@rcvalle

Vulnerability researcher at @Google. Views are my own. @rcvalle@mastodon.social

rcvalle.com
Joined March 2009
  • Tweets14
  • Following3
  • Followers967
1Media
I just became a member of the Rust compiler team. Thank you for having me on the team! Much appreciated, and super happy for it blog.rust-lang.org/inside-ru…
4
1
41
5,857
Ramon de C Valle retweeted
Brad Spengler@spendergrsec8 Jul 2024
Replying to @standa_t @rcvalle
This is why we've been helping fund the development of gccrs (Rust front-end for gcc) since 2021: opensrcsec.com/open_source_s… What's mentioned in Ramon's blog is great work, but only solves the CFI subset of the larger "mixed binary" problem, and only within the LLVM ecosystem.
1
2
8
3,851
Ramon de C Valle retweeted
Satoshi Tanda@standa_t8 Jul 2024
Porting part of a C/C++ program into Rust can make the program less secure. It has been known for quite some time but was new to me. Great read and work driven by @rcvalle bughunters.google.com/blog/4… Read one of the linked papers for more details.

Blog: LLVM CFI and Cross-Language LLVM CFI Support for Rust

We’re pleased to share that we’ve worked with the Rust community to add LLVM CFI and cross-language LLVM CFI (and LLVM KCFI and cross-language LLVM KCFI) to the Rust compiler as part of our work in...

bughunters.google.com
1
33
1
118
12,859
Ramon de C Valle retweeted
H2HC@h2hconference28 Feb 2024
17th edition of H2HC Magazine (the one that we've distributed printed to attendees at H2HC 20th) is finally online, with articles in English as well (Attacking the Linux Kernel Free List Hardening & LLVM Rust CFI): h2hc.com.br/revista
1
13
1
36
9,590
Ramon de C Valle retweeted
Alex Matrosov
@matrosov19 Dec 2023
Great work on cross-language LLVM CFI support for Rust! Kudos to @rcvalle 👏
Google VRP (Google Bug Hunters)
@GoogleVRP18 Dec 2023
Want to know how we are working with the Rust community to add LLVM CFI and cross-language LLVM CFI to the Rust compiler? Eliminating the most critical instances of cross-language attacks in mixed-language binaries (cont) spklr.io/l/6015mABf
2
7
2,937
Want to know how we are working with the Rust community to add LLVM CFI and cross-language LLVM CFI to the Rust compiler? Eliminating the most critical instances of cross-language attacks in mixed-language binaries (cont) spklr.io/l/6015mABf
1
8
1
52
10,867
Last Saturday I talked at @h2hconference and shared the results of working with the Rust community to add LLVM CFI and cross-language LLVM CFI to the Rust compiler...
2
5
44
5,418
This eliminates the most critical instance of cross-language attacks in mixed-language binaries, helping not only Google, but also the industry with secure Rust adoption. Here is the article/blog post for my talk at #H2HC: rcvalle.com/blog/2023/12/09/…
1
1
729
#h2hc #h2hc2023 #h2hconference #h2hconference2023 #infosec #rust
315
Here is the article/blog post for my talk at @h2hconference today: rcvalle.com/blog/2023/12/09/… #h2hc #infosec #rust
1
3
17
2,300
Load more