Security · Systems · Making things
Hi, I'm Mikey.
I'm a security engineer who loves building things. For about 15 years I've worked low in the stack, usually as one of the first engineers on a team: defining the problem, researching it, designing the system and getting it to production. Right now that's Runzee at Oats Solutions, and the Android bugs we find with it.
Latest
If You Wanted to Watch a Country
We pulled MAX apart and read the code: the surveillance machine you could build on top of it, and how little of it we had to make up.
Read the post →Featured
Your DMV Can Trigger an Out-of-Bounds Read Inside Google Wallet
One ordinary photo from your driver’s-license issuer, and Google Wallet reads past its buffer.
A Zero-Day in Google’s Confidential Computing: Your Phone Can Be Fooled Into Trusting a Fake Enclave
A forged proof passes Google’s enclave attestation: the check binding it to the real program is silently skipped.
Recent writing
All 20 posts →
A one-tap token drain in Unstoppable Wallet, and the $20 bug bounty it earned
One blind tap empties a token in this crypto wallet: confirmed by its own makers, since fixed, and settled with a $20 bug-bounty payout.
A Zero-Day in Android’s Wi-Fi Direct: Any App Can Steal Your Password, Zero Permissions
Any app can flip one flag and read your live Wi-Fi Direct password, zero permissions, no prompt.
A Zero-Day Screen Hijack in Android’s Tap-to-Pay: The Grant That Never Expires
Any app that was ever your tap-to-pay handler keeps a permanent, background screen-hijack power, even after a clean logout.
Part 2: Risks and Vulnerabilities in Hardware Systems
What a Samsung Galaxy S25 Ultra trusts without asking
A Zero-Day That Lets Any App Rewrite What Your Screen Reader Says
No permission, no prompt: any app can rewrite what TalkBack reads aloud to a blind user, System UI included.
A Zero-Day in Android’s On-Device AI: Any App Can Open a Door to Gemini Nano
Any app can grant itself one ordinary-looking permission and open a live door to Gemini Nano, no prompt, no consent screen.
Talks
- 2026The Weak Supply Chain We All Depend On: a UEFI firmware use case