ENOTTY

15 ms·

121.
by ENOTTY 6y ago
Eh, configuring SaaS stuff to be secure is not easy either.
122.
by ENOTTY 6y ago
AWS Zelkova is in theory supposed to find these sorts of issues. I haven't used it, so I'm curious what others think about it.
123.
by ENOTTY 6y ago
Two points: 1. TLS is not the impenetrable black box it is made out to be. Every year there are about three papers published at the top tier computer security conferences about identifying applications within TLS. Check out the NDSS proce
124.
by ENOTTY 6y ago
That isn't my impression of how the web works. The second your bits leave your LAN, they begin traveling over infrastructure that is owned and operated by another private entity. They could rescind your access at any time, especially
125.
by ENOTTY 6y ago
Sheets seems like a good way to get to a MVP quickly to prove the concept. If Sheets starts falling over due to demand, you know you've got a winner and its time to invest in something more reliable.
126.
by ENOTTY 6y ago
I disagree that Intel has "lost focus" to the detriment of its core competencies, after all, Intel is a large company that spends billions on R&D every quarter. Rather I call it Intel expanding its focus to expand its address
127.
by ENOTTY 6y ago
Link to the video that the article is summarizing https://www.youtube.com/watch?v=fiKjzeLco6c The creator's Twitter can be found here https://twitter.com/FPiednoel
128.
by ENOTTY 6y ago
> this just shifts the burden of who to trust to the verifiers Agreed. A colleague once said that trust is like a balloon; if you reduce trust in one area, you tend to expand trust in another area. I think the typical response to your st
129.
by ENOTTY 6y ago
I think the author hasn’t accurately described the workflow where reproducible builds are used. Here’s my attempt. There are three entities: 1. The vendor, who creates and _distributes_ a product, which may include software, to the end user
130.
Huntsville’s Space Camp in danger of closing permanently due to pandemic(pbs.org)
3 points by ENOTTY 6y ago|0 comments
131.
by ENOTTY 6y ago
It's a lot more than just a SME equivalent. They've designed the management plane in a really clever way that makes it more similar to SGX/SEV than at first glance. I recommend watching this video https://www.you
132.
by ENOTTY 6y ago
Self hosting is no longer realistic because all the data you actually want to compute on is now in the cloud. The egress costs of that data into your self hosted environment would destroy you. Imagine a world where the cloud produces more
133.
by ENOTTY 6y ago
AMD SEV's mode has changed over time (as AMD moved from SEV, to SEV-ES, to SEV-SNP). Each time, some academic has managed to reverse engineer the mode. This paper (published 2020) has documented the developments and reverse engineere
134.
by ENOTTY 6y ago
This attack did not extract the root attestation secret or sealing secret, both stored in CPU fuses. Instead, this attack extracted the sealing and attestation keys stored by the current version of Intel's Quoting Enclave under the cur
135.
by ENOTTY 6y ago
In SGX, you do have verification that the microcode has been updated. This is known as the CPUSVN value, it is part of the SGX report that gets issued, and mixed into the keys used to sign reports.
136.
by ENOTTY 6y ago
SEV has been subjected to its own share of attacks (and design/implementation fails), but note that it has a different threat model. * https://arxiv.org/pdf/1712.05090.pdf 2017 * https://arxiv.org/
137.
by ENOTTY 6y ago
Here is a link to a purported draft of the EO: https://kateklonick.com/wp-content/uploads/2020/05/DRAFT-EO-...
138.
by ENOTTY 6y ago
As quoted, the presentation laid out at least one clear metrics by which one could measure your performance. > “64% of all extremist group joins are due to our recommendation tools” How does Facebook currently define extremist group and
139.
by ENOTTY 6y ago
It’s one thing to enable people to seek out extremist communities on their own. It’s quite another to build recommendation systems that push people towards these communities. That’s putting a thumb on the scale and that’s entirely Facebook’
140.
by ENOTTY 6y ago
Here's the paragraph I found most damning. It would make me want to assign liability to Facebook. > The high number of extremist groups was concerning, the presentation says. Worse was Facebook’s realization that its algorithms wer
141.
Cfius orders breakup of US exoskeleton firm’s venture with Chinese investors(wsj.com)
3 points by ENOTTY 6y ago|0 comments
142.
by ENOTTY 6y ago
Companies with significant ties to the US financial system and interests in Hong Kong need to start planning for the contingency that Hong Kong loses its special status under US law that treats it differently from mainland China.
143.
by ENOTTY 6y ago
Its been kind of entertaining watching random VPs in Microsoft and Amazon duke it out in passive aggressive blog posts. Undoubtedly, many of the same VPs' jobs are on the line. For previous episodes in this drama, see: 2020-05-07: h
144.
Facial recognition company Clearview AI in talks to track Covid-19 people(twitter.com)
3 points by ENOTTY 6y ago|0 comments
145.
by ENOTTY 6y ago
> [Apple and Google] can't possibly say "stronger contact tracing for Canadians, but not for Mexicans" - it has to be one global standard. Why not? Apple and Google could just as easily say, "Only countries that meet
146.
by ENOTTY 6y ago
> I don't trust Apple and Google but I trust my government even less. That's a really interesting statement. Could you elaborate on your thinking? Under what form of government do you live? Why do you feel Apple or Google is
147.
by ENOTTY 6y ago
Oh come on. There is no grand conspiracy to keep the shutdown going for two years. Everyone realizes that would destroy the economy and not a single government official wants to sit at home with their screaming children for two years stra
148.
by ENOTTY 6y ago
What are the differences in the sensors?
149.
by ENOTTY 6y ago
> Edit: Reading the spec, I found a piece of information that may be of interest Shouldn't you read the spec before commenting?
150.
by ENOTTY 7y ago
After Brian Krebs' reporting, the GSA just announced a new process to get a .gov domain. https://krebsonsecurity.com/2020/03/u-s-govt-makes-it-harder...

More ›