HNHacker News
TopNewBestAskShowJobs

woodruffw

42,362 karma · joined May 26, 2015

I'm a Software Engineer in New York City. Before that, I studied philosophy.

On the philosophy side, I'm chiefly interested in metaphysics (ontology and mathematics/formal systems & semantics) and deontological ethics (praise and blame, moral education, honesty & bad faith).

On the computational side, I'm chiefly interested in program analysis (compilers), security (compilers), and systems (compilers). I do a decent amount of professional open source work on projects that encompass some of those.

My opinions are my own and do not reflect those of any employer, institutions, affiliates, lovers or haters past, present, or future. They might not even be mine anymore!

Sites: https://yossarian.net / https://blog.yossarian.net / @yossarian@infosec.exchange

submissionscomments

PyPI Now Supports Project Archival

blog.pypi.org·36 pts·woodruffw·
0

GitHub Actions is surprisingly case-insensitive

yossarian.net·2 pts·woodruffw·
0

Zizmor 1.0

blog.yossarian.net·2 pts·woodruffw·
0

Auditing RubyGems

blog.trailofbits.com·2 pts·woodruffw·
0

Zizmor would have caught the Ultralytics workflow vulnerability

blog.yossarian.net·4 pts·woodruffw·
0

Zizmor: Static Analysis for GitHub Actions

woodruffw.github.io·1 pts·woodruffw·
0

Workbrew makes open-source package manager Homebrew enterprise-friendly

techcrunch.com·14 pts·woodruffw·
2

Security means securing people where they are

blog.yossarian.net·11 pts·woodruffw·
0

Attestations: A new generation of signatures on PyPI

blog.trailofbits.com·5 pts·woodruffw·
1

Show HN: Zizmor, static analysis for GitHub Actions

woodruffw.github.io·2 pts·woodruffw·
0

Zizmor: A static analysis tool for GitHub Actions

blog.yossarian.net·6 pts·woodruffw·
0

YAML Feature Extraction with Yamlpath

blog.yossarian.net·1 pts·woodruffw·
0

Signatures Are Like Backups

alexgaynor.net·4 pts·woodruffw·
1

Tracking and Publishing My TILs

blog.yossarian.net·2 pts·woodruffw·
0

Approximating sum types in Python with Pydantic

blog.yossarian.net·158 pts·woodruffw·
97

Debugging running Python scripts with PDB via GDB

disconnect3d.pl·28 pts·woodruffw·
6

Hiding messages in x86 binaries using semantic duals (2020)

blog.yossarian.net·38 pts·woodruffw·
4

Homebrew Security Audit

brew.sh·6 pts·woodruffw·
1

Quantum is unimportant to post-quantum

blog.trailofbits.com·110 pts·woodruffw·
67

Apple's PCC: Bold step forward, not without flaws

blog.trailofbits.com·7 pts·woodruffw·
0

Python wheel filenames have no canonical form

blog.yossarian.net·60 pts·woodruffw·
73

A peek into build provenance for Homebrew

blog.trailofbits.com·7 pts·woodruffw·
0

Two New LMS Libraries

blog.trailofbits.com·1 pts·woodruffw·
0

Why the World Still Needs Immanuel Kant

nytimes.com·7 pts·woodruffw·
5

PyPI: Expanding Trusted Publisher Support

blog.pypi.org·5 pts·woodruffw·
1

More thoughts on vulnerabilities and misaligned incentives

blog.yossarian.net·4 pts·woodruffw·
0

Relishing new Fickling features for securing ML systems

blog.trailofbits.com·4 pts·woodruffw·
1

Breaking the shared key in threshold signature schemes

blog.trailofbits.com·1 pts·woodruffw·
0

LeftoverLocals: Listening to LLM responses through leaked GPU local memory

blog.trailofbits.com·5 pts·woodruffw·
0

You don't need analytics on your blog

blog.yossarian.net·67 pts·woodruffw·
73
← PreviousPage 2 of 8Next →