Andrea Barisani
@andreabarisani.bsky.social
hacker | tamagopher | https://andrea.bio
Pinned
Welcome new followers!
I am a security researcher known for the USB armory and TamaGo project among other things.
I enjoy finding unconventional ways to secure things once and for all.
andrea.bio
github.com/abarisani
I am a security researcher known for the USB armory and TamaGo project among other things.
I enjoy finding unconventional ways to secure things once and for all.
andrea.bio
github.com/abarisani
tamago/arm64 support is progressing fast, i.MX8MP under qemu now with full networking!
November 5, 2025 at 10:12 PM
tamago/arm64 support is progressing fast, i.MX8MP under qemu now with full networking!
November 5, 2025 at 7:08 PM
And TamaGo lives on an ARM64 SoC (emulated for now)!
Looking forward to merge this, aarch64 is an important ecosystem for us to support.
Looking forward to merge this, aarch64 is an important ecosystem for us to support.
October 30, 2025 at 8:31 PM
And TamaGo lives on an ARM64 SoC (emulated for now)!
Looking forward to merge this, aarch64 is an important ecosystem for us to support.
Looking forward to merge this, aarch64 is an important ecosystem for us to support.
This Fil-C doc is a master class on C memory (un)safety, while explaining Fil-C properties in thwarting them.
I just love when documentation explains a topic so well that its side effect is becoming a reference to the underlying premise of it.
fil-c.org/invisicaps_b...
I just love when documentation explains a topic so well that its side effect is becoming a reference to the underlying premise of it.
fil-c.org/invisicaps_b...
InvisiCaps By Example
fil-c.org
October 26, 2025 at 11:21 PM
This Fil-C doc is a master class on C memory (un)safety, while explaining Fil-C properties in thwarting them.
I just love when documentation explains a topic so well that its side effect is becoming a reference to the underlying premise of it.
fil-c.org/invisicaps_b...
I just love when documentation explains a topic so well that its side effect is becoming a reference to the underlying premise of it.
fil-c.org/invisicaps_b...
20 years ago we incorporated Inverse Path.
After so many years, despite an acquisition and many ownership changes, the team still continues to deliver offensive and defensive security, engineering and research with the same original spirit.
I feel so privileged.
What a ride.
After so many years, despite an acquisition and many ownership changes, the team still continues to deliver offensive and defensive security, engineering and research with the same original spirit.
I feel so privileged.
What a ride.
October 26, 2025 at 10:51 AM
20 years ago we incorporated Inverse Path.
After so many years, despite an acquisition and many ownership changes, the team still continues to deliver offensive and defensive security, engineering and research with the same original spirit.
I feel so privileged.
What a ride.
After so many years, despite an acquisition and many ownership changes, the team still continues to deliver offensive and defensive security, engineering and research with the same original spirit.
I feel so privileged.
What a ride.
I am switching to ASCII art for CV/portfolio depiction.
It's so relaxing and rewarding going in this direction.
andrea.bio
It's so relaxing and rewarding going in this direction.
andrea.bio
October 23, 2025 at 8:26 AM
I am switching to ASCII art for CV/portfolio depiction.
It's so relaxing and rewarding going in this direction.
andrea.bio
It's so relaxing and rewarding going in this direction.
andrea.bio
“Implementing a Persistent Key-Value Store in a
Tamper-Resistant Device for SGX Enclave Applications”
Nice research which used our USB armory and TamaGo for its implementation!
dl.acm.org/doi/abs/10.1...
Tamper-Resistant Device for SGX Enclave Applications”
Nice research which used our USB armory and TamaGo for its implementation!
dl.acm.org/doi/abs/10.1...
Implementing a Persistent Key-Value Store in a Tamper-Resistant Device for SGX Enclave Applications | Proceedings of the 16th ACM SIGOPS Asia-Pacific Workshop on Systems
dl.acm.org
October 22, 2025 at 3:03 PM
“Implementing a Persistent Key-Value Store in a
Tamper-Resistant Device for SGX Enclave Applications”
Nice research which used our USB armory and TamaGo for its implementation!
dl.acm.org/doi/abs/10.1...
Tamper-Resistant Device for SGX Enclave Applications”
Nice research which used our USB armory and TamaGo for its implementation!
dl.acm.org/doi/abs/10.1...
Reposted by Andrea Barisani
Today, my job as a cryptography engineer involved ASCII art and the Star Wars wiki. github.com/cfrg/draft-i...
Make labels consistent and name-agnostic by FiloSottile · Pull Request #28 · cfrg/draft-irtf-cfrg-concrete-hybrid-kems
We already have the weird label for X25519 + ML-KEM-768, and it looks
like the conversation around names will drag on for a while longer, so
let's just make labels consistent and name-agnostic,...
github.com
October 17, 2025 at 2:42 PM
Today, my job as a cryptography engineer involved ASCII art and the Star Wars wiki. github.com/cfrg/draft-i...
