About
Glitter
non-negotiable
Monthly
when I publish
NYC
where I live
2019
writing here since
Security and open source
[ret]2read →
macOS internals, reverse engineering, and open source security. Research, talks, and a monthly newsletter.
Everything else
Life →
Fitness, fashion school, book club, travel, and whatever is making me happy lately.
[ret]2read
Security and open source, in your inbox once a month.
iBoot stage (main bootloader) security on macOS
How iBoot on Apple Silicon Macs acts as the final secure gate before macOS launches by verifying signed boot assets, enforcing memory and hardware protections, validating the SSV, and making boot-level compromise significantly harder than attacks against the kernel or user space.
Low-Level Bootloader (LLB) Security on macOS
Overview of the Apple Silicon Low-Level Bootloader. Explains how LLB verifies firmware, enforcing SEP-signed LocalPolicy and anti-replay.
Boot ROM Security on Silicon Macs (M1/M2/M3)
A overview of Apple Silicon Boot ROM security. Explains how SecureROM anchors the boot chain of trust, and exploits surrounding it.
Let’s Take This to Your Inbox 👋🏻
One email a month from [ret]2read: what I’m researching, what I’m reading, and where I’ll be speaking next.
Join 10,000+ followers.
On Stage
I’ve given 60+ independent security talks, including main-stage sessions at the conferences I dreamt about in college.
DEF CON
Speaker, five-time attendee, and main stage at the first DEF CON Singapore
Black Hat
Black Hat USA, with Arsenal before that
OBTS
Objective by the Sea, the Apple security conference
BSides
San Francisco, Tampa, Vancouver, Ottawa, Buffalo, Zadar, and more
These Days
Mostly
Security Research
I lead macOS internals research: user-space security, undocumented APIs, and how the system behaves. I love weird Apple device incidents, and I publish what I learn so the next person has an easier time.
Also
Fashion & Style
Studying styling at the Fashion Institute of Technology, and Vogue College’s Creative Direction program (’27).
Also
Community
I host the holidays and run an all-girls book club in Yorkville. Need a book? Check out my reading list.
Initiatives
I’m currently fundraising for the Susan G. Komen Breast Cancer Foundation through the Philadelphia “MORE THAN PINK” walk, and the NYC “Race for a Cure.” Please consider donating!
I lead Miles for Mac Security, which helps students attend Objective by the Sea, an Apple-focused security conference by the Objective-See Foundation.
I am a founding member of Team Intelligen’t, a CTF team. We play a few CTFs each year for fun and meet weekly to talk shop. Reach out if you’d like to join!
A few organizations that deserve your support, too.
The Story So Far
Now
Senior Security Engineer
Leading macOS internals research, speaking, and writing.
Before that
Apple
Offensive security engineering while still finishing school. Before that, cyber at the US Government and Deloitte.
College
Rochester Institute of Technology
Three degrees (an MBA and two bachelor’s, in Computing Security and Computer Science), summa cum laude. Outstanding Undergraduate Scholar, RIT’s highest academic honor, given to the top 1%.
Before college
Contact
Olivia Gallucci
I prefer video chats via Google Meets. Feel free to schedule one with me using ZCal.
If that is not an option, the best way to reach me is via Signal or email.
Icons by icons8.com
Search
Categories
Tags
Academics (18) ACE (2) Algorithmic Performance (9) Algorithms (10) Artificial Intelligence (4) Assembly (8) Athletics (3) Blog (114) boot (3) business (2) Certified Personal Trainer (2) code-signing (2) Computational Finance (9) Congressional Award (3) Cyber Defense Magazine (7) Etiquette and Style (11) Fitness (6) Free and Open Source Software (16) Fundraiser (2) Hacking (16) Health (5) HFOSS (8) internals (1) Internships and Co-Ops (5) Lancaster News Paper (3) Linux (4) Low Latency (9) low level (2) Machine Learning (2) MacOS (13) Mathematics (9) Open Source (24) Optimization (9) Phillip Wylie Show (2) Press (12) R-programming (2) Research (8) reversing (5) RITSEC (12) Rochester Institute of Technology (38) Running (3) Software Development (11) Tableau (2) Travel (6) Webdev (6)
You must be logged in to post a comment.