quarkslab Add us as a preferred source on Google
Make a deal with quarkslab
🔒 Paid proposals held safely in escrow — released only when the work's approved.
Known for
25 views
Optical network security often sounds like an obscure incantation: PON, ONU, OLT, PLOAM, OMCI, GEM, GPON, XG-PON, 50G-PON, T-CON..
To conjure the right knowledge read Thiébaud Fuchs' overview of Passive Optical Networks, their security features, and how authentication and encryption are used to protect against eavesdropping and impersonation.
https://blog.quarkslab.com/overview-of-passive-optica
9 views
Software protection is futile, AI will break it", they said.
But, does it? how?
To shine some light read about Rémy Salim's experiments in "Defeating AI-Assisted Reverse Engineering"
Where is the fair play, Claude?
https://blog.quarkslab.com/defeating-ai-assisted-reverse-engineering-or-at-least-trying-to.html
8 views
Doing Machine Learning on binary code? We've just open-sourced pcode_graph, a Python library that extracts semantic graphs from binaries to make training Graph Neural Networks easier.
@etham introduces it here:
https://blog.quarkslab.com/from-p-code-to-gnn-extract-binary-code-semantics.html
#GNN #ML #Python #OpenSource
7 views
Chamilo LMS was put under the microscope 🔬 by @coiffeur0x90 and Sean Matthews
11 vulnerabilities. multiple attack surfaces. Our new research dives into the vulnerable code paths and exploitation primitives to achieve unauthenticated RCE.
🔗 https://blog.quarkslab.com/chamilo-lms-its-raining-0days-hallelujah-its-raining-0days.html
📊 Post engagement
🔥 Top post: Optical network security often sounds like an obscure incantatio · 25 likes + reposts
📊 Activity & format
Recent posts
View on Mastodon ↗
🔥 Top post
Optical network security often sounds like an obscure incantation: PON, ONU, OLT, PLOAM, OMCI, GEM, GPON, XG-PON, 50G-PON, T-CON..
To conjure the right knowledge read Thiébaud Fuchs' overview of Passive Optical Networks, their security features, and how authentication and encr…
PQC is coming they say, but where is the actual code?
To help you map it out, our intern Joshua Setia looked at and tested 25 libraries, here is what he found:
➡️https://blog.quarkslab.com/state-of-post-quantum-cryptography-implementatio…
Mbed TLS is a widely deployed open-source TLS, DTLS, and X.509 library targeting constrained and embedded environments.
A few months ago, our cryptography team performed a security audit of the changes in version 4.0, sponsored by @ostifo…
Our 2026-2027 internship season is open.
Check out the list of openings and apply for fun and knowledge!
https://blog.quarkslab.com/internship-offers-for-the-2026-2027-season.html
Reports can be the fun part of a pentest.. if the target uses MyReport.
@kaluche_ found a third-party updater running as SYSTEM, an unauthenticated gRPC service, and a nice way to turn software updates into arbitrary code execution.
From L…
Not an antivirus product this time, but we couldn't pass it up 🙈
@catonetworks said: route with split tunneling.
@kaluche_ heard: root with split tunneling.
Check out CVE-2026-10739, a LPE vulnerability in the Cato VPN Client for Window…
To leverage AI agents for vulnerability research, we built a hybrid source-code analysis workflow that combines deterministic analysis with agentic reasoning.
Applied to FreeRDP, it helped us uncover vulnerabilities and chain them into cli…
Chamilo LMS was put under the microscope 🔬 by @coiffeur0x90 and Sean Matthews
11 vulnerabilities. multiple attack surfaces. Our new research dives into the vulnerable code paths and exploitation primitives to achieve unauthenticated RCE.
🔗…
Software protection is futile, AI will break it", they said.
But, does it? how?
To shine some light read about Rémy Salim's experiments in "Defeating AI-Assisted Reverse Engineering"
Where is the fair play, Claude?
https://blog.quarkslab.c…
Doing Machine Learning on binary code? We've just open-sourced pcode_graph, a Python library that extracts semantic graphs from binaries to make training Graph Neural Networks easier.
@etham introduces it here:
https://blog.quarkslab.com/…
Everything about Android's hardware attestation... and how to bypass it.
Blog post and code by Eric Le Guevel
https://blog.quarkslab.com/bypassing-android-hardware-attestation.html
Cortex is a long-term, multi-tenant scalable open source storage for Prometheus and OpenTelemetry.
Earlier this year we conducted a security audit sponsored by @ostifofficial
Check our report here:
https://blog.quarkslab.com/cortex-secur…
🐘 Community & instance
💡 Facts
🕵️ Fake follower check
Estimated- Est. 68% real, active audience · Medium fake-follower risk.
- Low engagement (~1.3% of followers engage each post) — a sign of an inflated or inactive audience.
Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.
About
📸 Gallery
🔀 Audience overlap
EstimatedEstimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.
More like this
Find more →Frequently asked questions
How much does quarkslab charge for a sponsorship?
How do I contact quarkslab for a brand deal or collaboration?
How many followers does quarkslab have?
✉ Message quarkslab
Reaching out to influencers is a Pro feature. Upgrade to message any influencer directly — perfect for brands and agencies booking sponsorships.
- ✓ Message any influencer from their listing
- ✓ The influencer gets notified by email
- ✓ Manage every conversation in one inbox
Already Pro? Log in.
🎤 Event / appearance with quarkslab
Booking an event / appearance is a Pro feature. Upgrade to book quarkslab for an in-person or virtual appearance — payment held safely in escrow until the event is done.
- ✓ Book them for events, livestreams, panels & more
- ✓ quarkslab gets notified by email
- ✓ Fee held in escrow, released after the appearance
Already Pro? Log in.
You're out of free requests this month
Free accounts get 5 per month. Go Pro for unlimited sponsor pitches, collab requests & sponsorship deals — plus featured placement, the Verified badge, free withdrawals and more.
Upgrade to Pro — $9.95/mo →Your free limit resets on the 1st of next month.
Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove