Security Engineering and Architecture at @Apple. Vulnerability research. Embedded systems in @SwiftLang. Alumnus @RPISEC. Previously @ReSwitchedTeam. 🏳️🌈
> "For the 27 releases, we've started writing parts of the core operating system kernel in Swift."
Swift for the Kernel was an awesome project to work on this year! I'm very happy to have been able to make these first steps towards a truly memory-safe kernel possible :)
Swift for the Secure Enclave was an amazing project to work on, and represents just one of the many leaps forward we made this year in terms of security foundations. Special thanks to all of the compiler, standard library, and runtime folks who worked with me to make it possible!
> "For the 27 releases, we've started writing parts of the core operating system kernel in Swift."
Swift for the Kernel was an awesome project to work on this year! I'm very happy to have been able to make these first steps towards a truly memory-safe kernel possible :)
Swift for the Secure Enclave was an amazing project to work on, and represents just one of the many leaps forward we made this year in terms of security foundations. Special thanks to all of the compiler, standard library, and runtime folks who worked with me to make it possible!
"There are no more juniors. There was a funeral for their passing in 2024. Nobody came. The machine does what they do now, but cheaper. Of course, juniors weren't valuable for what they produced, they were valuable for who they would become"
https://t.co/wAAQPcDvgd
I ported Mac OS X to run natively on the Nintendo Wii - an idea I had over 10 years ago that I finally pursued last year.
Here’s how I pulled it off:
https://t.co/KfgptrGZp3
🔺New security-focused developer event on March 5 at Apple Park: featuring sessions on Memory Integrity Enforcement, new tools in Enhanced Security in Xcode, Apple’s defensive security engineering approach, Swift adoption in security-sensitive code, and how to apply all these techniques to protect apps. Sign up: https://t.co/RBLfFQR6zQ
🔺This is the first talk I've given in 6 years – featuring formal verification of post-quantum cryptography, the evolution of the Secure Page Table Monitor, a view into Memory Integrity Enforcement, updates to Apple Security Bounty… and a personal note.
In celebration JPEG XL being reconsidered for inclusion in Chrome, I created the first ever JPEG XL image which displays its own MD5 hash!
$ md5sum hashquine.jxl
c0dec0007b5246f7428936d9bed2f446
This website does not render JPEG XL yet, so see the links below
🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. https://t.co/ule9gaXzc1
For my last year of DEF CON CTF with @nautilus_ctf I created a deck-building card-game named Nautro, written entirely in ZIG
Play cards to produce resource chains to increase your total energy
Most easy vulns found during the game were patched, I challenge you to exploit it!⬇️
My biggest surprise at #defcon33 : in a head-to-head LiveCTF match, one player’s AI bot beat _both_ humans to the punch.
I was commentating the match & was super confused because I could see the player had only just begun their solve script: https://t.co/XNVBKbgGhH
🧵👇
Announcing Binary Ninja 5.0! Today we're proud to announce the release of Binary Ninja 5.0 (Gallifrey). Here's some highlights: Union Support, Dyld Share Cache & Kernel Cache, Firmware Ninja, Auto Stack Arrays, Stack Structure Type Propagation, and so much more. Check out the blog post for more information: https://t.co/EaNZl2mxiK
BIG NEWS: We're officially releasing the Developer Edition of Mikage! 🎉 🎉 🎉
If you wanted to help make the best 3DS emulator there could be, or simply to learn how modern emulators are made, now is the chance.
Learn more about the release here: https://t.co/rhAPJO9NwM !
I'm super excited to share that we've launched the Private Cloud Compute Security Guide and Virtual Research Environment. This is a huge step forward for cloud AI compute and I'm looking forward to the broader security community digging in!
https://t.co/IHCmfMRS21
Announcing the release of Swift 6! 🎉🎉🎉
🦺Extended memory safety protections
🪟Embedded and cross-platform support
🧪Swift Testing: parameterized, macro-based testing
Read more: https://t.co/DQihPkMDLj
Announcing Swift Homomorphic Encryption, a new package that supports private cloud computation using cutting-edge cryptographic techniques. 🕵️🤐
Read more: https://t.co/Xv3CfpCtIG
Just a complete unmitigated failure of process here.
It doesn't help that Windows ships BitLocker by default without a PIN providing user entropy, so any secure boot bypass more or less immediately exposes all of your data.
Want the absolute best decompilation? In our latest blog post Glenn shows some of our visual introspection views. More than any other RE platform, we give you the tools to peek under the hood of our decompilation and improve it!
(1/2)
"To reduce the overhead imposed by firmware encryption and align policies where appropriate, firmware encryption has been disabled for iBoot on iOS, macOS, watchOS, tvOS, and visionOS."
https://t.co/5McrfzeiTu
How small does Swift go? Tiny enough to run on a breadboard? From #WWDC24, this session by @kubamracek shows how you can build a simple HomeKit accessory that runs on a RISC-V device. And for extra credit, the demo shows off Neovim support for Swift! ✨https://t.co/8PWGqa5XvH