usmannk

7 ms·

1.
by usmannk 1y ago
This is about a language compiler bug. There are no takeaways about smart contracts here.
2.
by usmannk 1y ago
which slide suggests this? i didnt find anything suggesting you could start a car with rollback
3.
by usmannk 1y ago
you spooked me but indeed it's in the final version: https://www.congress.gov/bill/119th-congress/house-bill/1/te... > Sec. 70431. Expansion of qualified small business stock gain exclusion.
4.
by usmannk 1y ago
aha! i geoguessed it. i live only 2 blocks away. would love if someone could email me the whatsapp link. usmann@usmannkhan.com
5.
by usmannk 1y ago
hi neighbor! i had the same thought.. looks so familiar. must be nearby
6.
by usmannk 2y ago
dont you find all the string parsing and manipulation to be quite painful in Swift? I tried to do AoC in Swift before and that put me off a lot. I liked doing little functional one liners but a week from now the parsing burden will be too h
7.
by usmannk 2y ago
1. This is really hard to enumerate. I basically am always doing recon and don't do it 1 target at a time either. I'd been looking at Sei's V2 upgrade code on and off for months, and made my report when they merged the v2 bra
8.
by usmannk 2y ago
The answer to this question is out there, but the reports are not published yet. I caution readers to not make rash judgements on their skill like this though. These bugs are really hard to find, and it was a minor miracle that I noticed th
9.
by usmannk 2y ago
Typically networking. I spent some time working at a reputable firm in this space as well. One way to do this is to show some chops on the competition sites and then move to one of the organized freelance firms like Spearbit or yAudit. In d
10.
by usmannk 2y ago
Projects are free to change their terms and the page you link has been updated since I submitted my reports. The maximum was lowered to $1M and payment currency changed from USDC to SEI.
11.
by usmannk 2y ago
Wire fraud, at minimum. This would constitute direct theft. Very similar cases have been tried and convicted several times now.
12.
by usmannk 2y ago
1. Yes, they sent me 2,000,000 USDC. 2. Well, I'm currently not employed full time and I do spend a lot of time bounty hunting. But I mix it in with other things as well, like competitive security reviews on https://sherlock
13.
by usmannk 2y ago
Right, yeah. I estimated that a savvy attacker might have been able to get out with 50 or even 100m from this, but they would also go to jail. So...
14.
by usmannk 2y ago
It was advertised in advance, but the real gamble is on if they'll pay. If you go to my other blogpost linked in OP, you can see a case where I was owed 500k and paid 60k. You're right though that it's a lot of risk. It'
15.
by usmannk 2y ago
It's up there but not singularly so. Twice there have been $10M! You can see the leaderboard where the majority of crypto bounties are represented here ( https://immunefi.com/leaderboard/ ) but you have to search ar
16.
by usmannk 2y ago
Hey OP here, thanks for posting. Happy to answer any questions.
17.
by usmannk 2y ago
This one was actually USDC! Regulated, unmagic, dollar-backed beans.
18.
by usmannk 2y ago
this data would leave you thinking valencia st is worse off than soma
19.
by usmannk 2y ago
why does the hardware addressability reasoning hold for RAM but not SSDs?
20.
by usmannk 3y ago
> Technologists describe their systems as having “uptime” and measure it in “nines”, such as “We have five nines of uptime”, which means that a system has 99.999% uptime or, equivalently, about five minutes of downtime per year. Five nin
21.
by usmannk 3y ago
yeah after writing this i looked more attentively as i walked by today and they are pretty fucked
22.
by usmannk 3y ago
Yeah I was sad when they stopped closing the street on Saturday :/
23.
by usmannk 3y ago
they are like.. flexy bollards? cars can run over them no problem
24.
by usmannk 3y ago
Did you notice most of the parklets on Valencia are actually gone now? The city forced businesses to get rid of them over the last 3 months or so. Monk's kettle, City Beer Store, and many more.
25.
by usmannk 3y ago
I have on several occasions seen firetrucks and police cars nearly kill bikers in this bike lane. The vehicles abruptly turn _into_ the center bike lane without warning, and use it instead of the car lane. Bikers then literally fall over tr
26.
by usmannk 3y ago
For some reason the majority of the businesses on valencia have put up the sfsbcoalition posters against the bike lane. I still don't understand it though, it doesn't seem like many or even any parking spots were removed from vale
27.
by usmannk 3y ago
I used to work on cloud infra at an org that spent many millions on GCP (I'm certain ~everyone reading this comment would recognize it by name) and was working on adding more zeros to that number. We spent years working on this and sti
28.
by usmannk 3y ago
If someone who lived in Manhattan said this about traveling domestically, it would sound insane right? Your comment comes off the same way
29.
by usmannk 4y ago
This post isn't about "edge inference".
30.
by usmannk 4y ago
Thanks!

More ›