Markus Vervier 👾 @marver@mastodon.social

Wow that offer from Putin is poisened...it certainly does give the impression that Trump is not the one in control, and that's the purpose I guess..

The most powerful duck in recent history is laming himself. Because he needs all his power to cover up the dirt...

Also reminder to self: remmber, never try to argue with people that basically only rely on straw man arguments.

Wow discussions on Twitter are so broken...no wonder they degrade into a shouting contest so quickly..

Nothing about that #oauthworm here (in my timeline at least), seems like the mastodon hype worn off a bit, and people are back at twitter.. ;/

I decided to do a detailed explanation of the message replay attack that was presented together with @veorq at HITB, Infiltrate, and Troopers17:

https://pwnaccelerator.github.io/2017/signal-part3.html

blast from the past: http://web.mit.edu/~simsong/www/ugh.pdf

#noninfosec -- in times of cloud-rap there is still hope for Hip-Hop: https://www.youtube.com/watch?v=bFbbVX5lh88

A nice instance of compiler introduced vulnerabilities: https://github.com/sandstorm-io/capnproto/blob/master/security-advisories/2017-04-17-0-apple-clang-elides-bounds-check.md

Now should I go look for these in rust and swift compilers?
E_NOTIME

Would love to know more about this (and discuss here with more chars...): https://twitter.com/oe1cxw/status/854665583278927872

Back from #hitb, it was pretty great! Our talk on Signal went well and people apparently liked it (slides at: Nowhttps://conference.hitb.org/hitbsecconf2017ams/materials/D2T1 - Markus Vervier - Hunting for Vulnerabilities in Signal.pdf).
Now it's time to relax and getting rid of that cold..

At HITB in Amsterdam now.