Donncha - Security Lab (Amnesty International)

Send us Fan MailIn this episode, we sit down with Lars (Opa334) while he counts us the tell of the birth of Dopamine and the rise and fall (RIP) of the TSS bug which essentially allowed production iOS devices to become Security Researcher Devices. Thanks for listening and thanks to Lars for his time!Also check out Bynar.io because they're awesome and I heard their security research team is really cool 👀Support the show

Send us Fan MailWe're back ! It's been a hot minute but life sometimes gets in the way.In this episode we sit down with Yarden where she hilariously gives us a runthrough of how she got where she is today: from failing computer science in high school, getting a job in tech, becoming a baker, circus artist and circle back to offensive security.Yarden also gives us some insight into exploitation techniques that she's discovered and tips on giving a good technical trainings at conferences.Thank you for listening and thank you to Yarden for coming on the podcast.Support the show

Send us Fan MailIn this episode, I have summoned the iOS Avengers to talk about the state of the jailbreaking scene, community, and if it's dead???Guest stars include Jonpalmisc, Sparkey, Siguza, Littlelailo, and Henri.We talk about how they all met, what is the story of their first jailbreak release (totally not spyware), and the future of jailbreaking.Support the show

Send us Fan MailIn this episode, we sit down with Donncha Ó Cearbhaill, a hacker-turned-human-rights-defender who now leads the Security Lab at Amnesty International. He has spoken at many conferences about the abuses of spyware, such as 37C3 and Hexacon 2025.Big thanks to Donncha for taking time from his busy schedule to have a chat with me.Support the show

Send us Fan Mail[This episode was recorded back in July, adjust the part regarding MTE]In this episode, Cyril (Pod2G) takes us back to the early days of iOS jailbreaking: exploring the hacks, the race to release jailbreaks, and reflecting on how much the scene has changed compared to today.We go over his time at Apple and other security research companies, VR company culture and how he is trying to change that as the new VP of research at Epsilon.Support the show

Send us Fan MailIn this episode, we sit down with Robbe (aka Pink Draconian). We go over HackTheBox, the world of bug bounty hacking, and penetration testing.Robbe shares hacking tips, insights into hacking AI, and some of the interesting bugs he has discovered and reported through a bug bounty platform. He also talks about the challenges he has faced in bug bounty programs, including difficulties with vendors and other obstacles.Support the show

Send us Fan MailToday we are meeting up with Henri, a developer at Hex-Rays. He has been working on IDA Pro, one of the most popular reverse engineering tools out there.We discuss everything IDA, from his first internship at Hex-Rays, to working on special iOS support features. Henri is also somewhat of a quirky person, and he gives us an insight on his work-life balance, his tips & tricks to stay focused and optimize your productivity...Lastly, we answered questions from the community, specific to IDA.Hope you enjoy!Find him on twitter @hdemoff_.If you can, I encourage you to support this podcast as I no longer have a job :D Support the show

Send us Fan MailIn this interview, we sit down with Amat Cama, a renowned security researcher, to trace his journey from studying computer science to competing in CTFs, starting out in penetration testing, and eventually shifting to vulnerability research for top-tier companies.Amat shares his experiences at Pwn2Own, the transition from CTF challenges to real-world exploitation, and the intricacies of crafting reliable exploits. We dive into his perspective on offense versus defense and the motivation that drives him to stay in such a demanding field. He also talks about knowledge sharing through trainings, the importance of community and networking, and what a good VR candidate looks like.If you can, I encourage you to support this show as I no longer have a job :DSupport the show

Send us Fan MailIn this episode, we sit down with Pinkflawd, a talented reverse engineer to explore her unique journey into the field. She shares how she first got involved in reverse engineering through a women-only competition and offers advice for newcomers interested in following a similar path. We discuss her school background, her work detecting malware in the cloud, and her professional experience at some big companies.She talks about her involvement with BlackHoodie, her favorite reverse engineering tools, and contributions to open-source projects like Radare.We also dive into the challenges of working in the industry, staying motivated, dealing with failure, and handling imposter syndrome. She also offers insights on preparing and giving technical talks, and shares a story about analyzing a nation-state sponsored malware.Finally, we discuss her thoughts on VR, potential future projects, and wrap up with parting tips for aspiring security researchers.If you are interested in blackhoodie, wether as a sponsor or an attendee, I suggest you go visit https://blackhoodie.re :)) Thanks for listening!If you can, I encourage you to support this show as I no longer have a job :DSupport the show

Send us Fan MailSergi Alvarez, also known as “Pancake”, is the author of the open-source reverse engineering tool called Radare2 and the founder of the security conference R2con.In this episode, we sit down with Pancake to explore the origins of radare2 and R2Con, his journey in developing his expertise, and where decompilers fit into the equation. We’ll also discuss the role of AI in Radare, his experience collaborating with other developers in the open-source community, and the lessons he’s learned/what he might do differently if he could start over.https://rada.re/n/If you can, I encourage you to support this show as I no longer have a job :DSupport the show