crb002

71 ms·

721.
by crb002 9y ago
In the context of HOTT? That most code in the real world can be embedded in low dimensions, and when you embed something on a surface of small genus you can do a bunch of optimizations. Also, that you can use the finite set of minimal graph
722.
by crb002 9y ago
The major chip manufacturers need to have two kinds of cores/caches. One that has full security guarantees, the other that is optimized for energy efficiency/performance and has zero interprocess security. This isn't a one si
723.
by crb002 9y ago
Yes, John Deere tractor running Windriver Linux; heavy use of dbus and Qt. Any compromised tractor app vendor could inject it. Could probably reproduce from upstream Yocto distro and the free version of Qt. Much larger attack surfaces to wo
724.
by crb002 9y ago
Static linking too. Most of us rely on library code maintained by others we trust. Reads from registers that should be empty isn't flagged by most code auditing software.
725.
by crb002 9y ago
Say you have a memory pointer to sensitive info in a CPU register. Could the subroutine troll through memory and find it? Yes, but it would be orders of magnitude harder than having that pointer in a register. Better example is if you are u
726.
by crb002 9y ago
Hubris. I've been trying to wrap my head around for over a decade how these side channel attacks between L1 caches and branch prediction caches don't happen. Wish I had published my November 2016 research into function call leaks.
727.
by crb002 9y ago
Agreed. dlopen() should wipe branch prediction caches by default, we need to add additional flags that turn this off.
728.
by crb002 9y ago
CPUs should have a single instruction that wipes branch prediction caches. I would have it off by default, and add to the C/C++ spec this as a standard library macro or pragma. Easy peasy. You only need to wipe between syscalls that ha
729.
by crb002 9y ago
This was the fix I was going to suggest. Especially with AVX leakage. Right now many function calls don't safely wipe registers and the new side channel caches found in Spectre. There really needs to be two kinds of function calls. May
730.
by crb002 9y ago
Just buy a gross revenue share. They can't block that easily.
731.
by crb002 9y ago
In Iowa, the City of Waukee was bribed $100m by Apple to abate $170m in property taxes. Think about that. You pay a $1000 bribe to the city and they nerf $1700 of your property tax; screwing the local school district/county/state.
732.
by crb002 9y ago
We already have them. It's called compiler type checks. Albeit having an SMT solver in your unit tests is nice too.
733.
by crb002 9y ago
Linus really needs to start having more formal verification around patches.
734.
by crb002 9y ago
Violation of the confrontation clause. chad@flyingdogsolutions.com if any attorney needs an expert witness to look into it. I can review the source under a protective order so the company's IP will be fully protected. Worst case I find
735.
by crb002 9y ago
The gap is IDEs becoming automated theorem provers. You put in the type signature of what you want and keep adding unit tests until the IDE finds the correct code for you.
736.
by crb002 9y ago
More lucrative to go civil; get default treble fraud damages with a 20% withholding on all their future income that survives bankruptcy because of the fraud. But then IANAL.
737.
by crb002 9y ago
Black guy in remote Alaska village. Left leg and right hand amputated scenario. For anon you have to ditch geocoding; or aggregate symptoms across a population. IMHO anon should be good enough that the aggregated records become public domai
738.
by crb002 9y ago
No big deal. Just get an affirmative checkoff.
739.
by crb002 9y ago
CPU for services seems legit as long as they give an affirmative checkoff.
740.
by crb002 9y ago
Django/Rails should emit static views in Vue/Angular.
741.
by crb002 9y ago
Ship it to Nevada. Use solar powered smelters and centrifuges.
742.
by crb002 9y ago
Meh. Use it as a preheater for your furnace. Don't mine in the summer.
743.
by crb002 9y ago
Curious when Topology will become a core math subject.
744.
by crb002 9y ago
How do you define "digital currency"? Under US legal tender laws BTC isn't money. You can incur capital gains when you exchange BTC for something over the basis you acquired it for, but you essentially gave smoothing of value
745.
by crb002 9y ago
This should be dead simple. You put 30% of the options in an IRS account. The IRS either sells them at auction or lets you buy them back at cash value when you exercise the options. There should be no liquidity crunch.
746.
by crb002 9y ago
CNN is just entertainment. Has nothing to do with ISP monopoly.
747.
by crb002 9y ago
Should be for undergrads too then; even student athletes. Right now rich schools like Harvard have legacy students massively subsidized with all the tax waivers. Seeing the sticker shock will drive down obscene professor pay over $100k, ma
748.
by crb002 9y ago
Should be able to detect some rogue protien.
749.
by crb002 9y ago
There is also gerrymandering against independents and third parties. A fair metric minimizes average distance from a citizen to the centroid of their district. The lowest energy Voronoi diagram wins. Nobody gets screwed.
750.
by crb002 9y ago
http://h1bdata.info Easy to spot the shady characters.

More ›