Jordan Wright

Security @stripe. Previously @duo_labs. Gophish maintainer. He/him

[Jordan Wright @jw_sec]

I installed every package on PyPI to look for malicious activity. I've published the results here: https://t.co/9tSE90fKFt

I'd like to talk a little about how this all works and why it's important: 🧵

[Dino A. Dai Zovi @dinodaizovi]

Slowly, the world is discovering the value of provisioning hardware-bound cryptographic credentials.

The Internet is slowly catching up to the level of security of tapping to pay for a cup of coffee.

[Jordan Wright @jw_sec]

@isosteph For my blueberries I’ve had good luck with Espoma Soil Acidifier and pine bark mulch! 🫐

[Jordan Wright @jw_sec]

🔍 I wanted to learn more about how certificate transparency logs work. So this weekend, with help from Claude, I built a small site that shows end-to-end verification in action.

https://t.co/7khJsASpTy

[Jordan Wright @jw_sec]

@patrickc Who did you end up using for the sequencing?

[Joe Desimone @dez_]

We open sourced the tool used to detect the Axios supply chain compromise! I built it Friday after a red eye home from RSAC. Also, wrote up the full story, including the hectic moments after that first critical alert
https://t.co/HAm8eMr8vO

[Moxie Marlinspike @moxie]

An overview of private AI inference for Confer: https://t.co/99K6jhQu6x

[Moxie Marlinspike @moxie]

For Confer, we want private AI chat to be simple, but many end-to-end encrypted apps still have a level of friction that make them feel like they’re from another era.

Here's how Confer uses passkeys to make E2E encryption feel as simple as logging in:

https://t.co/FDZkpKJ3uG

[Jordan Wright @jw_sec]

Engineers getting ready for another year.

[Jordan Wright @jw_sec]

@VicVijayakumar ULTRATHINK /health

[Jordan Wright @jw_sec]

@moxie Quick bug report that it looks like attestation is broken as of this morning. It looks like the attestation field is missing.

[Jordan Wright @jw_sec]

@moxie I also came across @TinfoilAI which looks similar. Combining remote TEE attestation with @projectsigstore artifact bundles is neat!

https://t.co/hyKiLa5Grf

[Jordan Wright @jw_sec]

This e2ee LLM interface is, as always, stellar work from @moxie 🔥

I spent a couple hours trying to understand how it works from a client side. I don't have all the details, so take this with a grain of salt. Here's what I *think* I know from an oversimplified high level 🧵

[Moxie Marlinspike @moxie]

I've been building Confer: private AI chat where your conversations are end-to-end encrypted so that only you can access them.

It's still new, but I've been using it every day and beta testing it with friends. Let me know what's missing!

https://t.co/EsRRPWWpYj

[Jordan Wright @jw_sec]

In the meantime, I'm a paying customer and will be trying out Confer as my daily-driver for a while. I love the idea and the implementation looks great. Keep up the great work, @moxie . ❤️