Matteo Rizzo
@_MatteoRizzo
Followers
3K
Following
1K
Media
24
Statuses
579
Security engineer, CTF player for @0rganizers. Mastodon: @[email protected]
Joined January 2018
Hey... quick question, why are anime catgirls blocking my access to the Linux kernel? πΈ https://t.co/0Ew0aG4rxu
94
159
4K
I have a (dumb) theory about Intel. They used to ship beautiful printed manuals anywhere in the world for free if you called them. That program made a lot of engineering students customers for life. Then some middle manager killed it, and probably got a promotion.
These are forever gone btw. Intel stickers had cool semiconductor holographics on the backside that no one will ever see, it wasn't there by accident. It was too beautiful for the modern marketing bug people, so they wiped it out.
143
3K
49K
Speculative rop chain execution in guest-to-host attack π
Our latest post details how we exploited Retbleed (a CPU vulnerability) to compromise a machine from a sandboxed process and VM! Curious? π https://t.co/CSD8kdlBjD
7
13
122
Our new blog post is out! Check it out, I think we got some really cool results in this one.
Our latest post details how we exploited Retbleed (a CPU vulnerability) to compromise a machine from a sandboxed process and VM! Curious? π https://t.co/CSD8kdlBjD
1
3
30
We are very happy to announce the nominees for the 2025 Pwnie Awards! As a reminder, we will be presenting the winners at DEF CON this year. Saturday the 9th, 10:00AM Main Stage. Hope to see you there! https://t.co/hWUu2PcM8B
docs.google.com
Pwnie for Best Crypto Bug X.509DoS Exploiting and Detecting Denial-of-Service Vulnerabilities in Cryptographic Libraries using Crafted X.509 Certificates Bing Shi, Wenchao Li, Yuchen Wang, Xiaolong...
0
48
141
EntrySign was nominated for two Pwnies (best crypto bug and best desktop bug)! π₯³ https://t.co/PDl3xARuNK
@__spq__ @sirdarckcat @taviso
0
6
42
There are plenty of good economic reasons to not prioritize things loading faster, but if anything anywhere in the world takes more than 150ms to load, it was almost certainly not limited by physics, and if the developers have enough time+skill they can almost always speed it up.
Client: Can you make it load faster? Me: Sure, I'll just rewrite the laws of physics.β‘
6
10
229
The recording of our OffensiveCon presentation about EntrySign is live! https://t.co/atQGAV39l3 Slides at https://t.co/twMFJ9L8Mv
@sirdarckcat @__spq__
2
21
100
The best talk I have been in a while
The recording of our OffensiveCon presentation about EntrySign is live! https://t.co/atQGAV39l3 Slides at https://t.co/twMFJ9L8Mv
@sirdarckcat @__spq__
0
2
19
mandatory watch
The recording of our OffensiveCon presentation about EntrySign is live! https://t.co/atQGAV39l3 Slides at https://t.co/twMFJ9L8Mv
@sirdarckcat @__spq__
1
1
11
This is one of the coolest talks I have seen in a while! Incredible research π₯
The recording of our OffensiveCon presentation about EntrySign is live! https://t.co/atQGAV39l3 Slides at https://t.co/twMFJ9L8Mv
@sirdarckcat @__spq__
0
2
10
Scare a Linux user in less than 5 words π§π»
0
1
21
And the video!!
We posted our slides!
1
8
24
This was such a great talk, very impressive research π
We posted our slides!
0
1
7
#OffensiveCon25 videos are now up! https://t.co/aRzmXS7iPA
youtube.com
OffensiveCon 2025 Talks
8
169
415
The recording of our OffensiveCon presentation about EntrySign is live! https://t.co/atQGAV39l3 Slides at https://t.co/twMFJ9L8Mv
@sirdarckcat @__spq__
2
21
100