Giovanni (Deroad)

31 Followers
19 Following
80 Posts
Developer, Security Researcher and RizinOrg Co-Founder
Bloghttps://kumo.xn--q9jyb4c
Githubhttps://github.com/wargio
BSkyhttps://bsky.app/profile/xn--9kq.xn--q9jyb4c
I made a small blog post about open source licenses.
https://云.みんな/2026-03-01.html
blog - 雲

Just in case anyone else is crazy enough to want to run #rizin on #omniOS as part of their automated reverse-engineering pipeline: https://github.com/rizinorg/rizin/pull/5972
Fix illumos/solaris build [sysctl.h, *time_r signatures] by tstromberg · Pull Request #5972 · rizinorg/rizin

Your checklist for this pull request I've read the guidelines for contributing to this repository. I made sure to follow the project's coding style. I've documented every RZ_API fun...

GitHub
Antide's Law

Personal blog of Julien (jvoisin) Voisin

We've recently released a blog post detailing our accomplishments and changes throughout the 2025. Learn more here: https://rizin.re/posts/year-2025-summary/
2025 Year Summary

An overview of the work done in 2025

Rizin
Finally the #39c3 has started!
Yearly dialog between my wife and me:
wife: "Why you keep working on projects for free (referring to open source projects) ?"
me: "Because relaxes me, and makes me feel accomplished; plus makes me learn new things!"
wife: "You should getting paid for this!"
me: "you don't understand open source"
wife: 

New blog post: ML-KEM Mythbusting.

Due to reasons.

https://keymaterial.net/2025/11/27/ml-kem-mythbusting/

ML-KEM Mythbusting

What is this? There have been some recent concerns about ML-KEM, NIST’s standard for encryption with Post-Quantum Cryptography, related standards of the IETF, and lots of conspiracy theories …

Key Material

Another upstream kernel release, another progress report!

https://asahilinux.org/2025/10/progress-report-6-17/

Thank you once again to everyone supporting us on OpenCollective and GitHub sponsors!

Progress Report: Linux 6.17 - Asahi Linux

Apple added new mitigations to iOS: SPTM, TXM, and Exclaves. Even in the case of a kernel compromise, various components stay protected. You can read about more technical details in Moritz' thesis: https://arxiv.org/abs/2510.09272
Modern iOS Security Features -- A Deep Dive into SPTM, TXM, and Exclaves

The XNU kernel is the basis of Apple's operating systems. Although labeled as a hybrid kernel, it is found to generally operate in a monolithic manner by defining a single privileged trust zone in which all system functionality resides. This has security implications, as a kernel compromise has immediate and significant effects on the entire system. Over the past few years, Apple has taken steps towards a more compartmentalized kernel architecture and a more microkernel-like design. To date, there has been no scientific discussion of SPTM and related security mechanisms. Therefore, the understanding of the system and the underlying security mechanisms is minimal. In this paper, we provide a comprehensive analysis of new security mechanisms and their interplay, and create the first conclusive writeup considering all current mitigations. SPTM acts as the sole authority regarding memory retyping. Our analysis reveals that, through SPTM domains based on frame retyping and memory mapping rule sets, SPTM introduces domains of trust into the system, effectively gapping different functionalities from one another. Gapped functionality includes the TXM, responsible for code signing and entitlement verification. We further demonstrate how this introduction lays the groundwork for the most recent security feature of Exclaves, and conduct an in-depth analysis of its communication mechanisms. We discover multifold ways of communication, most notably xnuproxy as a secure world request handler, and the Tightbeam IPC framework. The architecture changes are found to increase system security, with key and sensitive components being moved out of XNU's direct reach. This also provides additional security guarantees in the event of a kernel compromise, which is no longer an immediate threat at the highest trust level.

arXiv.org
The second blog post is related to the shortcut manager for Cutter. This allows users to discover and search for the shortcuts combos supported by cutter!
We want to thank our RSoC student premade, for implementing these two features in cutter!
https://cutter.re/shortcut-manager-rsoc
Shortcut Manager - RSoC Project

Introducing a centralized Shortcut Manager in Cutter for improved consistency and maintainability. Read about the improvements made possible by Emad Sohail, an RSoC student

Cutter