Seattle, WA
Joined April 2008
- Tweets3.7K
- Following1.7K
- Followers3.4K
- Likes15.6K
Pinned Tweet
Wow.. EOM here... Security stuff moving to 🐘 ( [email protected] ) and personal moving to 🟦☁️.
This quoted post is unavailable.
not with Meta anymore so not sure why it hasn't shipped to q3 yet but you can still get sensor lock to protect your privacy
With Sensor Lock, even if malware compromises the Android kernel once the Privacy LED turns off the cameras and microphones are electrically disconnected until the power button is pressed. Proud to be shipping this to our customers. On by default on the Quest 3S.
Misha Davidov 🏳️⚧️ retweeted
Trainings to help you progress in your research and career into the field of embedded and silicon security.
Join us at #hardwear_io USA 2024
URL: hardwear.io/usa-2024/trainin…
#RISC-V #automotive #medical #x86-64 #SDR #FaultInjection etc
Misha Davidov 🏳️⚧️ retweeted
In my opinion:
If you’re 30+ and single you should have one main focus in life:
Become a catgirl in VR.
Ahead of your career, your health, social life, everything.
Becoming a catgirl is the most rewarding thing in life and nothing els
In my opinion:
If you’re 30+ and single you should have one main focus in life:
Find a spouse and have kids.
Ahead of your career, your health, social life, everything.
Having kids and building a life with a great partner is the most rewarding thing in life and nothing else is close.
If your life isn’t together and you “aren’t ready” it’s time to grow up and work on yourself with the goal above in mind.
Narrator: It did not pay off.
Sounds like @okta laid off their *entire* Red Team. As in they no longer have the function. Wherever they land will be lucky to have them. If your org relies on okta you may want to start asking questions.
Misha Davidov 🏳️⚧️ retweeted
What’s inside Apple’s $129 Thunderbolt cable? We CT scanned one to find out, and compared it to some cheaper cables… 🧵
Misha Davidov 🏳️⚧️ retweeted
Hey @d0tslash and anyone else with a unitree robot dog.. they just got a lot more fun.
This is Open Robot Parkour: the agility at Boston Dynamics level, but now open-source for everyone.🐕
Two NVIDIA tech here at play:
1. IsaacGym: train the robot dog by speeding up reality 10,000x with massively parallel simulation on GPU.
2. NVIDIA Jetson NX for onboard compute. Only vision, no LiDAR, no motion capture.
Algorithm is very simple & intuitive:
1. Train in easy mode in simulation with groundtruth states. The bot quickly acquires a "sketch" of the agile skills in this step.
2. Finetune in hard mode with dynamics constraints strictly enforced.
3. Distill into a policy using realistic vision and proprioception inputs only.
4. Bridge the sim2real gap by a bit of pre-processing.
The algorithm works on low-cost robot dog hardware, such as Unitree A1 and Go1. It's able to climb high obstacles, leap over large gaps, crawl under low barriers, and squeeze through thin slits.
Very neat work!
Misha Davidov 🏳️⚧️ retweeted
Time for an Arm-twist! CVE-2023-4039
Tom Hebb (Meta red team) and I discovered an 0day in GCC (for AArch64 targets) during my Arm exploitation training.
It renders stack canaries against overflows of dynamically-sized variables useless.
github.com/metaredteam/exter…
Offensive research steering defensive investment is a major part of engineering a secure platform in a risk-forward manner. Read about our internal efforts here: engineering.fb.com/2023/09/1…
Misha Davidov 🏳️⚧️ retweeted
🚨 Coming up next on the pod: Dr Sergey Bratus on academia, hackers and @DARPA's ambitions in cybersecurity
In this snippet, he responds to nonstop chatter that AI will solve all of society's problems. @sergeybratus
Misha Davidov 🏳️⚧️ retweeted
What is Platform Firmware Resiliency aka PFR aka NIST SP800-193? Check out my latest blog for a quick intro to PFR and description of several vulns. A great example of how a security product expands the very same attack surface it was meant to defend.
research.nccgroup.com/2023/0…
Misha Davidov 🏳️⚧️ retweeted
Hello.. is this thing still on?
It's 2023, so here's a fun new blogpost on how we used Intel's x86 CPU JTAG to dump the infamous "secret bootrom" in Microsoft's original Xbox: blog.ret2.io/2023/08/09/jtag…
ALT Using a CodeTAP JTAG debugger connecting to a CPU interposer to dump the Original Xbox's secret bootrom over JTAG.
Misha Davidov 🏳️⚧️ retweeted
And now a moment I’m so proud of to see @Fox0x01 doing the keynote on AI.
Hundreds of hours of work done by her and here we are.
Misha Davidov 🏳️⚧️ retweeted
Please say it louder for the folks in the back: "it's the *cheapest* and *most effective* place to make good security decisions."
Misha Davidov 🏳️⚧️ retweeted
Any Los Angeles based labs want to collaborate on XRD analysis? Obviously, it would be great to fully characterize all the intermediate synthesis products. We're going to be receiving Copper Phosphide from both local and overseas labs early next, and the Lanarkite is ready to go now. If you're within a few hours, I'll drive over now and we can get a first peak.
After we perform the final 3rd reaction, it would also be great to do SEM/EDX (EDS). Then for the 2nd and 3rd batches, maybe we go down the rabbit hole of thin film deposition.
@Caltech @UCLA @UCSB @UCIrvine @UCSanDiego
Quick reminder for the three-step process that is happening. It really is quite simple upon first glance. Solid state chemistry, like French cooking, can have an enormous amount of process nuance that isn't reflected in the ingredient list. I've done a tiny bit of work in the past with high temperature solid state synthesis of exotic materials, but my work is more typically in pharmaceutical crystallization or polymers.
Reaction #1: The reaction between Lead(II) Oxide (PbO) and Lead(II) Sulfate (PbSO4) to produce Lanarkite (Pb2(SO4)O):PbO + PbSO4 -> Pb2(SO4)O (Lanarkite)
Reaction #2: The reaction between Copper (Cu) and Phosphorus (P) to produce Copper Phosphide (Cu3P):3Cu + P -> Cu3P (Copper Phosphide)
Reaction #3: The reaction between Lanarkite (Pb2(SO4)O) and Copper Phosphide (Cu3P) to produce LK99:Pb2(SO4)O + Cu3P -> LK99
Misha Davidov 🏳️⚧️ retweeted
This is big news. TEE for CPU and GPU have arrived! Nvidia Confidential Computing has open-sourced its SDK library. This can imply many things, including outsourced ZKP proof generation with circuit and data privacy... with GPU acceleration on H100.
github.com/NVIDIA/nvtrust
