cvwright

64 ms·

751.
by cvwright 10y ago
Spilling the beans on classified information is still illegal, even if it's not properly portion marked in big capital letters.
752.
by cvwright 10y ago
> I mean, yeah, you probably can write OS kernel in Haskell, if you are determined enough. Some of my colleagues did, a few years ago. http://jfla.inria.fr/2007/actes/Presentation/tolmach.pdf
753.
by cvwright 10y ago
Gary McGraw: Cyber War, Cyber Peace, Stones, and Glass Houses https://www.youtube.com/watch?v=LCULzMa7iqs I like how this talk cuts through a lot of the BS in security. One of his points is that the US and other rich West
754.
by cvwright 10y ago
Reminds me of this post from hackerfactor where he describes his own porn filter based on pHash. http://www.hackerfactor.com/blog/index.php?/archives/529-Kin... It'd be interesting to see a direct compar
755.
by cvwright 10y ago
I had a student try to do an independent study research project using the BBB a couple of years ago. The experience wasn't good. We had a lot of trouble getting the thing to run with anything except the one kernel version that it cam
756.
by cvwright 10y ago
My experience is very different for LaTeX. The learning curve was huge, but it's totally paid off. I can't imagine writing papers in anything else. 10 years ago I was running experiments using Python code that wrote gnuplot scri
757.
by cvwright 10y ago
I guess I have to disagree. > It was good 20 years ago, and it's good today. I wasn't using such things 20 years ago, but 10 years ago gnuplot was a crufty relic and a right pain in the bum to use for anything beyond the most b
758.
The non-zero counting attack on JPEG encryption(tandfonline.com)
3 points by cvwright 10y ago|0 comments
759.
by cvwright 10y ago
> What a lot of people don't realize is that prices aren't inherently good or bad in and of themselves, they just are. If somebody else is willing to pay 20k for a diamond, that's the price of a diamond. Arguably, even the
760.
Genode OS Framework extends support for seL4 microkernel(sel4.systems)
1 points by cvwright 10y ago|0 comments
761.
by cvwright 10y ago
There are efforts to build OSes directly on L4 kernels as well. Most notably Genode. http://genode.org/ They recently added support for running on seL4 too: https://sel4.systems/pipermail/devel/2
762.
by cvwright 10y ago
Comments in this thread also illustrate why it's hard (and frustrating) to do constructive work in security. It's a big, complicated problem, and nobody's happy unless you solve it all at once. You could do the equivalent of
763.
by cvwright 10y ago
This is more true than many here may realize. If you're not familiar with how microkernels work, remember that everything is moved from kernel to user space if it's at all feasible to do so. In L4 and related systems, that usu
764.
by cvwright 10y ago
Quite a striking contrast between the super high tech spy world on the one hand and the poverty of the Hong Kong refugees on the other. It's like something out of a William Gibson novel from the 80's or 90's. Sometimes I won
765.
by cvwright 10y ago
Sometimes it's helpful to analyze our reaction to things if we can find a similar situation where the politics are reversed. Go to any public university in the South, and you can hear essentially the same sentiment in your post, coming
766.
by cvwright 10y ago
Among other things, he was known for Fano's Inequality, which gives a limit for how well you can predict the value of a random variable based on knowledge of a related variable. Apparently this is quite useful in signal processing for
767.
by cvwright 10y ago
In the US there's a green party candidate for president this year too, Jill Stein. Last I heard, they were able to get onto the ballot in most states.
768.
by cvwright 10y ago
Hey, cool. Always nice to see this work show up on HN. But I don't think this is the paper you're looking for. In '08, we could only spot phrases that we knew in advance, and they had to be at least a certain length. The m
769.
by cvwright 10y ago
I learned Pascal in high school, too. On a 25 MHz 486 with 8 MB of RAM -- woo! I actually quite liked it. I thought Pascal provided the right level of hand-holding necessary for a newbie programmer. I was probably able to pick up C more
770.
by cvwright 10y ago
It's an interesting list. Though I'm a bit baffled at why he has Power-law as a "1" (comes up frequently) and Heavy-tailed distribution as a "3" (rarely comes up). A power law is a heavy-tailed distribution
771.
by cvwright 10y ago
The model's reputation for reliability probably plays a big role here. Read the reviews of almost any other modern wifi router, and you'll see lots of complaints about even expensive models frying themselves in the first year.
772.
by cvwright 10y ago
Cool! Please post a Show HN with a link to your ePrint when it's done.
773.
by cvwright 10y ago
Fair enough. The larger point, however, is that this stuff was supposed to be encrypted . The adversary shouldn't be able to learn even one bit about the plaintext. After all, nobody would buy a new encryption module that advertised
774.
by cvwright 10y ago
It's really going to depend on what kind of data you're dealing with. For VoIP, if you're smart you can even fool the attacker into guessing a wrong answer of your choosing. See my comment upthread for a link to our NDSS 200
775.
by cvwright 10y ago
Yes, this is one option that we proposed back in 2009 after we first pointed out the VoIP traffic analysis attacks in 07 and 08. If you want more information, see our paper on traffic morphing from NDSS 2009 [1]. It works pretty well for V
776.
by cvwright 10y ago
I think it's a subtle (OK, maybe not so subtle) jab at Trump and his supporters. He uses this kind of language all the time -- calling people he doesn't like "losers". The author here is attempting to be clever by turni
777.
by cvwright 10y ago
That's me above in Ian's [2]. We're hoping to have something ready to share by the end of the month. I'll post a Show HN when it's available. In the mean time, here's a paper from some folks in Norway that sh
778.
by cvwright 10y ago
When I was a grad student, those of us in the lab had this conversation on a weekly basis. Now I wonder... NSF has these big cyberinfrastructure programs. I wonder what they'd say if you proposed such a thing. http://www.ns
779.
by cvwright 10y ago
What kills me is, they decided to make breaking changes, and they still kept the damn global interpreter lock! It's like saying "Sorry guys, it's 2016, and you have to port all your code, but no parallelism for you!" Be
780.
by cvwright 10y ago
Cool. But note that this is not a problem that you're likely to run into in practice. Nolan and Gelman claim that you can't actually bias a coin. http://www.stat.berkeley.edu/~nolan/Papers/dice.pdf

More ›