ievans

725 karmajoined August 3, 2012On HN

co-founder at https://semgrep.dev make it expensive to exploit software

Contact me at isaac at that domain ^

[ my public key: https://keybase.io/ine; my proof: https://keybase.io/ine/sigs/lLgIx6kHhFdId2nkYud-g18G-usi9L4GzJVXQMjK6qM ]

Recent submissions

Poisoning Attacks on LLMs Require a Near-Constant Number of Poison Samples arxiv.org
2ievans10modiscuss
Dayssincelastsupplychainattack.com dayssincelastsupplychainattack.com
2ievans1ydiscuss
Dayssincelastsupplychainattack.com dayssincelastsupplychainattack.com
3ievans1y1 comment
Chromium Security: The Rule of 2 chromium.googlesource.com
2ievans1ydiscuss
98% of PyMySQL forks are vulnerable to SQL Injection cramhacks.com
1ievans2ydiscuss
Semgrep: Semantic Grep for Code github.com/semgrep
2ievans2ydiscuss
Semgrep Secrets semgrep.dev
3ievans2ydiscuss
The Evolution of Open Source Business Models tomtunguz.com
3ievans3ydiscuss
White House RFI on Open-Source Software Security and Memory Safe Languages whitehouse.gov
17ievans3y2 comments
Guardrails for PromQL Using Semgrep semgrep.dev
14ievans3ydiscuss
New Fellowship: How Sequoia Is Supporting Open Source sequoiacap.com
4ievans3ydiscuss
Crosscompiling OCaml to JavaScript and WASM to Make Semgrep Playground Fast semgrep.dev
5ievans3ydiscuss
Critical vulnerability in Node vm2 Error.prepareStackTrace (CVE-2023-29017)nvd.nist.gov
2ievans3ydiscuss
Semgrep Code: SAST designed and built for engineers semgrep.dev
2ievans3ydiscuss
Need for speed: static analysis version semgrep.dev
2ievans3ydiscuss
Trojanized Windows 10 Operating System Installers Targeted Ukrainian Government mandiant.com
3ievans3y1 comment
Diplomacy and Meta AI’s Cicero ai.facebook.com
1ievans3ydiscuss
Ignore 98% of dependency alerts: introducing Semgrep Supply Chain r2c.dev
176ievans3y59 comments
JavaScript static analysis comparison: ESLint vs. Semgrep r2c.dev
1ievans4ydiscuss
Sanitize your inputs? I think not kevinsmith.io
2ievans4ydiscuss
Protect Your GitHub Actions with Semgrep r2c.dev
4ievans4ydiscuss
Semgrep rules registry: 1,100+ linter rules github.com/returntocorp
6ievans5ydiscuss
A Practical Introduction to Semgrep bernardoamc.com
1ievans5ydiscuss
Lightstep Is Joining ServiceNow lightstep.com
1ievans5ydiscuss
Semgrep: Semantic grep for code semgrep.dev
415ievans5y104 comments
Preventing heartbleed bugs with safe programming languages bluishcoder.co.nz
2ievans5ydiscuss

All submissions and comments on Hacker News.