I like safe languages and unsafe problems. Analyzing code, encrypting data, processing encrypted data, toying with the whiz-bang parts of tech (CV, AI) all fun.
Joined October 2009
- Tweets1.2K
- Following372
- Followers292
- Likes2.6K
Thomas M. DuBuisson (TomMD on most platforms) retweeted
I’ve done a lot of formal methods “technical sales” - trying to scope projects for Galois clients that solve their problem and fit into a budget. I gave a talk last week on some things that I learned along the way: mikedodds.github.io/files/ta…
Some day we're going to wonder why "so-and-so got fact checked" was the phrase instead of "they foolishly believed" or "they lied". No one did anything untold to the speaker, the speaker did something to the listeners.
Why hasn't anyone built in haybale a simple tool to prove functional equivalence? This seems fun and beneficial, that and supporting more sat solvers.
Shower thought: could something like CryptoBap (on steroids) have detected the vulnerability in the ssh binary resulting from the xz attack?
Since no news source cares to say: Oregon HB4002 making drugs bad again (illegal) would take effect 1sept2024. I had to read the bill to find the date. #Oregon
Thomas M. DuBuisson (TomMD on most platforms) retweeted
It looks very likely there will be automated reasoning intern spots open with me and others on my team this year. Reach out here if you'd like to chat. Topics include:
Program analysis
Program synthesis
Concurrent systems code and protocol proof
Correctness for machine learning
Thomas M. DuBuisson (TomMD on most platforms) retweeted
We are pleased to announce that Galois is open-sourcing Yapall (Yet Another Pointer Analysis for LLVM), a static pointer analysis tool for programming languages that compile to LLVM.
galois.com/news/yet-another-…
Sonatype recently turned off their Lift service. The OSS community lost the easiest way to run Facebook's #infer tool. Infer runs on every PR in Facebook but has no wide traction. If you use it I'm pushing regular docker builds of infer to ghcr, follow @tacoforbrain for updates.
crux-mir has been updated, should work with latest Rust. About a shame to be on vacation, can't wait to get home and give it a try. github.com/GaloisInc/crucibl…
I'm releasing docker containers with Infer builds on a monthly cadence and using this @tacoforbrain handle for updates on that work. The build was tested on kafka libs and curl. The linked github action reports findings to the GitHub repo's security tab.
We just pushed up a new image for using Infer (fbinfer.com) on GitHub Actions. FoodForBrain's image will be updated monthly, providing an up-to-date build of infer for the community.
Ex here is a github workflow for the Kafka C library (github.com/foodforbrain/libr…).
A recent build of Infer in a Docker image is up at ghcr.io/foodforbrain/infer and will be updated monthly. This works fine for real projects (ex Curl) and includes C and Java tooling. @tacoforbrain will post example GitHub actions as they are created for easy use in CI.
Thank you for streaming this workshop. I see there isn't an up-to-date infer built and available for the public so I'm making one and will push to ghcr.io if anyone's interested. Will post instructions once it's up.
It might be a survey of people to avoid seeing as twice as many say they are "programming" than "testing" or "reviewing".
From JetBrains developer survey for 2022:
The programming languages that are showing a downward trend include PHP, Ruby, Objective-C, and Scala.
jetbrains.com/lp/devecosyste…
Recent digital house cleaning results: dozens of archived projects, a half dozen packages given to the haskell-github-trust, and a nix-shell built for mellow-ffmeg (ffmpeg -> image processing -> gloss) for fun. Yeah, I'm wearing one of my old Galois shirts
Thomas M. DuBuisson (TomMD on most platforms) retweeted
It's relatively easy to prove C or Haskell code correct (ex SAW, LiquidHaskell), what are the options for proving Rust code is correct? #rustlang
It's relatively easy to prove C or Haskell code correct (ex SAW, LiquidHaskell), what are the options for proving Rust code is correct? #rustlang