🇺🇦
Pinned Tweet
Follow
Kostya Serebryany
@kayseesee
Keeping C++ insanity at bay: AddressSanitizer, libFuzzer, OSS-Fuzz, Control Flow Integrity. Views are my own. Tweets are not only about tech.
San Francisco Bay Area, CA, USJoined August 2009
Kostya Serebryany’s Tweets
3. Take, for example, Stanford’s Dr. Jay Bhattacharya () who argued that Covid lockdowns would harm children. Twitter secretly placed him on a “Trends Blacklist,” which prevented his tweets from trending.
2,193
32.2K
113.6K
Show this thread
take my 💰
Quote Tweet
Wherein I propose that C++ initialize all stack variables to zero, preventing ~10% of CVEs.
Cost: none.
wg21.link/P2723R0
wg21.link/P2723R0 
13
I ended up voting for corrupt jerks
Quote Tweet
First time voting in the USA (California). Please help me choose the right candidate
Show this poll
2
Excited about KMSAN (uninit-value detector) merged into #Linux kernel:
lore.kernel.org/all/2022100813
KMSAN been in works for several years & already found hundreds of bugs in kernel.
Incl info-leaks to guest VMs
syzkaller.appspot.com/bug?id=34abc06
info-leaks into USB cables
syzkaller.appspot.com/bug?id=97bdebb
1
34
82
Indeed, this will in retrospect be viewed as one of the biggest days in the history of smart device security. You can't spell trust without Rust! Congrats to everyone involved in making this happen, including , Matt Maurer, Linus, many more
Quote Tweet
Huge congrats to the #linux and #rustlang communities for landing Rust support in the Linux kernel. Today was a good day for computer security.
2
6
28
The Apple C++ team has a *very* good proposal. Please ship it!
2
64
326
The usual stuff. Two good persons squabble between each other, while crooks and murderers of all kinds find common ground.
2
4
My friend's son (lives in Russia) is looking for a SWE internship. C++, ML, competitive programming, several internships. I referred him to Google, but want to give him more choices. If you have such positions, please DM me, I will send you his resume. He will need visa support.
1
1
9
First time voting in the USA (California). Please help me choose the right candidate
- Bloody idiots58.7%
- Corrupt jerks41.3%
46 votesFinal results
2
2
9
Another liberated city, Izyum, signs of Russia war crimes all over again - mass graves, executed civilians, torture chambers. Provide more weapons to Ukraine to stop the war and prosecute Putin and his henchmen for war crimes.
18
99
We are hiring a senior+ product leader with experience in security and compilers.
6
8
We had quite some fun for the last 2.5 years fuzzing CPUs. We wrote one system, scratched it, and wrote another one. This week we open-sourced most of it, and hope to open-source more in the future.
6
157
663
Make sure to catch 's amazing talk about CastGuard - it's a fantastic work, with many great insights about the mitigation and the nontrivial problem it addresses blackhat.com/us-22/briefing
1
12
45
4
17
We are hiring to do more work with the sanitizers!
Several positions, both senior and junior.
1
34
129
6
15
One of the first SiliFuzz trophies is public:
CVE-2021-26339: A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service...
1
39
116
Посмотрите обращение группы "Несчастный случай".
Алексей Кортнев всегда был приличным и достойным человеком. И в очередной раз это доказал.
2:19
124.2K views
136
1,118
9,904
Everyone please go add -ftrivial-auto-var-init=zero to your default build flags. :)
Quote Tweet
GCC 12.1 Released! Lots of great improvements! gcc.gnu.org/pipermail/gcc/
5
22
115
We are hiring in Munich!
If you want to work on Syzkaller, the best kernel fuzzer, please apply!
linkedin.com/posts/tarasmad
21
75
My team is hiring in Munich.
Come work with us on kernel fuzzing, analysis, syzkaller (#1 kernel fuzzer), syzbot, kernel sanitizers:
37
124
I was called a warmonger in 2014 when I said Putin would not stop with Crimea & E Ukraine. Now everyone admits that I was right, but wants to repeat the same mistake now. Letting Putin destroy Ukraine *increases* the threat of a greater conflict, including nuclear.
1,376
19.4K
82.9K
Show this thread
Great paper. I'd love hear from other hyperscalars.
Quote Tweet
Silent data corruptions w/in hardware are a widespread problem for large-scale infrastructure systems. In new research, we provide methodologies to implement silent error detection at scale. (1/2) ow.ly/LeHr50IlXJf
Show this thread
5
Hard to Be a God: one of my favorite books, I've read it many times, last time just months ago. It explains precisely what is going on in Russia right now.
2
1
6
First version of AMD Upper-Address-Ignore kernel patches: lore.kernel.org/lkml/202203101
11
My team in Sunnyvale is hiring to work on SiliFuzz.
Are you interested in advancing the state of the Fuzzing technology?
Do you like doing low-level work with CPUs, OS kernels, Emulators, and compilers?
Want to work on a modern C++ code base (soon to be open-sourced)?
3
32
117
Show this thread
It is immoral to be providing revenue to Putin's regime right now, which underwrites his horrific war. Biden must halt all Russian oil imports now.
148
1,284
5,215
Option #1: NATO defends Ukraine, with a 50/50 risk of nukes.
Option #2: Putin kills millions and eventually occupies Ukraine. Then he moves to the next country, and we are back to option #1.
Option #3: Putin is overthrown from inside.
Any other options?
7
3
25
People think Europe depends on Russia for energy because it lacks its own, but 15 years ago Europe exported more natural gas than Russia does today. Now, Russia exports 3x more gas than Europe produces. Why? Because climate activists, partly funded by Russia, blocked fracking.
731
13.5K
29.7K
Show this thread
conclusion: zelensky is ukraine's benjamin button
13
82
587
Show this thread
Here are the slides from the "Security Analysis of MTE Through Examples" talk I presented at :) I hope you will like it and find it interesting!
5
112
285
MTE time! Microsoft’s very own covers what MTE is, how it works, and what exploitation actually looks like over this new piece of silicon! Oh, and of course - live demos! Hard work on hardware...that’s our Saar!
2
45
плачу
48
3,807
21.5K