@Openwall

Infosec focused free software, research, publications, community activities @oss_security. Tweets are announcements. Please direct questions to @solardiz.

openwall.com
Joined June 2010
  • Tweets385
  • Following14
  • Followers7.2K
2Media
Openwall retweeted
Hash Suite@HashSuiteOct 18
Hash Suite 4.1 (Windows): ~2.5x speedup on CPUs with AVX-512, SHA-NI. Support for MS Office encrypted files, Pcapng and Capng capture files. Import hashes by dropping/opening a supported file or passing it on the command line. UTF-8 support for usernames. hashsuite.openwall.net/downl…
2
3
539
April 2026 was the busiest month for oss-security in 11 years. 311 messages posted. We surpassed the XZ backdoor spike of March-April 2024. We last had 300+ in April 2015 when we still had CVE assignment via the list. Now we're back without that incentive. openwall.com/lists/oss-secur…
2
8
21
2,040
Sponsor spotlight: @Openwall The people behind John the Ripper and decades of open-source security work. If anyone understands community-driven security, it's them. Thank you for backing #BSidesLjubljana. #InfoSec #Cybersecurity #Openwall
openwall

ALT openwall

1
2
630
Openwall retweeted
NULLCON@nullcon29 Nov 2025
At #NullconBerlin2025, @solardiz unpacked how Linux Kernel Runtime Guard (LKRG) 1.0 brings real-time integrity checking & exploit detection to the Linux kernel, even across different versions & edge-case environments. Watch Now: youtu.be/9hQULqxFdBs?si=yp1L… #LKRG #LinuxSecurity
1
6
15
4,490
What should @Openwall's simpler vulnerability scoring system (CVSS alternative) be called? Note that we already have OVE openwall.com/ove/ as a CVE alternative, but unfortunately the OVSS acronym already has a bit of use in CS/AI for "open-vocabulary semantic segmentation".
15%No preference or Other
35%OVSS
25%SVSS
25%OSVSS
20 votes • Final results
2
1
2
1,535
Hash Suite 4.0 (Windows) adds support for custom Python scripts as key-provider, updated wordlists to download, better high-resolution support, and should have fewer antivirus false positives. hashsuite.openwall.net/downl…
2
5
1,287
Strengthening Linux Security With Kernel Runtime Guard 🎯 #Linux security remains a pressing concern as vulnerabilities continue to expose critical systems. @solardiz, founder of @Openwall, and senior principal security engineer at CIQ, said Linux Kernel Runtime Guard's, or LKRG, 1.0 release brought major improvements in testing and code cleanup. Watch his full interview with @aseemjakhar: inforisktoday.com/strengthen… #ISMGNews #ISMGStudio #cybersecurity #NullconBerlin2025 @nullcon
3
1
6
2,863
Openwall retweeted
NULLCON@nullcon29 Jul 2025
At #NullconBerlin2025, @solardiz will walk us through the journey from LKRG’s edgy debut to its 1.0 release – complete with real-world attacks, trade-offs, nasty bugs, & some honest truths about kernel hardening. Know More: nullcon.net/berlin-2025/spea… #LKRG #LinuxSecurity
1
6
2
14
3,147
Openwall retweeted
CIQ
@CtrlIQ23 Apr 2025
🔒 Enhancing LKRG: A Step Toward Stronger Security. CIQ's own Sultan Alsawaf recently contributed impactful updates to the LKRG project, fixing longstanding bugs & making it stronger & more stable than ever. Learn more here 🔗 hubs.li/Q03jDBsj0 #HPC #IT #LKRG #OpenSource #Linux
6
7
1,617
#MITRE #CVE is great (dead?), but @Openwall 's #OVE has been a system for vuln. tracking-ID since 2016 ! Ex: #Exim CVE-2019-13917 also has OVE ID: OVE-20190718-0006 I used both for tracking vulnerabilities since 2k16. Time to give #OVE more visibility: openwall.com/ove/
2
3
1,483
I'm happy to build upon and extend the ideas and approaches we had tested and proven, and expertise gained building @Openwall's security enhanced Linux distribution, now for @CtrlIQ's wider audience and in a modern context.
CIQ
@CtrlIQ11 Mar 2025
📣 Exciting news from CIQ! 📣 Announcing Rocky Linux from CIQ - Hardened! Read the press release: hubs.li/Q03blcsv0 #RLCHardened #RLC #RockyLinux #CIQ #SysAdmin #ProductLaunch
1
7
1
18
10,676
Interview with @Adam_pi3 and me about LKRG, in English adwersarz.pl/polish-it-secur… and Polish
Adwersarz.pl
@adwersarz_pl3 Feb 2025
Czas na wywiad! Rozmawiamy z @Adam_pi3 i @solardiz o LKRG (Linux Runtime Kernel Guard), które może znacznie utrudnić zhackowanie Linuxa. Co słychać i jak przebiega rozwój projektu, czy ktoś próbował skutecznie obejść LKRG? Zapraszamy do lektury! adwersarz.pl/polskie-projekt…
1
12
25
6,471
We sponsored the porting of the yescrypt Linux password hash algorithm to Go as an open source project. Read more below. This is now part of our agentless password auditor feature on Linux as well.
Openwall@Openwall21 Aug 2024
Announcing yescrypt-go, our pure Go reimplementation of yescrypt key derivation function (KDF) and password hashing scheme. Builds upon @dchest's Go scrypt, with yescrypt support added by @solardiz. Sponsored by @SandflySecurity. openwall.com/lists/announce/… xitter.cf/SandflySecurity/status…
1
3
9
2,570
Updated my @offensive_con keynote talk slides page to include links to our other related presentations openwall.com/presentations/O…
"Optimization" slide from "Password cracking: past, present, future" showing the break-down into speed vs. focus and the many trade-offs

