Joanna Rutkowska

Joanna Rutkowska @rootkovska

@webdomotica Yup, R44 Raven II. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@petertoddbtc This coming in 4.0: https://t.co/XKeg8n3lNA — PolitiTweet.org

Joanna Rutkowska @rootkovska

@petertoddbtc qvm-create-default-dvm <template> — PolitiTweet.org

Joanna Rutkowska @rootkovska

@petertoddbtc See also: https://t.co/sd8lxu3VUs — PolitiTweet.org

Joanna Rutkowska @rootkovska

@petertoddbtc Using qvm-convert-img (issued from a DispVM based on your most trusted template) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@petertoddbtc Haha ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@macinteractive Wait, are you sayin' that this heli icon might at some point be replaced by a quadrocopter? ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@jimtarber (Excuse for editing the response above, I didn't want it to sound offensive or so.) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@jimtarber Would you ask the same question if I wasn't a woman? I'm CPL(H), BTW. https://t.co/xTqegPySF9 — PolitiTweet.org

Joanna Rutkowska @rootkovska

And a few more shots ;) #Tatra #Mountains https://t.co/6iTk57kbid — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_plesna Admittedly the Tatra Mountains would be at the top of the list of things I'd miss if I ever moved away. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_plesna Technically this is the PL/SK border. Personally I don't care about borders :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@macinteractive :) Where did you get that heli icon? Are there more? :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

(I flew the heli) — PolitiTweet.org

Joanna Rutkowska @rootkovska

First snow in the Tatra Mountains :) Shot a few days ago by my partner. https://t.co/LueR5caf34 — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @petertoddbtc: @socrates1024 Plausible that an adversary could make a DVD that read in different ways on different drives. — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @petertoddbtc: Cypherpunk Desert Bus: My Role in the 2016 Zcash Trusted Setup Ceremony https://t.co/ilWXIFCX8P — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @attractr: Our handbook build now has an HTML version generated for our website: https://t.co/lnsXtRgjof https://t.co/nfImYknlMI — PolitiTweet.org

Joanna Rutkowska @rootkovska

RT @ehthayer: http://t.co/mdM8u3Vis3 — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_zaolin_ Yes, I know. This is ME-based TPM (and there are no discrete SB these days, at least for laptops). Q was about EK certs? @mjg59 — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_zaolin_ Have you played with iTPM, BTW? Where can one get certs for the EKs? @mjg59 — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mjg59 Anyway, why not SGX? :) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_zaolin_ @mjg59 (And this is what a malicious server operator can do) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_zaolin_ @mjg59 If I can replace CPU to a pre-bootguard one, and reflash SPI, what stops me from emulating whatever SRTM PCRs I want? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mjg59 (And I intentionally didn't say: TXT will never be useful for anything good ;) — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mjg59 Kind of my point. SRTM sucks, b/c it has to. TXT will never be useful for securing of general- purpose MLEs. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_zaolin_ @mjg59 With TPM 1.2, how do you know whether SRTM executed on a fused CPU or not? Perhaps newer SINITs detect it for TXT? — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mjg59 Intel SGX looks much better in this respect, but pity that meaningful RA requires Intel AS :/ — PolitiTweet.org

Joanna Rutkowska @rootkovska

@mjg59 Your blog suggests SRTM, I think. Anyway, both SRTM & DRTM aren't strong enough to protect against malicious server admin/owner. — PolitiTweet.org

Joanna Rutkowska @rootkovska

@_zaolin_ It's not the TPM that I'm criticizing, but rather it's interplay with the rest of the x86 arch. — PolitiTweet.org