twiz @lazytyped

Barely grasping the small picture. Opinions are all someone else's Joined October 2013

Tweets

3K
Followers

815
Following

311
Likes

790

Halvar Flake @halvarflake

3 weeks ago

I have often stated that well-implemented memory tagging will be a game changer for memory corruptions. And it seems that with the next iPhone it's finally here: security.apple.com/blog/memory-in…

5 27 220 18K 62

Amazing work! I’m surprised to see Apple managed to get synchronous tag checking in production. I wouldn’t have bet on that given the performance constraints. Getting the sign off to get so much security-specific silicon is also a huge accomplishment.

Ivan Krstić @radian

3 weeks ago

54 502 3K 344K 966

1 8 119 12K 20

Dino A. Dai Zovi @dinodaizovi

3 weeks ago

There have been various debates about how to improve memory safety with some advocating for rewriting all critical software in newer programming languages. I believed that would take too long and updating CPUs, lang runtimes, and compilers ships faster:👇 security.apple.com/blog/memory-in…

0 5 14 2K 1

Thomas H. Ptacek @tqbf

3 weeks ago

Congrats to everyone at SEAR for this; this is a crazy announcement. security.apple.com/blog/memory-in…

3 33 303 30K 79

Kostya Serebryany @kayseesee

3 weeks ago

Congratulations to the Apple team! I'm proud to have contributed to the inception of MTE in 2017. Hopefully, other vendors will catch up.

Ivan Krstić @radian

3 weeks ago

Congratulations to the Apple team! I'm proud to have contributed to the inception of MTE in 2017. Hopefully, other vendors will catch up.

54 502 3K 344K 966

3 14 120 14K 19

Longhorn @never_released

3 weeks ago

Ugh apple might make me buy an M5 max mac Am on a maxed out M4 Max machine but sync MTE always-on is just too great. And tensor cores on the GPU is just the cherry on top And sad thing I knew that MTE was coming when I got my M4...

6 6 84 7K 17

Ivan Krstić @radian

3 weeks ago

🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. security.apple.com/blog/memory-in…

54 502 3K 344K 966

Yash Gupta @Yash3667

4 weeks ago

2026 Apple Security Research Device Application is now live. Apply at security.apple.com/research-devic…! * Arbitrary code with arbitrary entitlements * Arbitrary code injection into existing processes * Arbitrary SPTM, TXM, KernelCache firmwares * Downgrades to old builds * ...and more

1 47 185 22K 88

lcamtuf @lcamtuf

a month ago

My position on the "doomsday" risk of superhuman AGI is that if IQ offered you a decisive advantage, the world would be run by nerds. I think it's essentially a geek power fantasy. The returns on puzzle-solving skills rapidly diminish past some modest threshold.

15 11 111 10K 16

cts🌸 @gf_256

6 months ago

In 2020, I solved a gnarly reverse engineering challenge in PlaidCTF. Only 9 teams solved. It's a huge pile of Typescript. Everything is named after a fish. The catch? There's no code, only types. How do they perform computation using just the type system? (Spoiler: Circuits!)

52 342 4K 355K 3K

Download Image

twiz @lazytyped

9 months ago

I’d lowkey throw a few big classic movie scenes through this and then play them at a trivia

solst/ICE of Astarte @IceSolst

9 months ago

I’d lowkey throw a few big classic movie scenes through this and then play them at a trivia

591 4K 89K 3.7M 10K

Download Image

0 0 2 224 0

derek guy @dieworkwear

a year ago

saw someone on here say that i make five figures a month off twitter. buddy, ELON MUSK doesn't even make five figures a month off twitter

205 4K 82K 1.7M 677

Ivan Kwiatkowski @JusticeRage

a year ago

This is a good time to point out how cybersecurity has become a business of transferring accountability to third parties (you don't buy security, you buy someone to blame when it all goes down). But it's largely symbolic since nobody is liable, and this might even be a feature.

11 125 593 39K 64

The Culturist @the_culturist_

a year ago

Why did past societies build so much "useless" beauty everywhere — and why did we stop? It might be a measure of a culture's health... (thread) 🧵

3K 28K 251K 24.8M 41K

Download Image

Björkus 'No time_t to Die' Dorkus @__phantomderp

a year ago

"UBSan can check this" is not a security position.

7 3 99 6K 2

twiz @lazytyped

2 years ago

Oh that’s your so-called experts. Never meet your heroes! But go listen to Halvar, even if he stays away 10 years.

Halvar Flake @halvarflake

2 years ago

Oh that’s your so-called experts. Never meet your heroes! But go listen to Halvar, even if he stays away 10 years.

2 0 16 5K 0

0 1 7 1K 0

Björkus 'No time_t to Die' Dorkus @__phantomderp

2 years ago

I will, unfortunately, have to disappoint you: C is a High Level Language that compiles to an Semantically-Constrained, Nondeterministic, Abstract Virtual Machine (SCNAVM) that is then projected and modeled onto ${TARGET_PLATFORM}.

29 105 1K 212K 407

twiz @lazytyped

2 years ago

Wow. openai.com/sora

0 0 4 197 0

VCs Congratulating Themselves 👏👏👏 @VCBrags

2 years ago

Nobody is talking about this, but Mark Zuckerberg recently made a video commenting on Apple Vision Pro. I’m thinking about uploading it here so I’m the first person to do so today.

43 9 902 83K 9

Bryan Cantrill @bcantrill

2 years ago

At its most reductive, DTrace can be thought of as dynamic print statements for code that one didn't write -- and it is in fact great for debugging systems

Charity Majors @mipsytipsy

2 years ago

At its most reductive, DTrace can be thought of as dynamic print statements for code that one didn't write -- and it is in fact great for debugging systems