Joe | Audit Wizard
@joe_vanloon
Followers
710
Following
963
Statuses
369
Professional security wizard, building @audit_wizard, making audits great again - previously worked @apple
Joined September 2021
@josephdelong Bad take IMO. You want a variety of perspectives. Yes, get your friends to do a review, write good security tests, do internal reviews and use AI, but you still need to stack an audit on top of that. A professional security researcher will review the code in a way devs don't.
0
0
3
RT @DefiantNews: Court Overturns @TornadoCash Sanctions: What’s Next for Privacy? @preston_vanloon, @ethereum Core Developer Chapters 00:0…
0
19
0
RT @VitalikButerin: No man left behind. @rstormsf and @alex_pertsev next. Tornado Cash itself won an important case today: https://t.co/…
0
603
0
LFG 🚀 Privacy wins!
What an incredible update here from the Tornado Cash OFAC sanctions case. This an absolute win. A win for unstoppable applications. A win for online financial privacy. A win for decentralization. A win for Ethereum.
0
0
4
Wise words. Take OpSec seriously, please don't get hacked because of something simple!
No brainer. Every Team should get an @audit_wizard OpSEC Audit Too many hacks across TG, X, ...
0
0
7
@__Raiders @audit_wizard You could do that, but if you have malware on your host machine, it could compromise the docker image. Separate hardware is definitely the way to go. You could use VMs for risky stuff but I wouldn’t recommend that because it is possible for malware to break out of a docker image
1
0
3
@GodBungholio Ideally, yeah. Even if you do connect it to the internet, using it just for transactions and nothing else adds a huge layer of protection from malware vs using your normal machine.
0
0
2
You could even have a third laptop for risky actions like downloading meeting software or opening PDFs (never do these things on your other devices). The cost of a cheap laptop is nothing compared to the cost of being compromised.
0
0
5
Good security comes from challenging assumptions, hardening against disaster scenarios, mitigating compromises, and having multiple layers of redundant security controls to resist advanced threat actors. The job of plugging every hole is much harder than finding just one.
0
0
1
Good OpSec is: resistant to side-channel attacks, browser 0-days, social engineering, malware, insider threats, and all of that in combination. If someone is telling you that your OpSec may not have those properties, please god listen to them!
0
0
0
It was a pleasure to work with @use_corn and their fantastic team. We've designed one of the most thorough review processes out there for OpSec and InfraSec. Together, we ensured a high level of security that permeates their entire organization and keeps their project secure 💪
How do next-generation networks keep themselves secure from modern vulnerabilities? We've just completed extensive OpSec and Infrastructure security audits for @use_corn, a new $1B+ TVL network built for BTCFi. Here's how we're keeping them secure 👇
2
1
14
@PatrickAlphaC I don’t think this is true of everything, some things have intrinsic value and can generate wealth for most long term. But there are so many zero-sum ponzis in crypto that are just predatory (looking at you memecoins) and retail are always ones getting rekt. Very scummy IMO
0
0
3
RT @jack__sanford: Biggest theme from DeFi Security Summit is that Stolen Private Keys is now by far the biggest security risk in crypto.…
0
10
0
RT @iampaulgrewal: Just days before the Fifth Circuit ruled that when OFAC sanctioned code it in fact violated the law, some in Congress as…
0
82
0
What if we used inkblots instead of letters for 2FA TOPT codes? Imagine scammers trying to social engineer a victim for their codes: "There's one that has a few dots and then a bigger splotch, one that looks sort of like a bird, and one that reminds me of my dad for some reason"
0
0
4