The Curious Engineer

All blogs / Security

Neodyme’s Blog

neodyme.io

Make security your strength. We help secure software with deep-dive audits, cutting-edge research, and trainings that propel your team to the next level.

SecurityReverse engineeringEmbedded / microcontrollers

’20’21’22’23’24’25’26
Posts
50 from 31 Jul 2020 to 26 Oct 2026
Posting
monthly (6 in the last year)
Kind
company blog
Feed
https://neodyme.io/rss.xml

2026 6

  1. Keyless Entry: Hacking SwitchBot Smart Locks
  2. Get insights Visit our blog
  3. Advisories
  4. Lenovo DCC: Part 2 - Trusted IPC and a Malicious Firmware Update
  5. Sampled Public Reports
  6. Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC

2025 20

  1. Diving into the depths of Widevine L3
  2. Pwn2Own Ireland 2024: QNAP Qhora-322
  3. Lenovo DCC: Part 1 - A simple ACL Exploit
  4. Building Our Own Post-Quantum FIDO Token
  5. /blog/pqc-fido
  6. /advisories/cve-2025-6812
  7. Did You Train on My Voice? Exploring Privacy Risks in ASR
  8. /blog/membership_inference
  9. /advisories/cve-2025-47962
  10. Your router might be a security nightmare: Tales from Pwn2Own Toronto 2022
  11. Riverguard: Mutation Rules for Finding Vulnerabilities
  12. Pwn2Own Ireland 2024: Canon imageCLASS MF656Cdw
  13. HTML to PDF Renderer: A tale of local file access and shellcode execution
  14. The Key to COMpromise - Writing to the Registry (again), Part 4
  15. The Key to COMpromise - Downloading a SYSTEM shell, Part 3
  16. Introducing HyperHook: A harnessing framework for Nyx
  17. The Key to COMpromise - Abusing a TOCTOU race to gain SYSTEM, Part 2
  18. Windows BitLocker -- Screwed without a Screwdriver
  19. On Secure Boot, TPMs, SBAT, and downgrades -- Why Microsoft hasn't fixed BitLocker yet
  20. The Key to COMpromise - Pwning AVs and EDRs by Hijacking COM Interfaces, Part 1

2024 9

  1. Solana Consensus - From Forks to Finality
  2. From Guardian to Gateway: The Hidden Risks of EDR Vulnerabilities
  3. Older posts
  4. RCE on the HP M479fdw printer
  5. SPL Token-2022: Don't shoot yourself in the foot with extensions
  6. Riverguard: How to Get Access to Findings for Your Contract
  7. Riverguard: Fishing for Loss of Funds in the Stream of Solana Transactions
  8. Hidden GitHub Commits and How to Reveal Them
  9. How to Hack a DAO

2023 2

  1. CS:GO: From Zero to 0-day
  2. Nonce Upon a Time, or a Total Loss of Funds - Exploring Solana Core Part 3

2022 5

  1. Secure Randomness: From Zero to Verifiable Delay Functions, Part 2
  2. Stake², or How To Cheat The Staking Mechanism - Exploring Solana Core Part 2
  3. Secure Randomness: From Zero to Verifiable Delay Functions, Part 1
  4. Why Auditing the Code is Not Enough: A Discussion on Solana Upgrade Authorities
  5. How a Little-Known Solana Feature Made Program Vaults Unsafe - Exploring Solana Core Part 1

2021 3

  1. How to Become a Millionaire, 0.000001 BTC at a Time
  2. Solana Smart Contracts: Common Pitfalls and How to Avoid Them
  3. Reversing a Fingerprint Reader Protocol

2020 1

  1. MacOS: Unauthd - Logic bugs FTW

Undated 4

  1. Blockchain
  2. Pentests
  3. Trainings
  4. Legal Notice