Felix Gröbert

@fel1x

Information Security . Opinions own, unless compromised. Tweets deleted periodically.

Zurich, Switzerland
groebert.org
Beigetreten November 2008
26 Fotos und Videos Fotos und Videos

Tweets

Du hast @fel1x blockiert

Bist du sicher, dass du diese Tweets sehen willst? Das Ansehen von Tweets wird @fel1x nicht entblocken.

  1. hat retweetet
    3. Juni

    Did you know that is covered by our Vulnerablity Reward Program? Check out the details at . We're excited to hear from security researchers about vulnerabilities in this foundational networking data plane component.

    18 Retweets 85 Gefällt mir
    Rückgängig machen
  2. hat retweetet
    26. Mai

    Centralized databases with millions of sensitive PIIs WILL be compromised.

    BREAKING: We discovered a security flaw in Qatar's contact tracing app that exposed sensitive data (name, national ID, health status and location data) of more than a million app users (in a country where the app is now mandatory)
    Diesen Thread anzeigen
    2 Antworten 7 Retweets 22 Gefällt mir
    Rückgängig machen
  3. hat retweetet
    22. Mai

    Crypto-twitter is mad that Zoom is duplicating stuff because of FIPS, but limited algorithm selection is, I find, a more minor cost of FIPS. The “integrity” check, and the eng time spent doing busy-work x times per year for y different platforms is much larger.

    2 Antworten 22 Retweets 88 Gefällt mir
    Rückgängig machen
  4. hat retweetet
    21. Mai

    Here is a write-up of a very interesting RCE bug I found on Google Cloud Deployment Manager for the :

    12 Antworten 302 Retweets 740 Gefällt mir
    Rückgängig machen
  5. hat retweetet
    17. Mai

    The most useful thing to me about Tink is that it was grown to solve the needs of shipping software vs. coming from purely a cryptographer’s point of view. I want something that I can give to software engineers and they can easily understand and use.

    Nice to see Tink on the front page of Hacker News. I explained the rationale behind some key design decisions in Tink:
    5 Retweets 15 Gefällt mir
    Rückgängig machen
  6. hat retweetet
    8. Mai

    Today I got a Google Cloud RCE report submitted, triaged, escalated to P0 S0, and with a "Nice catch!", all in under 5 minutes (Thx ). could it be considered the fastest RCE report ever? 😝

    16 Antworten 38 Retweets 425 Gefällt mir
    Rückgängig machen
  7. hat retweetet
    8. Mai

    Here's the repository of the upcoming Swiss contact tracing app and it would be super duper cool if you could look at the docs and the code before spreading your FUD all over Twitter.

    5 Antworten 16 Retweets 33 Gefällt mir
    Rückgängig machen
  8. hat retweetet
    19. Apr.

    An interesting read if you want to get a quick overview of the current status of and what's wrong (and there's a lot wrong!): - "An Investigation Into PEPP-PT" by

    14 Retweets 21 Gefällt mir
    Rückgängig machen
  9. hat retweetet
    12. Apr.

    Going outside and think you can get away with it? Please take this test by Scarfolk Police.

    8 Antworten 359 Retweets 808 Gefällt mir
    Rückgängig machen
  10. hat retweetet
    9. Apr.

    How exactly can privacy-preserving Bluetooth COVID-19 alerts work if identifiable personal data never leaves your device? It's actually not so complicated, and even less so now has made a fantastic, public domain, comic explaining it: 1/

    30 Antworten 881 Retweets 1.056 Gefällt mir
    Diesen Thread anzeigen
    Diesen Thread anzeigen
    Rückgängig machen
  11. hat retweetet
    8. Apr.

    With the Easter weekend coming up, here is the latest advice.

    3 Antworten 162 Retweets 393 Gefällt mir
    Rückgängig machen
  12. 8. Apr.

    So… I wrote a thing or two in the . Read it online for free at if you want to see our approach for building secure software.

    1 Antwort 4 Retweets 17 Gefällt mir
    Rückgängig machen
  13. hat retweetet
    3. Apr.

    The Google security scanning automation team is looking for a (Java) software engineer in Zürich (no remote work). Ideally the candidate has a background in software development and security. If you are interested, ping me. Please retweet!

    3 Antworten 24 Retweets 15 Gefällt mir
    Rückgängig machen
  14. hat retweetet
    3. Apr.

    If you were wondering what kind of decentralized, privacy preserving proximity tracing reference design we were working on then we have a fun read for you folks:

    As countries deploy data-hungry contact tracing, we worry about what will happen with this data. Together with colleagues from 7 institutions, we designed a system that hides all personal information from the server. Please read and give comments!
    Diesen Thread anzeigen
    1 Antwort 6 Retweets 18 Gefällt mir
    Rückgängig machen
  15. 3. Apr.

    Solid design. Even considers TLS size/timing leaks :)

    More info in our repo: 3-page brief: White paper: Data Protection:
    Diesen Thread anzeigen
    4 Gefällt mir
    Rückgängig machen
  16. 3. Apr.

    Infosec peeps: if you want to help with tracing consider reviewing the designs and code of this and associated repos

    More info in our repo: 3-page brief: White paper: Data Protection:
    Diesen Thread anzeigen
    Rückgängig machen
  17. hat retweetet
    2. Apr.

    We are looking for passionate and talented Security Engineers to join the Google Security Team in Sydney. Come work with us to defend and protect Google's infrastructure:

    1 Antwort 24 Retweets 35 Gefällt mir
    Rückgängig machen
  18. hat retweetet
    22. März

    Brilliant. Singapore made an app that simply broadcasts and records anonymous Bluetooth addresses you go near. If one person gets COVID, they anonymously tell those potentially in contact. 🤯👏

    But more importantly, Singapore is tracing the virus, which would be amazing to have here.
    4 Antworten 31 Retweets 74 Gefällt mir
    Rückgängig machen
  19. hat retweetet
    18. März

    A minimal example for using Sandboxed API in your CMake projects: This is basically a betatest for new documentation.

    1 Antwort 2 Retweets 12 Gefällt mir
    Diesen Thread anzeigen
    Diesen Thread anzeigen
    Rückgängig machen
  20. 18. März

    I would love to correlate the results with opinions about geofence warrants because the trade is similar (privacy/lives) but on a larger scale (geo/pii)

    During a serious pandemic, should techs/telcos/TLAs correlate your location history for tracing infection?
    1 Gefällt mir
    Rückgängig machen

@fel1x hat noch nichts getwittert.

Das Laden scheint etwas zu dauern.

Twitter ist möglicherweise überlastet oder hat einen vorübergehenden Schluckauf. Probiere es erneut oder besuche Twitter Status für weitere Informationen.

    Vielleicht gefällt dir auch

    ·