Skip to content
By using Twitter’s services you agree to our Cookies Use. We and our partners operate globally and use cookies, including for analytics, personalisation, and ads.
  • Home Home Home, current page.
  • About

Saved searches

  • Remove
  • In this conversation
    Verified accountProtected Tweets @
Suggested users
  • Verified accountProtected Tweets @
  • Verified accountProtected Tweets @
  • Language: English
    • Bahasa Indonesia
    • Bahasa Melayu
    • Català
    • Čeština
    • Dansk
    • Deutsch
    • English UK
    • Español
    • Filipino
    • Français
    • Hrvatski
    • Italiano
    • Magyar
    • Nederlands
    • Norsk
    • Polski
    • Português
    • Română
    • Slovenčina
    • Suomi
    • Svenska
    • Tiếng Việt
    • Türkçe
    • Ελληνικά
    • Български език
    • Русский
    • Српски
    • Українська мова
    • עִבְרִית
    • العربية
    • فارسی
    • मराठी
    • हिन्दी
    • বাংলা
    • ગુજરાતી
    • தமிழ்
    • ಕನ್ನಡ
    • ภาษาไทย
    • 한국어
    • 日本語
    • 简体中文
    • 繁體中文
  • Have an account? Log in
    Have an account?
    · Forgot password?
    New to Twitter?
    Sign up
dguido's profile
Dan Guido
Dan Guido
Dan Guido
@dguido

Tweets

Dan Guido

@dguido

CEO @trailofbits, organizer @EmpireHacking, director @hack_secure. Open DMs.

Brooklyn, NY
trailofbits.com
Joined April 2008

Tweets

  • © 2020 Twitter
  • About
  • Help Center
  • Terms
  • Privacy policy
  • Imprint
  • Cookies
  • Ads info
Dismiss
Previous
Next

Go to a person's profile

Saved searches

  • Remove
  • In this conversation
    Verified accountProtected Tweets @
Suggested users
  • Verified accountProtected Tweets @
  • Verified accountProtected Tweets @

Promote this Tweet

Block

  • Tweet with a location

    You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more

    Your lists

    Create a new list

    Under 100 characters, optional
    Privacy

    Copy link to Tweet

    Embed this Tweet

    Embed this Video

    Add this Tweet to your website by copying the code below. Learn more

    Add this video to your website by copying the code below. Learn more

    Hmm, there was a problem reaching the server.

    By embedding Twitter content in your website or app, you are agreeing to the Twitter Developer Agreement and Developer Policy.

    Preview

    Why you're seeing this ad

    Log in to Twitter

    · Forgot password?
    Don't have an account? Sign up »

    Sign up for Twitter

    Not on Twitter? Sign up, tune into the things you care about, and get updates as they happen.

    Sign up
    Have an account? Log in »

    Two-way (sending and receiving) short codes:

    Country Code For customers of
    United States 40404 (any)
    Canada 21212 (any)
    United Kingdom 86444 Vodafone, Orange, 3, O2
    Brazil 40404 Nextel, TIM
    Haiti 40404 Digicel, Voila
    Ireland 51210 Vodafone, O2
    India 53000 Bharti Airtel, Videocon, Reliance
    Indonesia 89887 AXIS, 3, Telkomsel, Indosat, XL Axiata
    Italy 4880804 Wind
    3424486444 Vodafone
    » See SMS short codes for other countries

    Confirmation

     

    Welcome home!

    This timeline is where you’ll spend most of your time, getting instant updates about what matters to you.

    Tweets not working for you?

    Hover over the profile pic and click the Following button to unfollow any account.

    Say a lot with a little

    When you see a Tweet you love, tap the heart — it lets the person who wrote it know you shared the love.

    Spread the word

    The fastest way to share someone else’s Tweet with your followers is with a Retweet. Tap the icon to send it instantly.

    Join the conversation

    Add your thoughts about any Tweet with a Reply. Find a topic you’re passionate about, and jump right in.

    Learn the latest

    Get instant insight into what people are talking about now.

    Get more of what you love

    Follow more accounts to get instant updates about topics you care about.

