Rich Smith

CSO @crashappsec / Ex @superlunarhq,@gemini,@duo_labs,@thesyndis,@etsy,@immunityinc,@hplabs // Co-Author Agile App Security

[Rich Smith @iodboi]

@dcuthbert @viega @crashappsec Thanks for sharing out these use cases and great that you're finding early value @dcuthbert . Always interested in hearing more about use cases & problems to solve 🍿

[haroon meer @haroonmeer]

Keeping up with security research is tough. Theres a bunch of noise (& not nearly enough signal).

We release ThinkstScapes every quarter to help with this: Our picks of ~20-30 pieces of work that we found interesting (and why).

Its worth checking out..

https://t.co/mHDdO2WFzR

[Rich Smith @iodboi]

Great work 🤌 Sad that it’s literally 2005 AD with Sony’s XCP all over again 🤦‍♂️

[Eclypsium @eclypsium]

Eclypsium analysis found a backdoor in Gigabyte systems implementing intentional functionality during system startup. Due to significant #supplychainrisk, we're disclosing this info & defensive strategies on an accelerated timeline >> https://t.co/HgmUUmFPq2
#supplychainsecurity

[Crash Override @crashappsec]

Why you should not give a f*ck about security awards https://t.co/8jhUKNIoqI

[Superlunar @superlunarhq]

Over the last year, we set our R&D sights on exploring the intersection of the browser and the blockchain, as well as funding and supporting the broad community of builders.

We've published some of the highlights of 2022 in our recent Year-End Report: https://t.co/7kGcNkG2Hk

/1

[Rich Smith @iodboi]

I’m on Mastodon @[email protected]

[Rich Smith @iodboi]

@benheise Isn’t that just called Discord ?

[Alex Matrosov @matrosov]

🔥Infineon, the major supplier of TPM chips, uses an 8-year-old version of OpenSSL for the InfineonTpmUpdate module inside UEFI firmware on the newest devices (include major enterprise vendors).

[Rich Smith @iodboi]

<EOF>

[Rich Smith @iodboi]

Congrats @josibake! So happy for @superlunarhq to be able to help support you and your work 🙌

[Superlunar @superlunarhq]

Our newest Superlunar grant recipient @josibake shares his journey into the #bitcoin space, from an early background in math and physics, to the study groups of @ChaincodeLabs, and to ultimately becoming a @bitcoincoreorg contributor. Read on: https://t.co/P5lOMI55VP

[Superlunar @superlunarhq]

One of our research engineers, @BlaineMalone, was at #DevconBogata last week and brought back a great list of presentations he suggest we take a look at... /🧵

[Superlunar @superlunarhq]

Tomorrow, @Caralie_C, Superlunar's developer fund manager, will be sharing strategies for navigating the job search as a developer with the @desfemmesmag community tomorrow, and discussing some of the projects we've been funding.

Highly recommended if you're able to join.

[Rich Smith @iodboi]

@roonlabs Have you really just locked all your customers out of their pre-2.0 cores if their mobile apps auto-update but their core is unable to?

[Thinkst Canary @ThinkstCanary]

Some commands are overwhelmingly run by attackers on compromised hosts (and seldom ever by regular users in regular usage).

Our @subtee has just released a new (free) Canarytoken to make monitoring these commands trivial.

Read more about it - https://t.co/KXhrlp80li

[Rich Smith @iodboi]

Are you a #crypto-native developer that could benefit from a one-time grant to kickstart a new project, or get an existing one to the next stage?
If so we want to hear from you, apply below.......

[Superlunar @superlunarhq]

Calling all #web3 builders in search of funding support: Superlunar will be awarding one-time grants to help #crypto-native devs move their projects forward.

We're excited to help you get to the next step of your journey as a developer. Apply today at https://t.co/aURupMFqsH

[Superlunar @superlunarhq]

We're very proud to share the story of our '22 Superlunar Grant Recipient @rukundo__ . Collin discusses how a life of curiosity, activism and resilience led him to become a technologist focused on using #bitcoin to improve the lives of Ugandans. Read on: https://t.co/QHMPlV1AQY

[Beth Kurteson @bethkurteson]

PSA to all the crypto-curious (or crypto-native) women out there! @superlunarhq is partnering with @desfemmesmag and @chaincodelabs on an 8 week program for budding #bitcoin developers. Apply today to be involved as a mentee or mentor! https://t.co/wjyeTGB0CS

[Rich Smith @iodboi]

Welcome to the family @dunxen, we're excited to be able to support your work!

[Superlunar @superlunarhq]

Announcing our newest Superlunar grant recipient: @dunxen! We’re thrilled to support his work as a Bitcoin Core & Lightning developer, as well as share the story of how #bitcoin brought him into a career exploring open source technology.
https://t.co/afhg2NVgq4

[Rich Smith @iodboi]

This is a great read / watch over lunch, a nice example of how localising bitcoin information helps speak to specific local problems and drives local adoption.
Hear about the work @KalKassa has been driving ...

[Superlunar @superlunarhq]

We sat down with Ethiopian #bitcoin advocate and educator @KalKassa to discuss his current efforts within the African bitcoin community, and why Bitcoin is instrumental for empowering the African continent. Watch the full interview:

https://t.co/Ok03zOhl5J

[Rich Smith @iodboi]

Being able to sponsor Jarol's Bitcoin Core work has been a real honour for us, read more about what motivated him to jump into Bitcoin development full time below

[Superlunar @superlunarhq]

Bitcoin Core contributor @jarolrod shares his unique path to bitcoin and some of his current work developing a more effective and user-friendly experience for Bitcoin Core.

We are pleased to sponsor Jarol's innovative work for a second consecutive year. https://t.co/CGzKnvQjnf