Jordy Zomer
@pwningsystems
Followers
3K
Following
1K
Media
139
Statuses
1K
Security Engineer @ Google, likes fuzzing, static analysis and VR. The opinions stated here are my own, not those of my company.
Zurich, Switzerland
Joined November 2015
Yay! My writeup on finding (half) Spectre-v1 gadgets in the Linux kernel using #CodeQL is finally live 😁😁.
5
113
462
RT @bsdaemon: I really like that hacking zines are now in this trend of having printed copies! It is about time. I got a few to give to fol….
0
4
0
I’m writing a CodeQL like language for fun that works on Binary Ninja IR, by lowering OOP primitives to datalog for “fun” can’t wait to finds some bugs with it! 😁😁.
0
2
24
RT @robertswiecki: My team (AI Systems Security) at Google Zürich🇨🇭is hiring a Security Engineer for AI Vulnerability Research! We're looki….
0
13
0
Awesome work by Adam! 😁.
My latest Spectre research is now public! See intra-mode BHI CPU vulnerability disclosure and PoC at This user-to-kernel attack bypasses eIBRS, BHB clearing and other mitigations.
0
1
1
RT @wiknerj: Branch Race Conditions Predictor causes recent predictions to be added after more recent privilege switches (→ wrong privilege….
0
4
0
Implementing a custom #CodeQL extractor + libs for an unsupported language is pure torture but hey I found some bugs already so I guess it’s worth it
1
1
15
That moment when you found a bug but it's a PITA to reach so you just point afl++ at it :').
0
0
5
RT @bsdaemon: I would like to praise @gabrielnb outstanding contributions to the security community and hacking, not only as editor of the….
0
3
0
Wrote a MCP server for #CodeQL, tried it out with Cursor and it's quite fun so far! I think the next step would be adding support for query-models. Allowing an LLM to easily add sources/sinks to existing queries could be very promising😁.
1
9
75
RT @i41nbeer: My writeup of the 2023 NSO in-the-wild iOS zero-click BLASTDOOR webp exploit: Blasting Past Webp -.
0
234
0
RT @spendergrsec: We are looking for a PhD student intern this summer to research optimal heuristics for a new feature of ours that provide….
0
16
0
RT @GoogleVRP: 📢 📢 📢 Calling all vulnerability researchers interested in microcode!. Check out our blog post covering EntrySign, the AMD Z….
0
39
0