Tootfinder

My team is looking for a US-based person to work on making #PQC #SmartCards work with open source software. Says Raleigh, but remote will be considered when nobody can be found locally, which is likely:

Senior Software Engineer in Crypto (Smart Cards)
About the Job The Security Technologies crypto team is seeking a Senior Software Engineer who is a technical leader, creative and committed to delivering quality software. Our team is focused on cryptographic back-end components such as OpenSSL, GnuTLS and Network Security Services as well as cryptographic protocols like TLS, SSH and IPSEC. As a Senior Software Engineer, your main focus will be on designing, developing, testing and collaborating with other contributors over the world to bring f…

Well, the data is coming out corrupted and I'm not sure where yet (if it's in my gateware, software, or the transport somewhere).
But here's first light on the SERDES ILA core capturing what should be an Ethernet frame. The preamble is bogus and I'm not sure how much I trust whatever comes after it either.

Direct link for the GoFundMe for Minneapolis is Spider-Man
Bill Corbett (of MST3K says he can vouch for the creator of the GoFundMe)
https://gofund.me/6f36a1ac1

Donate to Support Spider-Man’s Legal Defense, organized by Ash Chudgar
Awesome update: I'm in touch with Spider-Man's family, and we're setting things up so t… Ash Chudgar needs your support for Support Spider-Man’s Legal Defense

ROLoad-PMP: Securing Sensitive Operations for Kernels and Bare-Metal Firmware
Wende Tan, Chenyang Li, Yangyu Chen, Yuan Li, Chao Zhang, Jianping Wu
https://arxiv.org/abs/2608.13287 https://arxiv.org/pdf/2608.13287 https://arxiv.org/html/2608.13287
arXiv:2608.13287v1 Announce Type: new
Abstract: A common way for attackers to compromise victim systems is hijacking sensitive operations (e.g., control-flow transfers) with attacker-controlled inputs. Existing solutions in general only protect parts of these targets and have high performance overheads, which are impractical and hard to deploy on systems with limited resources (e.g., IoT devices) or for low-level software like kernels and bare-metal firmware. In this paper, we present a lightweight hardware-software co-design solution ROLoad-PMP to protect sensitive operations from being hijacked for low-level software. First, we propose new instructions, which only load data from read-only memory regions with specific keys, to guarantee the integrity of pointees pointed by (potentially corrupted) data pointers. Then, we provide a program hardening mechanism to protect sensitive operations, by classifying and placing their operands into read-only memory with different keys at compile-time and loading them with ROLoad-PMP-family instructions at runtime. We have implemented an FPGA-based prototype of ROLoad-PMP based on RISC-V, and demonstrated an important defense application, i.e., forward-edge control-flow integrity. Results showed that ROLoad-PMP only costs few extra hardware resources (< 1.40%). Moreover, it enables many lightweight (e.g., with negligible overheads < 0.853%) defenses, and provides broader and stronger security guarantees than existing hardware solutions, e.g., ARM BTI and Intel CET.
toXiv_bot_toot

O, dostałem w nocy maila, o wycieku danych klientów Framework - to już któryś wyciek w ostatnim miesiącu z różnych miejsc. Może by tak się przebranżowić z devopsa na pentestera/devsecopsa 🤔

W najbliższych latach będzie to coraz bardziej lukratywne zajęcie, patrząc na trendy w software developmencie.

I suck at designing software design interface, but at least I understand my obligations towards users.
https://unsung.aresluna.org/they-had-no-concept-of-a-duty-of-care-to-their-users

Pleased to share that my paper, "Practitioners at the Limit: Bereavement, Mockery and Ideology in Response to Crisis" is now available as a preprint on arxiv. https://arxiv.org/abs/2606.30667

Practitioners At The Limit: Bereavement, Mockery and Ideology in Response to Crisis
After decades in which the software industry heroized its technical employees, our current moment finds those employees in crisis. Economically, they are squeezed by a job market that has turned on them since Elon Musk gutted Twitter in 2022. Politically, their craft is continually pressed into the service of an ever tighter alliance between Big Tech and authoritarianism. Professionally, they find themselves less and less able to contribute anything good to anyone within business models that ar…

may as well spam more snaps from the church before bed.
goodnight.
#church #grave #tombScrolling

➡️ More molly guards
#bookmarks

More molly guards – Unsung
A blog about software craft and quality

Gorgeous collection of macOS drag-to-applications-to-install Windows:
https://unsung.aresluna.org/as-a-windows-user-its-a-very-surreal-way-to-install-a-program/

“As a Windows user, it’s a very surreal way to install a program.” – Unsung
A blog about software craft and quality