Xeno Kovah (@xenokovah) 's Twitter Profile
Xeno Kovah

@xenokovah

Interested in reverse engineering, firmware, bluetooth, trusted computing, and training. Founder of OpenSecurityTraining2 ost2.fyi

ID: 2362664118

linkhttps://darkmentor.com/publication calendar_today26-02-2014 13:15:10

4,4K Tweet

12,12K Followers

76 Following

Xeno Kovah (@xenokovah) 's Twitter Profile Photo

All the videos for this are already recorded and with the editor. My ask is that folks buy the Bluetooth RX/TX hardware needed for the class now, so that they’re ready to roll when the beta opens. The hardware will be reused in future #OST2 BT classes too.

Xeno Kovah (@xenokovah) 's Twitter Profile Photo

Time is flying and I’m having fun :) I didn’t release any OST2 classes last year, because Veronica Kovah and I have been working on a big (easily 5+ days) Bluetooth Low Energy class for the last year & I also have a separate 1 day Blue2thprinting class that’s opening for beta now

Xeno Kovah (@xenokovah) 's Twitter Profile Photo

The latest thinking on BT learning path. I’m currently working on BT1001 material while BT2222 videos are being edited.

The latest thinking on BT learning path. I’m currently working on BT1001 material while BT2222 videos are being edited.
Yongdae Kim (yongdaek@infosec.exchange) (@yongdaek) 's Twitter Profile Photo

⚠️ Even if patches exist, you can't guarantee they're applied. CVE-2025-21477 (Qualcomm, 90+ chipsets) and CVE-2025-20658 (MediaTek, 80+ chipsets) may affect phones, cars, and IoT devices.

Yongdae Kim (yongdaek@infosec.exchange) (@yongdaek) 's Twitter Profile Photo

🔍 Full paper: 📄 syssec.kaist.ac.kr/pub/2025/LLFuz… 💻 github.com/SysSec-KAIST/L… (coming soon) 📢 USENIX Security 2025 Authors: Hoang Dinh Tuan , Taekkyung Oh , CheolJun Park, INSU YUN , Yongdae Kim ([email protected]) #LLFuzz #BasebandSecurity #Fuzzing #CyberSecurity #USENIXSecurity

Xeno Kovah (@xenokovah) 's Twitter Profile Photo

This is a similar problem to with Bluetooth, except that phones have a much more robust patch management story, since they’re on the actual internet. In contrast many “internet of things” devices aren’t capable of getting on the internet, so they need e.g. a phone to update them

Xeno Kovah (@xenokovah) 's Twitter Profile Photo

I don’t like the term “Internet of Things” for things which literally can’t get on the internet by themselves (i.e. don’t support IP networking). “Piconet(s) of things” would be better, because they’re a bunch of disparate piconets which may or may not connect to the internet