#indroduction shitpost

Hi, I'm Zan and today I drank two pots of coffee because I make poor decisions.

An #Indroduction of a sort, This account is for the #TTRPGs we play and #podcast. It's mostly #DnD for now but we're exploring other systems.

Current campaigns:

Pack Tactics (An all-kobold campaign currently in its fourth season): https://aaronbsmith.com/cogwheel/tag/pack-tactics-s4/

Cause & Effect (A more traditional game, but when warforged and time travel are involved, "traditional" has a very broad definition): https://aaronbsmith.com/cogwheel/tag/cause-and-effect/

We also play a 1-shot here and there: https://aaronbsmith.com/cogwheel/tag/one-shot/

#indroduction yeah?

I'm an IT security guy, I work for nbn. I have an interest in video games, technology, politics, city planning, science, and some other stuff.

I have a kitty and a 3yo daughter.

Expect a mix of all the above on my timeline.

I finally came around to setting up this account. #indroduction
I'm a FLOSS enthusiast on Android and Linux, currently maintaining/developing Eyedropper, a powerful customizable color picker and formatter, built for the #GNOME desktop.

Follow me on https://github.com/FineFindus to view all the other projects I randomly contribute to.

This is my #indroduction post. I hope I am doing this right.

I am Vinoth, from San Diego. I lead the silicon security architecture and silicon security operations teams at #Google. Before this, I worked on mobile silicon security at #Qualcomm. I will mostly talk about #mobilesecurity, #androidsecurity and #infosec.

Much of my work is about improving the security of #Pixel and other #Android devices. My expertise is at the intersection of hardware security architecture, software security architecture and silicon security operations (secure key provisioning, code signing, device attestation etc.). I have ~20 years of experience making mistakes at this particular intersection that make me feel eminently qualified to talk about how to not make them.

I love explaining the intricacies of silicon development to software engineers and vice versa. So if you want to understand the hardware underpinnings of Trusted compute, confidential compute or whatever, I'm your guy.

I sometimes hold unpopular opinions, and I welcome healthy discussions about them. For example, (a) open sourcing RTL will not improve hardware security to the same extent open source software improved software security (b) there are situations where compliance actively harms security.

Also a medidator, volunteer at #ishafoundation, father of 2 kids, husband of 1 wife, angel investor and a very curious human being.