docandrew

23 ms·

271.
by docandrew 6y ago
The difference is that code with bugs can still compile, but proofs that are unsound won't check. Now granted, you can still prove the wrong thing or _not_ prove the thing that is supposed to make your system robust is taking place, so
272.
by docandrew 6y ago
Doxygen can generate similar diagrams with C/C++ code: http://doxygen.nl/ At a former employer, we made it part of the CI pipeline and the class hierarchy diagrams and call diagrams were great for newcomers to get orie
273.
by docandrew 6y ago
Here's a formally-verified DNS Server: https://ironsides.martincarlisle.com/ Not all the way down to the instruction level, but it's a start.
274.
by docandrew 6y ago
Flow analysis and SMT solvers are mathematically-sound, so if done correctly, a fuzzer would have no luck finding a path through the code where any undefined behavior (or behavior that violates the contracts you've specified) could tak
275.
by docandrew 6y ago
Short version: Write algorithms using mathematically-sound logic whose correctness and properties can be _proven_ the way you might prove the correctness of a math formula. Long version: Formal verification is a broad topic with a lot of di
276.
by docandrew 6y ago
That's helpful, thank you.
277.
by docandrew 6y ago
Using a flat-file based system appeals to me, but one question I've never had a good answer for is at what sort of scale does a certain database make sense? Aside from questions of ACID, I get the idea that a lot of people jump to data
278.
by docandrew 6y ago
Even worse, assuming the high-grade brand is better to begin with - are you buying the real thing, or a counterfeit?
279.
by docandrew 6y ago
If your target audience is investors, instead of end users.
280.
by docandrew 6y ago
The article mentions a mine in Afghanistan as a source of the best Lapis Lazuli, but I believe in ancient Egypt (and probably the Classical era), it was the _only_ source. There are some really interesting documentaries about the mine, and
281.
by docandrew 7y ago
It's probably a lot more accessible than you think. The congressional recommendation is for entrance into the US Air Force Academy, which is a 4-year university. If you already have your degree, you can apply for OTS (which is your ini
282.
by docandrew 7y ago
True - but a lot of people self-disqualify because of rumors and urban legends. Make them tell you "no" if it's something you want. There are waivers for many medical issues, but if you don't ask you'll never get on
283.
by docandrew 7y ago
I was working as a SWE for a large defense contractor on some pretty neat projects, and I felt like I was good at what I did. It was 40 hour weeks, good benefits, good pay, but I was bored and miserable. I lived in a town with no friends, a
284.
by docandrew 7y ago
There's a lot of FUD going on. You're correct in that _many_ speculative execution attacks in general are very difficult to exploit in a useful way. I.e. things like timing side-channels using shared TLDs or in a hyper-threaded co
285.
by docandrew 7y ago
Reducing timer resolution was done early on as a quick reaction by browser developers when Spectre & Meltdown were first publicized. All an attacker needs to do is distinguish between a cached and non-cached memory read - i.e., was acce
286.
by docandrew 7y ago
By his definition, isn't a "talk" skeuomorphic as well?
287.
by docandrew 7y ago
That's a nice way to look at it. Like the GP, I almost never return to bookmarks.
288.
by docandrew 7y ago
Endpoint supervising isn't always an option. As more IoT devices start to use TLS connections to phone home, a network MITM may be the only way to see what they're reporting. Breaking TLS isn't just something that Big Brother
289.
by docandrew 7y ago
I think you're talking about "The SQLite Amalgamation" - https://www.sqlite.org/amalgamation.html . I hadn't heard of it before, so thanks for encouraging me to look it up - seems like it might come in ha
290.
by docandrew 7y ago
I'd have to assume so - it was plain to see.
291.
by docandrew 7y ago
I hadn't heard about rosin fumes being dangerous until this thread. I'll definitely have to learn more and work on some better ventilation in the future. I do love that smell though!
292.
by docandrew 7y ago
I never heeded much caution when soldering using lead solder growing up. When I got to university, the department employed a long-time soldering professional, with NASA certifications, etc. She was very knowledgeable, but visibly suffered f
293.
by docandrew 7y ago
VB the _language_ obviously has its limitations and frustrations, but VB the _tool_ will be missed. It seems like every alternative mentioned here adds a lot of additional friction for writing simple, one-off utilities. I don't always
294.
by docandrew 7y ago
You might want to look at the Why3 meta-solver framework. It uses an intermediate language, Why3ML, that can be run against an array of different SMT solvers, including Z3 and CVC4. If you run into something that SMT can't figure out i
295.
by docandrew 7y ago
My understanding is that there's still VM, but it uses a separate buffer (on-chip memory map) containing a list of segments that map each part of the process' memory to a physical address (virt->physical offset + length), rathe
296.
by docandrew 7y ago
I recently used Ada (not the SPARK subset) to develop an assembler/simulator (for a made-up ISA) for a computer architecture course I was taking. I used the GtkAda bindings for the GUI, which worked well: https://github.com&
297.
by docandrew 9y ago
I think the article created a lot of the confusion. Having access to cleared people is important to companies primarily for winning lucrative government contracts. For example, if a 3 letter agency wants to implement a cloud service on an a