Pierre H. 🔥🌸

present: security (zalloc, kalloc_type, IPC, VM, …) | past: GCD, synchro, objc_direct, perf… | timeless: 🇫🇷 snark | @[email protected]

[Pierre H. 🔥🌸 @pedantcoder]

@bjhomer The kind of love we pour in the line of business I’m in doesn’t belong in release notes. That would completely defeat the anxious bindiffing and slow incremental discovery of which techniques died, which survived and which are on the chopping block.

[Pierre H. 🔥🌸 @pedantcoder]

We're hosting an event focused on security on March 5. We're going to present the technologies that we use to make iOS the most secure platform in the world. Sessions are led by Apple engineers working directly on platform security and security tools.

https://t.co/MVXeCZKCDn

[Hexacon @hexacon_fr]

We're very honored to have Ivan Krstić (@radian) for our opening keynote. Don't miss that!

[Hexacon @hexacon_fr]

We’re thrilled and honored to reveal our second keynote speaker: Ivan Krstić (@radian)
Any guesses what he might talk about? 😉

[Pietro Borrello @borrello_pietro]

Spreading love against memory corruption through the whole stack! From the software deep down the microarchitecture

It has been an insane journey improving the security of millions of people 🔥

https://t.co/WAhhO6oc7x

[Tielei @WangTielei]

Another big step in system security.

[Halvar Flake @halvarflake]

I have often stated that well-implemented memory tagging will be a game changer for memory corruptions. And it seems that with the next iPhone it's finally here: https://t.co/qNGiVxPQdh

[Thomas H. Ptacek @tqbf]

Congrats to everyone at SEAR for this; this is a crazy announcement.

https://t.co/HRZmHQhx8I

[nedwill @NedWilliamson]

Amazing work! I’m surprised to see Apple managed to get synchronous tag checking in production. I wouldn’t have bet on that given the performance constraints. Getting the sign off to get so much security-specific silicon is also a huge accomplishment.

[Ivan Krstić @radian]

🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. https://t.co/ule9gaXzc1

[David Chavalarias @chavalarias]

🚨Le Kremlin à l'Assaut de la République : Une Étude révèle les manœuvres de déstabilisation de la France
➡Étude #Politoscope avec révélations cruciales sur l'affaiblissement du front républicain à l'approche du 2nd tour des #legislatives2024
https://t.co/6TJhyGP6ZA

[Ivan Krstić @radian]

🔺New on the Apple Security Research blog: introducing Private Cloud Compute! We believe this is the most advanced security architecture ever deployed for cloud AI compute at scale. https://t.co/bsrpkCdivX

[Jacques Fortier @jacquesgt]

Are you excited to use the power of safe modern programming languages like Swift to make software more secure? My SPEAR team at Apple is hiring a Swift Software Engineer to do exactly that! https://t.co/ZkmCkvmAf8

[Pierre H. 🔥🌸 @pedantcoder]

@AvimanyuRoy3 @mitchellh Sadness

[Mark Mitchell @coremwm]

I'm hiring a manager! Kernel & System Security Engineering are responsible for security research, analysis, mitigation design and engineering of Apple's entire suite of operating systems. Remote candidates considered! DMs are open. https://t.co/6TzU6th6w3

[POM @hey_pom]

With iOS 17.2 and macOS 14.2 now released, Contact Key Verification 🔐 is available for everybody to enable. Very proud of the work the team has done to ship this groundbreaking feature and advance the state of iMessage security!
https://t.co/8yq9BhJQxc

[Arielle Angel @ArielleLAngel]

“It is much easier to consider genocide in the past tense rather than contend with it in the present. Legal scholars tend to sharpen their pens after the smell of death has dissipated and moral clarity is no longer urgent.”

[Miguel de Icaza ᯅ🍉 @migueldeicaza]

OMG this is so real, I hurt myself laughing

[Kostya Serebryany @kayseesee]

I am proud to present you the pre-print of our paper on GWP-ASan. 5+ years of work by four companies, spanning Server, Desktop, and Mobile, running on billions of devices. Finding and fixing thousands of bugs and potential vulnerabilities.

https://t.co/0lpzxi3oUC

[Bill Kristol @BillKristol]

Reads better in the original German.