-all.html

#HackerNews #DefeatingKaslr #DoingNothing #Cybersecurity #Vulnerabilities #HackerNews #ProjectZero

Google Project Zero Exposes ASLR Bypass Vulnerability in Apple’s Serialization Framework https://thecyberexpress.com/project-zero-exposes-aslr-bypass/ #AddressSpaceLayoutRandomization #TheCyberExpressNews #TheCyberExpress #ProjectZero #CyberNews #Apple #ASLR

Google Project Zero Exposes ASLR Bypass Vulnerability in Apple’s Serialization Framework https://thecyberexpress.com/project-zero-exposes-aslr-bypass/ #AddressSpaceLayoutRandomization #TheCyberExpressNews #TheCyberExpress #ProjectZero #CyberNews #Apple #ASLR

This Week in Security: The AI Hacker, FortMajeure, and Project Zero https://hackaday.com/2025/08/15/this-week-in-security-the-ai-hacker-fortmajeure-and-project-zero/ #ThisWeekinSecurity #HackadayColumns #SecurityHacks #projectzero #darpa #ai

This Week in Security: The AI Hacker, FortMajeure, and Project Zero https://hackaday.com/2025/08/15/this-week-in-security-the-ai-hacker-fortmajeure-and-project-zero/ #ThisWeekinSecurity #HackadayColumns #SecurityHacks #projectzero #darpa #ai

This Week in Security: The AI Hacker, FortMajeure, and Project Zero - One of the hot topics currently is using LLMs for security research. Poor quality ... - https://hackaday.com/2025/08/15/this-week-in-security-the-ai-hacker-fortmajeure-and-project-zero/ #thisweekinsecurity #hackadaycolumns #securityhacks #projectzero #darpa #ai

This Week in Security: The AI Hacker, FortMajeure, and Project Zero - One of the hot topics currently is using LLMs for security research. Poor quality ... - https://hackaday.com/2025/08/15/this-week-in-security-the-ai-hacker-fortmajeure-and-project-zero/ #thisweekinsecurity #hackadaycolumns #securityhacks #projectzero #darpa #ai

Google’s AI ‘Big Sleep’ Flags 20 Security Flaws in Open-Source Projects https://thecyberexpress.com/google-big-sleep-finds-20-vulnerabilities/ #ReportingTransparency #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #AIbughunter #ProjectZero #CyberNews #BigSleep #AItool

Google’s AI ‘Big Sleep’ Flags 20 Security Flaws in Open-Source Projects https://thecyberexpress.com/google-big-sleep-finds-20-vulnerabilities/ #ReportingTransparency #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #AIbughunter #ProjectZero #CyberNews #BigSleep #AItool

Miku entame sa 2ème nuit dans le manoir Himuro, mais elle n'est pas encore au bout de ses peines.
https://www.youtube.com/watch?v=m2HyU01APxA&t=1189s&ab_channel=EspritKritik

#projectzero #gaming #videogame #jeuxvideo #fatalframe #horrorgame #survivalhorror #games #ps2 #playstation #retrogaming

Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages

https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.html

#HackerNews #BreakingTheSoundBarrier #Fuzzing #CoreAudio #MachMessages #CyberSecurity #ProjectZero

Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages

https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.html

#HackerNews #BreakingTheSoundBarrier #Fuzzing #CoreAudio #MachMessages #CyberSecurity #ProjectZero

Premier épisode d'un classique du survival-horror : Project Zero sur Playstation 2.
Toujours aussi bon !
https://www.youtube.com/watch?v=cqcExNarMtI

#projectzero #survivalhorror #playstation2 #playstation #game #gaming #jeuvideo #jeuxvideo #gameplay #gamer #youtube #youtubevideos

An analysis of the NSO BLASTPASS #Apple #iOS #iMessage #exploit by Ian Beer, #Google #ProjectZero https://googleprojectzero.blogspot.com/2025/03/blasting-past-webp.html

An analysis of the NSO BLASTPASS #Apple #iOS #iMessage #exploit by Ian Beer, #Google #ProjectZero https://googleprojectzero.blogspot.com/2025/03/blasting-past-webp.html

Googles #ProjectZero follows a 90 days disclosure deadline policy. Meaning they will publish a vulnerability 90 days after informing the vendor (or 30 days after the patch is published)

Sometimes they grant an additional 14 days grace period. Leading to a 104 days fix period.

https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-faq.html

Googles #ProjectZero follows a 90 days disclosure deadline policy. Meaning they will publish a vulnerability 90 days after informing the vendor (or 30 days after the patch is published)

Sometimes they grant an additional 14 days grace period. Leading to a 104 days fix period.

https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-faq.html

Project Zero blog:
LLMs find 0days now! 👀

And: our fuzzer setup did not reproduce it!

https://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html

#Bigsleep #LLM #Security #ProjectZero #GoogleDeepmind

Project Zero blog:
LLMs find 0days now! 👀

And: our fuzzer setup did not reproduce it!

https://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html

#Bigsleep #LLM #Security #ProjectZero #GoogleDeepmind

👀 Today’s #projectZero, at the usual spot: Mira-Rio.

