Adversary resistant computing. Open source security. Based in Montreal.
Montreal
Joined January 2009
- Tweets1.5K
- Following33
- Followers5.6K
- Likes5
subgraph retweeted
“Where are the most powerful AIs in the world right now? They are at Google and Facebook. And their AIs are essentially playing chess against our brains and trying to figure out what’s the best way to get you hooked.” -@tristanharris at #knightcomm cc @CommonSense – at Stanford, CA
subgraph retweeted
Interesting glimpse into what this looks like outside of the US market, in another language. xitter.cf/labnol/status/96910016…
subgraph retweeted
82% of mobile (Android) apps send PII to at least on ad tracking service, and many send to more than one. What data is being leaked and where does it go? blog.acolyer.org/2018/03/05/…
subgraph retweeted
it was Android that let Facebook have this data xitter.cf/dylanmckaynz/status/97…
subgraph retweeted
The problem with Facebook is not *just* the loss of your privacy and the fact that it can be used as a totalitarian panopticon. The more worrying issue, in my opinion, is its use of digital information consumption as a psychological control vector. Time for a thread
subgraph retweeted
Linux Kernel Exploitation github.com/xairy/linux-kerne…
subgraph retweeted
Newly discovered malware that lurked for 6 years was a well-oiled spy engine arstechnica.com/information-… by @dangoodin001
subgraph retweeted
Found another off-by-one remote code execution vulnerability (CVE-2018-6789) in Exim mail server! It was challenging but interesting and we finally achieve RCE and bypass mitigations (ASLR, NX …) successfully. Details here:
devco.re/blog/2018/03/06/exi…
subgraph retweeted
The only common denominator between Tails and Citadel is that they both have a Gnome desktop environment.
Citadel is not a live disk, is not built from Debian (or any other distro), and does not have any Tor software installed.
subgraph retweeted
But can we have our cake and also eat our cake too?
Is there some way to achieve the interesting properties of a Linux live disk while avoiding the annoying properties?
To what extent might this be possible? How could it be done?
To be continued...
subgraph retweeted
I expect we will write a blog post about the direction we’re going within the next month, and we may also publish something then as a ‘technology preview’. It will be several months at least until we release the full new version.
subgraph retweeted
Reliability is actually a key characteristic of the new system design we’re working on. It should no longer be possible to break anything by updating, and especially not gnome or gdm.
subgraph retweeted
Maybe sandboxing Linux desktop applications that process untrusted data is a good idea after all.
(btw, we’ve been quietly working on very big improvements to Subgraph OS. More news coming soon.)
github.com/jollheef/libreoff…
subgraph retweeted
From Brussels with love, the REcon Montreal 2018 CFP and trainings have been announced: recon.cx/2018/montreal/cfp/
Register early to benefit from a steep discount: tickets.recon.cx/reconmtl/re…
subgraph retweeted
I no longer post to LWN, but to answer this question: lwn.net/Articles/743408/ Yes i386 is affected by Meltdown. No, no one else other than us seems to care enough about it to offer any fixes or give timelines for future fixes. AFAIK we're the only ones with a solution.
