Pietro Borrello

265 Followers
174 Following
6 Posts
PhD Student in Computer Science Engineering at @SapienzaRoma.
Pwner at @TheRomanXpl0it and @mhackeroni.
Websitehttps://pietroborrello.com
Twitterhttps://twitter.com/borrello_pietro

Are you interested in bleeding-edge microarchitecture offensive security research, with a concrete impact on user security?
We have just opened a Microarchitecture Security Internship position at Apple, in SEAR LASER! ❤️‍🔥

Apply here: https://jobs.apple.com/en-us/details/200624069/microarchitecture-security-internship

Microarchitecture Security Internship - Jobs - Careers at Apple

Apply for a Microarchitecture Security Internship job at Apple. Read about the role and find out if it’s right for you.

Memory Integrity Enforcement is the culmination of a truly incredible amount of work :)

While there's so much to love, one of my favorite pieces was getting to bring kalloc_type-style isolation to out-of-bounds accesses on both the architectural and speculative path. This lets us both mitigate a variety of Spectre v1 style attacks and break the reliable exploitation of some of the most powerful first-order memory corruption primitives (arb offset OOB R/W).

https://security.apple.com/blog/memory-integrity-enforcement/

Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research

Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our advanced operating system security to provide industry-first, always-on memory safety protection across our devices — without compromising our best-in-class device performance. We believe Memory Integrity Enforcement represents the most significant upgrade to memory safety in the history of consumer operating systems.

Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research
SWE - Microarchitecture Security Intern - SEAR - Careers at Apple

Apply for a SWE - Microarchitecture Security Intern - SEAR job at Apple. Read about the role and find out if it’s right for you.

📢 Announcement 📢!

WOOT 2023 @wootsecurity
will be co-located with @IEEESSP, on May 25th, and chaired by @sara_rampazzi and @reyammer !

Deadline is Friday Jan 27th! 😱

The updated CFP and all other info at: https://wootconference.org!

Please help us spreading the word! 🙏

17th Workshop On Offensive Technologies (WOOT '23)

x86 PAC · pietroborrello/CustomProcessingUnit@936a684

The first dynamic analysis framework for CPU microcode - x86 PAC · pietroborrello/CustomProcessingUnit@936a684

GitHub
Pietro Borrello on Twitter

“Verifying it's me on Mastodon: (@[email protected]) https://t.co/vncSXKt6xS”

Twitter