@bitcurves

“In the real world, if you build a bookshelf and forget to tighten one of the screws all the way, it does not burn down your house.”

 United States
web.nvd.nist.gov/view/vuln/search-results?query=&search_type=last3months&cves=on
Joined August 2016
  • Tweets134
  • Following54
  • Followers153
5Media
"I got an internship at SolarWinds"
Sophos@Sophos3 Mar 2021
Tell us a cybersecurity horror story in 6 words.
36
252
12
1,827
Fascinating work xitter.cf/mntmn/status/123662479…
SCOOP: FBI investigating role of Israeli spyware maker NSO in hacking and intelligence matters, per our sources. reuters.com/article/us-usa-c…

Exclusive: FBI probes use of Israeli firm's spyware in personal and government hacks - sources

The FBI is investigating the role of Israeli spyware vendor NSO Group Technologies in possible hacks on American residents and companies as well as suspected intelligence gathering on governments,...

reuters.com
4
111
3
126
Bit Curves retweeted
Dennis@DennisF17 Jan 2020
New @DecipherSec podcast with @kennwhite on the CVE-2020-0601 Windows crypto bug. open.spotify.com/episode/6gE…

Kenn White

Decipher Security Podcast · Episode

open.spotify.com
2
2
Videos from #RealWorldCrypto 2020 are up. Outstanding talks. totalwebcasting.com/view/?fu… h/t @rmhrisk
9
20
ecmascript should just cut the chase and define addrof/fakeobj as standard APIs, it's getting boring to polyfill them every time
3
6
1
98
A Mechanised Cryptographic Proof of the WireGuard VPN Protocol (papers, models, and code): prosecco.gforge.inria.fr/per…
13
1
21
Palantir closes new contract with the Pentagon with a reported cost ceiling of $800 million. cnbc.com/2019/03/27/palantir…

Peter Thiel's company Palantir just won a major Pentagon contract, beating out traditional military...

This is one of Palantir's biggest contracts ever, and its first on a "defense program of record," a designation for the most substantial government contracts.

cnbc.com
2
Some great progress has been made on RISC-V processor security recently. See, e.g. RWC 2019: xitter.cf/bitcurves/status/11062…
This Post is from an account that no longer exists. Learn more
6
13
Related to the DARPA verifiable voting system, the Galois team presented at Real World Crypto 2019 on recent open source RISC work. Video and slides: youtu.be/4hq4yiVCopU?t=1682 (28 min mark) rwc.iacr.org/2019/slides/kin…
2
Bit Curves retweeted
Kim Zetter
@KimZetter14 Mar 2019
Exclusive: @DARPA is building a $10 million secure voting system, fully open source, that it will bring to the @defcon Voting Village this year and next to let hackers/researchers examine and pentest. motherboard.vice.com/en_us/a…
63
758
215
1,362
Using a tag-and-release trick, researchers demonstrated they could alter the firmware of some cloud computing servers to plant undetectable, persistent malware on those machines before other customers used them. wired.com/story/dark-metal-c…

Hackers Can Slip Invisible Malware into Some Cloud Computers

Researchers point out a tough-to-fix in some cloud computing setups: hackable firmware.

wired.com
3
35
5
50
Apple: TLS 1.3 is now enabled system-wide by default in iOS 12.2. mailarchive.ietf.org/arch/ms…
75
2
130
this will be a fun adventure at the end of the month wired.com/story/tls-encrypti…

An Encryption Upgrade Could Upend Online Payments

While ditching TLS 1.0 encryption will benefit the payments ecosystem, it'll be rough going for those with older devices.

wired.com
1
5
1
14
Interesting research xitter.cf/jedisct1/status/959461…
Frank
@jedisct12 Feb 2018
OCDN: Oblivious Content Distribution Networks arxiv.org/pdf/1711.01478.pdf
1
Bit Curves retweeted
Alex Ionescu@aionescu2 Jan 2018
Interesting, looks like I missed Intel _finally_ releasing their anti-ROP tracing/monitoring (not CET) technology based on PMU interrupts (see past research by @ochsff @matspisak and others): lwn.net/Articles/738166/. "Intel Branch Monitoring" in CannonLake. MSR 0350h.

perf/x86/intel: Add Branch Monitoring support

lwn.net
2
62
3
139
Yes, please xitter.cf/bonsaiviking/status/93…
Daniel Miller ✝@bonsaiviking6 Dec 2017
New @nmap option: --resolve-all lets you scan all addresses a name resolves to. nmap --resolve-all -sL microsoft\.com
1
Very clever xitter.cf/binitamshah/status/936…
Binni Shah
@binitamshah2 Dec 2017
Finding S3 Buckets by watching certificate transparency logs : github.com/eth0izzle/bucket-…
1
This is a major milestone and includes a CSS engine rewrite in Rust. Congrats to the @firefox team! xitter.cf/firefox/status/9126940…
Firefox
@firefox26 Sep 2017
We’ve basically reinvented fundamental parts of the browser w/ Firefox Quantum & it’s rolling out to everyone Nov 14 mzl.la/FirefoxQuantum

Get Firefox for desktop and mobile

Firefox is a free web browser backed by Mozilla, a non-profit dedicated to internet health and privacy.

firefox.com
2
Load more