Jann Horn

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.

human borrow checker (but logic bugs are best bugs). works at Google Project Zero. The density of logic bugs (compared to memory corruption bugs) goes down as the privilege differential between attacker context and target context goes up.