"I don't quite know how to put this, but our entire field is bad at what we do, and if you rely on us, everyone will die." Fuchsia Security. Adjunct prof @ USF.
Joined March 2017
- Tweets343
- Following277
- Followers234
- Likes103
AI bug finding should be a godsend for computer security education.
How do you *grade* a design-secure-software assignment? I’ve always had a separate find-bugs-in-your-classmates’-assignments assignment. Very hit-or-miss.
I would have *killed* for a “find the vulns” button.
2
110
I, along with a number of other maintainers of high-profile #rustlang crates, was targeted [1] by a spear phishing attack. In my case, I presume they were targeting zerocopy. If you're an open-source maintainer, you may be targeted.
[1] reddit.com/r/rust/comments/1…
66
“Sophist futurists be like: ‘The arc of the moral universe is long, but it bends toward dopeness.’” - my friend George
44
Would anyone use this @rustlang attribute?
#[repr(padded)]
All padding bytes guaranteed initialized (represented as u8).
Would permit T: zerocopy::IntoBytes for any struct or union type - even those with padding.
1
1
64
Josh Liebow-Feeser retweeted
The Hanseatic League was a coalition of merchant cities that grew to dominate trade in Europe and even fought and won wars.
The League's rise and fall is a story of building and holding together a coalition, and of how technology shapes war & economics.
worksinprogress.co/issue/the…
Can anyone solve this #rustlang type puzzle? I *think* it's impossible to solve, but I'm hoping I'm wrong.
users.rust-lang.org/t/get-ru…
113
My #rustconf24 talk, Safety in an Unsafe World, is now available! I argue that we can move Rust beyond memory safety to guarantee freedom from *any* class of bugs.
[This is a re-post of my original tweet; the video's fixed to remove hard-coded subtitles]
youtube.com/watch?v=qd3x5MCU…
This was a great talk!
It would have been much worse if the data showed that most breakage is "long tail" problems.
We would have needed hundreds of lints to make even a dent in the problem!
Find more data and examples in my #rustconf24 talk:
youtube.com/watch?v=KKf14ZXy…
Anyone got any galaxy-brain #rustlang type system ideas for how to solve this?
users.rust-lang.org/t/how-to…
156
Announcing a pre-release of zerocopy 0.8! Please kick the tires and give us feedback! 0.8 is chock-full of new features, so there’s fun for the whole family.
github.com/google/zerocopy/d…
4
168
Happy to announce that I'll be speaking at @rustconf 2024 about pushing the boundaries of safety and security in safety-critical domains; hope to see you there!
9
200
Looking to dip your toes in @rustlang? Check out zerocopy’s Hacktoberfedt issues! Spooky fun for the whole family!
github.com/google/zerocopy/d…
Anyone know how to find the SHA for Miri in a particular nightly #rustlang release? Context: github.com/rust-lang/miri/is…
2
215
Anyone got part-time spring SWE internships open? Asking for a friend who has an intro CS sequence under their belt.
1
1
240
Can ‘cargo check’ ever fail while ‘cargo build’ succeeds (assume the same flags)?
@rustlang
1