The Curious Engineer

All blogs / Security

The Invisible Things Blog

blog.invisiblethings.org

My personal blog and website (see http://blog.invisiblethings.org/)

SecurityLinux / UnixOS / kernel

’10’15’20’25
Posts
133 from 12 May 2006 to 2 Feb 2026
Posting
now and then (1 in the last year)
Kind
personal blog
Feed
https://blog.invisiblethings.org/feed.xml

2026 1

  1. I have a new blog: Traces of Humanity!

2021 1

  1. Announcing Wildland Client v0.1

2018 3

  1. The Next Chapter: From the Endpoint to the Cloud
  2. Introducing graphene-ng: running arbitrary payloads in SGX enclaves
  3. Qubes Air: Generalizing the Qubes Architecture

2017 4

  1. Introducing the Next Generation Qubes Core Stack
  2. Qubes OS 4.0-rc1 has been released!
  3. Introducing the Qubes Admin API
  4. Compromise recovery on Qubes OS: individual VMs & full system cases

2016 4

  1. Qubes OS 3.2 has been released
  2. Thoughts on the "physically secure" ORWL computer
  3. Security challenges for the Qubes build process
  4. Qubes OS 3.1 has been released

2015 7

  1. State considered harmful - A proposal for a stateless laptop (new paper)
  2. Intel x86 considered harmful (new paper)
  3. Qubes 3.0
  4. Caspar
  5. Qubes OS Project gets OTF funding to integrate Whonix, improve usability
  6. Qubes 3.0-rc1 ISO and roadmap for 2015
  7. My New Git-based Blog

2014 6

  1. Qubes R3/Odyssey initial source code release
  2. Announcing Qubes OS Release 2!
  3. Physical separation vs. Software compartmentalization
  4. Qubes OS R2 rc2, Debian template, SSLed Wiki, BadUSB, and more...
  5. Qubes OS R2 rc1 has been released!
  6. Shattering the myths of Windows security

2013 8

  1. Qubes R2 Beta 3 has been released!
  2. Windows 7 seamless GUI integration coming to Qubes OS!
  3. Thoughts on Intel's upcoming Software Guard Extensions (Part 2)
  4. Thoughts on Intel's upcoming Software Guard Extensions (Part 1)
  5. Qubes OS R3 Alpha preview: Odyssey HAL in action!
  6. Introducing Qubes Odyssey Framework
  7. Qubes 2 Beta 2 has been released!
  8. Converting untrusted PDFs into trusted ones: The Qubes Way

2012 8

  1. Qubes 2 Beta 1 with initial Windows support has been released!
  2. How is Qubes OS different from...
  3. Introducing Qubes 1.0!
  4. Qubes 1.0 Release Candidate 1!
  5. Some comments on "Operation High Roller"
  6. Windows support coming to Qubes!
  7. Qubes Beta 3!
  8. Thoughts on DeepSafe

2011 17

  1. Trusted Execution In Untrusted Cloud
  2. Exploring new lands on Intel CPUs (SINIT code execution hijacking)
  3. Playing with Qubes Networking for Fun and Profit
  4. Qubes Beta 2 Released!
  5. Anti Evil Maid
  6. Interview about Qubes OS
  7. My SSTIC 2011 slides
  8. From Slides to Silicon in 3 years!
  9. USB Security Challenges
  10. (Un)Trusting the Cloud
  11. The App-oriented UI Model and its Security Implications
  12. Following the White Rabbit: Software Attacks Against Intel VT-d
  13. The Linux Security Circus: On GUI isolation
  14. Why the US "password revolution" won't work
  15. Qubes Beta 1 has been released!
  16. Partitioning my digital life into security domains
  17. My documents got lost/stolen [offtopic]

2010 15

  1. Update on Qubes
  2. Qubes Alpha 3!
  3. ITL is hiring!
  4. On Thin Clients Security
  5. (Un)Trusting your GUI Subsystem
  6. Qubes, Qubes Pro, and the Future...
  7. The MS-DOS Security Model
  8. Skeletons Hidden in the Linux Closet: r00ting your Linux Desktop for Fun and Profit
  9. Qubes Alpha 2 released!
  10. Disposable VMs
  11. On Formally Verified Microkernels (and on attacking them)
  12. Evolution
  13. Remotely Attacking Network Cards (or why we do need VT-d and TXT)
  14. Introducing Qubes OS
  15. Priorities

2009 21

  1. Another TXT Attack
  2. Evil Maid goes after TrueCrypt!
  3. Intel Security Summit: the slides
  4. About Apple’s Security Foundations, Or Lack Of Thereof...
  5. PDF signing and beyond
  6. Vegas Toys (Part I): The Ring -3 Tools
  7. Black Hat 2009 Slides
  8. Interview
  9. Virtualization (In)Security Training in Vegas
  10. Quest to The Core
  11. More Thoughts on CPU backdoors
  12. Thoughts About Trusted Computing
  13. Trusting Hardware
  14. The Sky Is Falling?
  15. Attacking SMM Memory via Intel® CPU Cache Poisoning
  16. Independent Attack Discoveries
  17. Attacking Intel TXT: paper and slides
  18. Nesting VMMs, Reloaded.
  19. Closed Source Conspiracy
  20. Why do I miss Microsoft BitLocker?
  21. Attacking Intel® Trusted Execution Technology

2008 15

  1. Microsoft executive "rebuts" our research!
  2. Xen 0wning Trilogy: code, demos and q35 attack details posted
  3. The three approaches to computer security
  4. Teamwork & Crediting
  5. Intel patches the Q35 bug
  6. Attacking Xen: DomU vs. Dom0 consideration
  7. Our Xen 0wning Trilogy Highlights
  8. 0wning Xen in Vegas!
  9. Rafal Wojtczuk joins Invisible Things Lab
  10. 1984?
  11. Vegas Training 2008
  12. Research Obfuscated
  13. The Most Stupid Security News Ever
  14. The RSA Absurd
  15. Kick Ass Hypervisor Nesting!

2007 15

  1. Razor-Thin Hypervisors
  2. Thoughts On Browser Rootkits
  3. Tricky Tricks
  4. Virtualization Detection vs. Blue Pill Detection
  5. We're ready for the Ptacek's challenge!
  6. Invisible Things Lab, Bitlocker/TPM bypassing and some conference thoughts
  7. Understanding Stealth Malware
  8. The Human Factor
  9. The Game Is Over!
  10. Handy Tool To Play with Windows Integrity Levels
  11. Confusion About The "Joke Post"
  12. Vista Security Model – A Big Joke?
  13. Running Vista Every Day!
  14. Beyond The CPU: Cheating Hardware Based RAM Forensics
  15. Towards Verifiable Operating Systems

2006 8

  1. Introducing Stealth Malware Taxonomy
  2. Vista RC2 vs. pagefile attack (and some thoughts about Patch Guard)
  3. Vista RC1 still vulnerable to the pagefile attack
  4. Blue Pill Detection!
  5. The Blue Pill Hype
  6. Introducing Blue Pill
  7. CONFidence 2006 - trip report
  8. SVV Source Code Made Public!