@japesinator

I get computers 'putin'

 he/him
writes.co.de
Joined October 2014
  • Tweets1.2K
  • Following293
  • Followers684
41Media
I've been seeing a lot of complaints that CVE-2020-0601 didn't have a fancy logo and website, so my colleagues @trailofbits and I did our best to pitch in. whosecurve.com/
1
4
34
RSVP before the entropy runs out
Paul Kehrer@reaperhulk2 Jan 2020
Next week is Real World Crypto 2020 right on @trailofbits's home turf, NYC. If you're in town and want to enjoy free food, drinks, and a venue brimming with high quality entropy come and join us on Thursday January 9 from 7-10pm at Prohibition: evite.me/S3NVbKZR8x
5
14
Before 2019 ends, I wanted to release my current research with @trailofbits: Umberto, a "poststructural fuzzer" built with fancy Haskell tricks. It lets you apply simple mutators (defined on numbers or strings) inside large structures (like xml entities) github.com/trailofbits/umber…

GitHub - trailofbits/umberto: poststructural fuzzing

poststructural fuzzing. Contribute to trailofbits/umberto development by creating an account on GitHub.

github.com
1
13
40
more replies
Related: contributing should be relatively easy, and I'm very open to PRs. Supporting JSON is ~one line of code, supporting your favorite format probably is as well.
1
Bonus: github.com/trailofbits/umber… is probably the craziest code I wrote this year. I can't hope to explain it in a tweet, but I'm working on a blog post that should be out soon.
1
JP retweeted
sclv@sclv3 Dec 2019
if someone ever tries to tell you something "because godel" direct 'em to this paper. not only are most "popular" uses of "godel incompleteness" dead wrong, but it turns out, a good 2/3 of the "proper" uses of it make it out to be too strong as well.
sclv@sclv16 May 2019
The standard story is that Godel's second incompleteness theorem stopped Hilbert's program dead in its tracks, because one could not prove the consistency of PA within itself. But a lovely new paper from Artemov argues that this isn't what G2 proved at all! 1/2
3
7
1
32
My team is hiring! If you want to discover, analyze, and explain bugs in cryptographic software, link below has details. Incredible people, fascinating problems, lots of flexibility, great benefits jobs.lever.co/trailofbits/e9…
3
4
The Fine Structure Constant, a thread. (1/137)
47
330
52
1,370
This summer, I mentored @anneouyang while she did some incredible work rigorously analyzing CBC Casper. This kind of work is critical for broad adoption of proof of stake, and imo doesn't receive nearly as much attention as it should.
Trail of Bits
@trailofbits25 Oct 2019
Formal Analysis of the CBC Casper Consensus Algorithm with TLA+ blog.trailofbits.com/2019/10…
1
5
29
im a big bearded javascript guy and my avatar is a funko pop and my bio says some shit like "I Make Internets."
7
162
1
2,163
Is there anyone with an arxiv account that can endorse a @trailofbits employee for "cs.CR"? We have papers we want to publish. DM me, thanks!
6
9
Crypto 2019 Takeaways blog.trailofbits.com/2019/09…
8
2
16
WHO DO U WORK FOR music - @markmossberg visuals - me
18
37
10
174
xitter.cf/markmossberg/status/11…
Mark
@offlinemark24 Aug 2019
Replying to @japesinator
just letting everyone know that I make non-meme music also and have a soundcloud soundcloud.com/sendcomfort

comfort

heavy emotion semi-retired wave producer 2017-2024 dev @ableton

soundcloud.com
Echidna's latest release lets you fuzz for assertion violations even if you don't write any explicit tests (!), and recycles return value constants, as detailed in our analysis of the MakerDAO contracts: forum.openzeppelin.com/t/usi… github.com/crytic/echidna/re…

Using automatic analysis tools with MakerDAO contracts

Thanks for trying out our tools, Echidna and Manticore! This is a great example for why we make our tools flexible. It was a fun challenge to test our tools and see if they could discover this bug....

forum.openzeppelin.com
3
1
5
One of our teams is unlike the others
3
3
32
RSA is the manual memory management of cryptography. Fun in the 20th century, but it's time to stop.
Trail of Bits
@trailofbits8 Jul 2019
Fuck RSA blog.trailofbits.com/2019/07…
2
8
Use siderophile to quickly identify the ideal fuzz targets in a Rust codebase blog.trailofbits.com/2019/07…

Siderophile: Expose your Crate’s Unsafety

Today we released a tool, siderophile, that helps Rust developers find fuzzing targets in their codebases. Siderophile trawls your crate’s dependencies and attempts to finds every unsafe function,...

blog.trailofbits.com
12
2
25
Load more