SVP of Strategy at Eclypsium. Device security. Researcher. Borg. Views expressed here are my own.
Joined October 2016
- Tweets1K
- Following342
- Followers338
- Likes3.3K
This one was instrumental for getting me interested in the space as well. Lots of stuff happened after this...
I'm trying to start a positive security trend of #ResearchRespect wherein we give shoutouts to researchers whose work we really respect and describe why. I'll go first (in no particular order) with "Attacking Intel BIOS" by Rafal Wojtczuk and @AlexTereshkin at BlackHat 2009
2
79
John Loucaides retweeted
I'm trying to start a positive security trend of #ResearchRespect wherein we give shoutouts to researchers whose work we really respect and describe why. I'll go first (in no particular order) with "Attacking Intel BIOS" by Rafal Wojtczuk and @AlexTereshkin at BlackHat 2009
John Loucaides retweeted
I’m glad this mentioned explicitly that it’s for the threat model of “Harvest Now, Decrypt Later”. Because until all the SecureBoot infrastructure is also post-quantum, the “attacker can sign arbitrary code for bootloader” attack assumption would still allow realtime coms capture
🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. security.apple.com/blog/imes…
John Loucaides retweeted
Lots of noise about `CVE-2024-21626 runc container escape`. As long as you have SELinux enabled, the container processes are blocked from reading sensitive data and writing all data. Podman enables SELinux by default and defaults to rootless mode.
John Loucaides retweeted
If any random UEFI vendor wants to learn something from #LogoFAIL other than demanding 300+ days of embargoe that then gets broken by the very same vendor, let it be "we need to invest in exploitation prevention and hardening, because securing 10M+ LOC of C and ASL is impossible"
John Loucaides retweeted
We're excited to announce our collaboration w/@Intel to provide enhanced visibility into supply chains by integrating key supply chain & vulnerability insights from Intel’s Endpoint Cloud Services into Eclypsium's Infrastructure #SupplyChainSecurity suite! bit.ly/3QUSxmD
John Loucaides retweeted
.@JohnLoucaides, SVP Strategy at Eclypsium, joins us on the show to discuss protecting the federal supply chain! #vulnerability #DoDs #firmware
bit.ly/3PLnWpB
I hope @vincentzimmer and friends are going to celebrate!
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
This malware appears to target dell machines and hide with the dell update app (command).
🚨 Experts expose a year-long cyber operation targeting an East Asian IT firm, deploying custom #malware called RDStealer to compromise data and steal credentials.
Learn more: thehackernews.com/2023/06/ex…
#cyberattack #hacking #cybersecurity #infosec
1
2
180
@eclypsium (and many others) has published about a lot of attacks targeting update apps. The recent issue with gigabyte is a different variation, though. This update app is installed by firmware and fails to secure what it downloads and runs.
1
1
64
John Loucaides retweeted
I talked with @securityweekly recently about firmware security and #OST2. Thankfully Paul asked questions about how OST2 helps teach fwsec, when I went off into the weeds on fwsec, since it's something I like talking about
youtube.com/watch?v=gXaDBHz6…
John Loucaides retweeted
Good reference to learn more about Intel debug technology: intel.com/content/www/us/en/…
John Loucaides retweeted
A while back, Eclypsium Research started tracking “screwed drivers” which enable “bring your own vulnerable driver attacks.” However, they are also useful for learning these deeper aspects of technology.
