Joanna Rutkowska

Joanna Rutkowska @rootkovska

RT @_SJPeace_: Phoenix cops held this black family at gunpoint and threaten to shoot the black mother dead all because her 4-year-old baby… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @marcan42: Whoops, @Yubico just scored 31% on the Sony PS3 Epic Fail scale. Collect three signatures from a FIPS Yubikey and you can cal… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @laparisa: When I lived in Zurich, I learned that Swiss women didn't get the right to vote until 1971 & needed permission from their hus… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @josephfcox: Oh my god. Artists uploaded a deep fake of Mark Zuckerberg to Instagram, saying he's in control of billions of people's sto… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @SushiDude: your periodic reminder that if you want to start disclosure fights, you might want to be familiar with some of the history o… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @taviso: Today is day 91, so the issue is now public. I consider this relatively low severity, but you could take down an entire Windows… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @argvee: In case you haven't been exposed to this yet, hundreds of thousands (a million?) people in HK came out in protest of new laws t… — PolitiTweet.org

Joanna Rutkowska @rootkovska

@rantyben @thedarktangent @haroonmeer Oh, I wish I still remembered that... — PolitiTweet.org

Joanna Rutkowska @rootkovska

(Non)ProTip: It's ok not to read _all_ the tweets in your timeline. Also news. — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @TerryReintke: Love to Warsaw. We are all with you today. 🌈🌈🌈 #ParadaRownosci https://t.co/E8TshAMHHa — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @andrestaltz: Good thread on basic requirements for local-first and peer-to-peer software https://t.co/RskXSBcCRQ — PolitiTweet.org

Joanna Rutkowska @rootkovska

@radian @QubesOS The #1 above might be a necessary condition to provide "enhanced" privacy and liberty. E.g. freedom to act not-inline with the Silicon Valley-accepted Western liberalism's value system. Admittedly this might not be of interest to majority of the persons out there. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@radian @QubesOS So, I'm reinforced in my belief that *security* of mainstream platforms (from Apple, Google, MS) will continue to improve, likely exceeding the "open source" offerings. But, the open source will still have an edge in: 1) trustworthiness/auditability 2) customization freedom — PolitiTweet.org

Joanna Rutkowska @rootkovska

@radian Also happy to see many of these new features are somewhat similar to what we did in @QubesOS in the early 2010s: 1) Read-only FS for system files, 2) focus on protecting user data (documents, camera, etc) rather than "root processes", 3) keeping 3rd-party code outside TCB. — PolitiTweet.org

Joanna Rutkowska @rootkovska

Can't wait to upgrade to macOS Catalina to get these new security features. Seems like Apple is on the right path here. Good job @radian & team! https://t.co/xVk3EVJZpL — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @window: Finally get to sit down with @josephmenn’s new book and flip right open to an old picture of me and @adafruit. So proud of you,… — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @halvarflake: My father taught me when I was very young that a discussion is not for winning, but usually for mutual enlightenment in te… — PolitiTweet.org

Joanna Rutkowska @rootkovska

@BenLaurie Heh, yeah. These days I try hard to minimize the amount of physical objects I posses, so each item needs to pass an extensive "do I really need it" test. Also, for a while I was like: "maybe wait for reM 2.0..", until I realized how asshole-like position that is ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @jessfraz: Updated my books post with more! It’s been nice ripping the DRM off the kindle books and loading them onto my remarkable tabl… — PolitiTweet.org

Joanna Rutkowska @rootkovska

Just ordered a reMarkable tablet. Why? For 1) DRM-free and 2) notification-free reading experience; For more 3) note-taking freedom 4) without all the paper waste. And 5) because they give you root access on the device :) Oh, and to 6) help them release reMarkable 2.0 soon! — PolitiTweet.org

Joanna Rutkowska @rootkovska

An interesting paper arguing that traditional point-to-point communication networks might not be suitable for many future applications (e.g. privacy). Discusses broadcast-only systems, such as Scuttlebutt, as a new, fundamentally different approach. https://t.co/jA8JPo9KbC — PolitiTweet.org

Joanna Rutkowska @rootkovska

@torrapusuta Thx :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@Cooloutac @AliceWonder32 Thx :) Glad to hear you use Qubes OS! — PolitiTweet.org

Joanna Rutkowska @rootkovska

@halvarflake https://t.co/EZ4Krju2R7 — PolitiTweet.org

Joanna Rutkowska @rootkovska

This. And not just for writing computer code. — PolitiTweet.org

Joanna Rutkowska @rootkovska

Many people find this scary. But longer-term it might be liberating, actually. Soon the use of video to blackmail people might simply loose ground. Which might be a godsend in our camera-everywhere world. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@qwertyoruiopz @QubesOS Depends on the attack surface exposed by the OS. If GPU is exposed in some form, then sure, forget it. As well as many other rich APIs, which mainstream client OSes expose plenty these days, sadly. This doesn't need to be that way, but is the simplest way to provide Features™. — PolitiTweet.org

Joanna Rutkowska @rootkovska

I wish computer systems vulnerabilities had inverse dynamics: RCEs (which we will never get rid off) should be *cheaper* and less concerning than LPEs (sandbox escapes). This has been an underpinning principle for us building @QubesOS. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@esizkur @natashenka Thx. I wonder what privs does that daemon have? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@natashenka So, given the attack apparently causes the *device* to crash, does that mean the VVM process is not sandboxed in any way? One would expect these to be two independent issues: 1) to exploit some process that does complex networking protocol, and 2) to actually crash the system? — PolitiTweet.org