Carl DongGuest
Liam NelsonHost
But maybe to start things off, are you surprised at how sophisticated AI is with respect to supply chain attacks? And how did you think about that while you were at Bitcoin Core?

And security, a lot of it is just having infinite patience, as in just going through all the different cases, all the different ways that something can fail.

I guess it's not super surprising that it would be have been a catastrophe, let's say, for the cybersecurity space.

We don't have to rely on the fact that, you know, if somebody just doesn't have the patience, let's say, to look into it.

And one of the things I think that we did for... bitcoin core this was uh i can talk about my work as well but more more related to this was a lot of the fuzzing that we did um so fuzzing is a technique by which you machine generate all of the possible inputs let's say into the system and run that through and make sure nothing goes wrong basically doing what the ai bots are doing but obviously much more efficiently and sort of uh at scale and that's an effort that was started well before i left and is is one of the reasons why we don't see let's say uh large scale you know uh vulnerabilities let's say in bitcoin core that are being actively exploited

nice i love that yeah can you can you share any other projects you worked on at bitcoin core or anything else that uh the audience would find interesting

Yeah, my major project was with regards to supply chain security, right? It's sort of the technical term is reproducible builds or bootstrappable builds, but I'll sort of make it easy to understand for the audience.

But also when you download Bitcoin, let's say you download a, disk image or a exe file or whatever right um the code on github could be totally good and totally robust and doesn't have a backdoor or whatever but how do you make sure that the thing that you downloaded also doesn't have a backdoor right because what could totally happen is that i don't know some three-letter agency somewhere goes to the person who uploads that you know disk image and said hey before you upload it just just Put a little backdoor in there for us.

Why not? Here's a wrench and $5 wrench attacks, right? So reproducible builds is an effort whereby anybody anywhere can run the script and verify, let's say, that the code corresponds to what is being downloaded.

What I'll also say is that for people who are into Bitcoin and Bitcoin Core, a lot of what we do, I worked a lot with the build systems team, is reducing our dependency on other libraries.

But maybe to start things off, are you surprised at how sophisticated AI is with respect to supply chain attacks? And how did you think about that while you were at Bitcoin Core?

And security, a lot of it is just having infinite patience, as in just going through all the different cases, all the different ways that something can fail.

I guess it's not super surprising that it would be have been a catastrophe, let's say, for the cybersecurity space.

We don't have to rely on the fact that, you know, if somebody just doesn't have the patience, let's say, to look into it.

And one of the things I think that we did for... bitcoin core this was uh i can talk about my work as well but more more related to this was a lot of the fuzzing that we did um so fuzzing is a technique by which you machine generate all of the possible inputs let's say into the system and run that through and make sure nothing goes wrong basically doing what the ai bots are doing but obviously much more efficiently and sort of uh at scale and that's an effort that was started well before i left and is is one of the reasons why we don't see let's say uh large scale you know uh vulnerabilities let's say in bitcoin core that are being actively exploited

nice i love that yeah can you can you share any other projects you worked on at bitcoin core or anything else that uh the audience would find interesting

Yeah, my major project was with regards to supply chain security, right? It's sort of the technical term is reproducible builds or bootstrappable builds, but I'll sort of make it easy to understand for the audience.

But also when you download Bitcoin, let's say you download a, disk image or a exe file or whatever right um the code on github could be totally good and totally robust and doesn't have a backdoor or whatever but how do you make sure that the thing that you downloaded also doesn't have a backdoor right because what could totally happen is that i don't know some three-letter agency somewhere goes to the person who uploads that you know disk image and said hey before you upload it just just Put a little backdoor in there for us.

Why not? Here's a wrench and $5 wrench attacks, right? So reproducible builds is an effort whereby anybody anywhere can run the script and verify, let's say, that the code corresponds to what is being downloaded.

What I'll also say is that for people who are into Bitcoin and Bitcoin Core, a lot of what we do, I worked a lot with the build systems team, is reducing our dependency on other libraries.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.