07Writing
Blog& Notes
VulnerabilitiesSecurity researchEngineering notes
071 post
All writing
VulnerabilityOCT 06 2024
CVE-2020-10735: Python int() conversion causing DoS
A quadratic parsing loop in CPython meant 100,000 digits parsed in 5ms and 1,000,000 digits took 50 seconds. Here is the bug, the fix, and where it still bites.
3 min read
In the drafts
Next up: what a year-drop experiment says about training attribution models on stale indicator feeds.
Tell me what to write