Tweetovi

	Kostya Serebryany proslijedio/la je tweet
	Dmitry Vyukov @dvyukov	5. velj
	Odgovor korisniku/ci @dwizzzleMSFT I am removing "Intro to our team work" slide from my later talk. @dwizzzleMSFT did it well: LibFuzzer, syzkaller and ASan, all at one slide as a base of Microsoft Risk Detection Platform ) pic.twitter.com/MN7WkSrAjQ
	Prikaz razgovora ·

	Kostya Serebryany @kayseesee	4. velj
	Android (@stephen_r_hines) enables stack auto-init for userspace! Wohoo! Kudos to @jfbastien for the Clang implementation.
	Prikaži podatke ·

	Kostya Serebryany @kayseesee	4. velj
	I had a privilege to work with Vlad for 2.5 years. You won't regret hiring him in any capacity. twitter.com/vlad902/status…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Heather Adkins @argvee	4. velj
	Security and reliability go hand in hand and must be inherent properties of the system. Check out this awesome new book coming in April 2020. amazon.com/Building-Secur…
	Prikaži podatke ·

	Kostya Serebryany @kayseesee	2. velj
	Odgovor korisniku/ci @bsdaemon MPX has harmed a lot because at first it created perception that the problem is solved and then it created perception that no such HW solution can be adopted. Combined, this probably delayed memory tagging by a decade.
	Prikaz razgovora ·

	Kostya Serebryany proslijedio/la je tweet
	Rodrigo Branco @bsdaemon	1. velj
	Boom. Bad technology from the beginning. Even trying to force adoption by spending millions implementing support, no real adoption. Consequences to the career-based decision making process inside the company? Zero. The promoted person remains promoted ;) twitter.com/grsecurity/sta…
	Prikaži podatke ·

	Kostya Serebryany @kayseesee	30. sij
	HWASAN (think of it as ASAN v2) has become available to developers on Android outside of Google. If you use C or C++ on Android, please give it a try. developer.android.com/ndk/guides/hwa… HWASAN is also available on Aarch64 Linux with a recent kernel.
	Prikaz sažetka ·

	Kostya Serebryany proslijedio/la je tweet
	nedwill @NedWilliamson	29. sij
	Excited to start the new year with CVE-2020-3842 :) It's a fun one and unlike the other bugs I reported so far so I'm looking forward to (responsibly) disclosing it. support.apple.com/en-us/HT210918
	Prikaz sažetka ·

	Kostya Serebryany proslijedio/la je tweet
	Dmitry Vyukov @dvyukov	28. sij
	I am impressed by #SQLite testing approach, breadth, methodology and investment: sqlite.org/testing.html It's very important that there are OSS projects that set such examples. There is always something to improve, but I think nobody will object that that's good level of testing
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Brad Fitzpatrick @bradfitz	27. sij
	"An update on bradfitz" After ~12.5 years at Google and ~10 years working on Go, it's time for me to do something new. Tomorrow is my last day at Google. 👋 I'll still be involved with #golang but less, and differently. More: bradfitz.com/2020/01/27/lea…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Chris Lattner @clattner_llvm	27. sij
	I am super excited to join @SiFive today, leading the software team that builds tooling to enable 'silicon at the speed of software'. Chip design is challenging, and needs open tools that are well designed, easy to use, and state of the art. More at: sifive.com/blog/with-sifi…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Dmitry Vyukov @dvyukov	27. sij
	What I'm thinking reading this sad story of crit remote vuln introduced into all #linux LTS kernels and still unfixed (now in your kernel)- this "forgot to release lock" is mostly solved problem today with static analysis. Kernel absolutely needs it as part of the dev process 1/n twitter.com/grsecurity/sta…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Dmitry Vyukov @dvyukov	20. sij
	Always wanted #golang to be the first to support structured fuzzing as first-class citizen: func FuzzRegexp(f *testing.F, re string, data []byte, posix bool) {...} docs.google.com/document/u/1/d… But #rust it is! Glad it's slowly moving to industry standard. Maybe it will urge Go :) twitter.com/fitzgen/status…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Matt Miller @epakskape	16. sij
	Great in-depth analysis of many of the changes that have been made thus far to support CET on Windows Looking forward to the future of CET capable CPUs :) twitter.com/yarden_shafir/…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Andrey Konovalov @andreyknvl	16. sij
	Nice talk about CFI in the Linux kernel by @kees_cook Slides: outflux.net/slides/2020/lc… Video: youtube.com/watch?v=0Bj6W7…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	SAFECode @SAFECode	15. sij
	Worried about C/C++ memory safety? (Hint: You probably should be) SAFECode contributor @kayseesee takes to the SAFECode blog to provide an overview of #hardware extensions that can help. bit.ly/35V6KFi
	Prikaz sažetka ·

	Kostya Serebryany @kayseesee	10. sij
	"... memory tagging can be defeated if the attacker gets enough attempts" -- yes! We have some time before the actual memory tagging hardware to ensure that we don't give the attacker enough attempts twitter.com/5aelo/status/1…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Dmitry Vyukov @dvyukov	9. sij
	Another "nice" kernel bug that literally allows to write any memory on the machine by any user (you just give kernel any exact physical or virtual address): syzkaller.appspot.com/bug?id=c173ad9… Again, killed before making it into any release: lkml.org/lkml/2020/1/8/…
	Prikaži podatke ·

	Kostya Serebryany proslijedio/la je tweet
	Bhargava Shastry @ibags	3. sij
	Bug found after custom mutations were introduced. Said bug was not found by random mutations during several months of continuous fuzzing even with a pretty solid seed corpus. tl;dr: please don't take randomness for granted. twitter.com/ethchris/statu…
	Prikaži podatke ·

	Kostya Serebryany @kayseesee	25. pro
	Odgovor korisniku/ci @blelbach @rinat_s Yep!
	Prikaz razgovora ·