Skip to main content

Posts

Featured

Becoming A CTSO, How i Went From CTF To CTSO.

CONTEXT FORGERY — A Disclosure in Five Acts Rec. 2026-10-19 — Re-printed 2026-10-26 — Runtime: one unescaped quote CONTEXT FORGERY A preferred name. A closing quotation mark. And a machine that believed everything the string told it — twice. Starring — the serializer that interpolates instead of encodes Also starring — a silent enum drop, and one very trusting language model Featuring — 189 protobuf blobs, 78 services, zero fixes Security research — Frank SX · full disclosure Act I The Field That Remembered Too Much Every conversation begins the same way: the machine opens its eyes and reads a small biography. Name. Occupation. Preferences. A <user_settings> blob, written in trust, read as truth. Nobody asked the only question that mattered: what if the name itself could rewrite the biography? “One " ends the trust boundary.” — field note, 2026-10-19 Scene — Settings → Preferred name Frank.Sx...

Latest posts

Responsible Aftercare And Active Failures in Embedded Device Security As A Vendor.

Reclaim the Egg: Retire Android's Easter Egg, Arm the Emergency Surface

Bypassing Frp With Internal Google Emails

rain

Multi-Surface Vulnerability Research Within Kimi's Web Platform.

root@franksx:~$ fx:-/-