Security Panel by @razzor_tweet, @KirsteinUri, @sarangparikh22, @buda_kyiv

ETHDubai 2023 · 16 Mar 2023 · 34:10

A blockchain security panel at ETHDubai, with participants credited by the publisher and organizer as Tejaswa Rastogi, Uri Kirstein, Sarang Parikh and Dyma Budorin.

Speakers

Topics

From ETHDubai 2023, hosted by DeFi Dubai.

Transcript

thank you foreign yeah hi my name is happening

where the 515 but yeah all right yeah so uh what I think about is it actually matters on earth right but sometimes like that right because is

it should be uh University foreign foreign who foreign

is um One Direction please foreign foreign

foreign [Music] [Music] anymore [Music] [Applause]

[Music] um your [Music] so definitely while confidence it will never be enough and monitoring is an important place

uh um [Applause] foreign dollars

[Music] um already like 10 percentage protocols

I think it's the first time that um paid insurance right he paid for for probability and this is a child I think waterways is really helpful uh including instance like this into the future would be Insurance models that could cover a larger amount of a lot of times I don't know you can do it in a sustainable ways some of the operations because I wanted to say that it's uh um so

insurances for some Rewards so obviously Theory rules is sentences

associated with previous attack it's marked something like this [Music] foreign wow [Music]

deposit coupons withdrawals um I'm pretty sure we'll have the market available here actually this is

to use the same the same set of conditions for our Learners and that way you will do positions balances or these are known to be zero and so on okay there is a marketing anyway s foreign

[Music] um options [Music] [Music]

[Music] [Music] because you you new business model

s at least is [Music] different Technologies vacation to do that

um it's not feasible for all the projects please everybody um yeah

so it's like one of the amazing ones myself mythology to make sure that we're really excited whatever you can understand so personally satisfied like if I set up getting going into a function stuff

from the moment so that's my opinion um that had been a problem in your

application as well so what's been here is because [Music] [Music] that yeah overall things

to think how to push produce to do as much as communities so um whatever it is able to follow the rules

the rules that the communities and these rules [Music] is a problem is first thing through like

it's hard to um Reserve that was building used cars we decided to make a team dive and trying to find some critical thoughts and so it is nothing like a comparable computers there is a lot of math there is a lot of

Standards you know unique to University gym is yes right so as I'm on like um like constant video posting emails or whatever being done yes that's true the

problem is about the pieces right like under the phone if the moon is trying to say anything they all like one two three times [Music] [Music] [Music] like

apparently we are what if you are working on something else enough [Music] um I like it when when attacked to do

something Noble and use it no one can disappeared this happened once every two years someone says even more often but foreign [Music] and yeah

foreign [Music] is it says um

questions um few days

is [Music] foreign [Music] okay

yeah in the questions um [Applause] [Applause]

so I will do that though that can be basically so if there's a difference so but but security questions uh

well most um [Music] actually don't look at the splitting code but actually look at the executed by two so this is something kind of gets for free with a lot of tools being a fuzzing or adjusting so this is not in terms all right so uh it comes on to the way you want to test either statically or dynamically right so for the starting

analysis it's pretty simple the tools like how they do just create the PS3 free the parts or go through them and finding out the patterns that couldn't be problematic so yeah that's an easy way how Dynamic uh Backup Assistant works is like that those who really want to interact with the functions right they really want to uh pass it down then you want to try to create some malicious pattern that happened in the past so it's just awesome and the question that you asked by their entrepreneurs in society and how we can take care of all the attacks we have so

salary actually releases the new updates plus it also releases what has been faced in the newer version so you can follow the list down so I guess it's on already official documentation page there's less the type of bugs that we had and each of the words we can follow up and find out which version is vulnerable which is not and accordingly right in the code for instance like the memory the random memory copying that we discussed in the morning that cost paste and some parts of the 0.8 but you still see them in the latest uh a minor version because it's not entirely

fixed so you have to follow the they need other questions [Applause]