Longterm Security

We're a computer security company

[Reuters @Reuters]

Apple to release new 'Lockdown Mode' as it battles spyware firms https://t.co/oUHrSTtjk0

[David Korczynski @Davkorcz]

Fuzz-introspector now automatically lists fuzz blockers! How? Overlay statically extracted fuzzer calltree with runtime coverage data and list exact code locations where largest parts of reachable code is uncovered at runtime Try it yourself: https://t.co/fT1VSmGVxf @theopenssf

[Longterm Security @longtermsec]

@spr_networks :D

[Longterm Security @longtermsec]

A very early release of SPR is public today https://t.co/Rp4yCBwr5z. This open source project creates hardened home wifi networks. @spr_network

[Doyensec @Doyensec]

As we look back upon the past year, we would like to acknowledge those who have helped us shape our business. We look forward to another great year of technical challenges with the goal of helping you build with security.

Thank you!

[Jeremy Epstein 🇨🇿 (that's a Czech not a check) @jeremyinfosec]

Now for something neither snow nor COVID related: what really happened in the RSA hack 10 years ago. Well worth reading. https://t.co/QM12lpcJK0

[Digiconomist @DigiEconomist]

In 2021 the Bitcoin network handled ~97 million transactions. This equals roughly 0.012% of the worldwide volume of non-cash transactions.

Bitcoin was responsible for 0.54% of global electricity consumption. On average, that's 1,386 kWh per Bitcoin transaction.

[Steve Weis @sweis]

I'm glad the @NSAGov "Quantum Computing and Post-Quantum Cryptography" FAQ dismisses quantum key distribution (QKD) as impractical.

There are several companies out there trying to push their QKD solutions, which aren't useful for anything.

https://t.co/ORjakFmjcp

[Longterm Security @longtermsec]

@0clickman @lyte__ @NeatMonster_ @defendtheworld With the right exploitation primitives, yes.

[Longterm Security @longtermsec]

Exploiting CVE-2020-0423, a race condition in Binder https://t.co/eep3Ku3hBT

[Longterm Security @longtermsec]

@lyte__ has started a series of posts on the Samsung NPU OS, check it out now https://t.co/1RGC5v0fT3

[Longterm Security @longtermsec]

@lyte__ has started a series of posts on the Samsung NPU OS, check it out now https://t.co/1RGC5v0fT3

[Longterm Security @longtermsec]

VDSO As A Potential KASLR Oracle
https://t.co/rb5uRP8ZfK

[Alex “neat” A. @NeatMonster_]

https://t.co/hGqewYOiYx
This is really awesome! I was trying to do the same for Ghidra and its P-Code but @vector35's Binary Ninja API is so much better.

[Longterm Security @longtermsec]

@NeatMonster_ @vector35 @psifertex @eipwned very nice

[Brad Spengler @spendergrsec]

I've always wondered: where are all the people complaining that Samsung doesn't upstream RKP? https://t.co/Amc0tYrdRz I thought everyone loved coarse-grained CFI applied post-build via binary patching with a Python script? 🙂

[Alexander Tarasikov @astarasikov]

A nice overview of RKP exploitation. Funnily enough, two CVEs I got in RKP are in the same addr validation routine (though not the log bug they mention) and I also used PGT3 to write-what-where but targeted stack to jump to the func to disable s2

https://t.co/fMzmPWczWg

[Longterm Security @longtermsec]

A Samsung RKP Compendium by @NeatMonster_ https://t.co/XLd3fd1uq4

[PrimaBlock @primablock]

The results of our 2nd #Security #Audit have arrived 📃We are committed to having external audits quarterly to provide the highest standard of quality and security to our users 🔐Thanks @longtermsec
https://t.co/JlAyE6PUH7