Tootfinder

Are you in the US and want to work on Smartcards? My employer has a position available: https://redhat.wd5.myworkdayjobs.com/en-US/jobs/job/Senior-Software-Engineer-in-Crypto--Smart-Cards-_R-056859
(It says Raleigh, but…

My team is looking for a US-based person to work on making #PQC #SmartCards work with open source software. Says Raleigh, but remote will be considered when nobody can be found locally, which is likely:

Well, the data is coming out corrupted and I'm not sure where yet (if it's in my gateware, software, or the transport somewhere).
But here's first light on the SERDES ILA core capturing what should be an Ethernet frame. The preamble is bogus and I'm not sure how much I trust whatever comes after it either.

O, dostałem w nocy maila, o wycieku danych klientów Framework - to już któryś wyciek w ostatnim miesiącu z różnych miejsc. Może by tak się przebranżowić z devopsa na pentestera/devsecopsa 🤔

W najbliższych latach będzie to coraz bardziej lukratywne zajęcie, patrząc na trendy w software developmencie.

ROLoad-PMP: Securing Sensitive Operations for Kernels and Bare-Metal Firmware
Wende Tan, Chenyang Li, Yangyu Chen, Yuan Li, Chao Zhang, Jianping Wu
https://arxiv.org/abs/2608.13287 https://arxiv.org/pdf/2608.13287 https://arxiv.org/html/2608.13287
arXiv:2608.13287v1 Announce Type: new
Abstract: A common way for attackers to compromise victim systems is hijacking sensitive operations (e.g., control-flow transfers) with attacker-controlled inputs. Existing solutions in general only protect parts of these targets and have high performance overheads, which are impractical and hard to deploy on systems with limited resources (e.g., IoT devices) or for low-level software like kernels and bare-metal firmware. In this paper, we present a lightweight hardware-software co-design solution ROLoad-PMP to protect sensitive operations from being hijacked for low-level software. First, we propose new instructions, which only load data from read-only memory regions with specific keys, to guarantee the integrity of pointees pointed by (potentially corrupted) data pointers. Then, we provide a program hardening mechanism to protect sensitive operations, by classifying and placing their operands into read-only memory with different keys at compile-time and loading them with ROLoad-PMP-family instructions at runtime. We have implemented an FPGA-based prototype of ROLoad-PMP based on RISC-V, and demonstrated an important defense application, i.e., forward-edge control-flow integrity. Results showed that ROLoad-PMP only costs few extra hardware resources (< 1.40%). Moreover, it enables many lightweight (e.g., with negligible overheads < 0.853%) defenses, and provides broader and stronger security guarantees than existing hardware solutions, e.g., ARM BTI and Intel CET.
toXiv_bot_toot

Pleased to share that my paper, "Practitioners at the Limit: Bereavement, Mockery and Ideology in Response to Crisis" is now available as a preprint on arxiv. https://arxiv.org/abs/2606.30667

may as well spam more snaps from the church before bed.
goodnight.
#church #grave #tombScrolling

Gorgeous collection of macOS drag-to-applications-to-install Windows:
https://unsung.aresluna.org/as-a-windows-user-its-a-very-surreal-way-to-install-a-program/

🇺🇦 #NowPlaying on #BBC6Music's #TheBethDittoShow
Roots Manuva:
🎵 Witness (1 Hope)
#RootsManuva
https://mistershifter.bandcamp.com/track/roots-manuva-witness-mister-shifters-cruffatin-version
https://open.spotify.com/track/5KLcIahbdBJeZ8tHAyYMpN

@… Mam ArchLinux'a...

Od kilkunastulat administruje linuxami, automatyzuje floty maszyn, piszę software na i pod linuxy.

Ogólnie miałem kilkuletni epizod z MBP, ale właśnie może kiedyś mac był tym, czym obiecywali, potem o stabilności można było zapomnieć. Dziwne problemy z wieloma pulpitami i przełączaniem. Blokujace się aplika…