People who are more cryptography-literate than I am: is this a real thing? My immediate inclination is to be skeptical of anything claiming to be hacker-proof, but I don't have the math skills to back it uphttps://twitter.com/QuantaMagazine/status/1152299326481358849 …
-
Regardless of whether the spec or the verification technique is perfect, verifying code dramatically reduces the scope of what can go wrong and makes a manual review that much more effective. I'm not sure why the industrial security community has been a frequent naysayer.
We use verification techniques @trailofbits to eliminate categories of flaws + more efficiently focus our time on logical or more abstract risks. Verifying code also necessitates conversations with developers about their intent, sometimes the single most important outcome.
-
-
Being forced to write out the critical security properties for your code in a machine-parseable format, then using a tool to watch your back for failures of them is never a bad thing!
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.