Brandon Edwards

@drraid

CTO @crashappsec. Past: Cofounder and Chief Scientist @capsule8, Hacker-in-Residence @NYUTandon, and other research, reverse-engineering, and exploit dev roles.

NYC

Joined June 2009

1,130 Following

5,220 Followers

Replies Reposts Media

Brandon Edwards
@drraid
Apr 8
This is from Anthropic's Mythos preview post @ red.anthropic.com/2026/mythos-pr…
Brandon Edwards
@drraid
Apr 8
🤔 I'd need to examine the bug, its setting, how much input/app state can be manipulated before I could say for sure.. but 3 bytes OOB is often 2 more than needed to get new primitives/code exec. I wonder if the team assessing this had any past experience manually shaping heaps?
1
Brandon Edwards
@drraid
Apr 8
🤔 I'd need to examine the bug, its setting, how much input/app state can be manipulated before I could say for sure.. but 3 bytes OOB is often 2 more than needed to get new primitives/code exec. I wonder if the team assessing this had any past experience manually shaping heaps?
2
Brandon Edwards
@drraid
Nov 14, 2025
Look at this goofy, sweet, awesome dog that needs a home. Are you considering getting a dog? Please consider adopting!
Not the Same
@notthesameone2
Nov 14, 2025
Replying to @notthesameone2
Saphire is back on the list:
4
Brandon Edwards
@drraid
Nov 12, 2025
Start your day with a little container sidechannel 0day, as a treat
Crash Override
@crashappsec
Nov 12, 2025
Found a side-channel that lets containers communicate across isolation boundaries. No shared volumes, network, or privileges. Just POSIX advisory locks on /proc/self/ns/time. Built a working cross-container IRC chat to demonstrate. Works on default Docker/K8s.
Brandon Edwards
@drraid
Nov 1, 2024
FINALLY @youngthug is out. FINALLY. This case was bullshit to begin with. I am happy he is out but WTF?! Our system is so broken.