ishish.io
ishish.io

What is now proved
was once, only imagin'd

- William Blake

Fuel primer - HeSaidSheSaid

June 2, 2023

Recently I was experimenting with FuelVM - an optimistic rollup (in the default configuration, there are more options for setup - see below) working on top of Ethereum that provides Smart Contract functionality and is focused on delivering significantly higher transaction speeds and, as a side effect, lowering the transaction fees. You can learn more about the Fuel VM project on the Fuel Labs website.

The speed goals are delivered by a combination of techniques that FuelVM employs. First one being parallelization of the transaction execution thanks to the UTXO execution model. It allows leveraging OS multi-threading and CPU cores for parallel execution of transactions in a block which significantly reduces the execution time when compared to single-threaded execution.

Another aspect that speeds up the whole solution is the use of Rust language for implementing the node. Rust is a secure language in a sense that it prevents many types of weaknesses from being introduced into the program at the compilation time. Various strategies for memory management, variables lifetimes, concurrency etc.. are used to eliminate such weaknesses classes such as:

  • race conditions
  • double free
  • Use-After-Free
  • wild pointer dereference
  • etc.

All of these weaknesses were often resulting in serious vulnerabilities identified in the final products that were written in C, C++, etc.

Premiere of the amazing AnxioCrew

June 29, 2023

Hello all! I am very happy to announce the long-awaited premiere of the AnxioCrew NFT collection,

the hottest NFT collection of 2023!

Currently it's only on Avalanche because Ethereum is expensive :(

Only two amazing AnxioBuddy tokens minted for now! Enjoy!

Threat model for blockchain - part 1: End user perspective

June 28, 2023

The end-user perspective is quite easy. Based on available functionality, there aren't many use-cases for this actor and, in terms of functional classes, not many types of threats. In fact, there is one major use-case which is: End-user is signing the transaction and submitting it to the network.

Under the term of transaction we include the following:

  • Purchasing services
  • Digital currency / digital asset management and transfers
  • Smart contract interaction
  • etc.

Let's dissect the use case using the STRIDE threat modelling methodology.

ishish.io Copyright 2024