Platform Security Summit @platformsec

Conference on composable software supply chain integrity and hardware-assisted platform security, with OpenEmbedded, OpenXT and other ecosystems PlatformSecuritySummit.com/2019/videos Joined April 2018

Tweets

10K
Followers

979
Following

4K
Likes

3K

stacktrust @stacktrust

a day ago

Qubes OS Summit 2025 Day 2 live stream: youtube.com/watch?v=F9eRaa…

0 1 0 98 0

Longhorn @never_released

3 days ago

Can a reviewer or somebody paste /proc/cpuinfo from an 8 Elite Gen 5 device?

0 1 10 1K 0

stacktrust @stacktrust

2 days ago

Qubes OS Summit 2025 live stream: youtube.com/live/HwisqKFEQ…

Qubes OS @QubesOS

a month ago

Qubes OS Summit 2025 live stream: youtube.com/live/HwisqKFEQ…

0 9 59 4K 8

1 1 0 159 0

Qubes OS @QubesOS

a year ago

Qubes OS Summit 2024 has concluded; videos now available qubes-os.org/news/2024/09/2…

0 15 84 4K 10

Rick Brewster @rickbrewPDN

3 days ago

Run this command at an elevated command prompt: dxcap -forcetdr This forces a GPU Timeout Detection and Recovery event. This can also happen if a shader gets stuck in an infinite loop (for example).

3 7 72 20K 78

Rick Brewster @rickbrewPDN

3 days ago

So this basically reboots the GPU driver. Anything in VRAM gets booted out and all apps have to reinitialize everything with respect to their use of the GPU.

1 1 17 3K 2

GrapheneOS @GrapheneOS

6 days ago

This article by Nicolas Stefanski at Synacktiv provides a high quality technical overview of our hardened_malloc project used in GrapheneOS: synacktiv.com/en/publication… It has great coverage of the memory layout, memory tagging integration, slab quarantines and allocation approach.

7 75 450 24K 111

Duy Tran @khanhduytran0

3 days ago

@bmdavis419 Just 𝚍𝚎𝚏𝚊𝚞𝚕𝚝𝚜 𝚠𝚛𝚒𝚝𝚎 -𝚐 𝚌𝚘𝚖.𝚊𝚙𝚙𝚕𝚎.𝚂𝚠𝚒𝚏𝚝𝚄𝙸.𝙳𝚒𝚜𝚊𝚋𝚕𝚎𝚂𝚘𝚕𝚊𝚛𝚒𝚞𝚖 -𝚋𝚘𝚘𝚕 𝚃𝚁𝚄𝙴 instead, you’re welcome

14 16 305 24K 428

Longhorn @never_released

4 days ago

Will Google succeed this time

Zac Bowden @zacbowden

4 days ago

Will Google succeed this time

49 54 405 26K 57

5 1 18 4K 3

Gok @Gok

4 days ago

@never_released So the Qualcomm WoA exclusive deal expired huh

0 1 1 159 1

ɹǝdsɐſ @jja2000

3 days ago

@never_released Nope, as long as Qualcomm doesn't require oems to make and ship DT's and upstream firmware or make firmware generic(ly signed), it will never work well at all out of the box.

0 1 0 89 1

Longhorn @never_released

4 days ago

the phone chips still have: > Qualcomm® Type-1 Hypervisor for isolation from the high-level OS

1 1 23 3K 6

Download Image

LaurieWired @lauriewired

3 days ago

@AlpinDale ehh confidential compute is interesting but it's not FHE all computations are still done on plaintext in the GPU cores Their "protection in use" claim is basically just HostOS -> VM isolation

4 1 103 11K 11

Brian in Pittsburgh @arekfurt

5 days ago

So... alright, here's what we need to do defensively at societal scale as/if it becomes substantially more efficient to find exploitable vulnerabilities in typical software: Change the game we're playing against attackers when it comes to patching. (We're losing today anyway.😏)

2 2 4 1K 2

BINARLY🔬 @binarly_io

5 days ago

🚨Binarly REsearchers revisit an already-patched Supermicro BMC bug and discover two new high-impact vulnerabilities that expose major gaps in software supply chains. CVE-2025-7937: bypassed “fix” for CVE-2024-10237. CVE-2025-6198: Supermicro RoT bypass. binarly.io/blog/broken-tr…

2 21 27 12K 6

Filip Jerzy Pizło @filpizlo

5 days ago

Pizlix: the world's first memory safe Linux distro. I'm writing the primordial README for it now and doing a final test that `./build.sh` actually works. The I'll commit it to the Fil-C repo

20 28 300 28K 54

Download Image

@parkbot.bsky.social @philparkbot

11 months ago

I was looking up some history behind the x86-64 transition, particularly around the Pentium 4 time frame, and I found out that Bob Colwell (Pentium Pro chief architect) has been posting on Quora. Pentium 4 had a version of x86-64 that was fused off.

67 434 4K 284K 869

Download Image

GrapheneOS @GrapheneOS

a week ago

@__sethJenkins > because of linear map non-randomization This is a consequence of Google's Generic Kernel Image design reducing security for everyone based on the needs of a few or even no one. Does memory hotplugging even get used on any mobile devices in practice? We simply turned it off.

1 1 20 793 5

LaurieWired @lauriewired

6 days ago

SSDs are pretty reliable in a technical sense. That is, unless you make a really, really bad mistake in firmware. HP had a line of ~20 different Enterprise SSD models for datacenter use. In exactly 3 years, 270 days and 8 hours, every one is irrecoverably bricked.

134 488 6K 299K 1K

Download Image

GrapheneOS @GrapheneOS

3 weeks ago

@SCBuergel Android 16 QPR1 has not been released to the Android Open Source Project yet. That's unusual and hasn't happened with a quarterly or yearly release before. We can't start work on porting to Android 16 QPR1 until it's pushed to AOSP so work on Pixel 10 support isn't happening yet.