#photography

👀 Today’s #projectZero, at the usual spot: Mira-Rio.

#photography

On the day I finally got the physical versions of Project Zero 4/5, I finish the third game. My first full playthrough after over 15 years since I first got that game.

And what a GREAT game in the series this was.

Coincidentally this now also concludes my replay of the entire series and that has fully re-ignited my love for it. Just... outstanding games.

#ProjectZero #FatalFrame

On the day I finally got the physical versions of Project Zero 4/5, I finish the third game. My first full playthrough after over 15 years since I first got that game.

And what a GREAT game in the series this was.

Coincidentally this now also concludes my replay of the entire series and that has fully re-ignited my love for it. Just... outstanding games.

#ProjectZero #FatalFrame

Today my physical collection of Project Zero/Fatal Frame (main line) games has become complete.

I only owned Mask Of the Lunar Eclipse and Maiden Of Black Water digitally before, but thanks to Play Asia I got the physical releases.

I love this series so much, it's great to finally have all (*) of them on the shelf.

(* Except for Spirit Camera... I am still looking for a copy with reasonable price)

#ProjectZero #FatalFrame

Today my physical collection of Project Zero/Fatal Frame (main line) games has become complete.

I only owned Mask Of the Lunar Eclipse and Maiden Of Black Water digitally before, but thanks to Play Asia I got the physical releases.

I love this series so much, it's great to finally have all (*) of them on the shelf.

(* Except for Spirit Camera... I am still looking for a copy with reasonable price)

#ProjectZero #FatalFrame

I’m looking for a feed that aggregates recent reverse engineering and vulnerability centric security writeups, like the ones posted by Google project zero. I know there are many different security firms and academics that post these kind of articles now and then, but I’m having a hard time with discovery as every news site or feed I find is focused on cybersecurity threats and CVEs, or simply just malware actor reports.

Does anyone have something that fits the bill?
#reverseengineering #googleprojectzero #projectzero #vulnerability #vulnerability_research

I’m looking for a feed that aggregates recent reverse engineering and vulnerability centric security writeups, like the ones posted by Google project zero. I know there are many different security firms and academics that post these kind of articles now and then, but I’m having a hard time with discovery as every news site or feed I find is focused on cybersecurity threats and CVEs, or simply just malware actor reports.

Does anyone have something that fits the bill?
#reverseengineering #googleprojectzero #projectzero #vulnerability #vulnerability_research

@tagesschau #Wissing und der #fdp ist die #Freiheit wichtiger als #projectzero .

Mateusz Jurczyk with Google Project Zero posted a nice two part blog post on their journey of auditing the Windows Registry...

The Windows Registry Adventure

Part #1: Introduction and research results
🔥⁠https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html

Part #2: A brief history of the feature
🔥⁠https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-2.html

#InfoSec #ProjectZero #Windows

Mateusz Jurczyk with Google Project Zero posted a nice two part blog post on their journey of auditing the Windows Registry...

The Windows Registry Adventure

Part #1: Introduction and research results
🔥⁠https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html

Part #2: A brief history of the feature
🔥⁠https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-2.html

#InfoSec #ProjectZero #Windows

Got a lot of things to obsess over. My recent rekindled love with the #ProjectZero/#FatalFrame series, my stupid little #Atari Gamestation Pro and now those excellent Toaplan #Arcade ports.

How you all keep sane at my incessant ramblings about all of that, I have no idea, but I think you for it anyway. :)

Got a lot of things to obsess over. My recent rekindled love with the #ProjectZero/#FatalFrame series, my stupid little #Atari Gamestation Pro and now those excellent Toaplan #Arcade ports.

How you all keep sane at my incessant ramblings about all of that, I have no idea, but I think you for it anyway. :)

Finished Chapter 2 of #ProjectZero/#Fatal Frame II - #Wii Edition (getting tired of always writing EU and US titles).

Oh boy I remember why I liked the game so much. Also getting better with the Wii controls - although I still wish the game would get a Remaster. I don't mind motion controls, but the lack of a second thumbstick is cumbersome. And the devs knew it. A lot of the ghosts are REALLY slow.

Finished Chapter 2 of #ProjectZero/#Fatal Frame II - #Wii Edition (getting tired of always writing EU and US titles).

Oh boy I remember why I liked the game so much. Also getting better with the Wii controls - although I still wish the game would get a Remaster. I don't mind motion controls, but the lack of a second thumbstick is cumbersome. And the devs knew it. A lot of the ghosts are REALLY slow.

Google has removed a video posted by academic researchers demonstrating how a newly discovered side channel in Apple's A- and M-series CPUs can be used to steal a password.

I thought for sure the removal was a mistake, but a Google representative told me the video was removed for violating a term of service barring "demonstrating how to use computers or information technology to steal credentials, compromise personal data, or cause serious harm to others."

