husband, father, security researcher. All thoughts and opinions are my own.
Champaign, Illinois
Joined February 2009
- Tweets15K
- Following1.6K
- Followers1.4K
- Likes108
Tim Yardley retweeted
Intel HW is too complex to be absolutely secure! After years of research we finally extracted Intel SGX Fuse Key0, AKA Root Provisioning Key. Together with FK1 or Root Sealing Key (also compromised), it represents Root of Trust for SGX. Here's the key from a genuine Intel CPU😀
Tim Yardley retweeted
The potentially faulty Crowdstrike CSagent.sys hit VT last night. Compiled on July 9th. virustotal.com/gui/file/e50d…
Tim Yardley retweeted
We've finally put out a detailed IEEE/ACM paper on @Google's multi-year effort to ease the burden of code review with ML. Google engineers now resolve 7.5% of all code review comments with an ML-suggested edit. But the path to that number has been a fun ML and UX journey!
Tim Yardley retweeted
A lot of people said sniffing a TPM requires advanced knowledge and equipment - so let’s change that!
Soon a couple of pogo-pins and a @Raspberry_Pi Pico will be enough 😀
Tim Yardley retweeted
It's Friday night, the kids are in bed, the biggest piece of crypto legislation for this year has dropped—the McHenry-Thompson bill on market structure— so let's get this party started.
Here’s a deep dive into the bill’s contents. Thread
docs.house.gov/meetings/AG/A…
Tim Yardley retweeted
Need datasets or code for your cybersecurity research? Got datasets or code that others can use? Come to the SEARCCH portal and join the discussion around #cybersecurity #artifacts
Tim Yardley retweeted
Using Office VBA Macro to exploit a vulnerable driver (zam64.sys) using DeviceIoControl, to get NT AUTHORITY\SYSTEM
TL;DR - Ring 0 using Office Doc}
Blogpost incoming soon lol
Thanks to @Coldzer0x0 @kasua02 for the encouragement and help.
Tim Yardley retweeted
Download is done, so I now have 4.4 TB of Python x86-64 wheels to unpack and scan. Unpacked, that'll be 2.4 million .so files totaling 10.6 TB 😲
Tim Yardley retweeted
Come join our team that’s building a cutting edge mobile analysis tool for all of Amazon! Fully remote, no security skill required, and a TON OF GROWTH. #MobileSecurity
Want to join a great team working on Mobile Security? Hit me up or apply here! -- Software Development Engineer II, MobileSec - Job ID: 2192159 | Amazon.jobs amazon.jobs/en/jobs/2192159/…
Tim Yardley retweeted
We asked @michaelb4jordan and @TessaThompson_x to help us spread the word about cyberattacks and help people learn how they can protect themselves and their loved ones from cybercriminals.
They took the assignment *very* seriously. amzn.to/3QD6iUt
Tim Yardley retweeted
The latest Google Pixel 6 pwned with a 0day in kernel! Achieved arbitrary read/write to escalate privilege and disable SELinux without hijacking control flow. The bug also affects Pixel 6 Pro, other Pixels are not affected :)
Tim Yardley retweeted
Our first article for the Month of PowerShell: 5 Tips for Getting Started with PowerShell. Follow along as you check it out! sansurl.com/monthofpowershel… #monthofpowershell @bettersafetynet
Tim Yardley retweeted
Wow. I did not realize that Intel sat on Hertzbleed from Q3 2021 to June 2022 without fixing anything. During this attack another set of authors independently scooped them. That’s pretty frustrating.
Tim Yardley retweeted
Tonight’s #BEERISAC meeting will be held at the Yard House (Yard House
(305) 535-5660
goo.gl/maps/ZhnWQosDR9jb231d…). It WILL NOT be at the Surfcomber. No coin or alcohol required. NOTE: no BYOB.
Tim Yardley retweeted
Join us January 28 @ 1:00PM EST for our next (CS)²AI ONLINE: Case Study on Attack Detection & Response in a Power Grid Blackstar Scenario with @timyardley
Register Today: buff.ly/2M5wSJi
Tim Yardley retweeted
We are building a partnership with the American people to confront COVID-19.
A partnership rooted in transparency and science.
And together, we will mount an effective response to the pandemic that gets us all back to our lives and loved ones: whitehouse.gov/priorities/co…
Tim Yardley retweeted
Join us January 28 @ 1:00PM EST for our next (CS)²AI ONLINE: Case Study on Attack Detection & Response in a Power Grid Blackstar Scenario with @timyardley
Register Today: buff.ly/3sO9Zv4
Tim Yardley retweeted
The Joint Chiefs of Staff have sent this letter to the U.S. military about the attack on the U.S. Capitol, and the forthcoming transition of power to President-elect Biden as "our 46th Commander in Chief."
Tim Yardley retweeted
Do you see anyone you recognize? The #FBI is still seeking information to help identify individuals who actively instigated violence on January 6 in Washington, D.C. Visit ow.ly/skY550D3JL1 to see images from current cases, and submit tips to fbi.gov/USCapitol.
ALT Seeking information poster with image collage