dguido

8 ms·

31.
by dguido 6y ago
Yep! As far as I'm aware, a number of military services (I think the USAF) have been public about using Moloch on their networks. It was money well spent by DARPA.
32.
by dguido 6y ago
There's a substantial limit to public knowledge about those methods and APIs. We've been able to discover more of them, and more that work on current versions of iOS than other teams. Those techniques unfortunately go stale very q
33.
by dguido 6y ago
Fun fact, Moloch was initially created with funding from DARPA's famous Cyber Fast Track program! It's great to see that Moloch is still going strong since ~2013. There is some previous discussion of Moloch when it was released in
34.
by dguido 6y ago
iVerify uses a variety of methods to detect if the phone has a security issue. Some of them are deterministic and report with complete certainty. For example, the Volexity report about EVIL EYE includes IOCs for the exploit payload and we c
35.
by dguido 6y ago
We don't have precise information about the payload for the ZecOps bugs, so we can't say. The attacks profiled by Volexity earlier this week, the MobileSafari exploits that China was using to spy on Uyghurs, are now detected by iV
36.
by dguido 6y ago
If you want to reduce your risk to these 0days: 1. Go to Settings > Password & Accounts. Set Fetch New Data to "Manual" and disable "Push". This will ensure that new mail is only downloaded when you specifically r
37.
by dguido 6y ago
iVerify looks for indicators that your phone may be running code it shouldn't be. Here's a brief overview from our initial release of the app: https://blog.trailofbits.com/2019/11/14/introducing-iver
38.
by dguido 6y ago
Install the iVerify app for analysis and instructions to limit your risk to these 0days. https://apps.apple.com/us/app/iverify/id1466120520 iVerify pushes news with analysis of every new public exploit for iO
39.
by dguido 7y ago
There are so many servers and apps being installed by Sovereign that I'm certain few would be able to keep it secure ( https://github.com/sovereign/sovereign/wiki/Software-used-by... ). The big win for the
40.
by dguido 7y ago
Do you remember the CVE number of this bug? How about the Citrix bug from last week? It's a poor way to communicate, and there's very strong anecdotal evidence that using a real name promotes patching rates faster than otherwise.
41.
by dguido 7y ago
For the short version, see our branded vulnerability page: https://whosecurve.com
42.
Whose Curve Is It Anyway?(whosecurve.com)
11 points by dguido 7y ago|0 comments
43.
by dguido 7y ago
If you're looking for privacy advice for iOS, then check out iVerify from Trail of Bits. It includes automated detection for certain kinds of malware, configuration checks, and privacy guides for all the rest. Blog: https://
44.
by dguido 7y ago
It's tough to create an Algo app without inserting Trail of Bits between you and your VPN server somehow. I want to eventually create an app, but my requirement is that the end result is trustless and I never see any of your keys. Mayb
45.
by dguido 7y ago
You don't need to download an app to use Algo on iOS! It creates an Apple profile that installs an IKEv2 VPN. Algo _also_ creates a WireGuard profile which does require an app. It's your choice which one to use.
46.
by dguido 7y ago
> OpenVPN does not have out-of-the-box client support on any major desktop or mobile operating system. This introduces user experience issues and requires the user to update and maintain the software themselves. OpenVPN depends on the se
47.
by dguido 7y ago
Uhhh, I have no idea what exchange you're talking about. It's a well-documented fact that we work with DARPA on a number of research programs, which lets us release things like this to the public: https://blog.trailofbi
48.
by dguido 7y ago
Are you aware of any VPN services where this is the case? Do you think the internal auditing and security controls at an independent data center would be more effective than those at AWS or Google?
49.
by dguido 7y ago
I appreciated that Wirecutter's review of VPN services began with investigating which ones had contracted for 3rd party security reviews. This presciently excluded many providers that were all about marketing, like NordVPN. I think thi
50.
by dguido 7y ago
Thanks for your review, however, I wouldn't go as far to say that. You don't know what a given nation-state will do or what tools they will use. It's likely that many of them use lightly modified, off-the-shelf tools. Additio
51.
This App Will Tell You If Your iPhone Gets Hacked(vice.com)
8 points by dguido 7y ago|0 comments
52.
by dguido 7y ago
> It's interesting that the strategies described in this post lean so heavily on theoretical program correctness; as I read it, it felt super useful to me as a Go developer, and less directly applicable to my assessment work. It&#x2
53.
by dguido 7y ago
Here's the opposite perspective: https://www.baltimoresun.com/opinion/bs-xpm-2012-02-06-bs-ed... > But as the facts now show, smart kids don't always stay smart, and when they are bored or bullied or ridic
54.
by dguido 7y ago
Yes, an attacker using checkm8 could do that if they had a separate exploit for persistence. That exploit would be in iOS and take over at a later point in the boot process, and it would be possible for Apple to patch it with an iOS update.
55.
by dguido 7y ago
lol that's a great analogy! Yes, this is a small project for roughly one person at our company of 50. It's something we felt like we could contribute so we had fun with it. We already invested all the time elsewhere to master iOS.
56.
by dguido 7y ago
We discovered/developed a suite of side channels that let us indirectly read iOS system state from inside the sandbox. There are many different checks across unknown deviations, known jailbreak files and utilities, and runtime behavior
57.
by dguido 7y ago
It certainly will _feel_ persistent if you're successfully attacked with this technique. If your iOS software is swapped out for a version with a backdoor, then the attacker will have collected your passwords and authentication tokens
58.
Tethered Jailbreaks Are Back(blog.trailofbits.com)
143 points by dguido 7y ago|117 comments
59.
by dguido 7y ago
This kind of attention is great for us, bad for him. Now there's a PC Mag, Vice, and Gizmodo article indexed high up on Google when you search Time AI that debunks him.
60.
by dguido 7y ago
Yes, and it makes sense that I was thrown out. It's not like the security guard knows the talk is bullshit. He just saw a guy (me) yelling that, "all you employees of this guy should quit and find real jobs!" I think that was

More ›