Stas Skipper
  • My pronounces are: your/fucking/boss

  • Joined on 2025-09-03
Skipper pushed to main at MarketTakers/arbiter 2026-06-29 18:00:16 +00:00
357726bc5d Merge pull request 'security: batch of fixes' (#95) from zeroized-bootstrap-token into main
23827c613e test(client-auth): update metadata test to reflect frozen-metadata behavior
8381b68a52 Merge branch 'main' into zeroized-bootstrap-token
022003ac5e fix: lints
00ddf99d77 fix!: protect evm_wallet integrity and bind key ciphertext to wallet address
Compare 15 commits »
Skipper closed issue MarketTakers/arbiter#63 2026-06-29 18:00:15 +00:00
SDK client metadata is silently rewritten on reconnect
Skipper closed issue MarketTakers/arbiter#65 2026-06-29 18:00:15 +00:00
Integrity envelopes do not survive root key rotation
Skipper closed issue MarketTakers/arbiter#71 2026-06-29 18:00:15 +00:00
Wallet-access revocation deletes by wallet_id instead of entry id
Skipper closed issue MarketTakers/arbiter#67 2026-06-29 18:00:15 +00:00
Bootstrap token RNG seeding should be made explicit
Skipper closed issue MarketTakers/arbiter#73 2026-06-29 18:00:15 +00:00
Consumed bootstrap token is not zeroized in memory
Skipper merged pull request MarketTakers/arbiter#95 2026-06-29 18:00:15 +00:00
security: batch of fixes
Skipper closed issue MarketTakers/arbiter#64 2026-06-29 18:00:15 +00:00
User-agent signing endpoint accepts arbitrary client_id
Skipper closed issue MarketTakers/arbiter#54 2026-06-29 18:00:15 +00:00
Encrypted key material not bound to wallet address — cross-wallet signing possible
Skipper commented on pull request MarketTakers/arbiter#95 2026-06-27 11:37:27 +00:00
security: batch of fixes

tests still fail tho

Skipper created pull request MarketTakers/arbiter#98 2026-06-26 10:38:08 +00:00
deps(server): version bump
Skipper created branch push-zvwxtnqkumlx in MarketTakers/arbiter 2026-06-26 10:38:01 +00:00
Skipper pushed to push-zvwxtnqkumlx at MarketTakers/arbiter 2026-06-26 10:38:01 +00:00
e128fecfd8 deps(server): version bump
Skipper commented on pull request MarketTakers/arbiter#95 2026-06-26 10:09:02 +00:00
security: batch of fixes

LGTM, fix merge conflict and tests

Skipper closed issue MarketTakers/arbiter#68 2026-06-19 17:15:51 +00:00
RequestTracker allows arbitrary gaps across request flows
Skipper commented on pull request MarketTakers/arbiter#91 2026-06-19 14:05:28 +00:00
WIP: feat-shamir

so what is the status of this?

Skipper deleted branch fix-zombie-user-agents from MarketTakers/arbiter 2026-06-19 14:05:00 +00:00
Skipper pushed to main at MarketTakers/arbiter 2026-06-19 14:05:00 +00:00
b843105533 fix(user-agent): zombie sessions #74
Skipper closed issue MarketTakers/arbiter#74 2026-06-19 14:04:58 +00:00
Zombie user-agent sessions can block all new client approvals
Skipper merged pull request MarketTakers/arbiter#94 2026-06-19 14:04:58 +00:00
fix(user-agent): zombie sessions #74