philip

Infosec-ish. I have an employer. These are not their comms.

[philip @flihp]

There is no "cloud", just other peoples computers. There is no "internet of things", just other peoples computers in your house. #cloud #IoT

[Frank @jedisct1]

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security https://t.co/qQGZyu4fDO

[ARi Meiers @arijameiers]

David Jolicoeur: Rapper and founding member of De La Soul dies - BBC News - https://t.co/oBybaz5Woi - #RIPDave🕊

[Reuters U.S. News @ReutersUS]

Tesla video promoting self-driving was staged, engineer testifies https://t.co/pX8ZZDq8ld

[Julian Gough @juliangough]

Hmmm. I just had a bizarre experience, involving a global news organisation and a trillion dollar corporation. (I got caught in the middle, so... owch.)
It’s not the sort of experience the people involved usually talk about in public… so I think I’ll talk about it in public.
🧵

[Rick Altherr @mxshift]

As promised:
Oxide Corporate Security Engineer
* Remote-friendly
* $185k salary

Details: https://t.co/gTvRkpcHKD

[sofía celi @claucece]

Today, we are publishing several practically-exploitable cryptographic vulnerabilities in the Matrix (@matrixdotorg) standard and their flagship client Element, with Daniel Jones (@djwj_), Benjamin Dowling (@dowlingbj) and Martin R. Albrecht (@martinralbrecht).

[Steven J. Vaughan-Nichols @sjvn]

Linus Torvalds: Rust will go into Linux 6.1 https://t.co/3XHj5qkC7G via @ZDNET & @sjvn

It's official. @rustlang will be merged into the #Linux kernel 6.1.

[Bryan Cantrill @bcantrill]

If you are at #OSFC2022 and you are interested in an @oxidecomputer laptop sticker, come see me -- I've got 'em!

[Kate Hicks @mrskatehicks]

Finally got my photo op with the @oxidecomputer rack. Even an empty EVT rack was super impressive, can’t wait to travel and see the full demo rack in CA soon!

[The Wall Street Journal @WSJ]

Obituary: Peter Eckersley found a mission in San Francisco: Protecting the world from online snooping. He died at age 44. https://t.co/waCscK30TC

[Ben Leonard @lenjaminbeonard]

Take a look at the new @oxidecomputer site. Oxide racks are shipping by the end of the year, and this felt like a great opportunity to develop something that we can build upon for launch and beyond...
https://t.co/ITGYGKyKHc

[Rachel Tobac @RachelTobac]

🚨ATTENTION🚨
Apple found two 0-days actively in use that could effectively give attackers full access to device.
For most folks: update software by end of day
If threat model is elevated (journalist, activist, targeted by nation states, etc): update now https://t.co/BUEn08260X

[Open Source Firmware Conference @osfc_io]

Welcome to the party @oxidecomputer - @oxidecomputer believes in open and attestable firmware which makes @oxidecomputer and #OSFC2022 a perfect fit.

Psst: @bcantrill , CTO of @oxidecomputer is also giving a talk!

Join at https://t.co/vyNilHIRUJ !

[3mdeb @3mdeb_com]

We can't wait for @linuxplumbers Conference 2022 in Dublin. If you'd like to participate in System Boot and Security MC: https://t.co/sFBzxqwBCF, and have some topics in mind, please use the CFP: https://t.co/LcqcJmL3zl

[philip @flihp]

@vincentzimmer @_zaolin_ s/loud/open/

[Eyal Ronen @eyalr0]

Our @USENIXSecurity & @RealWorldCrypto paper "Trust Dies in Darkness: Shedding Light on Samsung's TrustZone Keymaster Design" is now online https://t.co/M9hhH3RPVB. We extract keys and bypass FIDO2 attestation. PoC - https://t.co/FV8BiyhGx1. With @shakevsky and Avishai Wool

[philip @flihp]

@ChloeCondon https://t.co/CxCkpFICdk

[Dave Kennedy @HackingDave]

Important Read: please note there is a fake account impersonating as a TrustedSec employee, has 500 followers and INFOSEC people have been talking to this account.

@billy_webi0 is not a TrustedSec employee and is trying to get into DMs to scam people.

[philip @flihp]

@olliegrace We were discussing various ways to train Jorts anyways.