1. X
  2. Openwall
Log inSign up
Openwall
384 posts
user avatar
Openwall
@Openwall
Infosec focused free software, research, publications, community activities @oss_security. Tweets are announcements. Please direct questions to @solardiz.
openwall.com
Joined June 2010
14
Following
7,205
Followers
RepliesRepliesMediaMedia
  • user avatar
    Openwall
    @Openwall
    Apr 25
    Linux Kernel Runtime Guard @lkrg_org 1.0.1 by @Adam_pi3 @solardiz @kerneltoast et al. is out, adds support for Linux 6.19 and 7.0, contains hardening changes and bug fixes openwall.com/lists/announce…
    3.6K
  • user avatar
    Openwall
    @Openwall
    Mar 5
    passwdqc 2.1.0 is out, adding built-in common passwords list. We effectively include top 100k of HIBPv8 overlap with RockYou, optimized and compressed to under 200 KB embedded in program binary. None of JtR password.lst 1.8 million are accepted by default. openwall.com/lists/announce…
    user avatar
    Openwall
    @Openwall
    Jun 25, 2023
    passwdqc 2.0.3 releases for Unix-like and Windows systems are out, with many minor additions and changes. Leaked password filter files updated to HIBP v8, encoding the 847+ million unique passwords (from billions of accounts) in a 3.5 GB file. openwall.com/lists/announce…
    2.8K
  • user avatar
    Openwall
    @Openwall
    Sep 20, 2025
    We've just published the slides of @solardiz's @nullcon Berlin 2025 talk "Linux Kernel Runtime Guard (LKRG) 1.0" openwall.com/lists/announce… #LKRG #nullconBerlin2025 #nullcon
    What is LKRG

- Project of Adam 'pi3' Zabrocki
  - Brought under Openwall umbrella for its first public release in 2018
  - (Post-)detection of (and response to) kernel rootkits and exploits

- Linux kernel module that performs
  - Runtime integrity checking of the *kernel* and *modules* (including itself)   <- "code"
  - and of *CPU* flags and *globals* and the kernel's view of running *processes*   <- "data"
  - Sanity-checking of *control flow* (stack unwinding) and blocking some APIs
  - Response to (almost-)successful attacks and encrypted remote logging

- 20+ contributors total, 4 very active this release cycle (0.9.9 to 1.0.0)
  - Also users contribute testing beyond what we could perform ourselves

- Independent project with some corporate support
  - Remote logging research and initial implementation in 2022 by Binarly
  - Many general improvements, releases, packaging in 2023-2025 by CIQ
    9K
  • user avatar
    Openwall
    @Openwall
    Sep 2, 2025
    Linux Kernel Runtime Guard @lkrg_org 1.0.0 by @Adam_pi3 @solardiz @kerneltoast et al. is out, adds support for Linux 6.13+ (tested to 6.17-rc4), forward-edge CFI (Intel CET IBT, KCFI), ..., reduces performance overhead, shrinks the codebase by ~2500 lines. openwall.com/lists/announce…
    user avatar
    CIQ
    @CtrlIQ
    Aug 29, 2025
    Heading to Nullcon Berlin 2025? @solardiz will share his LKRG expertise by taking an in-depth look at kernel hardening challenges and what it takes to protect systems in the real world. nullcon.net/berlin-2025/sp… #NullconBerlin2025 #LinuxSecurity #RLC_H
    2.9K
  • user avatar
    Openwall
    @Openwall
    Jun 7, 2025
    End of an era: our CVSweb service turned 21 today, and was promptly retired. Our anoncvs was similarly shut down at the age of 21 two years ago, quietly.
    user avatar
    Openwall
    @Openwall
    Mar 3, 2021
    All of our projects previously maintained in CVS are now in Git (yes, older ones with commit histories for ~20 years) and under the Openwall organization on GitHub. There are a total of 22 Git repositories now. openwall.com/lists/announce… github.com/openwall
    2.6K

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.