Share this page!

Brendan Dolan-Gavitt Profile picture
Twitter logo
10 Jul, 6 tweets, 4 min read
Sorry but I just found out what MEMS is and it's insane?? Incredibly tiny (micrometer scale) intricate clockwork mechanisms??? And they're in your iPhone?????
Also you can't expose them to too much helium because (I do not think I'm making this up) the helium atoms get caught in the gears? vice.com/en/article/gye…
Two clarifications from the comments:
1. The ones with gears are generally not found in phones
2. Phones have inertial sensors which are more like springs (left) and clocks which use resonators (right)

Thanks to @gsuberland, @MC_Spacebat, and @bobpoekert for details!
MEMS gyroscopes also look extremely cool
Human hair for scale O_O
More excellent videos from @SandiaLabs here including a wee bug playing around on some MEMS

• • •

Missing some Tweet in this thread? You can try to force a refresh
　

Keep Current with Brendan Dolan-Gavitt

Brendan Dolan-Gavitt Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @moyix

Brendan Dolan-Gavitt Profile picture
26 Feb 20
By request, here's a brief live thread on "When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features" ndss-symposium.org/wp-content/upl…
Background: packing is pervasive, and packers are now quite complex. Some have multiple layers of packing, use anti-debugging/emulation, or unpack only small fragments of code at a time.
Machine learning for malware is the new hotness
Read 10 tweets
Brendan Dolan-Gavitt Profile picture
23 Feb 20
Last session of the day at NDSS BAR features three invited talks! First, Jacopo Corbetta talks about IoT platform fuzzing at Qualcomm
Fuzzing has been very successful at Qualcomm; 100+ bugs found via fuzzing in their IoT platform. Around half from "pure" fuzzing, others from "hybrid" (manual analysis+fuzzing, etc)
"But doesn't Qualcomm have the source code?" Not always; third-party vendor code is common.
Read 50 tweets
Brendan Dolan-Gavitt Profile picture
23 Feb 20
Welcome back to the NDSS Bar livetweet! In our afternoon session we're looking at obfuscation and how to defeat it. First up is Vaibhav Sharma, with "It Doesn’t Have to Be So Hard: Efficient Symbolic Reasoning for CRC"
Some papers, including some of the anti-fuzzing work from USENIX Security last year, have argued that CRCs are good for slowing down symbolic execution. Sharma et al. ask: is this true?
What do CRC implementations look like? One technique used in Fuzzitication is this
Read 36 tweets
Brendan Dolan-Gavitt Profile picture
23 Feb 20
Now starting in on the research talks at NDSS BAR. First up, a talk via Skype since the authors were not able to make it due to travel restrictions: Similarity Metric Method for Binary Basic Blocks of Cross-Instruction Set Architecture
Basic background: we want to compute code similarity by finding an embedding for each basic block in a binary
Prior work took an NMT approach using RNNs (last year at NDSS, ndss-symposium.org/ndss-paper/neu…)
Read 33 tweets
Brendan Dolan-Gavitt Profile picture
23 Feb 20
Starting off NDSS BAR 2020, @thedavidbrumley gives his keynote based on his 17 years of experience in binary analysis!
Early work: asm2c, 2003. Lifts x86 assembly to C with SMT formulae in-line. Then you compile & execute lifted code directly.
But writing lifters in C is painful and didn’t end up being maintainable. So after a brief detour through Java settled on OCaml for Vine, BAP.
Read 22 tweets
Brendan Dolan-Gavitt Profile picture
15 Feb 19
Apparently while learning English, GPT-2 also accidentally picked up some JavaScript
Also kind of amazing – sample 195 is syntactically correct PHP code (at least as far as "php -l" can determine) gist.github.com/moyix/dda9c318…
...I know it won't do anything but I still kind of don't want to try running it
Read 7 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!

Like this author's thread?

Get emails when @moyix has new unrolls!

Check out other threads from @moyix!

Read all threads by @moyix

:(