Joe Fitz

Wasting less time on twitter has always been a goal, but it looks like the universe is helping me with that. This account isn't going anywhere, but i'll be checking in on it less and less. Find me @securelyfitz@chaos.social - @securelyfitz" target="_blank" rel="nofollow noopener">chaos.social/@securelyfitz

Okay - my last post on this for a while: *Today* is the last day for early registration discounts at @BlackHatEvents USA! I've got a few courses on both attacking and defending embedded devices. Check them out: #joe-fitzpatrick-33463" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

End rant, begin shameless plug: Black Hat early registration discounts end tomorrow, and there are a ton of excellent classes available, including my own: #joe-fitzpatrick-33463" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

So - No, my classes do not incorporate AI. Yes, you can 'solve' the labs in my classes faster with some AI assistance. But no, you cannot understand the "why" of the labs in my class if you do.

Today's daily @BlackHatEvents USA training reminder comes to you in rant form: AI is definitely a thing. Fundamentally, it is a tool that may or may not improve your work with trade-offs that may or may not be worth it.

Daily reminder that this is the last week of early registration discounts for @BlackHatEvents USA. Register ASAP, after this week some classes may be cut or consolidated. Here's my take on some excellent courses, and good course combos:

@kushaldas @_evict Applied Physical Attacks #1 and #2 are available online, self-paced. Soon Applied Physical Defenses will be too: learn.securinghardware.com I ship a kit of hardware. Lectures, lab instructions, and howtos/walkthroughs are all on the course website.

@securelyfitz @_evict I wish to learn these somehow, borders make it impossible

Having trouble learning hardware hacking from some clanker assistant? You probably need some hands-on time with real hardware. Applied Physical Attacks # 1 is the perfect intro to understand what's going to happen to a hardware device the moment it gets into attacker's hands.

Not a fan of Vegas? Me either! I'll be running an extended 3-day version of the courses at @CODEGATE_KR in Seoul, July 21-23: codegate.org/fairContents.d…

Early registration for @BlackHatEvents Hat ends this week - register before the price goes up. The class will be offered both Aug 1-2 and Aug 3-4. #joe-fitzpatrick-33463" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

Disabling consoles and debug ports only goes so far, using these features brings an order of magnitude of hardware security to your devices. If you're new to hardware, pair it w/ Applied Hardware Attacks. Otherwise, Applied Fault Injection pairs nicely as well.

The clock is ticking! This is the last week for early registration prices at @BlackHatEvents USA. I have a new class this year: How to use Secure Boot and Encrypted Firmware. #applied-hardware-defenses-secure-boot-and-encrypted-firmware-51060" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

LABScon25 Replay 📺 Joe Fitzpatrick: Please Connect to the Foreign Entity to Enhance Your User Experience (@securelyfitz) sentinelone.com/labs/labscon25…

How do I get firmware from hardened devices, and how do I analyze it? -> Take AFI and Ghidra in either order See all the hardware courses at BlackHat USA: blackhat.com/us-26/training…

How do I protect my firmware, and how do I asses if that's sufficient? -> Take APD followed by AHA2 How do I protect my firmware, and how can I bypass those protections? -> Take APD followed by AFI

Hardware Hacking and AI* all using LLMs*: I've been teaching courses about *Attacking *IoT at Black Hat for over a decade - often using tools that include *Logic *Level *MOSFETs. Here's my take on some of the hardware courses and what pairs well for different skill levels: