Devon Maloney

Security Engineering and Architecture at @Apple. Vulnerability research. Embedded systems in @SwiftLang. Alumnus @RPISEC. Previously @ReSwitchedTeam. 🏳️‍🌈

[Devon Maloney @plailect]

> "For the 27 releases, we've started writing parts of the core operating system kernel in Swift."

Swift for the Kernel was an awesome project to work on this year! I'm very happy to have been able to make these first steps towards a truly memory-safe kernel possible :)

[Devon Maloney @plailect]

Swift for the Secure Enclave was an amazing project to work on, and represents just one of the many leaps forward we made this year in terms of security foundations. Special thanks to all of the compiler, standard library, and runtime folks who worked with me to make it possible!

[Devon Maloney @plailect]

@blacktop__ This is from the Platform State of the Union at WWDC this year

[Devon Maloney @plailect]

> "For the 27 releases, we've started writing parts of the core operating system kernel in Swift."

Swift for the Kernel was an awesome project to work on this year! I'm very happy to have been able to make these first steps towards a truly memory-safe kernel possible :)

[Devon Maloney @plailect]

Swift for the Secure Enclave was an amazing project to work on, and represents just one of the many leaps forward we made this year in terms of security foundations. Special thanks to all of the compiler, standard library, and runtime folks who worked with me to make it possible!

[Devon Maloney @plailect]

"There are no more juniors. There was a funeral for their passing in 2024. Nobody came. The machine does what they do now, but cheaper. Of course, juniors weren't valuable for what they produced, they were valuable for who they would become"
https://t.co/wAAQPcDvgd

[Bryan Keller @blk19_]

I ported Mac OS X to run natively on the Nintendo Wii - an idea I had over 10 years ago that I finally pursued last year.

Here’s how I pulled it off:
https://t.co/KfgptrGZp3

[Ivan Krstić @radian]

🔺New security-focused developer event on March 5 at Apple Park: featuring sessions on Memory Integrity Enforcement, new tools in Enhanced Security in Xcode, Apple’s defensive security engineering approach, Swift adoption in security-sensitive code, and how to apply all these techniques to protect apps. Sign up: https://t.co/RBLfFQR6zQ

[Ivan Krstić @radian]

🔺This is the first talk I've given in 6 years – featuring formal verification of post-quantum cryptography, the evolution of the Secure Page Table Monitor, a view into Memory Integrity Enforcement, updates to Apple Security Bounty… and a personal note.

[itszn @itszn13]

In celebration JPEG XL being reconsidered for inclusion in Chrome, I created the first ever JPEG XL image which displays its own MD5 hash!

$ md5sum hashquine.jxl
c0dec0007b5246f7428936d9bed2f446

This website does not render JPEG XL yet, so see the links below

[Devon Maloney @plailect]

Living abroad was an amazing experience, but now it's time for something more familiar. I've always loved New England, especially Boston!

[Ivan Krstić @radian]

🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. https://t.co/ule9gaXzc1

[itszn @itszn13]

For my last year of DEF CON CTF with @nautilus_ctf I created a deck-building card-game named Nautro, written entirely in ZIG

Play cards to produce resource chains to increase your total energy

Most easy vulns found during the game were patched, I challenge you to exploit it!⬇️

[Mark Griffin @seeinglogic]

My biggest surprise at #defcon33 : in a head-to-head LiveCTF match, one player’s AI bot beat _both_ humans to the punch.

I was commentating the match & was super confused because I could see the player had only just begun their solve script: https://t.co/XNVBKbgGhH

🧵👇

[Vector 35 @vector35]

Announcing Binary Ninja 5.0! Today we're proud to announce the release of Binary Ninja 5.0 (Gallifrey). Here's some highlights: Union Support, Dyld Share Cache & Kernel Cache, Firmware Ninja, Auto Stack Arrays, Stack Structure Type Propagation, and so much more. Check out the blog post for more information: https://t.co/EaNZl2mxiK

[Mikage @MikageEmu]

BIG NEWS: We're officially releasing the Developer Edition of Mikage! 🎉 🎉 🎉

If you wanted to help make the best 3DS emulator there could be, or simply to learn how modern emulators are made, now is the chance.

Learn more about the release here: https://t.co/rhAPJO9NwM !

[Anthony Chivetta @achivetta]

I'm super excited to share that we've launched the Private Cloud Compute Security Guide and Virtual Research Environment. This is a huge step forward for cloud AI compute and I'm looking forward to the broader security community digging in!

https://t.co/IHCmfMRS21

[Swift Language @SwiftLang]

Announcing the release of Swift 6! 🎉🎉🎉
🦺Extended memory safety protections
🪟Embedded and cross-platform support
🧪Swift Testing: parameterized, macro-based testing

Read more: https://t.co/DQihPkMDLj

[Swift Language @SwiftLang]

Announcing Swift Homomorphic Encryption, a new package that supports private cloud computation using cutting-edge cryptographic techniques. 🕵️🤐
Read more: https://t.co/Xv3CfpCtIG

[Devon Maloney @plailect]

Just a complete unmitigated failure of process here.

It doesn't help that Windows ships BitLocker by default without a PIN providing user entropy, so any secure boot bypass more or less immediately exposes all of your data.

[Ars Technica @arstechnica]

Secure Boot is completely broken on 200+ models from 5 big device makers https://t.co/lsB9CZgLYh

[Vector 35 @vector35]

Want the absolute best decompilation? In our latest blog post Glenn shows some of our visual introspection views. More than any other RE platform, we give you the tools to peek under the hood of our decompilation and improve it!

(1/2)

[Nicolás Alvarez @nicolas09F9]

"To reduce the overhead imposed by firmware encryption and align policies where appropriate, firmware encryption has been disabled for iBoot on iOS, macOS, watchOS, tvOS, and visionOS."

https://t.co/5McrfzeiTu

[Swift Language @SwiftLang]

How small does Swift go? Tiny enough to run on a breadboard? From #WWDC24, this session by @kubamracek shows how you can build a simple HomeKit accessory that runs on a RISC-V device. And for extra credit, the demo shows off Neovim support for Swift! ✨https://t.co/8PWGqa5XvH