@Google Security/Privacy - @Android, @GooglePlay, @madebygoogle, team ASAP and team DSAP | Opinions my own | linkedin davekleidermacher, @davek@infosec.exchange
Joined August 2015
- Tweets1.2K
- Following387
- Followers1.5K
- Likes2.1K
David Kleidermacher retweeted
Also, the demo of fake call detection that @Google made for me was an early version.
In the launch today, the contact’s photo is also removed as another visual signal that it's likely an impersonator calling.
Really cool to see that update in action as we found that impactful in our research together!
David Kleidermacher retweeted
Happy for @Google to take part in this work for a more secure digital ecosystem for everyone.
Introducing Project Glasswing: an urgent initiative to help secure the world’s most critical software.
It’s powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans.
anthropic.com/glasswing
David Kleidermacher retweeted
Worried about “passkey lock-in”? This should help put your mind at ease: wired.com/story/passkey-port…
David Kleidermacher retweeted
Putting aside their opinions on Wired, iVerify, and Palantir, the GrapheneOS account raises a lot of good points about how this "vulnerability" is way overblown and being misrepresented.
And given how brutally critical of Google they often are, the fact that the GrapheneOS folks are coming out this hard in defense of them really shows how bad the reporting on this issue has been.
The original report makes for a salacious headline but it falls apart really quickly when you actually look at the details.
Wired was manipulated into spreading misinformation to market Palantir and iVerify by misrepresenting a vulnerability in a disabled demo app as being a serious problem which could be exploited in the real world. They should retract the article but won't.
wired.com/story/google-andro…
David Kleidermacher retweeted
@OpenAI claimed in their GPT-4 system card that it isn't effective at finding novel vulnerabilities.
We show this is false. AI agents can autonomously find and exploit zero-day vulnerabilities.
Paper: arxiv.org/abs/2406.01637
🧵 1/7
David Kleidermacher retweeted
It's going to be a big day tomorrow! All that's left is to🙏 to the demo gods and try to get some good 💤's
One more day until #GoogleIO! We’re feeling 🤩. See you tomorrow for the latest news about AI, Search and more.
David Kleidermacher retweeted
Proud @Google joined @CISAgov + others to sign today's secure by design pledge.W/new tech&growing cyber threats I'm proud to work for a company w/such a strong security culture. That's why we've been using secure by design for years&lify its criticality cisa.gov/securebydesign/pled…
David Kleidermacher retweeted
It's #WorldPasswordDay!! At @Google we're celebrating the journey on deprecating passwords! We're happy to report passkeys have been used 1B+ times across 400M Google Accounts. We're also sharing how we'll use them to protect high risk users blog.google/technology/safet…
David Kleidermacher retweeted
Thanks to AI Cyber Challenge collaborators such as @Google, competing teams will have access to state-of-the-art large language models and resources that uniquely support their development process. youtube.com/watch?v=JawYn4b_…
David Kleidermacher retweeted
While at the Singapore Member Meeting, we seized the moment and recognized the inspiring women of the Alliance whose transformative work not only changes the world in which we live but also breaks barriers for the generations of women who will follow!
#csaiot #womenintech teapawt.net/csaiot/status/17702389…
David Kleidermacher retweeted
The Alliance Product Security Working Group is pleased to announce the release of their #IoT Device Security Specification 1.0. This groundbreaking initiative aims to establish a unified IoT #cybersecurity standard & certification program.
bit.ly/48IsLYj
#csaiot
David Kleidermacher retweeted
Exciting News for Latina Women in Cybersecurity! Join Our NYC Meet-Up! 🌟
📅 Date: Tuesday March 26th, 2024
🕒 Time: 6:30 - 8:30PM
📍 Location: Manhattan, New York (Final location to be provided after RSVP)
RSVP Today!
loom.ly/PnKTi6c
David Kleidermacher retweeted
We've now seen #rustlang adopted by so many teams in so many settings that I'm thrilled to get to talk about some of the additional benefits (as well as debunking some myths...) of adopting Rust on your team. It's about more than just performance and security!
We're excited to announce that Lars Bergstrom (@larsberg_), Director of Engineering at @Google will be delivering our closing keynote for #rustnationuk24 day one.
Join his talk 'Beyond Safety and Speed: How Rust Fuels Team Productivity' this March.
#rust #rustnationuk #rustlang
David Kleidermacher retweeted
Today I spoke on the importance of Secure by Design on behalf of @Google alongside @CISAgov @FDD @VenableLLP & more. We also launched a paper on @Google's approach to Secure by Design & published on how it can be applied to address memory safety vulns: blog.google/technology/safet…
David Kleidermacher retweeted
I'm super excited to say that Google's Android Malware Research team is hiring again! We're looking for a mix of 4 senior and junior engineers who want to join our team in the Bangalore office!
Apply at google.com/about/careers/app…
David Kleidermacher retweeted
Responsible AI takes working together in pursuit of shared prosperity. As part of the US's AI Safety Institute Consortium, we’ll be sharing our learnings about how to advance AI boldly and responsibly. commerce.gov/news/press-rele…
David Kleidermacher retweeted
Android's experience with Rust has been excellent. My team built the first major Rust component (keystore), which is a medium-sized component with significant concurrency. We're now three years in and it has been basically flawless.
David Kleidermacher retweeted
Whether you're counting down with loved ones, virtually connecting across borders, or embracing a moment of solitude, may the New Year bring you renewed energy, fresh perspectives, and new opportunities.
#LatinasinCyber
David Kleidermacher retweeted
🎉📈 Android Virtualization Framework (AVF) brings cutting-edge VM capabilities to select Android 14 devices.
Android 14 adds AVF support for use in privileged applications, an improved developer experience, and more.
Details → goo.gle/46LXvqx
ALT Android robot inside a phone with a lock symbol surrounded by more Android robots inside square icons with lock symbols
David Kleidermacher retweeted
It’s been exactly a year since we open sourced our internal training “Comprehensive Rust.” We’re deeply humbled by the community support! Thanks to all who took the training, used the material, reported issues, and especially to the hundreds(!) of contributors. Some numbers:
1/4
The Android team has open sourced our internal Rust Training! It's a four day course covering the full spectrum of Rust, from basic syntax to advanced topics like generics and error handling. It also includes Android-specific content on the last day.
google.github.io/comprehensi…