Adam Donenfeld @doadam

iOS security, politics, tech and traveling. Not really on social media anymore. 🇪🇺 Joined January 2011

Tweets

2K
Followers

11K
Following

344
Likes

4K

Adam Donenfeld @doadam

7 months ago

Can’t stress this enough. High taxation incentives people to get more days off instead of more money. In NL it’s not unusual to have a 4 days work week. People call me out for working on Sundays because “it’s weird”

@levelsio @levelsio

7 months ago

It's probably hard for Americans to imagine this because it's their normal But being European and living in Europe and being radically honest when I arrive in America the main feeling I get is just endless abundance Non-honest (I'd say many to most) Europeans will not be able

400 357 7K 1.5M 2K

0 0 3 2K 0

View Details

Adam Donenfeld @doadam

7 months ago

@levelsio Which luxury hotels are the exception in your experience?

1 0 0 2K 1

View Details

Adam Donenfeld @doadam

7 months ago

@POC_Crew Big balls should’ve won the context @m1_ju_

0 1 3 1K 0

View Details

Adam Donenfeld @doadam

7 months ago

@ace__pace I recall there was some public side channel attack a (long) while ago and Apple patched it (unlike on Linux/android)

0 0 1 52 0

View Details

Adam Donenfeld @doadam

7 months ago

“We can easily bypas KASLR using prefetch attack these days. Entrybleed is the most famous prefetch attack variant.” iOS security is leaving dust to any other platform. It’s hard to believe KASLR is still not a standard mitigation nowadays ssd-disclosure.com/lpe-via-refcou…

4 8 81 7K 41

View Details

Adam Donenfeld @doadam

7 months ago

@ace__pace Whenever there is/was anything, they would make an effort to mitigate such an attack or make it unusable in production. Have you ever seen a jailbreak/ITW chains using side channel attacks on iOS?

1 0 0 77 0

View Details

Daniel Lemire @lemire

8 months ago

Recently, there was a clash between the popular @FFmpeg project, a low-level multimedia library found everywhere… and Google. A Google AI agent found a bug in FFmpeg. FFmpeg is a far-ranging library, supporting niche multimedia files, often through reverse-engineering. It is entirely the result of volunteers and a marvellous piece of technology. For people who have never been on the receiving end of ‘security researchers’, it is difficult to understand why there is a pushback against them. Think about the commons. In Quebec, these are pieces of land where farmers send their cows during the summer. It is collectively owned, like FFmpeg. Everyone is responsible to care for the commons if they are using it. If you are not using it, you are supposed to stay away. Now, imagine a rich corporation comes in and sends its well-paid agents into the commons to find issues with it. Maybe a broken barrier or a dangerous hole. So far so good… But instead of fixing the issues, the corporation says “you have a month to fix the issue or else I will report you to the government”. How much love would the big corporation get in this context? Why do the security researchers insist on disclosing the issue without having contributed to fixing it? So that they can get credit for it. That's their entire scheme: find issues, irrespective of whether they affect the use case of their employer... after all, all issues no matter how small can be potentially significant at some point... and then brag about it without doing the hard work of trying to fix it. Let me be clear that no everyone working in security behaves this way. Many are good actors. But there are enough 'security researchers' behaving as parasites that it has become a recognizable pattern. « But Daniel, who should be fixing the bugs then? » If you are paying for commercial support, then get in touch with the folks you are paying. If you are not paying, then it is on you. It says so in the licenses. It is part of the moral code open source. It is part of the legal framework. Let me be clear. You do not get to bite back at Linus Torvalds if a bug in the linux kernel crashes your server. What you do is that you identify the issue, narrow it down and propose a fix. If you cannot do it, then you pay someone to do it. Or you just do not use Linux.

59 291 2K 206K 361

View Details

Adam Donenfeld @doadam

8 months ago

“Scan the codebase” ➡️ “Discover vulnerabilities” lol

OpenAI @OpenAI

8 months ago

Now in private beta: Aardvark, an agent that finds and fixes security bugs using GPT-5. openai.com/index/introduc…

287 689 5K 2.7M 2K

1 0 4 2K 1

View Details

@levelsio @levelsio

8 months ago

The story gets stranger... Apparently I was never able to use the 🇪🇺 EU's GPUs in the first place Because I wasn't on their pre-approved organization list of "Horizon 2020" So how can you join the Horizon 2020 list as an organization? Well, you can't. It was made in 2014 and closed in 2020! ????

gerry🗯 @Gerry

8 months ago

@levelsio The way I read this... aren't you excluded by default because your organization is not on the origination list for Horizon 2020?

6 2 198 497K 21

386 232 4K 1.8M 613

View Details

Natalie Silvanovich @natashenka

8 months ago

Serious bugs often occur in third-party components integrated by other software. @ifsecure and I found this vulnerability in the Dolby Unified Decoder. It affects Android, iOS and Windows among other platforms, sometimes 0-click. project-zero.issues.chromium.org/issues/4280754…

7 65 269 65K 102

View Details

Adam Donenfeld @doadam

8 months ago

That’s where we see things differently. An exploit that could potentially takes month to develop so that it just gets patched a month later won’t cut it. For kernel/launchd: it all depends on your goals. But like you mentioned before, we’re talking about real attacks. State actors would probably not stop at your data only for their future attacks, and you’re likely to need a launchd sandbox escape or kernel. Persistency is nice to have, but most ITWs nowadays don’t include one

1 0 0 123 0

View Details

Adam Donenfeld @doadam

8 months ago

@filpizlo @chrisrohlf Retrying would send crash dumps to Apple, and it would be just a matter of time until the bug gets fixed. And you can't retry these attacks against the kernel/launchd

1 0 1 168 0

View Details

unusual_whales @unusual_whales

9 months ago

Extreme views and narratives are over-represented on social media, per FT:

107 60 504 112K 79

View Details

Marc Andreessen 🇺🇸 @pmarca

9 months ago

🤨

175 131 2K 256K 154

View Details

john @nyan_satan

9 months ago

It hasn’t been announced properly, but The Apple Wiki admins & me grab firmware keys shortly after each major & minor release (e.g. 26.0 and 26.1) We also constantly fill the gaps in the old versions & platforms, e.g. M3 Max and A7 & S1P/S2/T1 & S3 SEP theapplewiki.com/wiki/Firmware_…

2 4 72 8K 22

View Details

Adam Donenfeld @doadam

9 months ago

@z4ziggy One of the not so many things they’re still doing right

0 0 1 108 0

View Details

Adam Donenfeld @doadam

9 months ago

@i0n1c If it makes you feel any better, public healthcare in 🇳🇱 is pretty much identical (perhaps slightly longer waiting times) and private healthcare does not exist. Disclaimer: I am the one who wanted those 1.5y waiting time appointments