47 subscribers
با برنامه Player FM !
پادکست هایی که ارزش شنیدن دارند
حمایت شده


A Little Bit of Rust Goes a Long Way with Android's Jeff Vander Stoep
Manage episode 445316655 series 2956114
You may not be rewriting the world in Rust, but if you follow the findings of the Android team and our guest Jeff Vander Stoep, you'll drive down your memory-unsafety vulnerabilities more than 2X below the industry average over time! 🎉
Transcript: https://securitycryptographywhatever.com/2024/10/15/a-little-bit-of-rust-goes-a-long-way/
Links:
- https://security.googleblog.com/2024/09/eliminating-memory-safety-vulnerabilities-Android.html
- “Safe Coding”: https://dl.acm.org/doi/10.1145/3651621
- “effectiveness of security design”: https://docs.google.com/presentation/d/16LZ6T-tcjgp3T8_N3m0pa5kNA1DwIsuMcQYDhpMU7uU/edit#slide=id.g3e7cac054a_0_89
- https://security.googleblog.com/2024/02/improving-interoperability-between-rust-and-c.html
- https://github.com/google/crubit
- https://github.com/google/autocxx
- https://en.wikipedia.org/wiki/Stagefright_(bug)
- https://security.googleblog.com/2021/04/rust-in-android-platform.html
- https://chromium.googlesource.com/chromium/src/+/master/docs/security/rule-of-2.md
- https://www.usenix.org/conference/usenixsecurity22/presentation/alexopoulos
-https://kb.meinbergglobal.com/kb/time_sync/ntp/ntp_vulnerabilities_reported_2023-04
- https://blog.isosceles.com/the-legacy-of-stagefright/
- https://research.google/pubs/secure-by-design-googles-perspective-on-memory-safety/
- https://www.youtube.com/watch?v=QrrH2lcl9ew
- https://source.android.com/docs/setup/build/rust/building-rust-modules/overview
- https://github.com/rust-lang/rust-bindgen
- https://security.googleblog.com/2021/06/rustc-interop-in-android-platform.html
"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)
فصل ها
1. A Little Bit of Rust Goes a Long Way with Android's Jeff Vander Stoep (00:00:00)
2. Security and Memory Safety in Android (00:00:12)
3. Evaluating Memory Safety and Security Boundaries (00:10:14)
4. Scaling Memory-Safe Code for Security (00:17:04)
5. Assessing Memory Safety for Future Code (00:23:33)
6. Memory Safety and Security Progress (00:28:43)
7. Analyzing Memory Safety Issue Trends (00:35:37)
8. Transitioning to Memory-Safe Code (00:45:39)
9. Practical Approach to Memory Safety (01:00:22)
55 قسمت
Manage episode 445316655 series 2956114
You may not be rewriting the world in Rust, but if you follow the findings of the Android team and our guest Jeff Vander Stoep, you'll drive down your memory-unsafety vulnerabilities more than 2X below the industry average over time! 🎉
Transcript: https://securitycryptographywhatever.com/2024/10/15/a-little-bit-of-rust-goes-a-long-way/
Links:
- https://security.googleblog.com/2024/09/eliminating-memory-safety-vulnerabilities-Android.html
- “Safe Coding”: https://dl.acm.org/doi/10.1145/3651621
- “effectiveness of security design”: https://docs.google.com/presentation/d/16LZ6T-tcjgp3T8_N3m0pa5kNA1DwIsuMcQYDhpMU7uU/edit#slide=id.g3e7cac054a_0_89
- https://security.googleblog.com/2024/02/improving-interoperability-between-rust-and-c.html
- https://github.com/google/crubit
- https://github.com/google/autocxx
- https://en.wikipedia.org/wiki/Stagefright_(bug)
- https://security.googleblog.com/2021/04/rust-in-android-platform.html
- https://chromium.googlesource.com/chromium/src/+/master/docs/security/rule-of-2.md
- https://www.usenix.org/conference/usenixsecurity22/presentation/alexopoulos
-https://kb.meinbergglobal.com/kb/time_sync/ntp/ntp_vulnerabilities_reported_2023-04
- https://blog.isosceles.com/the-legacy-of-stagefright/
- https://research.google/pubs/secure-by-design-googles-perspective-on-memory-safety/
- https://www.youtube.com/watch?v=QrrH2lcl9ew
- https://source.android.com/docs/setup/build/rust/building-rust-modules/overview
- https://github.com/rust-lang/rust-bindgen
- https://security.googleblog.com/2021/06/rustc-interop-in-android-platform.html
"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)
فصل ها
1. A Little Bit of Rust Goes a Long Way with Android's Jeff Vander Stoep (00:00:00)
2. Security and Memory Safety in Android (00:00:12)
3. Evaluating Memory Safety and Security Boundaries (00:10:14)
4. Scaling Memory-Safe Code for Security (00:17:04)
5. Assessing Memory Safety for Future Code (00:23:33)
6. Memory Safety and Security Progress (00:28:43)
7. Analyzing Memory Safety Issue Trends (00:35:37)
8. Transitioning to Memory-Safe Code (00:45:39)
9. Practical Approach to Memory Safety (01:00:22)
55 قسمت
همه قسمت ها
×
1 E2EE Storage Done Right with Matilda Backendal Jonas Hofmann and Kien Tuong Truong 1:02:25


1 Cryptanalyzing LLMs with Nicholas Carlini 1:20:42

1 Dual_EC_DRBG with Justin Schuh and Matthew Green 1:07:45

1 A Little Bit of Rust Goes a Long Way with Android's Jeff Vander Stoep 1:13:55

1 Campaign Security with [REDACTED] 1:23:39

1 Telegram with Matthew Green 1:04:04


1 Zero Day Markets with Mark Dowd 1:25:49


1 STIR/SHAKEN with Paul Grubbs and Josh Brown 1:01:47




1 Signal's Post-Quantum PQXDH, Same-Origin Policy, E2EE in the Browser Revisted 1:19:05



1 Threema with Kenny Paterson, Matteo Scarlata and Kien Tuong Truong 1:03:55


1 Matrix with Martin Albrecht and Dan Jones 1:06:24

1 SOC2 with Sarah Harvey 1:01:37



1 Passkeys with Adam Langley 1:03:01


1 OMB Zero Trust Memo with Eric Mill 1:00:33

1 Tink with Sophie Schmieg 1:07:02

1 Cancellable Crypto Takes and Real World Crypto 1:11:04

1 Lattices and Michigan Football with Chris Peikert 1:10:01

1 Tailscale with Avery Pennarun and Brad Fitzpatrick 1:18:22

1 The feeling's mutual: mTLS with Colm MacCárthaigh 1:10:31
به Player FM خوش آمدید!
Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.