Openwall

382 posts

Openwall

Openwall

@Openwall

Infosec focused free software, research, publications, community activities @oss_security. Tweets are announcements. Please direct questions to @solardiz.

Присоединился Haziran 2010
14 Подписки7.1K Подписчики
Openwall
Openwall@Openwall·
passwdqc 2.1.0 is out, adding built-in common passwords list. We effectively include top 100k of HIBPv8 overlap with RockYou, optimized and compressed to under 200 KB embedded in program binary. None of JtR password.lst 1.8 million are accepted by default. openwall.com/lists/announce…
Openwall@Openwall

passwdqc 2.0.3 releases for Unix-like and Windows systems are out, with many minor additions and changes. Leaked password filter files updated to HIBP v8, encoding the 847+ million unique passwords (from billions of accounts) in a 3.5 GB file. openwall.com/lists/announce…

English
0
5
17
2.2K
Openwall ретвитнул
Solar Designer
Solar Designer@solardiz·
What should @Openwall's simpler vulnerability scoring system (CVSS alternative) be called? Note that we already have OVE openwall.com/ove/ as a CVE alternative, but unfortunately the OVSS acronym already has a bit of use in CS/AI for "open-vocabulary semantic segmentation".
English
2
1
2
1.3K
Openwall ретвитнул
Hash Suite
Hash Suite@HashSuite·
Hash Suite 4.0 (Windows) adds support for custom Python scripts as key-provider, updated wordlists to download, better high-resolution support, and should have fewer antivirus false positives. hashsuite.openwall.net/download
English
0
2
5
1.1K
Openwall ретвитнул
ISMG Network News
ISMG Network News@ISMG_News·
Strengthening Linux Security With Kernel Runtime Guard 🎯 #Linux security remains a pressing concern as vulnerabilities continue to expose critical systems. @solardiz, founder of @Openwall, and senior principal security engineer at CIQ, said Linux Kernel Runtime Guard's, or LKRG, 1.0 release brought major improvements in testing and code cleanup. Watch his full interview with @aseemjakhar: inforisktoday.com/strengthening-… #ISMGNews #ISMGStudio #cybersecurity #NullconBerlin2025 @nullcon
English
0
3
6
2.8K
Openwall
Openwall@Openwall·
Linux Kernel Runtime Guard @lkrg_org 1.0.0 by @Adam_pi3 @solardiz @kerneltoast et al. is out, adds support for Linux 6.13+ (tested to 6.17-rc4), forward-edge CFI (Intel CET IBT, KCFI), ..., reduces performance overhead, shrinks the codebase by ~2500 lines. openwall.com/lists/announce…
CIQ@CtrlIQ

Heading to Nullcon Berlin 2025? @solardiz will share his LKRG expertise by taking an in-depth look at kernel hardening challenges and what it takes to protect systems in the real world. nullcon.net/berlin-2025/sp… #NullconBerlin2025 #LinuxSecurity #RLC_H

English
0
8
20
2.8K
Openwall ретвитнул
CIQ
CIQ@CtrlIQ·
🔒 Enhancing LKRG: A Step Toward Stronger Security. CIQ's own Sultan Alsawaf recently contributed impactful updates to the LKRG project, fixing longstanding bugs & making it stronger & more stable than ever. Learn more here 🔗 hubs.li/Q03jDBsj0 #HPC #IT #LKRG #OpenSource #Linux
CIQ tweet media
English
0
6
8
1.6K
Openwall ретвитнул
kmkz
kmkz@kmkz_security·
#MITRE #CVE is great (dead?), but @Openwall 's #OVE has been a system for vuln. tracking-ID since 2016 ! Ex: #Exim CVE-2019-13917 also has OVE ID: OVE-20190718-0006 I used both for tracking vulnerabilities since 2k16. Time to give #OVE more visibility: openwall.com/ove/
English
0
2
3
1.4K
Openwall ретвитнул
Solar Designer
Solar Designer@solardiz·
I'm happy to build upon and extend the ideas and approaches we had tested and proven, and expertise gained building @Openwall's security enhanced Linux distribution, now for @CtrlIQ's wider audience and in a modern context.
CIQ@CtrlIQ

📣 Exciting news from CIQ! 📣 Announcing Rocky Linux from CIQ - Hardened! Read the press release: hubs.li/Q03blcsv0 #RLCHardened #RLC #RockyLinux #CIQ #SysAdmin #ProductLaunch

English
1
7
18
10.5K
Openwall ретвитнул
Solar Designer
Solar Designer@solardiz·
Interview with @Adam_pi3 and me about LKRG, in English adwersarz.pl/polish-it-secu… and Polish
Adwersarz.pl@adwersarz_pl

Czas na wywiad! Rozmawiamy z @Adam_pi3 i @solardiz o LKRG (Linux Runtime Kernel Guard), które może znacznie utrudnić zhackowanie Linuxa. Co słychać i jak przebiega rozwój projektu, czy ktoś próbował skutecznie obejść LKRG? Zapraszamy do lektury! adwersarz.pl/polskie-projek…

English
1
12
26
6.4K
Openwall ретвитнул
Craig Rowland - Agentless Linux Security
Craig Rowland - Agentless Linux Security@CraigHRowland·
We sponsored the porting of the yescrypt Linux password hash algorithm to Go as an open source project. Read more below. This is now part of our agentless password auditor feature on Linux as well.
Openwall@Openwall

Announcing yescrypt-go, our pure Go reimplementation of yescrypt key derivation function (KDF) and password hashing scheme. Builds upon @dchest's Go scrypt, with yescrypt support added by @solardiz. Sponsored by @SandflySecurity. openwall.com/lists/announce… x.com/SandflySecurit…

English
1
3
11
2.5K
Openwall
Openwall@Openwall·
Announcing yescrypt-go, our pure Go reimplementation of yescrypt key derivation function (KDF) and password hashing scheme. Builds upon @dchest's Go scrypt, with yescrypt support added by @solardiz. Sponsored by @SandflySecurity. openwall.com/lists/announce… x.com/SandflySecurit…
Sandfly Security@SandflySecurity

Sandfly 5.1.1 features yescrypt support for our agentless Linux password auditor, new detection modules for debugger activity, and an important performance fix for the database. Read more about these new features below: sandflysecurity.com/about-us/news/…

English
0
6
12
4.9K
Openwall ретвитнул
Open Source Security mailing list
Open Source Security mailing list@oss_security·
Is Open Source focused threat intelligence - Tactics, Techniques, and Procedures (TTPs), Indicators of Compromise (IOCs), exploits/rootkits/backdoors in the wild - a desirable topic for oss-security or for a separate mailing list? If separate, where to draw the line (reply)?
English
1
3
5
2.3K

Открыть

@solardiz @nullcon @aseemjakhar @lkrg_org @Adam_pi3 @kerneltoast @CtrlIQ @rocky_linux