I just released go-boot v1.1 which brings in the now mature EFI Simple Network support.
Compile with NET=1 DEBUG=1 and you can use go `trace`, `pprof` or even statsviz visualization against a pure Go UEFI application!
github.com/usbarmory/go...
Compile with NET=1 DEBUG=1 and you can use go `trace`, `pprof` or even statsviz visualization against a pure Go UEFI application!
github.com/usbarmory/go...
Release go-boot v1.1 · usbarmory/go-boot
This is a release of the go-boot unikernel which implements a UEFI Shell and OS loader for AMD64 platforms, implemented bare metal Go using the TamaGo framework.
The unikernel is an UEFI applicatio...
github.com
October 8, 2025 at 3:32 AM
I just released go-boot v1.1 which brings in the now mature EFI Simple Network support.
Compile with NET=1 DEBUG=1 and you can use go `trace`, `pprof` or even statsviz visualization against a pure Go UEFI application!
github.com/usbarmory/go...
Compile with NET=1 DEBUG=1 and you can use go `trace`, `pprof` or even statsviz visualization against a pure Go UEFI application!
github.com/usbarmory/go...
Following go1.25.2, I've just released tamago-go1.25.2 and tamago v1.25.2.
This release comes to you directly from Google HQ in Sunnyvale, as I attend the OSFC and UEFI Developer conferences!
github.com/usbarmory/ta...
github.com/usbarmory/ta...
This release comes to you directly from Google HQ in Sunnyvale, as I attend the OSFC and UEFI Developer conferences!
github.com/usbarmory/ta...
github.com/usbarmory/ta...
October 7, 2025 at 10:39 PM
Following go1.25.2, I've just released tamago-go1.25.2 and tamago v1.25.2.
This release comes to you directly from Google HQ in Sunnyvale, as I attend the OSFC and UEFI Developer conferences!
github.com/usbarmory/ta...
github.com/usbarmory/ta...
This release comes to you directly from Google HQ in Sunnyvale, as I attend the OSFC and UEFI Developer conferences!
github.com/usbarmory/ta...
github.com/usbarmory/ta...
First ever boot of a TamaGo unikernel in the cloud, here on Google Cloud Compute Engine, automatically deployed from remote userspace!
Looking forward to polish and publish this.
Looking forward to polish and publish this.
October 1, 2025 at 1:48 PM
First ever boot of a TamaGo unikernel in the cloud, here on Google Cloud Compute Engine, automatically deployed from remote userspace!
Looking forward to polish and publish this.
Looking forward to polish and publish this.
Thanks to TamaGo it took me less than 5 minutes to integrate Gemini AI in my UEFI bootloader.
Is this the first ever AI capable boot manager? Probably?
Shall I feel guilty? Most definitely!
I cannot underestimate how enabling TamaGo is.
Is this the first ever AI capable boot manager? Probably?
Shall I feel guilty? Most definitely!
I cannot underestimate how enabling TamaGo is.
September 29, 2025 at 1:29 PM
Thanks to TamaGo it took me less than 5 minutes to integrate Gemini AI in my UEFI bootloader.
Is this the first ever AI capable boot manager? Probably?
Shall I feel guilty? Most definitely!
I cannot underestimate how enabling TamaGo is.
Is this the first ever AI capable boot manager? Probably?
Shall I feel guilty? Most definitely!
I cannot underestimate how enabling TamaGo is.
Pro tip: the most important tool to help, or give hell to, developers of safe IRQ handling on SMP systems is `ping -f`.
September 26, 2025 at 12:43 PM
Pro tip: the most important tool to help, or give hell to, developers of safe IRQ handling on SMP systems is `ping -f`.
I am SSH'ing in my gaming PC bootloader to start Windows remotely.
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
GitHub - usbarmory/go-boot at development
The bare metal Go UEFI boot manager. Contribute to usbarmory/go-boot development by creating an account on GitHub.
github.com
September 22, 2025 at 12:22 PM
I am SSH'ing in my gaming PC bootloader to start Windows remotely.
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
I am so grateful to the gVisor team for allowing me to put their pure Go TCP/IP stack on the bare metal.
All of this is now in go-boot@development and will be part of v1.1:
github.com/usbarmory/go...
"Timing Side-Channel Attacks on USB Devices Using eBPF"
What a cool spin on Armory/GoKey/Tamago, used as experimental testbed in this paper.
secloud.ing.unimore.it/shared/paper...
What a cool spin on Armory/GoKey/Tamago, used as experimental testbed in this paper.
secloud.ing.unimore.it/shared/paper...
September 17, 2025 at 8:40 PM
"Timing Side-Channel Attacks on USB Devices Using eBPF"
What a cool spin on Armory/GoKey/Tamago, used as experimental testbed in this paper.
secloud.ing.unimore.it/shared/paper...
