Black Hat USA 2022 recordings are online. There are a lot of cool talks to watch. A good place to start is James Kettle’s client-side desync research, which turns the victim’s own browser into the desync vector and makes even single-server websites exploitable. Hardware fans get Lennert Wouters rooting a Starlink user terminal with a homemade modchip that glitches the SoC’s ROM bootloader past its firmware signature checks. It needs physical access, so your neighbour’s dish is safe for now.
