Hernan Ochoa

Security Consultant / Researcher

[Hernan Ochoa @hernano]

Microsoft Recall is Mandatory? https://t.co/7o0jUDKEFs

[Hernan Ochoa @hernano]

@jduck @Apple @LowLevelTweets Thanks! I'm aware of secure/confidential computing technologies, but it's not the same. I'm looking for official @Apple's docs to verify their claims.

[Hernan Ochoa @hernano]

Can anyone point me to documentation describing exactly how @Apple's Private Cloud Compute actually works? (the June 10 blog post doesn't count)

[Hernan Ochoa @hernano]

if there's none publicly available yet, I think @Apple must release detailed technical documentation describing Private Cloud Compute's security architecture ASAP. They keep claiming it is 'private' and 'secure' w/o enough verifiable info. (again, the June 10 post is not enough)

[Hernan Ochoa @hernano]

@Apple your updates regularly reset settings to their default values, or completely delete changes in files like /etc/pf.conf. had to automate checking for issues like this in an entire lab. Is there a better way? ... ... ...

[Hernan Ochoa @hernano]

'Corporate World', please stop sending customer surveys emails and the like with links to domains other than your own! Your customers must not be trained to click links in unknown domains! You're wasting your anti-phishing training budget...

[AmpliaSecurity @AmpliaSecurity]

GoSNMP DoS Vulnerability https://t.co/DzMOIEI9uE

[Hernan Ochoa @hernano]

Dear @Google when will you let people use their preferred H/TOTP implementation without having to enter a phone number? Thank you!!

[Hernan Ochoa @hernano]

Why do people keep buying network devices managed using cloud services? @ArubaNetworks @Ubiquiti https://t.co/fnTuHPVnqt https://t.co/hVl82jK2ZA

[Hernan Ochoa @hernano]

I just stumbled upon the web site for an online payment processor service developed by a major player does not even have 443/tcp open 😀

[Pascal Junod @cryptopathe]

GPRS (2G & 3G data) encryption schemes GEA-1 and GEA-2 have a security of 2^40 (due to a backdoor) and 2^45 (apparently unintentional) instead of the expected 2^64, which translates to practical, real-time attacks.

[ZeusBox @Zeusb0x]

Nice Chromium 1-Day. Apparently 32-bit only memory corruption bugs like this integer overflow => heap overflow are not considered to be a big deal any more. Fixed 13 days ago and still not merged in the stable channel. 🙃

[GitHub Security Lab @GHSecurityLab]

Kill -9 your way to root on most modern Linux using @kevin_backhouse's latest polkit finding (CVE-2021-3560) https://t.co/sW6YS9CCPr

[Florian Roth ⚡️ @cyb3rops]

@singe @_wald0 @uspto @CptJesus @harmj0y Even if not. How does such a patent help others (vendors or other open source developers)?
Imagine if Hernan Ochoa, who wrote WCE had applied for a patent on accessing the LSASS memory to dump user creds. Would Benjamin Delphy now have to pay license fees for his Mimikatz?

[Hernan Ochoa @hernano]

Not a single south-american country is eligible for Apple's Security Research Device program, could start with Argentina (in alphabetical order..) @AppleSupport @apple @dlitchfield

[Hernan Ochoa @hernano]

@lcamtuf This is BEYOND terrible. Chrome users cannot browse to http://t.co/9Qc9Kibqnp; think about the magnitude of the situation

[Hernan Ochoa @hernano]

@lcamtuf Google thinks it's ok to completely block access to a commercial site; and the affected party can't do anything about it

[Hernan Ochoa @hernano]

@lcamtuf And it's impossible to contact any human being to remedy the situation. I was able to fix the situation with all other AV vendors.

[Hernan Ochoa @hernano]

@lcamtuf And there's no way to do anything about it. Because Google has an automatic scanner, it finds WCE's zip file and it flags the site

[Hernan Ochoa @hernano]

@lcamtuf I don't see Google blocking Rapid7's web site because they offer Metasploit for download. This is TERRIBLE.