Xiaolong Bai
where else to find them
no profile links on file
what they talk about
all 4 in the filters
where they keep going back
- Black Hat USA2 editions2016–2019
all 4 in the filters
on a stage with
all 13 in the filters
who talks about the same things
- Min (Spark) Zheng3 talks
- Tielei Wang6 talks
- Hao Xu9 talks
- Moony Li6 talks
- Patrick Wardle16 talks
- Yeongjin Jang7 talks
| title | conference | date |
|---|---|---|
| X.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in | USENIX Security '25 | 2025-08-13 |
An automated tool generates and mutates crafted X.509 certificates to fuzz parsing and validation code, discovering 18 new vulnerabilities and confirming 12… | ||
| All Your Apple are Belong to Us: Unique Identification and Cross-Device Tracking of Apple Devices | Black Hat USA 2019 | 2019-08-03 |
Study demonstrates concrete methods to fingerprint and link Apple devices across reboots using public APIs, hardware identifiers and disclosed vulnerabilities… | ||
| Eternal War in XNU Kernel Objects | Black Hat Europe 2018 | 2018-12-03 |
Claims that Apple mitigations are bypassable by corrupting IPC objects and formalizes the attack as ipc_port Kernel Object-Oriented Programming; uses XNU… | ||
| The Last Line of Defense: Understanding and Attacking Apple File System on iOS | Black Hat Europe 2018 | 2018-12-03 |
Shows a concrete exploit that bypasses APFS snapshot-based remount mitigation to make the read-only root appear writable by swapping mount internals: create a… | ||
| Picking Up My Tab... | 26th USENIX Security Symposium (USENIX Security '17) | 2017-08-16 |
Researchers demonstrate a practical attack called Synchronized Token Lifting and Spending (STLS) that sniffs an offline payment token on NFC/MST, audio or… | ||
| Discovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf | Black Hat USA 2016 | 2016-08-03 |
Systematic reverse engineering shows Apple ZeroConf components — Bonjour impersonation, Multipeer Connectivity PID spoofing, AirDrop over the private aw0… | ||
| nothing matches | ||