James Forshaw

@tiraniddo

Security researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc. .

United Kingdom
tyranidslair.blogspot.co.uk
Joined July 2009
90 Photos and videos Photos and videos

Tweets

You blocked @tiraniddo

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @tiraniddo

  1. Pinned Tweet
    Dec 18

    My book's finally here, just in time for Xmas. Thanks to and for all their time and effort as well as my friend for doing the forward. Hope anyone who's bought it are seeing final copies arriving. And it's a dog on the cover BTW 🙂

    64 replies 263 retweets 1,023 likes
  2. Retweeted
    Dec 21

    UPDATE: If you clean install RS4+ and have compatible hardware VBS/HVCI is now automatically enabled!! This means the Windows kernel now enforces by default: Kernel code integrity, runtime ACG, and control flow integrity via VBS. Huge for Windows security. Checkout WIP builds!

    This is HUGE. Kernel Control Flow Guard, HVCI, Hyper Guard and bunch of other goodness are now available on non-Enterprise Windows SKUs. Turn it on, now.
    Show this thread
    9 replies 173 retweets 270 likes
  3. Retweeted
    Dec 20

    The schedule is online! Something old: returning speakers , ... Something new: ... All hacking & !

    2 replies 17 retweets 30 likes
    Show this thread
    Show this thread
  4. Retweeted
    Dec 20

    I wrote a paper titled "Weird machines, exploitability, and provable unexploitability", which is slated to be published in TETC and is which now available on IEEE preprint site:

    9 replies 240 retweets 423 likes
  5. Dec 20

    Woo Unix Sockets are using NTFS reparse points. What could possibly go wrong? 😀

    3 replies 35 retweets 76 likes
  6. Retweeted
    Dec 20

    The wait is over! Registration for 2018 is now open. Places are limited so register today!

    32 retweets 47 likes
  7. Retweeted
    Dec 19

    New and Improved UMCI, Same Old Bugs by James Forshaw

    1 reply 7 retweets 18 likes
  8. Dec 19

    Simple type confusion bug in an Intel GPU COM service which is accessible from Edge LPAC + Chrome GPU. Shows how a type confused SAFEARRAY leads to arbitrary code execution.

    1 reply 135 retweets 179 likes
  9. Retweeted
    Dec 18

    It's the Humble "Be a Coder" Bundle and it starts right now! Happy holidays and please RT.

    13 replies 415 retweets 341 likes
  10. Retweeted
    Dec 18

    Project Zero blog: "aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript" by , , and -

    8 replies 561 retweets 700 likes
  11. Retweeted
    Dec 15

    It's Android directory traversal day on the Project Zero Tracker

    4 replies 63 retweets 120 likes
  12. Retweeted
    Dec 13

    First post from my brand new blog

    10 replies 67 retweets 110 likes
  13. Retweeted
    Dec 12

    The attack - Return of Bleichenbacher's Oracle Threat

    12 replies 250 retweets 203 likes
  14. Retweeted
    Dec 11

    iOS 11.1.2, now with more kernel debugging:

    204 replies 956 retweets 2,141 likes
    Show this thread
    Show this thread
  15. Dec 8

    Sitting by the pool, wondering how I can exploit some bug in Windows. I think I need professional help 😄

    7 replies 4 retweets 90 likes
  16. Retweeted
    Dec 6

    Our work on Site Isolation in Chrome is getting closer to ready, so if you want to try it out in your enterprise, it is now available in Chrome 63: . There are known issues, but it generally works. File bugs!

    3 replies 62 retweets 112 likes
  17. Dec 6

    Is there much of a lobbycon at without a ticket? It's not far for me to go to turn up ;-)

    2 replies 7 likes
  18. Dec 6

    I wonder what's the chances of seeing ARM Linux support in WSL on the snapdragon win 10 machines? It'd almost be worth buying one just for that 🙂

    2 replies 1 retweet 11 likes
  19. Retweeted
    Dec 3

    Memory Map Viewer including protected processes and actual data:

    4 replies 277 retweets 455 likes
  20. Retweeted
    Dec 2
    Replying to

    So you’re admitting on you break the IT security policy by letting others use your account?

    50 retweets 171 likes

@tiraniddo hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·