JP

I've been seeing a lot of complaints that CVE-2020-0601 didn't have a fancy logo and website, so my colleagues @trailofbits and I did our best to pitch in. whosecurve.com

RSVP before the entropy runs out

Bonus: github.com/trailofbits/um… is probably the craziest code I wrote this year. I can't hope to explain it in a tweet, but I'm working on a blog post that should be out soon.

Related: contributing should be relatively easy, and I'm very open to PRs. Supporting JSON is ~one line of code, supporting your favorite format probably is as well.

Before 2019 ends, I wanted to release my current research with @trailofbits: Umberto, a "poststructural fuzzer" built with fancy Haskell tricks. It lets you apply simple mutators (defined on numbers or strings) inside large structures (like xml entities) github.com/trailofbits/um…

if someone ever tries to tell you something "because godel" direct 'em to this paper. not only are most "popular" uses of "godel incompleteness" dead wrong, but it turns out, a good 2/3 of the "proper" uses of it make it out to be too strong as well.

@term_xv powerlinesinanime.tumblr.com

My team is hiring! If you want to discover, analyze, and explain bugs in cryptographic software, link below has details. Incredible people, fascinating problems, lots of flexibility, great benefits jobs.lever.co/trailofbits/e9…

The Fine Structure Constant, a thread. (1/137)

@VladZamfir @nrryuya @anneouyang @rv_inc What is a "type of fault" in this context? I'm not sure I understand the claim being made exactly. Happy to read more if you have recommendations

@nrryuya @japesinator @anneouyang @rv_inc Yep! We follow a typed fault tolerance discipline, as opposed to a BFT discipline, and it is more useful because the kinds of faults that prevent quorums from forming and the types of faults that lead to consistency failure are mutually exclusive, for one example

This summer, I mentored @anneouyang while she did some incredible work rigorously analyzing CBC Casper. This kind of work is critical for broad adoption of proof of stake, and imo doesn't receive nearly as much attention as it should.

@VladZamfir @nrryuya @anneouyang @rv_inc You believe CBC Casper achieves safety + liveness with >= 1/3 of the network faulty?

@nrryuya @japesinator @anneouyang @rv_inc I'm sure these results hold for any equivocation fault tolerance threshold t, unlike emphasized in the trail of bits blog post, what do you think?

@mountain_ghosts liftA2 (&&) f g

im a big bearded javascript guy and my avatar is a funko pop and my bio says some shit like "I Make Internets."

Is there anyone with an arxiv account that can endorse a @trailofbits employee for "cs.CR"? We have papers we want to publish. DM me, thanks!

@fubuloubu @jmartinez_43 @trailofbits that's the algorithm they would use, but the problem is constructing a computer to run it

Great info. I was wondered what this meant for pub key cryptography. Does anyone that understands the cryptography math have an opinion on this? I will give you this trophy 🏆

Crypto 2019 Takeaways blog.trailofbits.com/2019/09/11/cry…