Joined December 2019
I’m thrilled to share my latest blog post! This one focuses on the bug hunting process: inspiration, approach, and execution. I also provide a retrospective on how the bug was introduced and analyze the insufficient “patch”. Check it out: securityintelligence.com/x-f…
32
254
11
849
170,858
Suggestions for a #graphql library for #rustlang ? Server side specifically, looking for multiple options to evaluate. Must support subscriptions. pls/ ty 🙏🙏🙏🙏
1
3
Rust Adventure is Live!! 🦀🎉 @rustadventure is series of workshops designed to introduce @rustlang to people who have programmed in at least one other language like JavaScript, Ruby, or Python. rustadventure.dev/
14
180
24
768
another day of being a woman in tech
165
3,002
249
26,470
WFH means normalize naps
1
1
13
Has anyone else noticed the massive amount @d0nutptr gives the community? Quietly. And consistently. Respect.
7
7
3
111
Andréa retweeted
If you are a woman who does technical work for a living and have been told you're not technical enough, please retweet. Same goes for those who are not a woman but have witnessed or known about this happening. Trying to see something.
52
647
106
664
When choosing a new habit many people seem to ask themselves, “What can I do on my best days?” The trick is to ask, “What can I stick to even on my worst days?” Start small. Master the art of showing up. Scale up when you have the time, energy, and interest. —James Clear
6
12
1
66
Garage sales are the arena allocator of the real world.
2
1
14
🔥🧵
If you are a developer, and you feel bad about not knowing everything, I have one item I want you to memorize: No one knows everything. No one. The best coders in the world only know a small fraction of everything there is to know about coding.
1
2
First up: "Learning how to learn Rust" with @timClicks youtube.com/watch?v=fT1GW9C1…
5
16
Such important advice. Even if you haven't solved the problem yet, keep narrowing it down, keep focusing on knowns and unknowns instead of a binary "fail/succeed". Failure is a normal, *important* part of the process.
debugging tip: list what you've learned permalink: wizardzines.com/comics/list-…
tried something new and wrote an LPE exploit for CVE-2021-3490, a bug in the Linux Kernel eBPF verifier. was fun and learned a lot - blog post + PoC coming soon. happy memorial day!
21
246
11
1,731
Replying to @and_zza
When I was first learning rust, mentally replacing the word "trait" with "contract" made the code make more sense initially. fn foo() -> impl(ements) contract { ... } impl(ement) contract for <type> { ... } Hopefully this helps someone following along :)
1
1
5
This. Rust is on a huge adoption upswing and will be one of, if not *the*, next big languages companies are hiring for. If you’re rust-curious, now is the time to set aside a weekend and take a real look if you want a competitive advantage for the future.
Internally, corporations are shifting an increasing amount of budget to Rust development. What is known in the public is 6-12 months behind what is quietly happening.
3
5
31
"If you haven't waded into rust, you definitely want to sit down and learn it. If you try to dabble with it, it will punish you." - @bcantrill This is excellent advice. If you're trying to learn rust, definitely set aside ample time to learn it. It's a genuine paradigm shift.
2
2
18
This article nicely shows why doing just an algorithm in webassembly doesn't make a big enough dent (or is even faster at all). It's everything or nothing. Only when LLVM can crunch the complete application / APIs / everything you see significant wins over innerloop competitions
📝New blog post 🎉 Is WebAssembly magic performance pixie dust✨? Can you replace JavaScript with Wasm and things get faster? ➡️ JS to AssemblyScript ➡️ Benchmarking & Profiling ➡️ Debugging the runtime ➡️ Comparing file size ➡️ also feat Rust & C++ 👇 surma.dev/things/js-to-asc/i…
3
3
14
"Without protection, the remains of thousands of Native American settlements and cultural sites are in 'grave jeopardy,' said Pat Gonzales-Rodgers, executive director of @savebearsears." #StandWithBearsEars #MonumentsForAll washingtonpost.com/nation/20…
16
25
.@POTUS needs to issue a proclamation restoring Bears Ears in a way that honors its sacred power, cultural and ecological significance. #StandWithBearsEars #MonumentsForAll Learn more from NRDC’s Sharon Buccino:on.nrdc.org/3s42EG3
1
19
54
🕸️ Want to learn about GraphQL hacking? Thread by @drunkrhin0 with: 📺 Talks 🗒️ Articles 🛠️ Tools 📣 Public reports xitter.cf/drunkrhin0/status/1375…
Want to learn about GraphQL hacking? A thread ⬇⬇⬇ (1/10)
3
6