Keynote | High-assurance Code Reviews: How Consulting Works When The Risks Are High by Dan Guido
Evaluates keynote | High-assurance Code Reviews: How Consulting Works When The Risks Are High by Dan Guido and evaluates key implications for security practitioners.
Summary
Overview: Dan Guido delivers the nullcon Berlin keynote on high-assurance code reviews, comparing blockchain security challenges with traditional consulting when risks are extreme.
Key Topics: Solidity's security failures despite modern language design lessons; trailer bits consulting model changes under high risk; the desperate need for blockchain developers; and why some security problems are easier on one side of the fence.
Technical Details: Guido discusses how Solidity threw out decades of security learnings when designed for JavaScript developers, creating a language only a few years old with vulnerabilities that took C++ 40 years to accumulate.
Takeaways: High-assurance environments demand different consulting approaches than typical engagements. New technology stacks like blockchain often repeat security mistakes that mature languages solved decades ago.
Related talks
Nullcon Berlin·42 min
Presents breaking RSA Authentication & Bitstream Recovery From Zynq-7000 SoC-Arpan Jati and evaluates key implications for security practitioners.
Nullcon Berlin·44 min
Demonstrates revela: Unlock The Secrets Of Move Smart Contracts- Nguyen Anh Quynh & Van Hoa and evaluates key implications for security practitioners.
Nullcon Berlin·36 min
Dennis Giese
Examines open Sesame - Or How Secure Is Your Stuff In Electronic Lockers and evaluates key implications for security practitioners.