cjbprime

36 ms·

541.
by cjbprime 4y ago
From leaks so far, seems likely Intel's Raptor Lake CPUs like 13900k will be faster/cheaper, more details next month.
542.
by cjbprime 4y ago
Yes, that's why I described the empirical results as surprising.
543.
by cjbprime 4y ago
This is also a testable claim! File formats and RPC do not seem that dissimilar to me, especially when using a fuzzer like aflplusplus, which will automatically build a symbol dictionary by pulling strings out of the binary, and perform som
544.
by cjbprime 4y ago
I'm not sure! Maybe someone can encourage the authors to submit to Fuzzbench. My intuition for the results so far is that (a) converting generator functions to bitstrings is very computationally expensive (since the comparison is cover
545.
by cjbprime 4y ago
Surprisingly, structured fuzzing (mutating inputs to a grammar's generator) has proven less effective than optimized traditional random fuzzing, so far. https://google.github.io/fuzzbench/ shows that grammar fuzze
546.
by cjbprime 4y ago
> More generally, there is still a central authority pushing out code Not necessarily, it's quite common for forks to compete on a single ledger, with features activated when the majority of miners elect to run the fork which suppor
547.
by cjbprime 4y ago
If you use TLS on the subdomains, they may all be the public Certificate Transparency logs.
548.
by cjbprime 4y ago
Zooko's Triangle was a useful lens, but I think of it has having long been solved (or, refuted) by many blockchain projects.
549.
by cjbprime 4y ago
The bug doesn't seem to describe the vulnerability at all, though?
550.
by cjbprime 4y ago
Thanks for the correction!
551.
by cjbprime 4y ago
> I'd like to see an ARM port of it, because Xen on ARM is quite a bit simpler than Xen on x86 AWS VMs use Xen on x86 mostly, right? So if someone has a Xen/x86 0day, they're going to use it to break out of EC2 guests and
552.
by cjbprime 4y ago
Have you read https://innocenceproject.org/the-innocent-and-the-death-pena... ? It is hard to square with what you wrote.
553.
by cjbprime 4y ago
There are two relevant computer security ideas here -- "sandboxing" is used to place risky work (such as Chrome decoding some media) into an isolated process which lacks privileges to e.g. abuse access to files or networking, and
554.
by cjbprime 4y ago
FWIW, I think you're actually being insufficiently pessimistic, and also the example effects I mentioned (publication bias and multiple hypotheses) exist in the zone where both are true -- the researchers observed something, and also t
555.
by cjbprime 4y ago
None of these. Assume any individual paper is wrong. If it's not your current area of research, you can afford to wait for the results to be reproduced (or disproven, or failed to replicate), and read a meta-study instead. Due to a min
556.
by cjbprime 4y ago
Starting to stretch, but would have to pick strace next. Can't believe macOS devs don't get to use it (at least without hoops like disabling SIP).
557.
by cjbprime 4y ago
The main reason for Valgrind would be if you're working with a binary that you can't recompile to add the ASAN instrumentation.
558.
by cjbprime 4y ago
I wish I hadn't read this article because now I know that I've been mispronouncing Valgrind for nearly 20 years but I'm not going to stop. (Kidding. Thanks for Valgrind! I still use it for assessing memory corruption vulnerab
559.
by cjbprime 4y ago
I don't have any insight into how effective Unlicense is, but to give an idea of how complicated this is: just as many jurisdictions don't let you place things into a Public Domain, or even have the legal concept of one, some (I t
560.
by cjbprime 4y ago
Yup! I remember the Debian developers would often play it together, I suppose because it was one of a small number of exciting open source multiplayer games which worked on Linux.
561.
by cjbprime 4y ago
Agree with all of this, except I'd add Docker containers as a less severe step before going all the way to something like Qubes. Since the OP mentions Python and Node libraries, it's likely they're compatible with being run
562.
by cjbprime 4y ago
I imagine (without research) that it's just "what percentage of your moves are the same as top computer moves", with a threshold.
563.
by cjbprime 4y ago
People will tell you to not care about losing or your rating, but that didn't work for me. What worked for me is "the rating I care about is my rating in three months from now, not today", which gives space for learning from
564.
by cjbprime 4y ago
For what it's worth, my take: buy something like the LG C2 42" OLED TV. It is huge (but not too huge) and an excellent quality display. If you want to try ultrawide, or a square display, or an unusual aspect ratio, just.. make tho
565.
by cjbprime 4y ago
> Docker Vagrant Packer Kubernetes Linkerd Istio CloudFoundry gVisor kNative Firecracker Chaos Prometheus Ansible Juju Chef SaltStack Puppet CloudFormation Terraform Consul Vault Most of these are over ten years old.
566.
by cjbprime 4y ago
An advantage I didn't see specifically mentioned in the article -- some CPUs, especially multi-core, especially Threadripper PRO, aren't released to the individual market, so enterprise surplus can be the only way to get them.
567.
by cjbprime 4y ago
I'm not sure "compiles to WASM" is a selling point anymore. Are there any serious languages that don't? You'd need to have no way of expressing as C code or LLVM IR, etc.
568.
by cjbprime 4y ago
I had a 6100 with one of those 486 cards too! I bought it with the hope of playing PC games on the Mac but I don't remember any of them actually working at playable speeds. How about you?
569.
by cjbprime 4y ago
There are some electric gliders which at least use the same intuition -- you need a ride for takeoff, but then there's an electric sustaining motor for once you're in the air (and don't have lift).
570.
by cjbprime 4y ago
I disagree with everything you wrote, and I doubt you can find a prominent EA who doesn't. The mathematics are there to benefit people who share moral assumptions like "the extreme suffering of other humans is bad" or "I

More ›