alex Follow

alex Follow

Alex Gaynor alex

I program computers, and build teams that program computers, with a heavy focus on security.

Follow

5.6k followers · 38 following · 149

Highlights

Arctic Code Vault Contributor
Pro

Organizations

Pinned

pyca/cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Python 3.5k 762
what-happens-when

An attempt to answer the age old interview question "What happens when you type google.com into your browser and press enter?"

27.3k 2k
fishinabarrel/linux-kernel-module-rust

Framework for writing Linux kernel modules in safe Rust

Rust 1k 74
fishinabarrel/fishinabarrel.github.io

Security research organization dedicated to finding low hanging, critical, vulnerabilities.

HTML 6 8
topazproject/topaz

A high performance ruby, written in RPython

Python 972 86
letsencrypt-aws

Python 729 118

4,317 contributions in the last year

Activity overview

Contributed to pyca/cryptography, hallowauth/hallow, fishinabarrel/analysis and 5 other repositories

Contribution activity

September 2020

alex/endoflife.date Ruby Sep 6

Created a pull request in PyO3/pyo3 that received 11 comments

Use limited APIs for Py::run_code

+5 −7 • 11 comments

Link python3.lib instead of python3x.lib on Windows in abi3 mode Sep 23
Start documenting abi3 support Sep 20
Run abi3 tests in CI Sep 19
Hack __text_signature__ back to working with abi3 Sep 19
fixed markdown syntax Sep 16
Get all the tests building and passing! Sep 15
Make check warning clean in limited API mode Sep 15
Make unicode handling abi3 friendly Sep 15
Replace poking at type internals with usage of a public API Sep 13
Remove finalizer code that was never reachable Sep 13
Don't consider it cross-compilation when building for 32-bit Windows on 64-bit windows Sep 12
merge master into abi3, resolving conflicts Sep 10
Added a benchmark for set iter Sep 8
Implement set iterators in terms of limited API Sep 8
Make PyType::name abi3 compatible Sep 8
Fill tp_dict on types in an abi3-friendly way Sep 8
Properly mark a function as limited API only Sep 7
Complete the process of disabling buffers with Py_LIMITED_API Sep 7
Fixed a few compilation errors on the abi3 branch Sep 6
Remove dead fields from fptr structs Sep 6
Don't run a test of PyFloat_AS_DOUBLE when using the limited API Sep 6
Don't fill in structs from the unlimited API, instead have our own structs Sep 5

Forward-port 3.1.1 changelog Sep 22
3.1.1 release Sep 22
bump to latest libressl point release Sep 21
Remove bindings docs Sep 20
3.9.0 rc2 Sep 20
Account for Bruce redoing his website or something Sep 12
Be clear that a lack of authentication often means you don't have secrecy Sep 5

Backport CStr improvement to remove need for a nightly feature Sep 12
Delete filesystem.rs Sep 12

bpo-41784: make PyUnicode_AsUTF8AndSize part of the limited API Sep 15

And then there was one Sep 9

Enable building abi3 shared objects Sep 7

Added go 1.15 Sep 6

Refactor the CStr API to reduce the need for nightly features Sep 5

Put the user arn in all log messages Sep 3

test against 1.1.1h Sep 22
smime signer support Sep 18
add prelim python 3.9 CI Sep 15
add RSA 4096-bit self-signed CA for some upcoming tests Sep 14
add pkcs7/smime bindings Sep 13
allow bytes-like for padding Sep 13
re-add a few engine bindings for advanced users Sep 1

move the LIBSODIUM_MAKE_ARGS to a place that will actually work Sep 13
make CI faster by passing parallel compile args Sep 13
Fix wheels Sep 13
windows py3 abi3 wheels + new workflow invocation Sep 13

remove libenchant from containers and fips stuff from centos7 Sep 22
bump openssl to 1.1.1h Sep 22

added CVE number CVE-2020-25574 Sep 19
Added CVE number Sep 19

Fix build by updating pypy API Sep 23

Add exploit mitigations chapter to the rustc book Sep 18

Qualify uses of `__fuzz!` macro Sep 14

Fix typo Sep 10

Complete abi3 support Sep 6

Bump decompress from 4.2.0 to 4.2.1 Sep 4

Note the buffer slots can be set with PyType_Spec with the unlimited … Sep 1

Added Rust to the build image Sep 1

Created an issue in pyca/cryptography that received 3 comments

OpenSSL 1.1.1h

Windows, macOS, manylinux Send a pull request to pyca/infra updating the version and hash Wait for it to be merged Wait for the Github Action…

7 of 7 • 3 comments

oss-fuzz last week: 24 vulnerabilities Sep 23
Chrome 85.0.4183.121 Sep 22
oss-fuzz last week: 28 vulnerabilities Sep 16
iOS 14 Sep 16
Adobe Framemaker | APSB20-54 Sep 10
Adobe InDesign | APSB20-52 Sep 10
oss-fuzz last week: 16 vulnerabilities Sep 9
Pixel September Security Bulletin: Security patches Sep 9
Pixel September Security Bulletin: Qualcomm Sep 9
Android September Security Bulletin: Qualcomm Sep 9
Android September Security Bulletin: Kernel Sep 9
Chrome 85.0.4183.102 Sep 9
GPG 2.2.23 Sep 3
oss-fuzz last week: 32 vulnerabilities Sep 2

test_unsendable in test_class_basics is not run Sep 2

Joined the paramiko organization

paramiko

197 contributions in private repositories Sep 1 – Sep 25

You can’t perform that action at this time.