Pepijn Bruienne     

@bruienne

Macs, Enterprise, Good Times. Security & Privacy CE @ Apple. Formerly , former co-host of Macadmins Podcast

Metro Detroit
Vrijeme pridruživanja: kolovoz 2010.

Tweetovi

Blokirali ste korisnika/cu @bruienne

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @bruienne

  1. 30. sij

    For the past few months, I've been diving into Apple's Endpoint Security Framework. This post shares how I use the framework for detection engineering purposes.

    Prikaži ovu nit
    Poništi
  2. TFW you resume a random VM and it has a Radare2 session from more than a year ago still active… I’ll just quit this then, who knows what I was up to 🔌😬

    Poništi
  3. Me: One sandwich, no onion please Sandwich shop: Okay here it is, easy onion Me: I'd like it re-done, no onions..? SS: Sure, we'll pretend you said extra onion, enjoy! Me: *picks off the onions from the first one* 🤬🤬🤬

    Poništi
  4. H/T to a fellow smart appliance owner for the tip - I just need to know one thing from vendors doing this: “How do I opt out and/or disable this feature?” Unless I missed something, you can fix my broken appliance just fine without a “slices of toast” or “smoothies made” count.

    Poništi
  5. 15. sij

    JetBrains Mono. A Typeface for Developers ()

    Poništi
  6. 10. sij

    Now that Twitter has changed how it handles uploaded images, this unexpected behavior is perhaps more important now than before. Your challenge: Tell me what I've redacted from this image. (Anybody I've talked to about this so far is ineligible to play) It can be done w/o tools.

    Prikaži ovu nit
    Poništi
  7. I think this was the very first billing I had as a DJ, a scant 25 years ago 😬😬😬

    Poništi
  8. 1. sij

    Happy New Year from the ARBSEC organizers. A2Y.asm 2020 CFP and reg are now open (CFP closes on Feb 29). Info at

    Poništi
  9. One of several batches of olliebollen on this NYE 2019, getting started early this year. Happy New Year!

    Poništi
  10. Not sure if video of this particular talk is forthcoming but I noticed slides for it on the speaker's site: 👍

    Poništi
  11. Poništi
  12. Why is a stripped-down ME payload a good idea you wonder? has done some great research on that: My favorite is the DAL aka JOM which allows third party code to run from ME. Because that’s fine.

    Poništi
  13. Mac computers run a custom ME firmware from which the majority of components have been removed […] many components (such as AMT) that have been the subject of public attacks by security researchers in the past are not present within Mac ME firmware.

    Poništi
  14. NB: this storage is in memory, not filesystem. Each system boot repeats the memory mapping process.

    Prikaži ovu nit
    Poništi
  15. One of the cool things about the introduction of the T2 security chip was the ability to get rid of SPI flash on the board and storing & verifying the UEFI payload in the SEP. This greatly reduces the ability to achieve the Ring-2 level of persistence attackers want to achieve.

    Prikaži ovu nit
    Poništi
  16. Want to know more about Apple platform security? Need something to read over the break? Have at it: or if you want an offline copy: Enjoy! 🛡🖥🔐🎄

    Poništi
  17. 17. pro 2019.

    To close out a big year for and development, I've written a new post to talk about some of my recent favorite WebAuthn sites and tools, along with what resident keys are and how they help users further control their data on the web.

    Poništi
  18. Poništi
  19. Want to know which of your services support hardware key-based auth or MFA? keeps a pretty good running tally and takes GH PRs as well. Just as a reminder, FIDO2 support for macOS, iOS and iPadOS offers both single factor and MFA use.

    Poništi
  20. It's official! iOS and iPadOS 13.3 now support FIDO2/Webauthn for NFC, USB and Lightning-based security keys for everyone. Get a key, start enabling FIDO2 with services that support it and ask those who don't what their timeline for adoption is. H̶a̶c̶k̶ Protect the planet!🔒

    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·