~/talks

Tielei Wang

what they talk about

where they keep going back

on a stage with

all 6 in the filters

who talks about the same things

titleconferencedate
Attacking iPhone XS MaxBlack Hat USA 20192019-08-03
Identifies an XNU Unix domain socket race that creates a use‑after‑free via UNP bind temporary unlock and shows a concrete exploit chain: close sockets…
Talk on
Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTimeBlack Hat USA 20192019-08-03
Reverse engineering of FaceTime reveals concrete exploit paths: the APNS/PSD notification chain yields a zero-click notification path that accepts…
Talk on
Pangu 9 InternalsBlack Hat USA 20162016-08-03
Pangu 9 details a chain: an XPC path traversal in an assetd service lets any container app move arbitrary files as mobile for file read/write; mounting an old…
Talk on
Exploiting Unpatched iOS Vulnerabilities for Fun and ProfitBlack Hat USA 20142014-08-02
Reconstructs and rechains vulnerabilities in iOS 7.1.x to run unsigned code as root without a kernel exploit: starts from the evasion7 nine chained…
Talk on
Abusing Performance Optimization Weaknesses to Bypass ASLRBlack Hat USA 20142014-08-02
Shows that performance-driven choices leak pointer-sized identifiers so ASLR can be defeated. Empirical survey of Python, Ruby, PHP, Java(DVM/JVM) and JS hash…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.