philip (@flihp) header
philip (@flihp) profile picture

philip

@flihp

Infosec-ish. I have an employer. These are not their comms.
twobit.org
Joined February 2011
  • Tweets4K
  • Following0
  • Followers224
175Media
Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)Photo by philip (@flihp)
There is no "cloud", just other peoples computers. There is no "internet of things", just other peoples computers in your house. #cloud #IoT
3
297
7
297
philip retweeted
Frank (@jedisct1) profile picture
Frank
@jedisct16 May 2023
Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security securityonline.info/intel-oe…
Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

In April, MSI fell victim to a cyberattack perpetrated by the ransomware group Money Message, who successfully infiltrated MSI’s internal systems and exfiltrated a staggering 1.5TB of data, …

securityonline.info
20
3
59
7,430
David Jolicoeur: Rapper and founding member of De La Soul dies - BBC News - bbc.com/news/world-us-canada… - #RIPDave🕊
David Jolicoeur: Rapper and founding member of De La Soul dies

David Jolicoeur: Rapper and founding member of De La Soul dies

David Jolicoeur went by the name Trugoy the Dove and was notably absent from last week's Grammy's.

bbc.com
9
46
15
141
72,980
Tesla video promoting self-driving was staged, engineer testifies reut.rs/3CVvjFn
Image from Reuters U.S. News (@ReutersUS)
4
24
3
79
21,183
Hmmm. I just had a bizarre experience, involving a global news organisation and a trillion dollar corporation. (I got caught in the middle, so... owch.) It’s not the sort of experience the people involved usually talk about in public… so I think I’ll talk about it in public. 🧵
226
15,455
1,858
34,532
7,471,915
As promised: Oxide Corporate Security Engineer * Remote-friendly * $185k salary Details: oxide.computer/careers/corpo…
1
33
1
53
Today, we are publishing several practically-exploitable cryptographic vulnerabilities in the Matrix (@matrixdotorg) standard and their flagship client Element, with Daniel Jones (@djwj_), Benjamin Dowling (@dowlingbj) and Martin R. Albrecht (@martinralbrecht).
10
201
35
613
Linus Torvalds: Rust will go into Linux 6.1 zd.net/3Sbj5hP#ftag=COS-05-1… via @ZDNET & @sjvn It's official. @rustlang will be merged into the #Linux kernel 6.1.
Linus Torvalds: Rust will go into Linux 6.1 - ZDNET

Linus Torvalds: Rust will go into Linux 6.1 - ZDNET

At the Kernel Maintainers Summit, the question wasn't, "Would Rust make it into Linux?" Instead, it was, "What to do about its compilers?"

zdnet.com
33
688
114
2,939
If you are at #OSFC2022 and you are interested in an @oxidecomputer laptop sticker, come see me -- I've got 'em!
Oxide Computer laptop stickers

ALT Oxide Computer laptop stickers

6
3
91
Finally got my photo op with the @oxidecomputer rack. Even an empty EVT rack was super impressive, can’t wait to travel and see the full demo rack in CA soon!
Image from Kate Hicks (@mrskatehicks)
Image from Kate Hicks (@mrskatehicks)
8
13
3
341
Obituary: Peter Eckersley found a mission in San Francisco: Protecting the world from online snooping. He died at age 44. on.wsj.com/3TYvJSr
7
105
12
278
Take a look at the new @oxidecomputer site. Oxide racks are shipping by the end of the year, and this felt like a great opportunity to develop something that we can build upon for launch and beyond... oxide.computer/
Oxide Computer Company

Oxide Computer Company

The cloud you own. Hardware, with the software baked in, for running infrastructure at scale.

oxide.computer
11
26
7
280
🚨ATTENTION🚨 Apple found two 0-days actively in use that could effectively give attackers full access to device. For most folks: update software by end of day If threat model is elevated (journalist, activist, targeted by nation states, etc): update now techcrunch.com/2022/08/17/ip…

Apple releases iOS, iPadOS and macOS security fixes

Update your Apple devices today.

techcrunch.com
86
1,985
256
3,227
Welcome to the party @oxidecomputer - @oxidecomputer believes in open and attestable firmware which makes @oxidecomputer and #OSFC2022 a perfect fit. Psst: @bcantrill , CTO of @oxidecomputer is also giving a talk! Join at osfc.io !
Image from Open Source Firmware Conference (@osfc_io)
4
31
philip retweeted
3mdeb (@3mdeb_com) profile picture
3mdeb@3mdeb_com3 Jun 2022
We can't wait for @linuxplumbers Conference 2022 in Dublin. If you'd like to participate in System Boot and Security MC: lpc.events/event/16/contribu…, and have some topics in mind, please use the CFP: lpc.events/event/16/abstract…

Linux Plumbers Conference 2022

12-14 September, Dublin, Ireland The Linux Plumbers Conference is the premier event for developers working at all levels of the plumbing layer and beyond.

lpc.events
6
6
Our @USENIXSecurity & @RealWorldCrypto paper "Trust Dies in Darkness: Shedding Light on Samsung's TrustZone Keymaster Design" is now online eprint.iacr.org/2022/208. We extract keys and bypass FIDO2 attestation. PoC - github.com/shakevsky/keybust…. With @shakevsky and Avishai Wool
Image from Eyal Ronen (@eyalr0)
Image from Eyal Ronen (@eyalr0)
4
53
5
124
Important Read: please note there is a fake account impersonating as a TrustedSec employee, has 500 followers and INFOSEC people have been talking to this account. @billy_webi0 is not a TrustedSec employee and is trying to get into DMs to scam people.
22
92
5
159
Wanted to learn more about @oxidecomputer Hubris and Humility but watching a video isn't your thing? Cliff has written up the talk as a blog post: cliffle.com/blog/on-hubris-a…
On Hubris And Humility

On Hubris And Humility

cliffle.com
5
19
1
89
Been seeing all the chatter about @oxidecomputer Hubris and Humility? Want to know more? Recording of OSFC talk is now available at talks.osfc.io/osfc2021/talk/…
On Hubris and Humility: developing an OS for robustness in Rust Open Source Firmware Conference 2021

On Hubris and Humility: developing an OS for robustness in Rust Open Source Firmware Conference 2021

On Hubris and Humility: when "write your own OS" isn't the worst idea Hubris is a small open-source operating system for deeply-embedded computer systems, such as our server's replacement for the...

talks.osfc.io
13
1
52
We have been made aware of "scary" emails sent in the last few hours that purport to come from the FBI/DHS. While the emails are indeed being sent from infrastructure that is owned by the FBI/DHS (the LEEP portal), our research shows that these emails *are* fake.
43
606
180
1,214
Not afraid of layout for 20+ layer PCBs with 56Gbps PAM4 and 4000+ ball BGAs? Let's talk. oxide.computer/careers/pcb-d…
13
25
3
207
Load more