Boutique information security consultancy from Croatia, ran by @kisasondi
Varazdin, Croatia
Joined September 2018
- Tweets39
- Following47
- Followers81
- Likes0
Mac malware of 2019: objective-see.com/blog/blog_…
Observe and tune your detections...
Here's our first open source release, a security policy generator. Enjoy: github.com/oruinfosec/Securi…
Zero Trust Architecture: Draft NIST SP 800-207 Available for Comment : nist.gov/news-events/news/20…
Check out Google's internal code review guidelines. Great reading:
google.github.io/eng-practic…
Great paper -> Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud : ai.google/research/pubs/pub4…
Great work, and an interesting read!
We bypassed Encrypt Only mode Secure Boot on Xilinx Zynq UltraScale+ SoCs.
The two identified flaws are design issues which allow secure boot bypass. The 1st one affects the hardware boot ROM and therefore has no mitigation.
github.com/inversepath/advis…
xilinx.com/support/answers/7…
This work done by the @trailofbits and @Atredis on the @kubernetesio security audit shows and sets the benchmark for how security audits should be done. Great work! A: github.com/kubernetes/commun… and B: github.com/trailofbits/audit…
Oru retweeted
We re-read 23 smart contract audits and found:
- 78% of high impact, easily exploitable findings are discoverable with automated analysis tools
- 50% of all findings will never be found with automated tools
- Unit testing _has no impact on security_
teapawt.net/trailofbits/status/115…
246 Findings From our Smart Contract Audits: An Executive Summary blog.trailofbits.com/2019/08…
Oru retweeted
Our first confirmed speaker is @ifsecure from Google Project Zero, with the talk: "Flash Click2play in Web Browsers and Other Horror Stories"
Want to use #kubernetes ? Make sure your IR/DR/HA plans are solid, here's a good overview of some failure stories that might help:
github.com/hjacobs/kubernete…
Oru retweeted
Here's my slide deck from today's #k8smeetuphr (A short primer into #agile #appsec ) - docs.google.com/presentation…
