Musings from the umbra

Data collection on Russian borders in device seizures, in the context of SORM

Data collection on Russian borders in device seizures, in the context of SORM

How contacts and call history leave a seized phone over Bluetooth PBAP: a Russian border seizure forensicated using MESH, next to the identifier collection relevant to SORM.

BARGHEST

Bitchat exploit: 0-click Bluetooth mesh DoS and topology based security research in internet freedom technologies

Bitchat exploit: 0-click Bluetooth mesh DoS and topology based security research in internet freedom technologies

A zero-click Bluetooth mesh DoS chain in BitChat Android.

BARGHEST

CVE-2026-0073: Android ADB-over-TCP authentication bypass

CVE-2026-0073: Android ADB-over-TCP authentication bypass

A critical no-interaction proximal/adjacent remote code execution vulnerability in adbd's ADB-over-TCP authentication path.

BARGHEST

CVE-2026-51376: exploiting BitChat's BLE authentication with mesh network cache poisoning

CVE-2026-51376: exploiting BitChat's BLE authentication with mesh network cache poisoning

A security audit of BitChat identified a cache poisoning vulnerability that allows adversaries to inject unauthenticated messages into the mesh network.