Joanna Rutkowska

Joanna Rutkowska @rootkovska

RT @chaosupdates: #halfnarp – Help us to reduce conflicts of scheduling #32C3 #Fahrplan https://t.co/5w5J6riIeS — PolitiTweet.org

Joanna Rutkowska @rootkovska

@dindjic @GavinHourihan Which ppl and how they do it? :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@antoine_STHLM I think I want the opposite to PUFs -- assurance my hw is identical with what others got. @bortzmeyer — PolitiTweet.org

Joanna Rutkowska @rootkovska

IOW: I want "sha1sum" for physical PCBs (boards)... Anyone? :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GavinHourihan This is all about in-the-field verification of actual, physical PCBs, of course. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@wpisarski X-rays should help here IMHO. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@schrotthaufen If the PCB was covered that way, it wouldn't be hashable. We, users would demand hashable PCBs from vendors. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@puellavulnerata At least the type of ICs elements would be nice to include also (e.g. low-profile SOIC-8). — PolitiTweet.org

Joanna Rutkowska @rootkovska

@GavinHourihan 1) Wiring, 2) types of discrete elements. I know some wiring is between layers. X-ray perhaps? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@BillieBeta That would be easily cheat-able if the board was malicious, wouldn't it? — PolitiTweet.org

Joanna Rutkowska @rootkovska

E.g. you take a photo of the board, it's being analyzed, and ultimately a *deterministic* hash goes out (irrespective of angle, light, etc.) — PolitiTweet.org

Joanna Rutkowska @rootkovska

I wonder if there are any tools for PCB "measuring" (TCG-like)? So e.g. a laptop vendor could publish hashes (e.g. SHA1) of their boards? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@Netzblockierer @ioerror @stmanfr Yeah, DIY is not a scale-able solution. We need to change the Rules of The Game a bit, I think. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@Netzblockierer Not a bad idea, but I also have another application for this. More details in Dec. @ioerror @stmanfr — PolitiTweet.org

Joanna Rutkowska @rootkovska

@Netzblockierer @ioerror @stmanfr FYI: https://t.co/J0wnrOk1IK — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @CommissionerHR: Amendments altering composition of Constit Court currently rushed through Polish Parliament undermine rule of law and s… — PolitiTweet.org

Joanna Rutkowska @rootkovska

This: https://t.co/uemjeUs8T7 — PolitiTweet.org

Joanna Rutkowska @rootkovska

Interesting: an open PCIe SSD implementation on Xilinx Zynq 7000 SoC (thx @SimonZerafa): https://t.co/hFXoWxj2l6 https://t.co/D4sjuVvEgJ — PolitiTweet.org

Joanna Rutkowska @rootkovska

@SimonZerafa Whatever, bus SSD would be nice, of course. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@Thaolia I'm more looking for a drop-in replacement for a 2.5" HDD... — PolitiTweet.org

Joanna Rutkowska @rootkovska

Are there any efforts to implement an open-source/hardware SATA harddisk? #AskingForAFriend — PolitiTweet.org

Joanna Rutkowska @rootkovska

@SirZuma https://t.co/yfgG0GVl96 — PolitiTweet.org

Joanna Rutkowska @rootkovska

@pixelrust glad you like it, thanks :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@olivier_boireau All I'm saying: Intel ME beats your ORWL on all accounts. Still, I wouldn't trust neither :P — PolitiTweet.org

Joanna Rutkowska @rootkovska

@cwage I'm thinking a more general text on Debian. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@rhymebyter No doubt. Still I actually like to learn things by reading well structured texts. Call me old-fashioned (or insociable) ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

Debian apparently is tricky ;) Any recommendation on good bedtime intro read on Debian (for power users/admins)? https://t.co/uYAgnLerHZ — PolitiTweet.org

Joanna Rutkowska @rootkovska

@dailydavedavids HOWTO? #NotADebianPerson @ioerror @Whonix — PolitiTweet.org

Joanna Rutkowska @rootkovska

@ioerror That appears to work, thx! BTW, shouldn't pond be integrated into @Whonix workstation? Patrick? — PolitiTweet.org

Joanna Rutkowska @rootkovska

I've been told there is a (signed!) Pond package for Debian... Anybody willing to share instructions on how to install it on Jessie? — PolitiTweet.org