What a cool spin on Armory/GoKey/Tamago, used as experimental testbed in this paper.
secloud.ing.unimore.it/shared/paper...
Screw PXE, this means the entire Go TLS and networking stack is available under UEFI.
In seconds I added DHCP and an SSH server to remotely manage my pre-boot environments.
I see much potential.
In seconds I added DHCP and an SSH server to remotely manage my pre-boot environments.
I see much potential.
Adding networking to go-boot through UEFI Simple Network Protocol.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
September 15, 2025 at 1:52 PM
Screw PXE, this means the entire Go TLS and networking stack is available under UEFI.
In seconds I added DHCP and an SSH server to remotely manage my pre-boot environments.
I see much potential.
In seconds I added DHCP and an SSH server to remotely manage my pre-boot environments.
I see much potential.
Adding networking to go-boot through UEFI Simple Network Protocol.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
September 15, 2025 at 1:26 PM
Adding networking to go-boot through UEFI Simple Network Protocol.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
It took 77 LOCs of pure Go to add the UEFI driver and bridge it to gVisor stack.
I am so humbled by the two @gophercon.com talks which touched TamaGo this year!
Andrew Williams is porting Fyne to TamaGo, which means bare metal GUI in UEFI with go-boot!
Patricio Whittingslow talked about our upstreaming proposal and its generic “noos” API.
❤️
Shall I submit next year?
Andrew Williams is porting Fyne to TamaGo, which means bare metal GUI in UEFI with go-boot!
Patricio Whittingslow talked about our upstreaming proposal and its generic “noos” API.
❤️
Shall I submit next year?
September 2, 2025 at 9:39 PM
I am so humbled by the two @gophercon.com talks which touched TamaGo this year!
Andrew Williams is porting Fyne to TamaGo, which means bare metal GUI in UEFI with go-boot!
Patricio Whittingslow talked about our upstreaming proposal and its generic “noos” API.
❤️
Shall I submit next year?
Andrew Williams is porting Fyne to TamaGo, which means bare metal GUI in UEFI with go-boot!
Patricio Whittingslow talked about our upstreaming proposal and its generic “noos” API.
❤️
Shall I submit next year?
Work on porting TamaGo to ARM64 has begun!
The Go runtime changes are complete and original distribution tests are passing.
github.com/usbarmory/ta...
The Go runtime changes are complete and original distribution tests are passing.
github.com/usbarmory/ta...
September 1, 2025 at 1:43 PM
Work on porting TamaGo to ARM64 has begun!
The Go runtime changes are complete and original distribution tests are passing.
github.com/usbarmory/ta...
The Go runtime changes are complete and original distribution tests are passing.
github.com/usbarmory/ta...
Reposted by Andrea Barisani
Today I have a more serious topic than usual, please consider reposting for reach:
My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]
My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]
August 19, 2025 at 8:34 AM
Today I have a more serious topic than usual, please consider reposting for reach:
My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]
My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]
TamaGo 1.25.0 has been released!
Quite a smooth merge to bring in all the Go 1.25.0 major release goodies.
github.com/usbarmory/ta...
github.com/usbarmory/ta...
Quite a smooth merge to bring in all the Go 1.25.0 major release goodies.
github.com/usbarmory/ta...
github.com/usbarmory/ta...
Release tamago-go1.25.0 · usbarmory/tamago-go
This is a release for the Go distribution as modified by the TamaGo framework, which enables compilation and execution of unencumbered Go applications on bare metal AMD64/ARM/RISC-V processors.
Thi...
github.com
August 19, 2025 at 8:43 AM
TamaGo 1.25.0 has been released!
Quite a smooth merge to bring in all the Go 1.25.0 major release goodies.
github.com/usbarmory/ta...
github.com/usbarmory/ta...
Quite a smooth merge to bring in all the Go 1.25.0 major release goodies.
github.com/usbarmory/ta...
github.com/usbarmory/ta...
TamaGo 1.24.6 has been released with SMP support!
Given the number of supported platforms and architectures this also marks the beginning of release notes for both tamago-go and tamago repositories.
github.com/usbarmory/ta...
github.com/usbarmory/ta...
Given the number of supported platforms and architectures this also marks the beginning of release notes for both tamago-go and tamago repositories.
github.com/usbarmory/ta...
github.com/usbarmory/ta...
August 11, 2025 at 3:58 PM
TamaGo 1.24.6 has been released with SMP support!
Given the number of supported platforms and architectures this also marks the beginning of release notes for both tamago-go and tamago repositories.
github.com/usbarmory/ta...
github.com/usbarmory/ta...
Given the number of supported platforms and architectures this also marks the beginning of release notes for both tamago-go and tamago repositories.
github.com/usbarmory/ta...
github.com/usbarmory/ta...