@japesinator

I get computers 'putin'

 he/him
writes.co.de
Joined October 2014
  • Tweets1.2K
  • Following293
  • Followers684
41Media
JP retweeted
sclv@sclv3 Dec 2019
if someone ever tries to tell you something "because godel" direct 'em to this paper. not only are most "popular" uses of "godel incompleteness" dead wrong, but it turns out, a good 2/3 of the "proper" uses of it make it out to be too strong as well.
sclv@sclv16 May 2019
The standard story is that Godel's second incompleteness theorem stopped Hilbert's program dead in its tracks, because one could not prove the consistency of PA within itself. But a lovely new paper from Artemov argues that this isn't what G2 proved at all! 1/2
3
7
1
32
The Fine Structure Constant, a thread. (1/137)
47
330
52
1,371
im a big bearded javascript guy and my avatar is a funko pop and my bio says some shit like "I Make Internets."
7
162
1
2,163
Is there anyone with an arxiv account that can endorse a @trailofbits employee for "cs.CR"? We have papers we want to publish. DM me, thanks!
6
9
Crypto 2019 Takeaways blog.trailofbits.com/2019/09…
8
2
16
Echidna's latest release lets you fuzz for assertion violations even if you don't write any explicit tests (!), and recycles return value constants, as detailed in our analysis of the MakerDAO contracts: forum.openzeppelin.com/t/usi… github.com/crytic/echidna/re…

Using automatic analysis tools with MakerDAO contracts

Thanks for trying out our tools, Echidna and Manticore! This is a great example for why we make our tools flexible. It was a fun challenge to test our tools and see if they could discover this bug....

forum.openzeppelin.com
3
1
5
One of our teams is unlike the others
3
3
32
Use siderophile to quickly identify the ideal fuzz targets in a Rust codebase blog.trailofbits.com/2019/07…

Siderophile: Expose your Crate’s Unsafety

Today we released a tool, siderophile, that helps Rust developers find fuzzing targets in their codebases. Siderophile trawls your crate’s dependencies and attempts to finds every unsafe function,...

blog.trailofbits.com
12
2
25
ARMv8 CPUs can use any algorithm to encrypt the pointer authentication code. This CPU is built into a contact lens, with transparent indium tin oxide. Yield is low, so designers used a simple algorithm to minimize transistor count: the 1970-era DES. This is the first DES PAC ITO.
4
18
96
My coworker @japesinator released an authenticated data structure tool called Indurative today blog.trailofbits.com/2019/06… It uses sparse merkle trees as its underlying data structure!

Leaves of Hash

Trail of Bits has released Indurative, a cryptographic library that enables authentication of a wide variety of data structures without requiring users to write much code. Indurative is useful for...

blog.trailofbits.com
1
3
7
What is an ECDSA signature? It’s a pair of two integers/scalars (r,s). How hard did DER make it to parse two fucking integers? Well if there were a contest to make parsing two signatures as hard as it possibly fucking could, ECDSA signatures should win a prize...
2
8
1
33
You don't need a blockchain to build a trustless distributed system. xitter.cf/trailofbits/status/114…
Trail of Bits
@trailofbits17 Jun 2019
Authenticated data structures enable trustless distributed systems, and they're easy to use with Indurative. blog.trailofbits.com/2019/06…
2
5
16
Webauthn support merged into PyPI! github.com/pypa/warehouse/pu…

2FA (Webauthn) by woodruffw · Pull Request #5795 · pypi/warehouse

Begins work on Webauthn as a supported 2FA method. TODO: Fill out the utils.webauthn helper methods Link the helpers up to the Webauthn model via IUserService Frontend integration (navigator...

github.com
3
1
13
Super professional talks at Empire Hacking tonight.
1
3
17
"Fuck RSA" from the @trailofbits cryptography team will see its first light of day at next week's @EmpireHacking. Don't miss it!
11
4
33
Read how @trailofbits and other NYC area technology companies are overcoming their unique challenges via @BuiltInNewYork builtinnyc.com/2019/03/05/ny…

From weed tech to cybersecurity: How 4 companies overcome their unique challenges | Built In NYC

See how they’ve solved some of the most complex issues facing their industries.

builtinnyc.com
3
5
So incredibly lucky to have @japesinator give a talk at @nyutandon today! Much wow, many amaze! Thanks for coming out! #NYUTandonMade #OSIRIS
2
5
18
Excited about @trailofbits training on #smartcontract security analysis a day before #EthCC eventbrite.com/e/blockchain-… #ethereum #blockchain

Blockchain Security @ EthCC

1-Day Smart Contract Security Analysis Workshop On March 4th, the day prior to EthCC, Trail of Bits will host a security training for Ethereum smart contract developers. You must register separatel...

eventbrite.com
4
2
If you want to learn about @trailofbits Echidna smart contract fuzzer, don't miss @japesinator presentation today during our Office Hours, 12pm EST (5PM UTC) github.com/trailofbits/echid…
4
7
I want to compile a list of RSA-based failures. Send me the endless BB98 attacks, the exponent bugs, the related primes, the malicious composite numbers, and whatever else you can come up with!
5
8
16
Load more