Twitxy Saved

Alekos Filini

Verified account This account is verified. Learn more

@afilini

Italy Joined January 2011
707 Following 5.1K Followers 3.2K Posts

Latest posts 5

Alekos Filini Verified account @afilini
I keep getting PDF CVs for people applying to our roles at Enclavia. I definitely don't feel confident opening them on my main laptop 😅
Alekos Filini Verified account @afilini 2d
I had my clanker write a clone of qvm-convert-pdf for Nix. It takes a potentially malicious PDF and renders it to pictures in a throwaway vm.

nix run github:portal-wheatley/vm-convert-pdf -- file.pdf

github.com/portal-wheatle…
View quoted post on X
5 replies 0 reposts 20 likes 1.1K views View on X
Alekos Filini Verified account @afilini
I had my clanker write a clone of qvm-convert-pdf for Nix. It takes a potentially malicious PDF and renders it to pictures in a throwaway vm.

nix run github:portal-wheatley/vm-convert-pdf -- file.pdf

github.com/portal-wheatle…
github.com GitHub - portal-wheatley/vm-convert-pdf: Convert untrusted PDFs to safe image-only PDFs by render... Convert untrusted PDFs to safe image-only PDFs by rendering them in a disposable VM (like qvm-convert-pdf), packaged as a Nix flake - portal-wheatley/vm-convert-pdf
0 replies 1 reposts 11 likes 1.5K views View on X
Alekos Filini Verified account @afilini
Enclavia is hiring!

We are looking for a security engineer to build really cool low level secure infra and a SDR to oversee the commercial pipeline.

We want somebody who believes in the mission and wants to be a key part of the team delivering it
enclavia.io/careers/
enclavia.io Careers · Enclavia Join Enclavia: we're hiring a senior Security Engineer and a Sales Development Representative to build and sell hardware-enclave infrastructure for Bitcoin teams. Remote, with office space in Turin...
5 replies 10 reposts 33 likes 2.5K views View on X
Alekos Filini Verified account @afilini
Enclavia fixes this
Binance @binance Oct 30
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.

The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.

As an immediate precaution, Binance has:

- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.

Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.

Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.

binance.com/en/support/ann…
View quoted post on X
0 replies 0 reposts 15 likes 562 views View on X
Alekos Filini Verified account @afilini
I’ve seen a few projects similar to Enclavia use tls termination inside the enclave for e2e security. To me it felt wrong, they could easily get another cert and mitm (remember browsers can’t pin certs). Now with the leaked CA keys I’m even more glad I didn’t take that route