Joanna Rutkowska

Joanna Rutkowska @rootkovska

@robertswiecki @hanno AFAIU in case of debs there is no way for dpkg to verify sug, b/c the sig is not part of the deb pkgs...? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@hanno FWIW, I just tired your sample files on FC23 with rpm 4.13.0-rc1 and none worked. Obviously they patched them. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@hanno I see sure, thx for clarification. BTW, I think the semantics of 'rpm -i' is wrong - it should do sig verification by default. — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @hanno: @rootkovska I was unable to trigger them before signature, however it may be, but my main point is a different one — PolitiTweet.org

Joanna Rutkowska @rootkovska

Obviously 'rpm -i' means: take this rpm and execute whatever scripts it has. As root. — PolitiTweet.org

Joanna Rutkowska @rootkovska

... because obviously if one does 'rpm -i <untrusted_rpm>' without prior 'rpm -K' (verify sig), then this is already a Game Over (TM). — PolitiTweet.org

Joanna Rutkowska @rootkovska

Are any of these could be triggered via 'rpm -K <rpm>'? If yes, this was serious indeed, otherwise... irrelevant? https://t.co/85zUMqcR2d — PolitiTweet.org

Joanna Rutkowska @rootkovska

Warsaw vs. Genève (the two maps are of the same scale) https://t.co/TEWFHtMFXp — PolitiTweet.org

Joanna Rutkowska @rootkovska

"We’re putting these rules in place for the woman’s good": https://t.co/WK2qREUa87 https://t.co/vNqz9tVbHC — PolitiTweet.org

Joanna Rutkowska @rootkovska

@sitoig Yep. Watch out for me hunting pokemons sometime in 2020s ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

Subscribed to news service called Facebook. Flattered to find there a few other subscribers already using photos of myself as their icons.. — PolitiTweet.org

Joanna Rutkowska @rootkovska

Trying to find that vim^H command... https://t.co/QYZVQi28DM — PolitiTweet.org

Joanna Rutkowska @rootkovska

@kennwhite What is most unethical, is to sell ppl medical devices with gaping security, methinks... — PolitiTweet.org

Joanna Rutkowska @rootkovska

At some point the public will understand its not the researchers who put bugs in products. Congrats, @justinembone! https://t.co/KzWB5tiQFl — PolitiTweet.org

Joanna Rutkowska @rootkovska

@isislovecruft All this can be provided by e.g. libvirt or OpenStack, etc. Optimized for servers. — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @halvarflake: ... the most direct "holding accountable" for security issues that I have seen. Kudos for courage / boldness, @justinembon… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @halvarflake: ... impact the legality in any way? Or does it just open your flank to a lawsuit for damages? Also: This development may a… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @halvarflake: ... hence the derived security flaws are OK under "mosaic theory". Now the big question is: If a EULA violation can be pro… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @halvarflake: So the legal argument would be: Analyzing the publicly pacemakers for security flaws is deriving information from existing… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @halvarflake: Kudos to @justinembone for causing the most interesting legal considerations around EULAs, stocks, and holding companies a… — PolitiTweet.org

Joanna Rutkowska @rootkovska

@Ty881 @_AllysonMarie_ wat? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@isislovecruft What benefit would "Qubes for Server" provide over standard Xen (paired with libvirt/OpenStack/etc)? — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @hasherezade: @rootkovska human evolved! from a monkey with a blade into a monkey with weapons of mass destruction ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

21st century: police-enforced dress codes (for women), Trump(TM). Flying cars, fusion power, and space missions maybe some other time. — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @_AllysonMarie_: Just to be clear everyone, only ONE of these is illegal to wear on the beach in France, #BurkiniBan https://t.co/74HQhb… — PolitiTweet.org

Joanna Rutkowska @rootkovska

@veorq Potentially related? https://t.co/BJCyLHs4VW — PolitiTweet.org

Joanna Rutkowska @rootkovska

@halvarflake FWIW my absolutism definitely ended in highschool when we were introduced to Einstein's relativity & non-euclidean geometry ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@halvarflake Hm, why would it be news? Has there ever been any _other_ way of thinking about it? — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @msuiche: “I’m doing a (free) operating system (just a hobby, won’t be big and professional like gnu) for 386(486) AT clones." https://t… — PolitiTweet.org

Joanna Rutkowska @rootkovska

@orionwl @QubesOS Yet, I've never looked into the Linus passport ;) — PolitiTweet.org