ALT "Optimization" slide from "Password cracking: past, present, future" showing the break-down into speed vs. focus and the many trade-offs

Openwall@Openwall14 May 2024
Just published slides of @solardiz's @offensive_con keynote talk "Password cracking: past, present, future" openwall.com/lists/announce/…
1
23
57
16,286
Is Open Source focused threat intelligence - Tactics, Techniques, and Procedures (TTPs), Indicators of Compromise (IOCs), exploits/rootkits/backdoors in the wild - a desirable topic for oss-security or for a separate mailing list? If separate, where to draw the line (reply)?
21%No preference or Other
38%Desirable on oss-security
36%Separate also at Openwall
5%Separate, hosted by LF
42 votes • Final results
1
3
5
2,273
CVE-2024-31497: PuTTY: Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces openwall.com/lists/oss-secur… Affected Products - PuTTY 0.68 - 0.80 - FileZilla 3.24.1 - 3.66.5 - WinSCP 5.9.5 - 6.3.2 - TortoiseGit 2.4.0.2 - 2.15.0 - TortoiseSVN 1.10.0 - 1.14.6
1
48
3
116
16,930
Replying to @solardiz @Adam_pi3 @lkrg_org
github.com/YuriiCrimson/Expl… (with the kernel_path fixed) gives me a root shell on a fully patched Debian 12. But with LKRG loaded I see
1
6
9
2,142
Backdoor in upstream xz/liblzma leading to ssh server compromise openwall.com/lists/oss-secur…
6
272
66
455
214,481
oss-security and (linux-)distros infrastructure migrated to the Netherlands. Statistics for all of 2023. openwall.com/lists/oss-secur…
2
2
2,429
Openwall retweeted
OpenSSF@openssf14 Nov 2023
The oss-security & (linux)-distros mailing lists, operated by Openwall, have been a key part of the community's ability to collaborate on and communicate security issues. "The OpenSSF is proud to sponsor the operation of these lists." - @omkhar_openssf openssf.org/blog/2023/11/14/…
5
5
2,799
Load more