Jeremy Cheng

@jerrawik.bsky.social

No matter who you are, if you are running a platform or a making a product that collects user data, you need to have a plan for what happens when the government shows up and asks for it, you need to share that policy with that users, and publish a transparency report.

Zack Whittaker@zackwhittaker.com · 2mo ago

New, by me at this.weekinsecurity.com: Health wearable giant Oura says it has received government demands for users' information (because Oura does not use end-to-end encryption). Will Oura say how often it gets demands for user data, and how often Oura hands over users' data to authorities?

We created a safer AV1 decoder, rav1d, by forking the dav1d decoder and rewriting the C code in Rust. It works great except our Rust is 5% slower than the C. We're not sure why so we're offering a $20k bounty to figure it out and make the Rust code faster. www.memorysafety.org/blog/rav1d-p...

$20,000 rav1d AV1 Decoder Performance Bounty

In March of 2023 we announced that we were starting work on a safer high performance AV1 decoder called rav1d, written in Rust. We partnered with Immunant to do the engineering work. By September of 2...

memorysafety.org