Ivan Krstić

@radian

Head of Security Engineering+Architecture at Apple. I don’t speak for my employer.

San Francisco, CA
Vrijeme pridruživanja: ožujak 2011.

Tweetovi

Blokirali ste korisnika/cu @radian

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @radian

  1. 19. pro 2019.

    Now live! 🔺The new Apple Security Bounty! 🔺The new Apple Platform Security guide, featuring Mac for the first time! (PDF version: ) 🔺My Black Hat 2019 talk: Happy holidays! 🎄

    Poništi
  2. 22. stu 2019.

    Plus the new Apple Security Bounty, featuring all Apple platforms and open to everyone, million dollar max payout, live later this year — and iOS Security Research Device program, an unprecedented, Apple-supported research platform for talented researchers, coming next year!

    Prikaži ovu nit
    Poništi
  3. 22. stu 2019.

    Mac secure boot (with two world firsts: DMA defense from PCIe Bus 0, and the Option ROM sandbox), iOS kernel integrity, Pointer Auth Codes (PAC), APRR register, Page Protection Layer (PPL), and novel Find My crypto — all in my slides from Black Hat 2019!

    Prikaži ovu nit
    Poništi
  4. proslijedio/la je Tweet
    25. ruj 2019.

    Please DM if you’re a skilled web developer with UX and data visualization chops, and you might find security exciting (no security expertise required). There’s a job at Apple I would love to pitch to you.

    Poništi
  5. 10. srp 2019.

    TechCrunch: “Apple has pushed a silent Mac update to remove hidden Zoom web server”

    Poništi
  6. 26. lip 2019.

    Very excited to return to the Black Hat stage this year to talk about some world-class Apple security features! iOS code integrity and Pointer Authentication Codes, Mac secure boot with the T2 Security Chip, the crypto behind the Find My feature, and more:

    Poništi
  7. 5. lip 2019.

    My Cryptographic Engineering team did fantastic work on the rigorous privacy properties of the new Find My system. Wired takes a look:

    Poništi
  8. proslijedio/la je Tweet
    4. lip 2019.

    New certificate requirements in iOS 13 and macOS Catalina: removing trust in weak algorithms, requiring server auth EKUs, enforcing maximum lifespans, and requiring SubjectAltNames.

    Poništi
  9. 30. lis 2018.

    We’ve released the first Security Overview for the Apple T2 Security Chip! Mac secure boot, storage encryption, and more, e.g.: “Mac portables with the T2 chip have a hardware disconnect that ensures the microphone is disabled when the lid is closed.”

    Poništi
  10. proslijedio/la je Tweet
    17. ruj 2018.

    iOS 12 revamps the iCloud Keychain password manager in a big way. iOS now generates passwords when creating accounts within apps, just like it does in Safari. iOS removes the temptation to make the easy-but-consequential mistake of reusing a memorable password.

    Account creation screen in an app, with iOS offering to generate a password.
    Prikaži ovu nit
    Poništi
  11. 17. ruj 2018.

    Happy iOS 12 day! Our updated iOS Security Guide is hot off the presses:

    Poništi
  12. proslijedio/la je Tweet
    6. lip 2018.

    App notarization is a brilliant move by Apple. 

    Prikaži ovu nit
    Poništi
  13. proslijedio/la je Tweet
    5. lip 2018.

    Apple will be enforcing Certificate Transparency at the end of 2018 across all TLS connections! More details:

    Poništi
  14. proslijedio/la je Tweet
    5. lip 2018.

    Apple has begun distrusting Symantec CAs. Live in the Seeds! More details:

    Poništi
  15. proslijedio/la je Tweet

    macOS security: extended protection for camera, microphone, mail, messages, backups—apps will need explicit permission from uer for potential privacy violations. Apple to block tracking via social media like buttons, comment fields, AND BROWSER FINGERPRINTING. Woo!

    Poništi
  16. 11. sij 2018.

    The updated iOS Security Guide now covers iOS 11.2, including Face ID and Apple Pay Cash:

    Poništi
  17. 4. sij 2018.

    Regarding Spectre and Meltdown impact on iOS, macOS and Safari/WebKit:

    Poništi
  18. 29. stu 2017.

    Security Update 2017-001 is now available for High Sierra, addressing the root login problem.

    Poništi
  19. 12. stu 2017.

    Terrific writeup in the Financial Times. Incredibly proud of my team – astounding talent and clarity of purpose in protecting users on a billion devices, from silicon to software. And we’re hiring. Want to work with the finest security group in the world? My DMs are open!

    Poništi
  20. 27. ruj 2017.

    New on Face ID: . Incl: “TrueDepth camera randomizes …depth map captures, projects a device-specific random pattern”

    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·