Hiroki Chen

Glad to announce that our paper "PICACHV: Formally Verified Data Use Policy Enforcement for Secure Data Analytics" has been accepted to USENIX Security 2025! You can check the paper on Arxiv here arxiv.org/pdf/2501.10560

For SGX, folks designed LibOSes to support system calls, disk I/Os, and some other stuff to support unmodified binaries inside them, which unfortunately bloats the TCB, while some people design a SGX inside TDX due to the potential flaws in the guest OS. This is kinda funny.

So today's TEE designs transitioned to VM-based, but this still raises a question about the TCB size thereof since it now includes the whole OS and other (perhaps unnecessary) runtimes into the protected area and the trustworthiness is rather dubious.

As I have done more research on TEEs, I feel like this area is facing a serious dilemma and no work seems to be able to address it. That is, what should be inside the TEE? SGX is criticized for being overly restrictive and people have to hack it to port legacy code.

@vanhoefm I haven’t gotten any notifications yet but my friend received in the morning ;(

Who else received surprisingly disappointing USENIX Security reviews..? 🙋‍♂️

@t3dotgg Copilot is down too

All good Github?

@mustach_io This book is kinda full of Dan’s humor and jokes 😂

i am going to learn dependent types :0

@rustlang No more lazy_static!

Rust 1.80.0 is now available! 🦀🌈 This release brings you LazyCell, LazyLock, checked cfg names & values, exclusive ranges in patterns, IntoIterator for Box<[T]>, Option::take_if, split_at_checked, and more! Check out the announcement and release notes: blog.rust-lang.org/2024/07/25/Rus…

@chbhongbo @confcompsummit Cool! Hongbo

So happy to present our collaborative work toward Trusted App Store (TAPStore) and NSF Center for Distributed Confidential Computing (CDCC) at this year’s @confcompsummit. It’s a great chance to meet old friends and build new connections. See you tomorrow (cont.)

Are these two equivalences also equal? Congratulations! You are now tackling with HoTT's univalence axiom!

Thank Carlo for delivering this interesting topic😇

Got this book from Dan🥰🥰🥰

Kudos to @chbhongbo for this work! Thrilled to be able to work with him on formal methods + TEE ;) Also feel so glad to be present at @USENIXSecurity symposium!

After taking courses (MLTT, dependent types, etc) at the n-type summer school, I began to sense the magic of type theory. I had a strong feeling that everything in compuer science and security stuffs can be fully formalized. Gonna learn more on this topic ;)

@aris_uu Looks like something that will appear on POPL 😂

waaaaaaaaaaaaaaaa i want to understand this

@yyw2000 Bon voyage 🛫

Omg after experimenting with lean4 theorem prover i think lean4 is better than coq, and they even introduce package manager like cargo lol. I thin i can try it on my new project.🤔

My mood: they finally started to implement the memory manager with EDMM after our paper was accepted after the major revision in which we stated there is no official memory management support for EDMM in Rust SGX SDK.🥲

@kirraObj @VentusUta grammar通常还包括构词分析和屈折分析，有时候更广义一些包括了semantics

@VentusUta 我不懂语言学..... 蹲一个懂的大佬😢

在翻译 Eric Torreborre 关于 Tagless Final 的文章时，发现 Syntax 在中文的正确翻译为「句法」(源于语言学)，而简中网包括我本人的长期习惯都会将其翻译成「语法」

@kirraObj 加油加油哇