Joanna Rutkowska

Joanna Rutkowska @rootkovska

Our parents united to fight communism during the 70,80s. Now my generation is uniting against the #PiS gov. #KOD https://t.co/oMn43MaUa8 — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GernotHeiser I don't think so. It seems like you haven't even read the article I linked thoroughly :( — PolitiTweet.org

Joanna Rutkowska @rootkovska

I hate crowds. Yet I plan to join the anti-gov demonstration tomorrow in Warsaw in defense of democracy in PL. https://t.co/b2g5D17odi — PolitiTweet.org

Joanna Rutkowska @rootkovska

@hackerfantastic @stribika How do you protect BIOS against DMA attacks today? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@tehjh Please, please, don't ask anybody to rely on a BIOS setup password in our times ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@tehjh The attacker is already physical -- if she wasn't we wouldn't be talking about GRUB, right? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GernotHeiser Read my blog post I linked above :P — PolitiTweet.org

Joanna Rutkowska @rootkovska

@tehjh Always by-passable, right? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GernotHeiser No, they don't. They merely guarantee adhering to modeled spec, don't they> — PolitiTweet.org

Joanna Rutkowska @rootkovska

Why would anybody have authentication in a boot mgr? Authentication for what? For the JMP instruction? https://t.co/pAi2ogfPjU — PolitiTweet.org

Joanna Rutkowska @rootkovska

. @GernotHeiser Still, I'd like to remind that formal proofs for u-kernels do not guarantee real-wold security: https://t.co/jCj4nWzUFW — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GernotHeiser Cool! You should encourage the student to publish their work somewhere (e.g. qubes-devel?), maybe other could help? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GernotHeiser Our HAL architecture in Qubes 3.x should make this "very easy" (TM): https://t.co/gP6cS28lnn — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GernotHeiser Well, at the end of the day, it's all engineering ;) Nevertheless I it'd be great if somebody tried Qubes w/ seL4. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GernotHeiser 1) Does it support S3 well? 2) PCI passthrough 3) VT-d driver domains based on Linux? More Qs: https://t.co/jIOlAV2KdZ — PolitiTweet.org

Joanna Rutkowska @rootkovska

Welcome to the Real World ;) https://t.co/dVXH9IqcBB — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @_fel1x: @rootkovska Thanks :) I definitely will release something. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_fel1x Congrats! You made me curious about wining the race in the pciback... Are you planning to publish a PoC for that? — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @_fel1x: Blogpost about some interesting double fetch vulnerabilities I discovered in Xen: https://t.co/tsI90v4IOt #XSA155 — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @QubesOS: Qubes Security Bulletin #23 (with a few interesting race conditions in Xen front/backends, mostly theoretical): https://t.co/… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @arstechnica: Qubes OS will ship pre-installed on Purism’s security-focused Librem 13 laptop https://t.co/EWOvgGfIa2 — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @QubesOS: Introducing (Salt-based) management and pre-configuration infrastructure in Qubes OS 3.1: https://t.co/cmP2ZX7mDe — PolitiTweet.org

Joanna Rutkowska @rootkovska

Aerial shots of the yesterday's demonstration in Warsaw against the newly elected gov violating the constitution: https://t.co/oS4bTvESoq — PolitiTweet.org

Joanna Rutkowska @rootkovska

Tens of thousands are protesting in Warsaw against the new PL gov not respecting the constitution & democracy. Possibly #important. — PolitiTweet.org

Joanna Rutkowska @rootkovska

Remaining challenges I see: obtaining LUKS passphrase for the uSD (perhaps from the host?) and getting a good RNG for GPG. @AndreaBarisani — PolitiTweet.org

Joanna Rutkowska @rootkovska

I'd like to see how this evolves into a secure "crypto token" with USB further isolated from e.g. a GPG backend. https://t.co/eQldYtHm9V — PolitiTweet.org

Joanna Rutkowska @rootkovska

I guess even more "So meta!" ;P https://t.co/Dim4YhDEPb — PolitiTweet.org

Joanna Rutkowska @rootkovska

When a smart dev talks on improving your previous work itself addressing the attack you introduced earlier. So meta! https://t.co/da9KZ3WVyu — PolitiTweet.org

Joanna Rutkowska @rootkovska

I must say I was truly impressed by the all-star crowd (as in: smart) at this boutique conference by @hyperelliptic: https://t.co/B7pAmIuji3 — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @torproject: We are thrilled to announce Shari Steele as Tor's new Executive Director! https://t.co/nqoMfTdQ89 #SupportTor https://t.co/… — PolitiTweet.org