This is my #indroduction post. I hope I am doing this right.

I am Vinoth, from San Diego. I lead the silicon security architecture and silicon security operations teams at #Google. Before this, I worked on mobile silicon security at #Qualcomm. I will mostly talk about #mobilesecurity, #androidsecurity and #infosec.

Much of my work is about improving the security of #Pixel and other #Android devices. My expertise is at the intersection of hardware security architecture, software security architecture and silicon security operations (secure key provisioning, code signing, device attestation etc.). I have ~20 years of experience making mistakes at this particular intersection that make me feel eminently qualified to talk about how to not make them.

I love explaining the intricacies of silicon development to software engineers and vice versa. So if you want to understand the hardware underpinnings of Trusted compute, confidential compute or whatever, I'm your guy.

I sometimes hold unpopular opinions, and I welcome healthy discussions about them. For example, (a) open sourcing RTL will not improve hardware security to the same extent open source software improved software security (b) there are situations where compliance actively harms security.

Also a medidator, volunteer at #ishafoundation, father of 2 kids, husband of 1 wife, angel investor and a very curious human being.