[2/2] It is essentially two documents, a discussion of memory safety technologies and ...

npub16kl…fgx9

2023-12-21 06:13:28

in reply to nevent1q…7lky

[2/2] It is essentially two documents, a discussion of memory safety technologies and then specific CISA recommendations. Also included is a new chart providing the granular root-cause-analysis (RCA) for memory safety issues reported to Microsoft and a great appendix for those wanting more.

I would like to thank everyone who put work in on this. Of the many people who briefed us please reveal yourselves if you wish to be identified.

The TAC: Jeff Moss npub1drnhdwspurvkaptrjmhs4u5crz8r34stfr9ewnhqwwapwj5fc0psqex2mm (npub1drn…x2mm) Subcommittee Chair, DEF CON Communications. Dino Dai Zovi, CashApp. Luiz Eduardo npub1ajp2gy7y66s5gq4cwx64e335x56s7speuh6e5g2frfp79wrsu5nqhjrdv7 (npub1ajp…rdv7), Aruba Threat Labs. Royal Hansen, Google. Isiah Jones, Applied Integrated Technologies. Kurt Opsahl npub1d9ye5pkt363tczaztel69eugkyfree5qrnwl2655sdztmdzc63qsanhkqk (npub1d9y…hkqk), Electronic Frontier Foundation. Stephen Schmidt, Amazon. Yan Shoshitaishvili, Arizona State University. Kevin Tierney, General Motors. Rachel Tobac npub1sklk6jq4exm29sf0dvejncctuxf3p48yk3vwj9v6ll8esvuc9nzsrkg2qx (npub1skl…g2qx), SocialProof Security. David Weston npub1zq3fphsslhj6uzd68h63d27g4rumfet06le0chm28c3p0ny05r2q7x5l6c (npub1zq3…5l6c), Microsoft.

From CISA: Eric Goldstein and Bob Lord npub1qsax7h4jmgqx5x2grvh487rqlwhkpg5ukgv3qn6rcxelqkdhzlush03n30 (npub1qsa…3n30)

#CISA #MemorySafety #Rust #golang #swift

Author Public Key

npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9

Show more details

Published at

2023-12-21 06:13:28

Kind type

1 Short Text Note

Event JSON

{ "id": "9fdb3758f038e9876719cb1529b835bc49ad32868561646c88a1be30696c83fd", "pubkey": "d5bf122d57bdad3b5e5112d094b3ead95f403eb5fc2feb1dbf0c50414eac357a", "created_at": 1703139208, "kind": 1, "tags": [ [ "p", "68e776ba01e0d96e856396ef0af298188e38d60b48cb974ee073ba174a89c3c3", "wss://relay.mostr.pub" ], [ "p", "ec82a413c4d6a14402b871b55cc63435350f4039e5f59a21491a43e2b870e526", "wss://relay.mostr.pub" ], [ "p", "69499a06cb8ea2bc0ba25e7fa2e788b1123ce6801cddf56a948344bdb458d441", "wss://relay.mostr.pub" ], [ "p", "85bf6d4815c9b6a2c12f6b3329e30be19310d4e4b458e9159affcf9833982cc5", "wss://relay.mostr.pub" ], [ "p", "102290de10fde5ae09ba3df516abc8a8f9b4e56fd7f2fc5f6a3e2217cc8fa0d4", "wss://relay.mostr.pub" ], [ "p", "043a6f5eb2da006a19481b2f53f860fbaf60a29cb219104f43c1b3f059b717f9", "wss://relay.mostr.pub" ], [ "p", "d5bf122d57bdad3b5e5112d094b3ead95f403eb5fc2feb1dbf0c50414eac357a", "wss://relay.mostr.pub" ], [ "p", "26a8587dad6e77f04cebadc0a7f460266b64b4388235479c1cdf186336b32180", "wss://relay.mostr.pub" ], [ "p", "4637937271accf0fb4ab3d68f2b04806243e09a3e18ee133d43b0dec356b1940", "wss://relay.mostr.pub" ], [ "p", "c47f092c78a40109822e06da7e695132794a03736e03a3ec723f225405d2773e", "wss://relay.mostr.pub" ], [ "p", "506f9227339116da55304cbe95129b9a4ae9c6803c81ff001ce6a5db09b57102", "wss://relay.mostr.pub" ], [ "p", "e7e47d8a339479f016607c243292b80c65519871b25d3f82e3134f19fc0b9701", "wss://relay.mostr.pub" ], [ "e", "d6d6152bce1e8181b07bc043e222e67c40f13b65804642ac82a32f80f42765bd", "wss://relay.mostr.pub", "reply" ], [ "t", "cisa" ], [ "t", "memorysafety" ], [ "t", "rust" ], [ "t", "golang" ], [ "t", "swift" ], [ "proxy", "https://defcon.social/users/thedarktangent/statuses/111616931199069221", "activitypub" ] ], "content": "[2/2] It is essentially two documents, a discussion of memory safety technologies and then specific CISA recommendations. Also included is a new chart providing the granular root-cause-analysis (RCA) for memory safety issues reported to Microsoft and a great appendix for those wanting more.\n\nI would like to thank everyone who put work in on this. Of the many people who briefed us please reveal yourselves if you wish to be identified.\n\nThe TAC: Jeff Moss nostr:npub1drnhdwspurvkaptrjmhs4u5crz8r34stfr9ewnhqwwapwj5fc0psqex2mm Subcommittee Chair, DEF CON Communications. Dino Dai Zovi, CashApp. Luiz Eduardo nostr:npub1ajp2gy7y66s5gq4cwx64e335x56s7speuh6e5g2frfp79wrsu5nqhjrdv7, Aruba Threat Labs. Royal Hansen, Google. Isiah Jones, Applied Integrated Technologies. Kurt Opsahl nostr:npub1d9ye5pkt363tczaztel69eugkyfree5qrnwl2655sdztmdzc63qsanhkqk, Electronic Frontier Foundation. Stephen Schmidt, Amazon. Yan Shoshitaishvili, Arizona State University. Kevin Tierney, General Motors. Rachel Tobac nostr:npub1sklk6jq4exm29sf0dvejncctuxf3p48yk3vwj9v6ll8esvuc9nzsrkg2qx, SocialProof Security. David Weston nostr:npub1zq3fphsslhj6uzd68h63d27g4rumfet06le0chm28c3p0ny05r2q7x5l6c, Microsoft.\n\nFrom CISA: Eric Goldstein and Bob Lord nostr:npub1qsax7h4jmgqx5x2grvh487rqlwhkpg5ukgv3qn6rcxelqkdhzlush03n30\n\n#CISA #MemorySafety #Rust #golang #swift", "sig": "c9a76822f05704a8459e64b7ba7f85585a6fc4aba656e8823a4e9ccb652c051c3263f683c96b266610f89f63db7c1acce00deb75b1cd5ea5bf0d2dbb5de279e6" }