Eli Grubb

@eligrubb.com

165 Followers 348 Following

key management @bitwarden.bsky.social. lapsed academic cs.umd.edu, @utah.edu fan of c(ryp ∪ inema)tography. find me @ eligrubb.com. utah 🏔️ he/him

The Nice Guys movie poster
The Birdcage Movie Poster
Movie poster for You’ve Got Mail.
Screenshot of "It’s been more than forty years since Ken Thompson delivered his famous talk, “Reflections on Trusting Trust“, which pointed out how there is no avoiding some level of trust. Hence the question here is not: should we trust someone. That decision is already taken. It’s: should we trust that WhatsApp is not running the biggest fraud in technology history."
Screenshot of article, with the following highlighted: "The jobs that were dependent on fundamentals of software aren't going to stop being dependent on fundamentals of software ... if you like doing software development, I don't think interesting software development jobs are going to go away."
The Dropout TV Poster
"One way to tell a weak engineer in a discussion thread about some problem is to see who is bringing in specific facts about how the system currently works, and who is making purely general recommendations that could apply to any system. If their messages could all be public tweets, they’re probably not adding much value."
When Harry Met Sally... movie poster
Wolf of Wall Street poster
krampus movie poster
The Haunting of Hill House poster
Fargo movie poster
English Teacher Season 2 Poster
Jaws movie poster
Nope movie poster
It’s a good rule after reading a new book never to allow yourself another new one till you have read an old one in between. If that is too much for you, you should at least read one old one to three new ones.... Every age has its own outlook. It is especially good at seeing certain truths and especially liable to make certain mistakes. We all therefore need the books that will correct the characteristic mistakes of our own period.... None of us can fully escape this blindness, but we shall certainly increase it, and weaken our guard against it, if we read only modern books....The only palliative is to keep the clean sea breeze of the centuries blowing through our minds and this can only be done by reading old books.
Fantastic Mr. Fox movie poster
Screenshot of blog post. The title is "TIL: Testing Secure Zeroization in Zig with Custom Memory Allocators". The post is dated 2025 August 20 and the blog is titled "Folk Cryptology". A sub-title reads: "or, How Zig's explicit memory management makes it easy to test your sanitization guarantee"
A line graph from the linked research paper, demonstrating the different lifetime lengths, with the caption: Figure 1: A time line showing the relationship of different memory events for a particular memory location. The span from first write to last read is the ideal lifetime. The data must exist in the system at least this long. The span from first write to deallocation is the secure deallocation lifetime. The span from first write to the first write of the next allocation is the natural lifetime. Because programs often rely on reallocation and overwrite to eliminate sensitive data, the natural lifetime is the expected data lifetime in systems without secure deallocation.
Printed on a white t-shirt: I ❤️ AA (Arena Allocators)
# Zecrecy: a simple secret handling library for Zig ## Overview Zeroing memory is hard. Zecrecy is a small Zig library that aims to make securely handling secrets a little easier. Inspired by Rust's secrecy crate and other, similar SecureString libraries, zecrecy provides types for wrapping sensitive data (like cryptographic keys, passwords, API tokens) that automatically zero out the data when no longer needed. This helps prevent accidental secret leakage through vulnerabilities like buffer overflows and memory dump attacks. As the papers linked above conclude, using a tool like zecrecy will not prevent all memory-leak-style security vulnerabilities. The goal of this project is to minimize the risk of accidental exposure, while providing an API that makes the safest option the easiest one.
build.zig.zon file for the zig-bech32 project, showing that while .minimum_zig_version is currently set to 0.14.1, a comment shows it can easily be switched to instead use 0.15.0-dev.847+850655f06
extremely log jj log describing a change per exercise in the ziglings library. unnecessarily verbose purely to carve the muscle memory into my skull.
terminal prompt displaying command `zig build` and the resulting output ``` Ziglings "Look out! Broken programs below!" Compiling: 031_switch2.zig Checking: 031_switch2.zig PASSED: ZIG! ```
Letterboxd list titled "Best Movie Blood Movies" with the entries: Evil Dead 2, Suspiria (1977), Sweeney Todd, Dune (2021), and The Substance.