this post was submitted on 23 Dec 2025
14 points (100.0% liked)
blueteamsec
581 readers
25 users here now
For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Wow. His aggression made me think he was exaggerating the problems. Often it's dry research text that shows the worst problems.
But at the bottom he posted all the receipts: Multiple examples of kernel access due to driver mistakes with sample exploit code.
I'm glad it wasn't just me that found the write up aggressive. They've undoubtedly done some good work finding these issues, but this was exhausting to read, and if they interacted with Mediatek in the same tone, I'm not surprised the interactions didn't go well.
If I were to be hit with "we do not consider multiple user cases" in a Linux context, by someone on the other side calling themselves a developer, then either they were paying me to work with them or I would have stopped any correspondence.
I coffinsec even treated the other side as a person worth talking to, they have already been way more accommodating than me.