    Find what's happening

    See the latest conversations about any topic instantly.

    Never miss a Moment

    Catch up instantly on the best stories happening as they unfold.

    1. matt blaze‏Verified account @mattblaze 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation

      matt blaze Retweeted Brad Heath

      Tech details on the FBI's Tor exploit seem essential for certain defenses. See, e.g., https://www.cs.columbia.edu/~smb/papers/rsearch.pdf …https://twitter.com/bradheath/status/717465105588482049 …

      matt blaze added,

      Brad HeathVerified account @bradheath
      Federal court has scheduled a hearing on DOJ request to keep the FBI's Tor Browser exploit secret. May 13 in Tacoma. pic.twitter.com/QbCBAeyWpM
      3 replies 30 retweets 30 likes
    2. Dan Guido‏ @dguido 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @mattblaze

      @mattblaze It sounds like the FBI Tor exploits are a lot more narrow than the situation contemplated in your paper.

      2 replies 0 retweets 0 likes
    3. Dan Guido‏ @dguido 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @dguido

      @mattblaze Rather than perform a "search" they beacon a few bits of info and quit. IMHO little of your argument about specificity applies.

      1 reply 0 retweets 0 likes
    4. Dan Guido‏ @dguido 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @dguido

      @mattblaze As far as I can tell, FBI is willing to share all post-exploit code that retrieves that info too. https://www.scribd.com/doc/306272980/Special-Agent-Daniel-Alfin-s-Declaration-in-Playpen-Case …

      2 replies 0 retweets 1 like
    5. matt blaze‏Verified account @mattblaze 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @dguido

      @dguido A defense could be that the beacon was installed more widely than permitted by the warrant, and thus invalidated the search.

      2 replies 0 retweets 1 like
    6. Dan Guido‏ @dguido 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @mattblaze

      @mattblaze If given the shellcode, I think you can make that argument? It does the search. I'm not sure what perspective the exploit adds.

      2 replies 0 retweets 0 likes
    7. matt blaze‏Verified account @mattblaze 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @dguido

      @dguido The argument would be that the beacon was installed on more computers than authorized by the warrant.

      1 reply 0 retweets 0 likes
    8. Dan Guido‏ @dguido 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @mattblaze

      @mattblaze How does a copy of the exploit source code indicate the # of times it was used (in potential violation of warrant terms)?

      2 replies 0 retweets 0 likes
    9. matt blaze‏Verified account @mattblaze 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @dguido

      @dguido I don't know - since I've not seen the code, we have no idea what it does.

      1 reply 0 retweets 0 likes
      Dan Guido‏ @dguido 5 Apr 2016
      • Report Tweet
      • Report NetzDG Violation
      Replying to @mattblaze

      @mattblaze I wonder who would use this argument. If given nearly any piece of software, can you tell how many times it's been run?

      9:41 PM - 5 Apr 2016
      2 replies 0 retweets 0 likes
        1. New conversation
        1. matt blaze‏Verified account @mattblaze 5 Apr 2016
          • Report Tweet
          • Report NetzDG Violation
          Replying to @dguido

          @dguido If I were the defense, I'd demand to see the entire chain of code from selecting the target computer onward.

          1 reply 0 retweets 2 likes
        2. Dan Guido‏ @dguido 5 Apr 2016
          • Report Tweet
          • Report NetzDG Violation
          Replying to @mattblaze

          @mattblaze I'm sure they would, but I think the launcher + shellcode discharge all potential arguments about the validity of the search.

          1 reply 0 retweets 0 likes
        3. 9 more replies
        1. Dan Guido‏ @dguido 5 Apr 2016
          • Report Tweet
          • Report NetzDG Violation
          Replying to @dguido

          @mattblaze I think what you want for that argument is the launcher, not the exploit. It tracks how the exploit is served.

          0 replies 0 retweets 0 likes
          Thanks. Twitter will use this to make your timeline better. Undo
          Undo

      Loading seems to be taking a while.

      Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

        Promoted Tweet

        false

        • © 2020 Twitter
        • About
        • Help Center
        • Terms
        • Privacy policy
        • Imprint
        • Cookies
        • Ads info