Apple AirDrop and Google/Samsung Quick Share are proximity file-transfer protocols used by over five billion devices, yet their application-layer security properties remain largely unstudied because both stacks are proprietary and undocumented. Both protocols are reachable from wireless proximity without any prior pairing and process complex serialized content (binary plists, CPIO archives, Protocol Buffers, UKEY2 handshakes) inside privileged daemons, making them attractive zero-click targets across multiple operating systems. We perform the first cross-platform reverse engineering and protocol-aware fuzzing study of both stacks. We reconstruct AirDrop's seven-layer state machine and DVZip adaptive compression from binary analysis, build AIRFUZZ, a protocol-aware fuzzer that mutates pre-compression representations, and complement it with targeted hand-written analyses of Samsung's Quick Share service and Google's Quick Share for Windows. We discover six vulnerabilities (V1-V6): three pre-authentication issues in macOS/iOS AirDrop (V1: Swift fatalError DoS in the HTTP path router; V2: unbounded XML plist recursion in Foundation; V3: NULL dereference in Network.framework's HTTP/1.1 parser), two protocol-layer flaws in Samsung Quick Share (V4: pre-authentication OfflineFrame dispatch; V5: D2D encryption bypass for three frame types), and a heap use-after-free in Google Quick Share for Windows (V6) for which Google awarded a bounty. We responsibly disclosed all findings, and Apple, Samsung, and Google have acknowledged the reports.

How to log to the console from your game using mGBA

World’s largest replica of a traditional Spanish galleon sails along Irish coastline

Ruby is the last language most people would reach for to take a binary game archive apart. It turned out to be one of the best — File.binread, String#unpack, and a dependency-free reader for Codemasters’ BIGF format, built AI-assisted the whole way.

Click for more on research in the Journal of the Acoustical Society of America

The scientific mystery of how songbirds from one population are able to join other members of their own population at the same winter destinations following their long solo migration has been answered. In a groundbreaking

As the US celebrates 250 years, the Declaration of Independence has been curiously absent. Yet its language on the consent of the governed is more relevant than ever

It's been important to me to support Unicode on any system, even if it's DOS. So here we go *** First Cut ***

AI-powered screen memory — captures, analyzes, and lets you search/chat your screen history. Powered by Gemma 4 . 100% local, 100% private. - ayushh0110/ScreenMind

How I built Tinkerfont, a browser extension for inspecting and swapping fonts on live websites -- Manifest V3, content scripts, and a Firefox port.

As a former intelligence soldier who now sells drones for a living, I can tell you that this problem is bigger than almost anyone realizes.

Contribute to patrick-sharp/waypoint.nvim development by creating an account on GitHub.

Africa's energy transition is unique and complicated by – among other things – the pervasive presence of "Zombie Energy Systems."

Stealth Chromium engine that stops scrapers and browser agents from getting blocked, with one line of code change. - tiliondev/fortress

Report says proposed rewrite gives operators more freedom to shop around for a greener grade

Pure C++23 LLM inference for Apple Silicon chips. Contribute to ybubnov/metalchat development by creating an account on GitHub.