Openwall @Openwall

Infosec focused free software, research, publications, community activities @oss_security. Tweets are announcements. Please direct questions to @solardiz. openwall.com Joined June 2010

Tweets

380
Followers

7K
Following

14
Likes

0

Openwall @Openwall

2 weeks ago

We've just published the slides of @solardiz's @nullcon Berlin 2025 talk "Linux Kernel Runtime Guard (LKRG) 1.0" openwall.com/lists/announce… #LKRG #nullconBerlin2025 #nullcon

0 17 38 8K 13

Download Image

Strengthening Linux Security With Kernel Runtime Guard 🎯 #Linux security remains a pressing concern as vulnerabilities continue to expose critical systems. @solardiz, founder of @Openwall, and senior principal security engineer at CIQ, said Linux Kernel Runtime Guard's, or…

0 3 4 2K 0

Download Video

Openwall @Openwall

4 weeks ago

Linux Kernel Runtime Guard @lkrg_org 1.0.0 by @Adam_pi3 @solardiz @kerneltoast et al. is out, adds support for Linux 6.13+ (tested to 6.17-rc4), forward-edge CFI (Intel CET IBT, KCFI), ..., reduces performance overhead, shrinks the codebase by ~2500 lines. openwall.com/lists/announce…

CIQ @CtrlIQ

a month ago

0 2 4 3K 1

0 8 19 3K 2

NULLCON @nullcon

2 months ago

At #NullconBerlin2025, @solardiz will walk us through the journey from LKRG’s edgy debut to its 1.0 release – complete with real-world attacks, trade-offs, nasty bugs, & some honest truths about kernel hardening. Know More: nullcon.net/berlin-2025/sp… #LKRG #LinuxSecurity

1 6 14 3K 4

Download Image

Openwall @Openwall

4 months ago

End of an era: our CVSweb service turned 21 today, and was promptly retired. Our anoncvs was similarly shut down at the age of 21 two years ago, quietly.

Openwall @Openwall

5 years ago

End of an era: our CVSweb service turned 21 today, and was promptly retired. Our anoncvs was similarly shut down at the age of 21 two years ago, quietly.

1 9 16 0 1

0 3 12 2K 2

CIQ @CtrlIQ

5 months ago

🔒 Enhancing LKRG: A Step Toward Stronger Security. CIQ's own Sultan Alsawaf recently contributed impactful updates to the LKRG project, fixing longstanding bugs & making it stronger & more stable than ever. Learn more here 🔗 hubs.li/Q03jDBsj0 #HPC #IT #LKRG #OpenSource…

0 6 8 1K 1

Download Image

kmkz @kmkz_security

6 months ago

#MITRE #CVE is great (dead?), but @Openwall 's #OVE has been a system for vuln. tracking-ID since 2016 ! Ex: #Exim CVE-2019-13917 also has OVE ID: OVE-20190718-0006 I used both for tracking vulnerabilities since 2k16. Time to give #OVE more visibility: openwall.com/ove/

0 2 2 1K 1

Solar Designer @solardiz

7 months ago

I'm happy to build upon and extend the ideas and approaches we had tested and proven, and expertise gained building @Openwall's security enhanced Linux distribution, now for @CtrlIQ's wider audience and in a modern context.

CIQ @CtrlIQ

7 months ago

0 6 15 6K 1

Download Image

1 7 18 10K 4

Solar Designer @solardiz

8 months ago

Interview with @Adam_pi3 and me about LKRG, in English adwersarz.pl/polish-it-secu… and Polish

Adwersarz.pl @adwersarz_pl

8 months ago

Interview with @Adam_pi3 and me about LKRG, in English adwersarz.pl/polish-it-secu… and Polish

0 5 9 9K 2

1 12 26 6K 5

Openwall @Openwall

11 months ago

Linux Kernel Runtime Guard @lkrg_org 0.9.9 by @Adam_pi3 et al. is out, adds support for Linux 6.11+, 6.10.10+, 5.10.220+, CentOS Stream 9 (upcoming RHEL 9.5). openwall.com/lists/announce… Updated packages for Rocky Linux 9.4 and 8.10 being released sig-security.rocky.page/packages/lkrg/ @rocky_linux

1 5 22 3K 3

Craig Rowland - Agentless Linux Security @CraigHRowland

a year ago

We sponsored the porting of the yescrypt Linux password hash algorithm to Go as an open source project. Read more below. This is now part of our agentless password auditor feature on Linux as well.

Openwall @Openwall

a year ago

We sponsored the porting of the yescrypt Linux password hash algorithm to Go as an open source project. Read more below. This is now part of our agentless password auditor feature on Linux as well.

0 6 12 5K 0

1 3 11 3K 1

Openwall @Openwall

a year ago

Announcing yescrypt-go, our pure Go reimplementation of yescrypt key derivation function (KDF) and password hashing scheme. Builds upon @dchest's Go scrypt, with yescrypt support added by @solardiz. Sponsored by @SandflySecurity. openwall.com/lists/announce… x.com/SandflySecurit…

Sandfly Security @SandflySecurity

a year ago

0 1 9 5K 2

0 6 12 5K 0

Solar Designer @solardiz

a year ago

Updated my @offensive_con keynote talk slides page to include links to our other related presentations openwall.com/presentations/…

Openwall @Openwall

a year ago

Updated my @offensive_con keynote talk slides page to include links to our other related presentations openwall.com/presentations/… https://t.co/SuJB4Y7ANp

0 14 39 24K 15

1 23 60 16K 19

Download Image

Openwall @Openwall

a year ago

Just published slides of @solardiz's @offensive_con keynote talk "Password cracking: past, present, future" openwall.com/lists/announce…

0 14 39 24K 15

Open Source Security mailing list @oss_security

a year ago

Is Open Source focused threat intelligence - Tactics, Techniques, and Procedures (TTPs), Indicators of Compromise (IOCs), exploits/rootkits/backdoors in the wild - a desirable topic for oss-security or for a separate mailing list? If separate, where to draw the line (reply)?

1 3 5 2K 0

Open Source Security mailing list @oss_security

a year ago

CVE-2024-31497: PuTTY: Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces openwall.com/lists/oss-secu… Affected Products - PuTTY 0.68 - 0.80 - FileZilla 3.24.1 - 3.66.5 - WinSCP 5.9.5 - 6.3.2 - TortoiseGit 2.4.0.2 - 2.15.0 - TortoiseSVN 1.10.0 - 1.14.6

1 49 117 17K 58

hyperlex @hyperlex2k

a year ago

@solardiz @Adam_pi3 @lkrg_org github.com/YuriiCrimson/E… (with the kernel_path fixed) gives me a root shell on a fully patched Debian 12. But with LKRG loaded I see