Arrigo Triulzi

IT Security, cynically aged. Maths. Some nukes. Longing for Symbolics and Connection Machines. Keeper of Ancient Computing Lore. Wassenaar intangible Ⓐ

[Arrigo Triulzi @cynicalsecurity]

On a related note: "thinking the unthinkable" when faced with a design is what I do best and enjoy most.

Then things happen ¯\_(ツ)_/¯

[Arrigo Triulzi @cynicalsecurity]

So, why do I care about firmware/hardware/ucode hacks?

> (threadp)
t
>

Well, for the best part of 30yrs I was always curious about building "the ultimate virus" combining techniques from pretty much everywhere. This, inevitably, leads you to interesting avenues, the vast…

[Math Files @Math_files]

Contrapositives are for cowards

[Chris Pinnock | drchris.tez @chrispinnock]

📚 I'm offering a $3 discount on my book Learning Russian Verbs for the rest of January on @leanpub.

💸Use this link to purchase (regular price $12.50; discounted price $9.50): https://t.co/hzkb6qqA97

👉 Learn the basics of Russian verb grammar and learn 133 common verbs, chosen from well-known Russian learning textbooks and by frequency.

[Arrigo Triulzi @cynicalsecurity]

@ArmsControlWonk See, the myth of the Internet being designed to survive nuclear warfare now comes back to bite us: if the Internet survives then surely communicating with shouted tweets works.

[Ian Miers @secparam]

Classic zk-washing: "Our system is private-the proof reveals nothing-trust us". Meanwhile, the proofs are coming from *inside* their servers.

So they see everything.
I've seen too many claims of private DEXs, private payments, and private identity schemes where this happens.

[MAGIC @MAGIC_horizon]

📖Check out the first publication from the MAGIC project by Hagemann C et al. on 'Low-cost, versatile, and highly reproducible microfabrication pipeline to generate 3D-printed customised cell culture devices with complex designs'.

Read more: https://t.co/iLOS9skts0

[Arrigo Triulzi @cynicalsecurity]

@taviso @veorq dAMD64?

[Arrigo Triulzi @cynicalsecurity]

@wtogami @jacobtorrey Doesn't work, even in Hyper-V, on a ThinkPad P14s Gen6 with a Snapdragon Elite X1.

[Arrigo Triulzi @cynicalsecurity]

The one wonderful quality of an ARM64 laptop in Summer is that you can work with it even in the absence of A/C and it does not feel like you are typing on your hobs after you just cooked pasta.
Oh, and silence, no 747 takeoff when you type "ls".

[Pavel Podvig @russianforces]

The new nuclear "Basic Principles" just dropped (h/t @KomissarWhipla). The key change is that it's the aggression that "poses critical threat to the sovereignty and/or territorial integrity" instead of "puts the very existence of the state in jeopardy" https://t.co/WKoQbzjmPG

[Quinn Nelson @SnazzyLabs]

I tried to build a $599 PC to match the performance of the $599 Mac mini—size and efficiency be damned. I could not do it.

You cannot build a better PC at $600 using new parts. Period.

But the Mac mini is only a good deal if you leave it as is; upgrading makes it a bad deal.

[Arrigo Triulzi @cynicalsecurity]

FYI, I am on Bluesky and Mastodon, usual handle… (not linking since the links get blocked / censored here).

[Dr. Jeffrey Lewis @ArmsControlWonk]

No, it probably can't. At least not anytime soon. A short 🧵.

[Arrigo Triulzi @cynicalsecurity]

@evilsocket BTW: helps if you open a "feedback" (bug) as more reports pushes it up the list.

https://t.co/DtuBI0t0Gh

[JP Aumasson @veorq]

Mission accomplished @billpollock
https://t.co/u1KvHuOal4

[Arrigo Triulzi @cynicalsecurity]

Dear Europe, it is now time to grow up.

[FakeIACR @FakeIACR]

I guess it's time to familiarize ourselves with GOST, Striborg, Kuznyechik and the like....

[Ollie Whitehouse @ollieatnowhere]

We released our analysis of Pygmy Goat - a native x86-32 ELF shared object that was discovered on Sophos XG firewall devices, providing backdoor access to the device.

https://t.co/IfUJMPHPqu

Yara / STIX / Snort etc

https://t.co/zy3l83QSzL

[Samuel Bashfield @SamuelBashfield]

Wonderful declassified First World War submarine cable papers found at the UK National Archives in London, including reports on cable censorship and a beautiful 1911 cable world map.

[Arrigo Triulzi @cynicalsecurity]

@MSF_ITALIA per favore, potreste accogliere le richieste di rimozione dalle vostre liste email? Ho seguito la procedura di unsubscribe ormai quattro volte con il solo risultato di ricevere altre mail. Ho anche spiegato perché, potreste rispettare i desideri altrui?

[Arrigo Triulzi @cynicalsecurity]

@Aristot73 @thegrugq @guhe120 but the 0-clicks is not where it matters, i.e. on the sending side ;P