Kate Pearce

Recovering pentester, security pragmatist. Head of security at a place, many other hats. 👩🏽‍💻🏳️‍🌈 Personal views. @[email protected]

[Kate Pearce @secvalve]

See also:

@[email protected]

[Duncan Campbell @duncan_2qq]

@rossjanderson Professor Ross Anderson, FRS, FREng Dear friend and treasured long term campaigner for privacy and security, Professor of Security Engineering at Cambridge University and Edinburgh University, Lovelace Medal winner, has died suddenly at home in Cambridge.

[Kate Pearce @secvalve]

@herbertbos Can’t find the details as it is from years ago, but I reference one here.

[Kate Pearce @secvalve]

There was that other time someone published on MPTCP in 2016 and claimed their work was completely novel. Apparently BlackHat wasn’t “legit” enough to cite as a real source.

[Kate Pearce @secvalve]

@herbertbos My Blackhat talks had several academic papers come out a year or so later each claiming it was “novel” and “not yet documented”. They practically copied my diagrams and didn’t reference my talk.

[Kate Pearce @secvalve]

@andrewtychen She absolutely could beat you up.

But, she would never need to fight.

You would take one look and you would never start it.

She finishes fights by never needing to start them.

[Kate Pearce @secvalve]

@andrewtychen

[Kate Pearce @secvalve]

@AlanJ_KA7 “It sounds like carrots might actually be fruit in this case. Attackers are known to innovate and work to evade traditional definition methodologies.”

[Kate Pearce @secvalve]

Important note about cyber security and media interaction during active incidents:

When those who know the details can’t talk, those who can talk won’t know the details.

[Kate Pearce @secvalve]

Important note about cyber security and media interaction during active incidents:

When those who know the details can’t talk, those who can talk won’t know the details.

[Kate Pearce @secvalve]

@taramcallister4 But the “potential savings” of $3.70 if you fly seven hours after you need to be there and/or stay 45km away. The potential savings!!!1!

[Kate Pearce @secvalve]

@grogersxyz There is a reason the phrase “as much as the market can bear” exists….

[VeryBritishProblems @SoVeryBritish]

Do NOT season the pigeons

[Daniel Moghimi @flowyroll]

Dropping #Downfall, exploiting speculative forwarding of 'Gather' instruction to steal data from hardware registers. #MeltdownSequel
- Practical to exploit (POC/Demo)
- Defeat all isolation boundaries (OS, VM, SGX)
- Bypass all Meltdown/MDS mitigations.
https://t.co/udgnfAWCE2

[Kate Pearce @secvalve]

@DeeMickSee More like: 1 X engineer and 9 ex-engineers. 😬

[Dino A. Dai Zovi @dinodaizovi]

Where @dotMudge makes an important point at @SummerC0n: real data on ATOs shows that SMS 2FA is fine for the vast majority of users. It prevented 100% of 3.3B automated password stuffing attacks, 96% of 12M bulk phishing, and even 76% of <10k targeted attacks seen over last year.

[Kate Pearce @secvalve]

This tweet bought to you by the one person with overlapping interests.

[Kate Pearce @secvalve]

What’s that about Microsoft Entrapta?

[Kate Pearce @secvalve]

“Machine Unlearning” sounds like a joke, but it’s a very real thing that has huge value if we can figure it out: https://t.co/lxtg42gSdS

[Kate Pearce @secvalve]

@WoSecNZ Next year it will be something else.

[Kate Pearce @secvalve]

Web3 is dead, long live webGPT

[Kate Pearce @secvalve]

@errbufferoverfl Heh. You missed a chance to say “it depends”.
🙃

[Kate Pearce @secvalve]

Which is worse?

[Kate Pearce @secvalve]

@grogersxyz Don’t both options have that risk though?