Pedro Barbosa

Security Engineer at Google.
CTF player for the Epic Leet Team (@eltctfbr).

[Pedro Barbosa @pedroysb]

Check out our blog post to learn results from our experiments with Paranoid (https://t.co/21wnh9dTfk). Our open-source project that detects the usage of weak cryptographic artifacts, such as public keys and digital signatures --> https://t.co/ky56mdGO3u

[Esoj @_esoj1]

@bsdaemon and I have observed that in some instances of major cloud providers, the userspace mitigation for spectre-BTI still leaves the victim exposed to attacks. Check out hyperbleed - Current state of spectre-BTI mitigations on cloud:
https://t.co/DfgbPB1WC8

[Pedro Barbosa @pedroysb]

@konobeada @dfaranha @edscartezini2 @brasilpodcastbr Kkkkkk agora vc falou. Mas por sorte eu já desisti e nem me incomodo mais.

[Paulo Matias @thotypous]

Vejam @dfaranha @ECominetti @lucaslago, parece que uma IA finalmente superou a inteligência de muito ser humano por aí

[Pedro Barbosa @pedroysb]

Congratulations for the amazing research @larissabrazb. Very deserved and I'm really proud of you 🥰. Also congratulations to @sback_ and @ZESTuzh friends that were part of this.

[Alberto Bacchelli @sback_]

Heartfelt congratulations to now Dr. @larissabrazb for very successfully (summa cum laude!) defending her PhD thesis today. Topic: "Secure Code Review." Thank you, Larissa, it was a great honor to have you as a Ph.D. student @ZESTuzh!

[Epic Leet Team @eltctfbr]

Pessoal, passando pra lembrar dessa chance única de fazer parte do ELT! Começa no dia 25! Ainda não se inscreveu? O que está esperando?

[Epic Leet Team @eltctfbr]

Olá pessoal! Para quem está no @h2hconference e gostaria de uma chance de entrar no ELT, vamos observar o CTF do evento pra selecionar novos integrantes. Aos interessados, se inscrevam no CTF e deem seu melhor. Pra quem não viu o link de inscrição ainda: https://t.co/g8mZj7WuLK

[Pedro Barbosa @pedroysb]

@konobeada É domingo Bia. Vai dormir

[Urs Hölzle @uhoelzle]

If you're curious about what security teams actually do (and how Google got hacked in 2009), this is a very accessible video series that's both accurate and entertaining (that's hard to do!). Highly recommended.

https://t.co/nLt05HPgyt

⬇️

[Heather Adkins - Ꜻ - Spes consilium non est @argvee]

Today we take you behind the scenes like never before, learn about the work @Google's security experts do behind closed doors to keep billions safe every day. The HACKING GOOGLE docuseries is streaming NOW on @YouTube → https://t.co/QP1TpgPXgV

[Pedro Barbosa @pedroysb]

I knew it!! 🤷

[Enrico Fregnan @EnFregnan]

Great news! Our paper “First come first served: the impact of file position on code review” (https://t.co/hKUuqZbWGB) was selected as one of the distinguished papers at FSE 2022! 🎉🎉🎉
Congrats and thanks to all the authors @larissabrazb @marquitodambros @GulCalikli @sback_

[Google VRP (Google Bug Hunters) @GoogleVRP]

Getting ready for #hackceler8 streaming tomorrow!!

[Calle Svensson @ZetaTwo]

Come watch the stream of our game hacking competition tomorrow, live from the Google office in London. It's going to be amazing! The top 8 teams from the Google #CTF have been reduced to 4 remaining teams in the fight for the grand prize!

[Steve Weis @sweis]

Google releases Paranoid tool to detect well-known weaknesses in large amounts of crypto artifacts, like public keys and digital signatures by @pedroysb and Daniel Bleichenbacher: https://t.co/Nq9I1eJRf3

[Epic Leet Team @eltctfbr]

Novo artigo em parceria com @mentebinaria ! É sobre XSLeaks! De Web! Como pediram! Confiram! Está bem legal! Autor: @lbherrera_

https://t.co/e0YGP8097S

Toda a produção da parceria está em https://t.co/7DKFpNSHXE

Se quer ler algo específico nos nossos artigos, comenta aí!

[Pedro Barbosa @pedroysb]

@__dqi congrats with the prize :-)

[dqi @__dqi]

Another writeup for #GoogleCTF. This time: "Custom Protocol" by @pedroysb :)

https://t.co/J19bcJLx29

[Google VRP (Google Bug Hunters) @GoogleVRP]

The best way to stop a hacker is to think like one. Countdown starts today. https://t.co/KjN3KDYZKL

[Pedro Barbosa @pedroysb]

@sirdarckcat @valb00 @_vkaku There is CheckWeakECPrivateKey (https://t.co/JMx9RP8OnC)
which was inspired by 'The Blockchain Bandit' https://t.co/XJDQSbt2Xw

[Pedro Barbosa @pedroysb]

🥳 We just released paranoid_crypto. The library checks for trivial weakenesses on crypto artifacts generated by black boxes (i.e. when we don't know how they were generated).
Official call for contributions to be published soon.
Joint work with Daniel Bleichenbacher.

[Eduardo Vela @sirdarckcat]

Put public key in. Get private key out.
https://t.co/3Y0rj4gSyH

[Pedro Barbosa @pedroysb]

-----BEGIN PUBLIC-----
Get ready 🔥🔥
I'm so happy to share that for another year I could contribute to Google CTF by authoring and mentoring challenges in the crypto category 🔒🔑
Looking forward to seeing all the amazing teams working on them.
-----END PUBLIC-----

[Google VRP (Google Bug Hunters) @GoogleVRP]

https://t.co/xShz3JSbn2