Joe Fitz

Wasting less time on twitter has always been a goal, but it looks like the universe is helping me with that. This account isn't going anywhere, but i'll be checking in on it less and less. Find me @securelyfitz@chaos.social - @securelyfitz" target="_blank" rel="nofollow noopener">chaos.social/@securelyfitz

@dcuthbert @_MG_ Sign up now for Applied dental attacks #4, cosmetic implants.

This years @securelyfitz and @_MG_ courses are gonna be lit! So all, this week we are not doing rice but TEETH. Ok, let's get gnashing

@bhajduk Unfortunately, we didn't hit critical mass before they had to allocate training rooms and didn't make the cut. Mostly my fault since I was too busy working on the course instead of promote it. Online & summer offering info coming pretty soon though.

@securelyfitz I was looking to register, but your training doesn't show in the list.

As I finalize the content for my new class on firmware security, I'd like to know: what questions do you have, or do you think that I should be answering in this course? Let me know here, or submit something anonymous at forms.gle/6oeiFHihBkVs11…

hey @TopoDesignsUSA How did you manage to fold time and space in your global travel roller? Your AI assistant entertainingly confirms the listed external dimensions are smaller than the listed internal capacity....

The first offering of this class is coming soon at @BlackHatEvents #BHASIA! #applied-hardware-defences-secure-boot-and-encrypted-firmware-49814" target="_blank" rel="nofollow noopener">blackhat.com/asia-26/traini…

Starting to take a new approach to new components - getting some proof of life from them, using some python and the FTDI MPSSE capable interfaces, like the @securelyfitz Tigard. Now I know what I want my MCU SPI to do, and, what that looks like, working.

I've got a brand new class in the works! Applied Physical Defenses: Secure Boot and Encrypted Firmware The first time I offer this class will be @BlackHatEvents in Singapore on April 21-22, more offerings coming soon. #applied-hardware-defences-secure-boot-and-encrypted-firmware-49814" target="_blank" rel="nofollow noopener">blackhat.com/asia-26/traini…

@udunadan @thegrugq I used to call this "armchair hacking". I later found you can also bill for this time by calling it "threat modeling".

You don’t find deep vulns just by reading code carefully; you find them by asking “what assumptions does this code silently make?” when you've carefully built the cognitive code map, and are constantly updating it.

#FTSCon Speaker Spotlight: Joe FitzPatrick (@securelyfitz) is presenting “Rethinking DMA Attacks with Erebus” in the MAKER track. See the full list of speakers + event info, including how to register, here: volatilityfoundation.org/from-the-sourc…

@AlaskaAir howdy. Have another @AlaskaAir flight coming up and I would love to know the proper procedure to follow to get it right this time.

@AlaskaAir Bump?

Hey @AlaskaAir how is your "20 minute guarantee" supposed to work? We arrived @ gate, pilot announced our arrival & thanked us for flying 5:15. Bags *started* to roll out 5:39. Baggage office claimed arrival was 5:20 - but folks were already off the plane by then...

Why don't you say "chalk time" in your guarantee instead of "arrival at the gate"? Why was the "chalk time" for my flight after people we already getting off the plane? Is it guarantee actually "only if the first bag is out greater than 20 minutes after the arbitrary chalk time"

I was also told that the "chalk time" is what matters, and the *only* way i can find that out is to ask the pilot. Am I really supposed to ask the pilot as i get off the pane what the chalk time is? Plus, my bag was not the first bag out at 5:39.

Would definitely recommend @securelyfitz ‘s hardware security courses. I had an impeccable experience! More-Hands on, Perfectly paced courses! #BlackHat #blackhat2025

@securitydevops @BlackHatEvents Glad to have you! Enjoy the rest of the week and have some fun messing with hardware.

@securelyfitz Great 4 days of Training. Thank you and your very kind and helpful assistants. @BlackHatEvents #BHUSA

@rce_trent @Percent_X @defcon @IoTvillage The wonderful thing about Tigards...

@Percent_X @defcon @IoTvillage I hear tigards survive nuclear war. @securelyfitz

I finished building this years @defcon @IoTvillage hardware exercise platforms. Next, write the exercise manuals and test all gear before shipping. Biggest question I have every year. Will these training devices/platforms survive two days of Defcon IoTVillage ? Lets find out 😎