final

Forensics researcher part of the @GrapheneOS Foundation

Tweets my own and not endorsed by my employer. AI slop and DMs mostly ignored.

[final @__final__]

I am now reachable from email if for whatever reason you needed that. Final @ the GrapheneOS domain name.

[final @__final__]

@CryptoCloaks Beautiful

[final @__final__]

@StephDemet @GrapheneOS GrapheneOS is a security and privacy focused distribution. It's an expectation the project talks about it. Many Android distribution projects are just AOSP with different apps, they do nothing to improve under-the-hood beyond AOSP. Little change in the difficulty to exploit it.

[final @__final__]

@StephDemet @GrapheneOS Providing technical information about a project that may not always have it in the best light isn't 'war' on them. Poor leadership/PR would be to mislead people with false comparisons. Software are not sports teams to defend. If there are flaws it WILL continue to be mentioned.

[final @__final__]

Everyone was concerned about the Googlefication of Firefox but missed the Braveificiation

[FOSS Force @FOSSForce]

"Mozilla's new AI browsing mode is in limited beta, and it's more capable than I expected": I Tried Firefox Smart Window, and It Won Me Over a Little https://t.co/PcjSe4upll

[final @__final__]

What the fuck is that?

[BonkDaCarnivore @BonkDaCarnivore]

They spent $500 on a $120 phone.

Only 11 stripes on the flag.

And gold? No, you get piss yellow, cause it's the Golden Shower Age

Fell for it again awards going out

[final @__final__]

If I had a dollar for every search engine that had a '67' easter egg I'd have two dollars. Not surprising but I just find it weird that it has happened twice.

[final @__final__]

@Hussein780431 @ryzerth GrapheneOS won't implement the 24-hour blocker for unverified apps like the Stock OS. Only seeing the OP with just this post as context, it appears they are an app developer and will not be submitting their ID to verify so there won't be app updates through Google Play.

[final @__final__]

Do they not know that OP_RETURN outputs are not spendable? 🧐

Regardless, it is appreciated!

[BlockChainWhisper @OP_RETURN_ECHO]

⛓ Block: 951605

Data: Donation to GrapheneOS Foundation

#Bitcoin #OPRETURN

[final @__final__]

@Not_Arena @GrapheneOS Not anymore

[final @__final__]

It's awful to see so many people have bad experiences with responsible disclosure at MSFT.

[rootsecdev @rootsecdev]

Last time I dealt with MSRC.

Responsibly disclosed an issue with legacy auth that allowed me to spray passwords at <redacted endpoint> and avoid smart lockout.

Receives email.. 5 months after initial case opening.

“Doesn’t meet the bar for servicing”

Microsoft silently fixed. Closed case.

https://t.co/9iFpMJMSXC

[final @__final__]

This article provides an introductive overview to phone unlocking tools used by law enforcement and governments, the terminology, extraction techniques and popular countermeasures against these exploit tools. I helped with some of the material here.

https://t.co/HfCzWl6cn2

[final @__final__]

For less about the technology and more about the forensic process, I will just link you to SWGDE's best practices docs:

https://t.co/5iMtWggfiZ

[final @__final__]

This article provides an introductive overview to phone unlocking tools used by law enforcement and governments, the terminology, extraction techniques and popular countermeasures against these exploit tools. I helped with some of the material here.

https://t.co/HfCzWl6cn2

[final @__final__]

@skylermzx Also, if you aren't holding much more than what the device is even worth, ask yourself: is it even worth it to own one right now? Most people own such devices yet don't even have funds really worth those specific needs.

[final @__final__]

@skylermzx Some wallet vendors had data breaches in the past, you see old customers sent fraud mail. Third party vendors also amplify that risk. People with a threat model that they have immediate threat to life simply for owning crypto may secretly hold in other ways with clear discretion.

[final @__final__]

Is it as bad as 2000s LARP web design slop? It is up there for sure.

[final @__final__]

Serif fonts, italics, pointless elements, excessive gradients, use of inline styles or excessive amount of style classes, flashy hover animations, overreliance on decorations like cards and tags, poor use of logos and subtitle placements, accessibility issues...

[Mitchell Hashimoto @mitchellh]

The new AI web design giveaway is tasteless use of serif fonts plus italics. I mean, there's about 1000 other giveaways cause its all so very ugly, but that's the initial slap in your face giveaway.

[final @__final__]

@N104AP https://t.co/u4rzvIaakL