Re:Bitcoin's Academic Pedigree
by jameskegel on Wednesday August 30, 2017 @05:57PM
(#15136427)
Wow, this was a path I did not expect this conversation to take. Thank you for mentioning this.
Re:Bitcoin's Academic Pedigree
by ghostbrainalpha on Wednesday August 30, 2017 @05:12PM
(#15136084)
Could you explain what his accomplishment was in terms a non-cryptographer could understand?
First of all djb is https://en.wikipedia.org/wiki/Daniel_J._Bernstein and the accomplishment was releasing a secure email server (qmail), a secure webserver (publicfile), and a secure BIND server (djbdns). Both qmail and djbdns became widely used, and the main alternatives were projects supported by large teams.
It took 8 years before the first bug was found in these projects.
I highly recommend reading through the guidelines in https://cr.yp.to/qmail/guarantee.html for how to write secure software. In particular point 5, Don't Parse, is broadly applicable and under appreciated. A well-known class of bugs arising from this error are SQL injection attacks.
It's been done before... for example, djb