Security Panel by @razzor_tweet, @KirsteinUri, @sarangparikh22, @buda_kyiv
ETHDubai 2023 · 16 Mar 2023 · 34:10
A blockchain security panel at ETHDubai, with participants credited by the publisher and organizer as Tejaswa Rastogi, Uri Kirstein, Sarang Parikh and Dyma Budorin.
Speakers
Topics
From ETHDubai 2023, hosted by DeFi Dubai.
Transcript
thank you foreign yeah hi my name is happening
where the 515 but yeah all right yeah so uh what I think about is it actually matters on earth right but sometimes like that right because is
it should be uh University foreign foreign who foreign
is um One Direction please foreign foreign
foreign [Music] [Music] anymore [Music] [Applause]
[Music] um your [Music] so definitely while confidence it will never be enough and monitoring is an important place
uh um [Applause] foreign dollars
[Music] um already like 10 percentage protocols
I think it's the first time that um paid insurance right he paid for for probability and this is a child I think waterways is really helpful uh including instance like this into the future would be Insurance models that could cover a larger amount of a lot of times I don't know you can do it in a sustainable ways some of the operations because I wanted to say that it's uh um so
insurances for some Rewards so obviously Theory rules is sentences
associated with previous attack it's marked something like this [Music] foreign wow [Music]
deposit coupons withdrawals um I'm pretty sure we'll have the market available here actually this is
to use the same the same set of conditions for our Learners and that way you will do positions balances or these are known to be zero and so on okay there is a marketing anyway s foreign
[Music] um options [Music] [Music]
[Music] [Music] because you you new business model
s at least is [Music] different Technologies vacation to do that
um it's not feasible for all the projects please everybody um yeah
so it's like one of the amazing ones myself mythology to make sure that we're really excited whatever you can understand so personally satisfied like if I set up getting going into a function stuff
from the moment so that's my opinion um that had been a problem in your
application as well so what's been here is because [Music] [Music] that yeah overall things
to think how to push produce to do as much as communities so um whatever it is able to follow the rules
the rules that the communities and these rules [Music] is a problem is first thing through like
it's hard to um Reserve that was building used cars we decided to make a team dive and trying to find some critical thoughts and so it is nothing like a comparable computers there is a lot of math there is a lot of
Standards you know unique to University gym is yes right so as I'm on like um like constant video posting emails or whatever being done yes that's true the
problem is about the pieces right like under the phone if the moon is trying to say anything they all like one two three times [Music] [Music] [Music] like
apparently we are what if you are working on something else enough [Music] um I like it when when attacked to do
something Noble and use it no one can disappeared this happened once every two years someone says even more often but foreign [Music] and yeah
foreign [Music] is it says um
questions um few days
is [Music] foreign [Music] okay
yeah in the questions um [Applause] [Applause]
so I will do that though that can be basically so if there's a difference so but but security questions uh
well most um [Music] actually don't look at the splitting code but actually look at the executed by two so this is something kind of gets for free with a lot of tools being a fuzzing or adjusting so this is not in terms all right so uh it comes on to the way you want to test either statically or dynamically right so for the starting
analysis it's pretty simple the tools like how they do just create the PS3 free the parts or go through them and finding out the patterns that couldn't be problematic so yeah that's an easy way how Dynamic uh Backup Assistant works is like that those who really want to interact with the functions right they really want to uh pass it down then you want to try to create some malicious pattern that happened in the past so it's just awesome and the question that you asked by their entrepreneurs in society and how we can take care of all the attacks we have so
salary actually releases the new updates plus it also releases what has been faced in the newer version so you can follow the list down so I guess it's on already official documentation page there's less the type of bugs that we had and each of the words we can follow up and find out which version is vulnerable which is not and accordingly right in the code for instance like the memory the random memory copying that we discussed in the morning that cost paste and some parts of the 0.8 but you still see them in the latest uh a minor version because it's not entirely
fixed so you have to follow the they need other questions [Applause]