@Google Security/Privacy - @Android, @GooglePlay, @madebygoogle, team ASAP and team DSAP | Opinions my own | linkedin davekleidermacher, @davek@infosec.exchange
Joined August 2015
- Tweets1.2K
- Following387
- Followers1.5K
- Likes2.1K
Pinned Tweet
I started an (occasional) personal blog, inaugural post on #protectedcomputing. davek.substack.com/p/journey…
David Kleidermacher retweeted
Also, the demo of fake call detection that @Google made for me was an early version.
In the launch today, the contact’s photo is also removed as another visual signal that it's likely an impersonator calling.
Really cool to see that update in action as we found that impactful in our research together!
David Kleidermacher retweeted
Happy for @Google to take part in this work for a more secure digital ecosystem for everyone.
Introducing Project Glasswing: an urgent initiative to help secure the world’s most critical software.
It’s powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans.
anthropic.com/glasswing
We appreciate the public/private partnerships with governments around the world working with us to fight crime and protect the security and privacy of billions of users
David Kleidermacher retweeted
Worried about “passkey lock-in”? This should help put your mind at ease: wired.com/story/passkey-port…
🧵Epic’s latest lawsuit is a meritless and dangerous move. Google did not request that Samsung create their Auto Blocker feature. (1/5)
Epic is suing Google and Samsung for making it too hard to download Fortnite engt.co/4gIc8Bn
That’s why Google offers its own safety features such as Google Play Protect, which checks for harmful apps on a user’s device, regardless of where the app was downloaded. Android device makers are free to innovate and design additional safety features for their devices. (4/5)
David Kleidermacher retweeted
Putting aside their opinions on Wired, iVerify, and Palantir, the GrapheneOS account raises a lot of good points about how this "vulnerability" is way overblown and being misrepresented.
And given how brutally critical of Google they often are, the fact that the GrapheneOS folks are coming out this hard in defense of them really shows how bad the reporting on this issue has been.
The original report makes for a salacious headline but it falls apart really quickly when you actually look at the details.
Wired was manipulated into spreading misinformation to market Palantir and iVerify by misrepresenting a vulnerability in a disabled demo app as being a serious problem which could be exploited in the real world. They should retract the article but won't.
wired.com/story/google-andro…
David Kleidermacher retweeted
@OpenAI claimed in their GPT-4 system card that it isn't effective at finding novel vulnerabilities.
We show this is false. AI agents can autonomously find and exploit zero-day vulnerabilities.
Paper: arxiv.org/abs/2406.01637
🧵 1/7
David Kleidermacher retweeted
It's going to be a big day tomorrow! All that's left is to🙏 to the demo gods and try to get some good 💤's
One more day until #GoogleIO! We’re feeling 🤩. See you tomorrow for the latest news about AI, Search and more.
David Kleidermacher retweeted
Proud @Google joined @CISAgov + others to sign today's secure by design pledge.W/new tech&growing cyber threats I'm proud to work for a company w/such a strong security culture. That's why we've been using secure by design for years&lify its criticality cisa.gov/securebydesign/pled…
David Kleidermacher retweeted
It's #WorldPasswordDay!! At @Google we're celebrating the journey on deprecating passwords! We're happy to report passkeys have been used 1B+ times across 400M Google Accounts. We're also sharing how we'll use them to protect high risk users blog.google/technology/safet…
David Kleidermacher retweeted
Thanks to AI Cyber Challenge collaborators such as @Google, competing teams will have access to state-of-the-art large language models and resources that uniquely support their development process. youtube.com/watch?v=JawYn4b_…
Two schools have both teams in the NCAA Final 4, first time! Win or lose, congrats NC State and UConn!
“Rust teams at Google are as productive as ones using Go, and more than twice as productive as teams using C++.” @larsberg_ #RustNationUK
David Kleidermacher retweeted
While at the Singapore Member Meeting, we seized the moment and recognized the inspiring women of the Alliance whose transformative work not only changes the world in which we live but also breaks barriers for the generations of women who will follow!
#csaiot #womenintech xitter.cf/csaiot/status/17702389…
