News for hackers. Stuff that matters.

syumei

Thanks for the feedback! I should have explained the process more clearly. I first formalized security properties in Lean 4 (automatically extracted from Rust code) and attempted to prove them. All the bugs mentioned in the article were discovered by investigating failed proof attempts, and I then confirmed them with concrete tests against the original projects. So the Lean proof attempts came first, not the tests. I'll clarify this in the article!

Ask HN: Can we translate normal Rust (axum) to Lean 4 without restrictions?

I'm trying to build a web app in Rust using axum, and am thinking whether I can export that Rust code to Lean4 so that I can verify business logic or security properties.I first tried Aeneas, but it can only work for restricted grammer and structurs that are hard to review (it even doesnt look like Rust).For example, when I want to write:``` fn find_post(ps: &[Post], id: u64) ->...

( Read More... | no comments | 3 points | on HN )
Re:Do We Still Need Burp Suite for Web Security Testing? on Monday September 07, 2026 @12:56PM (#49600411)
I've heard of Vulnetic, and it looks quite cool, though I feel it's a bit expensive for individual users (probably fine for companies)

Older »