Every time I see physical attacks on TEEs, I wish someone would put out a position paper on @hdevalence.bsky.social 's "guy with a glock" model
x.com/hdevalence/s...

As instructors we must deal with this before it's too late. "Don't use AI" isn't really a sufficient guardrail.

x-post from x.com/GarrettPeter...

"How the Great Firewall of China detects and blocks fully encrypted traffic." is IMO the first glimpse into what this looks like, though.

The thresholds in Ex1 smell like something written by a decision tree and then adapted by humans.

Getting into big security conferences may be difficult, but I'm grateful to have never seen anything as bad as "who is adam"

GWU was very welcoming of @pet-symposium.bsky.social attendees. The nearby whole foods, not so much.

Of the 1922 IPv4 addresses we collected from the GFW's injectors, these 6 would respond on ports roughly distributed across the port spectrum

This strange phenomenon poses some risks. The GFW, or anyone else, could be using traffic received by these hosts to surveil censored users.

The inspiration for this work was a weird observation. Instead of just blackholing connections, some of the IPs injected by the GFW's DNS injector would respond with a S+A. (when you gaze into the abyss....)

Users under China's censorship regime receive injected responses for bogus black-hole IP addresses when they try to do DNS lookups for censored domains. But what if those IPs weren't just bogus, but potentially malicious?

This week we presented our work: "I'll Shake Your Hand" to FOCI about this.

Reminds me of this meme I have locked and loaded for something I'm about to assign students