Replying to @head_tennis
@head_tennis can you please just make the Gravity Pro in a 16x19 pattern? Been 5+ years and 3 gravity models where I can’t even customize the gravity mp or pro to what I need.
My old graphene speed MP is just a 13 year old version of the gravity pro mold in 16x19 string pattern
Looking forward to meeting some fellow Infosec leaders over the next couple days while GDC is going on in San Francisco. If you're there and would like to meet, let me know!
Time for an Arm-twist! CVE-2023-4039
Tom Hebb (Meta red team) and I discovered an 0day in GCC (for AArch64 targets) during my Arm exploitation training.
It renders stack canaries against overflows of dynamically-sized variables useless.
github.com/metaredteam/exter…
It is with profound sadness that we mourn the loss of our friend and mentor, @aloria. Kelly had an indomitable spirit, and our world is a bit darker without her.
Wow, holy shit this is far away from anything else I’ve seen. Insane.
Google basically solved AI music: google-research.github.io/se…
[email protected] retweeted
#enigma2023 is a wrap! Awesome seeing everyone, thanks for the opportunity to talk about hard problems in hardware privacy and to all the amazing speakers for sharing your ideas. Thanks @enigmaconf for hosting a top notch event ❤️.
usenix.org/conference/enigma…
Sad to have had to miss this (my favorite con) at the last minute... But there are awesome people you should meet in my place if you're around. Say hi to @sirus or @rootfoo (presenting Thursday) if you're around! #enigma2023
A snapshot from our opening session at #enigma2023: The Emperor's New Clothes: Location Data and the Promise of Anonymization.
CircleCI Security Alert [4 Jan. 2023]
We strongly recommend all CircleCI customers rotate secrets stored on our system. Read more: circleci.com/blog/january-4-…
I resigned from Meta, and my internal post got leaked to the press, resulting in some fragmented quotes. Here is the full thing: facebook.com/permalink.php?s…
We also just published new payout guidelines for different bug categories, ranging as high as $300K, making our program one of the highest-paying in the industry. about.fb.com/news/2022/12/me… (6/6)
Scoop: InfraGard, a program run by the U.S. Federal Bureau of Investigation (FBI) to build cyber/physical threat info sharing partnerships w/ the private sector, this week saw its database of contact information on more than 80,000 members go up for sale. krebsonsecurity.com/2022/12/…
LinkedIn really flies under the radar as the social media platform that’s absolutely the most unhinged
A buddy who's interested in end-to-end encryption (E2EE) but hasn't done one of these projects in the very messy place which is the real world happened to ask me this morning about pitfalls which might not be obvious. So here's a partial list in the hopes that it's helpful. 🧵






















