https://sbudella-gco.github.io/blog/ Insights into computer security, programming and math en-us Wed, 25 Feb 2026 00:00:00 GMT https://www.certora.com/blog/keep-it-like-a-secret "Trustless" bridges claim to allow secure asset exchange across chains even in the presence of malicious actors. However, we argue that truly trustless protocols based on commit-reveal schemes are actually impossible when at least one of the participants does not wait for block finality. Mon, 06 Apr 2026 00:00:00 GMT https://www.certora.com/blog/keep-it-like-a-secret https://www.certora.com/blog/bls-signature-subtleties This article explores an observation in the use of BLS signature aggregation within a production blockchain. Wed, 25 Feb 2026 00:00:00 GMT https://www.certora.com/blog/bls-signature-subtleties https://sbudella-gco.github.io/blog/20250507-hash-what-you-mean.html Vulnerabilities in Merkle tree implementation used for hashing collections of objects, with an application to Omni Network. Wed, 07 May 2025 00:00:00 GMT https://sbudella-gco.github.io/blog/20250507-hash-what-you-mean.html https://sbudella-gco.github.io/blog/20250417-proof-of-nothing.html Inductive Reasoning Considered Harmful for blockchain light clients. Thu, 17 Apr 2025 00:00:00 GMT https://sbudella-gco.github.io/blog/20250417-proof-of-nothing.html https://github.com/sbudella-gco/security-advisories Missing BLS12-381 Public Key Validation, and BLS12-381 Wrong Signature Generation in CometBFT Thu, 03 Oct 2024 00:00:00 GMT https://github.com/sbudella-gco/security-advisories https://www.asymmetric.re/blog/ghost-in-the-block-ethereum-consensus-vulnerability Ethereum consensus vulnerability. Thu, 19 Sep 2024 00:00:00 GMT https://www.asymmetric.re/blog/ghost-in-the-block-ethereum-consensus-vulnerability https://sbudella-gco.github.io/blog/20230330-shamir-timing.html CVE-2023-25000 Thu, 30 Mar 2023 00:00:00 GMT https://sbudella-gco.github.io/blog/20230330-shamir-timing.html https://sbudella-gco.github.io/blog/20230308-coredns-conjecture.html CoreDNS might be vulnerable to cache poisoning attacks. Wed, 08 Mar 2023 00:00:00 GMT https://sbudella-gco.github.io/blog/20230308-coredns-conjecture.html https://sbudella-gco.github.io/blog/20200521-iaik-timing.html How to find side channel leaks in Java Cryptography Extension providers. Thu, 21 May 2020 00:00:00 GMT https://sbudella-gco.github.io/blog/20200521-iaik-timing.html https://sbudella-gco.github.io/blog/20200503-mindreading.html Statistical inference of Chebyshev's bias in RSA numbers. Sun, 03 May 2020 00:00:00 GMT https://sbudella-gco.github.io/blog/20200503-mindreading.html https://sbudella-gco.github.io/blog/20181211-duplicate-moduli.html Duplicate RSA moduli census and bash interpreter abuse in the way of Diogenes. Tue, 11 Dec 2018 00:00:00 GMT https://sbudella-gco.github.io/blog/20181211-duplicate-moduli.html https://sbudella-gco.github.io/blog/20180911-cve-2018-5548.html An account of CVE-2018-5548 Tue, 11 Sep 2018 00:00:00 GMT https://sbudella-gco.github.io/blog/20180911-cve-2018-5548.html https://sbudella-gco.github.io/blog/20180227-suminagashi.html Exploiting SQL injections when error messages are the only output. Tue, 27 Feb 2018 00:00:00 GMT https://sbudella-gco.github.io/blog/20180227-suminagashi.html https://sbudella-gco.github.io/blog/20180128-mobilepass.html A Secret You Own is a Secret You Pwn. Sun, 28 Jan 2018 00:00:00 GMT https://sbudella-gco.github.io/blog/20180128-mobilepass.html https://sbudella-gco.github.io/blog/20170828-apl-troy.html Literate programming in APL. Mon, 28 Aug 2017 00:00:00 GMT https://sbudella-gco.github.io/blog/20170828-apl-troy.html https://sbudella-gco.github.io/blog/20170821-apl-openbsd.html Porting of GNU APL to OpenBSD. Mon, 21 Aug 2017 00:00:00 GMT https://sbudella-gco.github.io/blog/20170821-apl-openbsd.html