Jeremy Boone

HW/FW security researcher @ fruit company

[Jeremy Boone @uffeux]

Hello friends. Check out this awesome and unique role that just opened up on my team in SEAR. Wanna secure Apple silicon, ROMs, iBoot, and more? https://t.co/0NMPs77lZt

[Jiska @naehrdine]

Broadcom and Cypress chips have the same HCI "backdoor" allowing to write to the Bluetooth chip's RAM. This feature is used for firmware patches.

We didn't request CVEs for that 9 years ago. Instead, we built the InternalBlue Bluetooth research framework.
https://t.co/nSo82jRRuU

[Jeremy Boone @uffeux]

where my peeps on bluesky? @uffeux.bsky.social

[jon @jon_roelofs]

@evilsocket any interest in working on security in compilers? my team is looking for someone with a peculiar intersection of skills/interests:

https://t.co/d3xvJVipeB

[Ivan Krstić @radian]

🔺New on the Apple Security Research blog: introducing Private Cloud Compute! We believe this is the most advanced security architecture ever deployed for cloud AI compute at scale. https://t.co/bsrpkCdivX

[Jacques Fortier @jacquesgt]

Are you excited to use the power of safe modern programming languages like Swift to make software more secure? My SPEAR team at Apple is hiring a Swift Software Engineer to do exactly that! https://t.co/ZkmCkvmAf8

[Ivan Krstić @radian]

🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. https://t.co/NIyeXjVne6

[Jeremy Boone @uffeux]

that disclosure timeline though...

[quarkslab @quarkslab]

Is remote code execution in UEFI firmware possible?
Yes it is.
Meet #PixieFAIL: 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers.
Full details by @fdfalcon and @4Dgifts in our new blog post:
https://t.co/g4Bg2GK4Y8

[quarkslab @quarkslab]

Is remote code execution in UEFI firmware possible?
Yes it is.
Meet #PixieFAIL: 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers.
Full details by @fdfalcon and @4Dgifts in our new blog post:
https://t.co/g4Bg2GK4Y8

[Jeremy Boone @uffeux]

@4Dgifts Check out the Tianocore Bugzilla. These were first reported in October and November of 2022. Amazing.

[NCC Group North America InfoSec @NCCsecurityUS]

New Blog: Technical Advisory – Multiple Vulnerabilities in Nagios XI https://t.co/5KGHvBHkZ7

[NCC Group North America InfoSec @NCCsecurityUS]

New Blog: Technical Advisory: Sonos Era 100 Secure Boot Bypass Through Unchecked setenv() call https://t.co/EJiVqT0MF0

[NCC Group North America InfoSec @NCCsecurityUS]

New Blog: Shooting Yourself in the .flags – Jailbreaking the Sonos Era 100 https://t.co/rPsm3hVKGY

[NCC Group Research & Technology @NCCGroupInfosec]

Shooting Yourself in the .flags – Jailbreaking the Sonos Era 100

The Era 100 is Sonos’s flagship device, released on March 28th 2023. NCC found weaknesses within the bootloader which can lead to full compromise of the device.

https://t.co/h5LBbUJe7g

https://t.co/8JkcXU3y7H

[Jeremy Boone @uffeux]

@ryanaraine According to the sequence of steps in this document, I am still stuck at Step #1 after 300+ days. Tianocore hasn't even begun to engage IFVs, ODMs or OEMs. I think the Tianocore PSIRT lives in a time dilation vortex.

[Jeremy Boone @uffeux]

@ryanaraine I reported 2 vulns in EDK2 that are still unfixed. They are... let me check... 336 days old. Tianocore security team ghosted me. Had to engage downstream vendors to get any traction whatsoever. Still, no fix in sight.

[Kevin Dunn @kdunn_security]

Public Report – Caliptra Security Assessment During August and September of 2023, Microsoft engaged NCC Group to conduct a security assessment of Caliptra v0.9. The assessment identified 26 vulnerabilities, which were promptly addressed by the Caliptra... https://t.co/A9d5DaZxTo

[Jeremy Boone @uffeux]

Caliptra is an open source silicon root-of-trust built using Rust on RISCV. Check out our public report: https://t.co/KoqapP2D26

[NCC Group North America InfoSec @NCCsecurityUS]

New Blog: Public Report – Caliptra Security Assessment https://t.co/HY3WErg90D

[Greg Hilton @GregHil14555931]

Public Report – Caliptra Security Assessment During August and September of 2023, Microsoft engaged NCC Group to conduct a security assessment of Caliptra v0.9. The assessment identified 26 vulnerabilities, which were promptly addressed by the Caliptra... https://t.co/a1IrC4NK9S