The video, demonstrating important research by @genkin, @YuvalYarom , @themadstephan and jason kim, is here:

https://onedrive.live.com/?authkey=%21AMTjzIS6XfV1jzg&id=8208800C17D803E6%211176&cid=8208800C17D803E6&parId=root&parQt=sharedby&o=OneUp

Just to underscore how arbitrary and patently asinine Google's ToS enforcement is here, two additional videos the researchers posted demonstrating the same side channel remain available.

I wonder how researchers from #projectzero feel about this. Is there any chance any of them can intervene?

Google has removed a video posted by academic researchers demonstrating how a newly discovered side channel in Apple's A- and M-series CPUs can be used to steal a password.

I thought for sure the removal was a mistake, but a Google representative told me the video was removed for violating a term of service barring "demonstrating how to use computers or information technology to steal credentials, compromise personal data, or cause serious harm to others."

The video, demonstrating important research by @genkin, @YuvalYarom , @themadstephan and jason kim, is here:

https://onedrive.live.com/?authkey=%21AMTjzIS6XfV1jzg&id=8208800C17D803E6%211176&cid=8208800C17D803E6&parId=root&parQt=sharedby&o=OneUp

Just to underscore how arbitrary and patently asinine Google's ToS enforcement is here, two additional videos the researchers posted demonstrating the same side channel remain available.

I wonder how researchers from #projectzero feel about this. Is there any chance any of them can intervene?

In mid-2022, #ProjectZero was provided with access to pre-production hardware implementing the #ARM #MTE specification. This blog post series is based on that review, and includes general conclusions about the effectiveness of MTE as implemented, specifically in the context of preventing the #exploitation of memory-safety #vulnerabilities.

https://googleprojectzero.blogspot.com/2023/08/summary-mte-as-implemented.html

In mid-2022, #ProjectZero was provided with access to pre-production hardware implementing the #ARM #MTE specification. This blog post series is based on that review, and includes general conclusions about the effectiveness of MTE as implemented, specifically in the context of preventing the #exploitation of memory-safety #vulnerabilities.

https://googleprojectzero.blogspot.com/2023/08/summary-mte-as-implemented.html

FATAL FRAME
Tecmo
Xbox
2002
#Xbox #Microsoft #Tecmo #fatalframe #ProjectZero #retro #retrogames #RETROGAMING

FATAL FRAME
Tecmo
Xbox
2002
#Xbox #Microsoft #Tecmo #fatalframe #ProjectZero #retro #retrogames #RETROGAMING

@GNUmatic @MrsLoecksley

Ich höre gerade zum ersten mal von dem allem. Ich bin noch weit davon entfernt mir eine endgültige Meinung zu bilden, aber was ich
rausgefunden habe beim lesen durch #Project92 ist dass Meta geld in die Hand nimmt um, ja was genau zu machen?
Admins zu kaufen? Devs zu bezahlen?
Beides kann gut oder schlecht sein.

#Google zB. ist jetzt auch nicht das sympathischte Unternehmen. Trotzdem bin ich Dankbar für #ProjectZero und besonders fürs Engagement bei SSL

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware https://krebsonsecurity.com/2023/03/google-suspends-chinese-e-commerce-app-pinduoduo-over-malware/ #ALittleSunshine #LatestWarnings #DataBreaches #BreachForums #WebFraud2.0 #PDDHoldings #ProjectZero #LiuHuafang #ByteDance #Pinduoduo #DarkNavy #google #Tiktok #Weibo #Temu

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

https://krebsonsecurity.com/2023/03/google-suspends-chinese-e-commerce-app-pinduoduo-over-malware/

#ALittleSunshine #LatestWarnings #DataBreaches #BreachForums #PDDHoldings #ProjectZero #WebFraud20 #LiuHuafang #ByteDance #Pinduoduo #DarkNavy #google #Tiktok #Weibo #Temu

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

https://krebsonsecurity.com/2023/03/google-suspends-chinese-e-commerce-app-pinduoduo-over-malware/

#ALittleSunshine #LatestWarnings #DataBreaches #BreachForums #PDDHoldings #ProjectZero #WebFraud20 #LiuHuafang #ByteDance #Pinduoduo #DarkNavy #google #Tiktok #Weibo #Temu

Google's Project Zero Warns A "Phone Call" May Infect Android

#Infosec #News #Cybersecurity #Google #ProjectZero #vulnerability #exploit #modem #Exynos #privacy #security #smartphone #android

https://arstechnica.com/information-technology/2023/03/critical-vulnerabilities-allow-some-android-phones-to-be-hacked/

#Google tells users of some #Android phones: Nuke voice calling to avoid infection | #ArsTechnica

“Tests conducted by #ProjectZero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim's phone number.
With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational #exploit to #compromise affected devices silently and remotely.”

https://arstechnica.com/information-technology/2023/03/critical-vulnerabilities-allow-some-android-phones-to-be-hacked/