Joanna Rutkowska

Joanna Rutkowska @rootkovska

I'm actually surprised Windows 10 doesn't make use of Intel SGX to alleviate its VSM infrastructure from boot insecurities? @aionescu — PolitiTweet.org

Joanna Rutkowska @rootkovska

Very informative talk about Windows 10's Virtual Secure Mode (VSM) by @aionescu https://t.co/l4u8BU4Jgc — PolitiTweet.org

Joanna Rutkowska @rootkovska

BTW, @isislovecruft, we (@QubesOS) don't trust servers, or any part of the infrastructure... — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mricon For the builder we're fine. I'm concerned with ppl bootstraping the builder: https://t.co/xs37Q7pBio — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mricon I prefer signed tags, actually. But for bootstrapping of qubes-builder any would do. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@isislovecruft (Of course later Qubes Builder takes over, and ensures any other sources are verified) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@isislovecruft ... to allow safe & easy bootstraping of e.g. Qubes Builder. Currently one needs to remember to manually git tag -v (2/2). — PolitiTweet.org

Joanna Rutkowska @rootkovska

@isislovecruft But I want the _upstream_ git to always fail if: 1) no signed tag on HEAD, or 2) key used to sign it no trusted. (1/) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@ahfaeroey Yes. — PolitiTweet.org

Joanna Rutkowska @rootkovska

What if git automatically verified digital signatures on cloned/pulled code, and aborted if no signed tag found on HEAD? #Sigh — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mjg59 Does it run systemd yet? — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @aionescu: HyperGuard. It's official.@brucedang @patchguard @rootkovska @j00ru @tiraniddo http://t.co/g0yzErKkI1 — PolitiTweet.org

Joanna Rutkowska @rootkovska

So is @Bromium's hosted uXen once an attacker exploits e.g. USB or WiFi stack on the host kernel, isn't it? ;) https://t.co/bPPcnEnTWl — PolitiTweet.org

Joanna Rutkowska @rootkovska

"The Summer of Sangaile" by Alanté Kavaité: so beautiful, so sensual. #WarsawFilmFestival — PolitiTweet.org

Joanna Rutkowska @rootkovska

@attractr ... and also saving the world as a side effect ;) @DrWhax @Tails_live — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @attractr: So @rootkovska & I spent a lot of time last week discussing technical advantages, challenges working together. Same w/@drwhax… — PolitiTweet.org

Joanna Rutkowska @rootkovska

@ioerror We're discussing some (really cool) ideas (IMHO) on how to integrate @subgraph with @QubesOS -- stay tuned! — PolitiTweet.org

Joanna Rutkowska @rootkovska

@revskills @subgraph @grsecurity @ioerror @Tails_live ... some things like SMxP, perhaps? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@revskills So @subgraph already working on this. Some parts might be tricky on Xen. @grsecurity should know more... @ioerror @Tails_live — PolitiTweet.org

Joanna Rutkowska @rootkovska

Yes! https://t.co/TFN5LH1eQ7 — PolitiTweet.org

Joanna Rutkowska @rootkovska

@random_marc Very true. @Snowden — PolitiTweet.org

Joanna Rutkowska @rootkovska

@aionescu Slides? (I don't dare to ask for a paper, but something like slides, which let custom-pace-processing by the reader :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@matthew_d_green if you need to relay on your (local) password mgr security, than I think your desktop OS security model is broken already. — PolitiTweet.org

Joanna Rutkowska @rootkovska

Reminder why removal of a GPS from ur phone is meaningless (unlike removing mics and cameras, which do make sense): https://t.co/XMPWGrQGKk — PolitiTweet.org

Joanna Rutkowska @rootkovska

@bartongellman shred -vn1 /var/lib/qubes/appvms/$d/{private,volatile}.img — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @the_intercept: Drone flew over NSA building in Germany, dropping leaflets telling the spies inside to quit http://t.co/5xd6mFlowQ http:… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @thegrugq: Overview of current exploitation techniques https://t.co/ekQoDqR6lp — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @solardiz: If you're with a well-known (even to a clerk) or local (to Slovenia) organization (com, edu, gov) and would like to help, ple… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @solardiz: For the first time in my life I might need recommendation letters: got a Kafkaesque situation applying for a work permit in S… — PolitiTweet.org

Joanna Rutkowska @rootkovska

My 1st censorship experience. Today. In the US. At Internet Freedom event. Bonus irony: "tasteless" classification. http://t.co/WuH9EOi7N2 — PolitiTweet.org