Alex Rebert @ayper

Security @ Google. Previously co-founder of @ForAllSecure. Opinions here are my own. @[email protected] Pittsburgh Joined August 2008

Tweets

117
Followers

523
Following

665
Likes

430

Alex Rebert @ayper

6 months ago

We're joining forces with industry & academia to call for memory safety standardization: security.googleblog.com/2025/02/securi…. It's a recognition that memory unsafety is no longer a niche technical problem but a societal one, impacting everything from national security to personal privacy.

2 16 63 4K 19

Google VRP (Google Bug Hunters) @GoogleVRP

8 months ago

🛡️Want to help make the open source world safer and earn up to $45k 💰? We've revamped our Patch Rewards Program, extending its scope and increasing rewards for security patches – with a particular focus on memory safety, including bonus multipliers! bughunters.google.com/blog/527306491…

0 30 147 38K 50

Google VRP (Google Bug Hunters) @GoogleVRP

9 months ago

Celebrating 15 years of password hacking 💻 🔑, Swiss Army knives (and sometimes even chainsaws or swords) included! 😲 Discover how Google's security teams turn employee farewells into security tests. bughunters.google.com/blog/635526578…

0 31 111 26K 33

Kinuko Yasuda @kinu

10 months ago

Bounds-checking in C++: so people ask if the .3% overhead is real. It's not just a benchmark result, we got this through our Google-Wide profiling, that gives us the live insights from DCs. This surprised us too as it was much cheaper than we thought research.google/pubs/google-wi…

Alex Rebert @ayper

10 months ago

2 51 248 63K 79

1 14 27 10K 7

Lukas Weichselbaum @we1x

11 months ago

The dedication and hard work has payed off: "for hundreds of complex web applications that are built on Google’s hardened and safe-by-design frameworks, we've averaged less than one XSS report per year in total" (see page 9 of the whitepaper).

Heather Adkins - Ꜻ - Spes consilium non est @argvee

11 months ago

1 25 49 9K 14

3 6 28 5K 5

Deirdre Connolly¹ @durumcrustulum

11 months ago

Percentage of codebase that's memory-safe 📈, memory-safety vulns 📉, EVEN IF YOU KEEP ADDING LINES OF C 🤯

Security Cryptography Whatever @SCWpod

11 months ago

Percentage of codebase that's memory-safe 📈, memory-safety vulns 📉, EVEN IF YOU KEEP ADDING LINES OF C 🤯

1 8 30 9K 19

1 3 9 2K 1

Alex Rebert @ayper

11 months ago

Excited to share Google's memory safety strategy! We're working to build safer software by migrating to memory-safe languages like Rust as well as hardening our existing C++: security.googleblog.com/2024/10/safer-…. We'll be sharing more details in upcoming posts.

3 72 237 54K 98

Alex Rebert @ayper

11 months ago

Google CVR is doing incredible vulnerability research.

Anthony Weems @amlweems

11 months ago

Google CVR is doing incredible vulnerability research.

2 16 62 35K 16

0 0 5 460 0

tylerni7 @tylerni7

12 months ago

Released a blog about our @theori_io AIxCC experience! medium.com/@sa-blog/winni… @tjbecker_ and I were hoping to have more info about other challenges, but they aren't released, so some of the information is a bit limited. Still, hope folks can enjoy reading it!

0 20 62 7K 15

Alex Rebert @ayper

12 months ago

The drop in Android's memory safety vulnerabilities is astonishing. It's counterintuitive, but prioritizing memory-safe languages in new code quickly reduces memory-safety risks. Once we turn off the tap of new vulnerabilities, they start decreasing exponentially.

Jeff Vander Stoep @jeffvanderstoep

12 months ago

6 76 278 54K 133

2 3 36 4K 3

Anthony Weems @amlweems

a year ago

Excited to share this blog post about server-side memory corruption that my team exploited in production. Shout-out to @scannell_simon, @epereiralopez, and @thatjiaozi - this was a very fun project. :-) bughunters.google.com/blog/622075742…

0 40 152 29K 56

Royal Hansen @royalhansen

2 years ago

"just as our efforts to eliminate XSS attacks through tooling showed, removing large classes of exploits both directly benefits consumers of software and allows us to move our focus to addressing further classes of security vulnerabilities." security.googleblog.com/2024/03/secure…

1 3 21 1K 2

Royal Hansen @royalhansen

2 years ago

Today I spoke on the importance of Secure by Design on behalf of @Google alongside @CISAgov @FDD @VenableLLP & more. We also launched a paper on @Google's approach to Secure by Design & published on how it can be applied to address memory safety vulns: blog.google/technology/saf…

0 19 43 6K 8

Google VRP (Google Bug Hunters) @GoogleVRP

2 years ago

Ever struggle with C++ buffer issues? Spatial Safety is one of the main root causes for in-the-wild exploits! Read more about how we piloted the LLVM proposal for C++ Buffer Hardening here: bughunters.google.com/blog/636855965…

0 34 137 17K 54

cje @caseyjohnellis

2 years ago

this is a big one… if you have opinions on this, make sure that they are heard 👀 Fact Sheet: Office of the National Cyber Director Requests Public Comment on Open-Source Software Security and Memory Safe Programming Languages | ONCD | The White House m.cje.io/3s2Xz6t

1 16 37 9K 6

Perri Adams @perribus

2 years ago

I’m excited to announce the AI Cyber Challenge, a major, two-year @DARPA competition challenging the best and the brightest in cybersecurity and AI to secure the systems on which all American rely. aicyberchallenge.com

5 82 261 85K 35

Download Image

Heather Adkins - Ꜻ - Spes consilium non est @argvee

2 years ago

Announced at the #BlackHat keynote: @Google, @OpenAI, @Anthropic, and @Microsoft will collaborate with @DARPA for its AI Cyber Challenge – a 2-year competition aimed at driving innovation at the nexus of AI and cybersecurity. Read more here: whitehouse.gov/briefing-room/…