Alex Rebert retweeted
I’m excited to announce the AI Cyber Challenge, a major, two-year @DARPA competition challenging the best and the brightest in cybersecurity and AI to secure the systems on which all American rely.

aicyberchallenge.com
3
78
257
84,871
Alex Rebert retweeted
Announced at the #BlackHat keynote: @Google, @OpenAI, @Anthropic, and @Microsoft will collaborate with @DARPA for its AI Cyber Challenge – a 2-year competition aimed at driving innovation at the nexus of AI and cybersecurity. Read more here: whitehouse.gov/briefing-room/…
0
10
31
4,494
Alex Rebert retweeted
🗣️ My C++Now keynote “safety と security: the future of C++” is going live in 17 hours!

youtu.be/Gh79wcGJdTg
8
35
164
41,167
Alex Rebert retweeted
At some point last fall/winter I felt like giving up on everything. I don’t know where i got the energy to keep going, but def one place was my work.

Today, that work officially paid off:

git.kernel.org/pub/scm/linux/…

Fuzzer will be open sourced soon :)
4
27
139
74,772
Alex Rebert retweeted
Ahoy mateys! PlaidCTF be settin' sail in less than 3 bells!

Register now and join us on the 7 seas, arrr!

plaidctf.com
0
3
11
3,531
Alex Rebert retweeted
For more than a decade, memory safety vulnerabilities have consistently represented more than 65% of vulnerabilities across products, and across the industry. On Android, we’re now seeing something different:

security.googleblog.com/2022/12/memory…
7
121
392
Alex Rebert retweeted
Poor software memory management is the culprit behind many bugs and vulnerabilities. Learn how to prevent and mitigate these issues: nsa.gov/Press-Room/New…
20
48
132
Alex Rebert retweeted
Replying to @qwertyoruiopz
@reneh81 @dfsec_com the truth is techniques are now more important than single bugs and techniques are too rare to burn in a jailbreak, sometimes even when 1day
1
8
78
Alex Rebert retweeted
🔑How does a FIDO security key limit the hacks we're seeing in the news now?🔑
Beyond fun to work with @Yubico & partner with @twitter to answer that question + demo how social engineering is used to steal passwords & siphon out MFA codes to gain admin access with @evantobac.
39
213
691
Alex Rebert retweeted
Today we are excited to talk about Pingora, a new HTTP proxy we’ve built in-house using Rust that serves over 1 trillion requests a day, boosts our performance, and enables many new features for Cloudflare customers. Read all the details: cfl.re/3qHoIb3
16
73
323
Remember when we didn't patch ETERNALBLUE because we thought no one else would exploit it?
Our final nomination for Lamest Vendor Response goes to:
Google TAG for “unilaterally shutting down a counterterrorism operation”.
0
0
11
Coming soon, in your favorite newspaper op-eds:
"Time to act: Ban Patching to Stop Terrorism"
"Safe software: a boon to terrorists all over the world"
"Thought E2E encryption was bad? Take a look at patching"
"Boycott patches: Top 10 devices without security updates"
Charging face first into the world of “Different Ethical Questions” $Goog stumbled across 11 zero days targeting terrorists and nuked them from orbit! The 0days that is; sure would suck if that IED phone stopped working.
0
2
24
This is great! Your adversaries probably have your symbols already, so why not give a boost to the folks trying to help you find vulns?
We are excited to announce that Microsoft Office will begin publishing Office symbols to continue to improve security and performance for customers and partners. Check out our blog for more details. msrc-blog.microsoft.com/2022/08/08/mic…
0
0
1
Alex Rebert retweeted
We're also investing in a Rust experiment. Looking for a senior staff level TLM to lead our Europe-based team (Munich or remote within TZ) to show that we can build high performance bidi interop between Rust and C++ and bring our monorepo into the future.
careers.google.com/jobs/results/1…
Really excited we've been able to start sharing our experimental work on #CarbonLang with the wider C++ community.

That said, I'd suggest folks read up on the docs and maaaybe wait for our announcement keynote and Q&A from #CppNorth before leaping to too many assumptions. =]
6
28
104
I'm excited to share that I've joined @Google's security engineering team last month, with a focus on GCP! A month in, I couldn't be happier. The work is fascinating, and the people are incredibly smart and welcoming.
2
2
58
Replying to @ayper
Also, my team is hiring: careers.google.com/jobs/results/1…. Come work with me! DM me if you're interested/have questions
0
2
4
🤯Building a VM on top of logical gate primitives for an exploit is mind blowing. It must have been pretty expensive to write 💸

If this is the cheapest way NSO found to exploit iMessage, that would say a lot about the recent security improvements SEAR made to iMessage!
Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists,
activists and dissidents around the world. googleprojectzero.blogspot.com/2021/12/a-deep…
1
0
3
Is it time to sandbox libraries? Maybe not every library should have access to the entire address space and kernel interface.
1
0
1
Replying to @ayper
With almost perfect timing, Firefox is shipping an in-process sandbox to isolate some third party libs. 👏@bhology & @mozhacks! We need more of this. x.com/mozhacks/statu….
In Firefox 95, we’re shipping a novel sandboxing technology called RLBox — developed in collaboration with researchers @UCSanDiego and @UTAustin — that makes it easy and efficient to isolate subcomponents to make the browser more secure. hacks.mozilla.org/2021/12/webass…
1
0
2
Replying to @ayper
@bhology @mozhacks I'm talking about #log4j, like about everyone else on twitter right now. The security of your org shouldn't be conditional on all libraries you use being secure. Because one invariably won't be despite the thankless work of talented & selfless open-source maintainers.
0
0
4