etna_ramequin

6 ms·

1.
by etna_ramequin 4mo ago
I see that Meta’s engineers are still busy and happy to build a dystopia in exchange of money. Damage is already done, they’ve shipped nearly working software to any creep and police officer that need little modification to actually work. I
2.
by etna_ramequin 2y ago
That’s a self-defeating definition. Work that can be automated at no marginal cost is economically worthless. Edit for clarity: “worthless” as in “no value add”, its worth is only capital investment and energy input.
3.
Update on "Quantum Algorithms for Lattice Problems"
6 points by etna_ramequin 2y ago|0 comments
4.
by etna_ramequin 3y ago
I spotted a few oddities in the reporting of these ‘secret papers’.[1] The only extract of the report the journalists show is, at the very least, misleading. They’re claiming that Fujitsu employees could do a type of requests which would (i
5.
by etna_ramequin 3y ago
Still requires special hardware and authentication, AFAICT. Plus, you often have got length (hundreds of km) and connection constraints (e.g., only over fibre optic).
6.
by etna_ramequin 3y ago
Quantum Key Distribution (QKD) requires special (expensive) hardware, so it really doesn’t solve the problem of key size. Moreover, QKD still requires an authenticated channel, so we’ll still need a quantum-resistant authentication scheme.
7.
by etna_ramequin 3y ago
Thanks!
8.
Ask HN: What are good resources for managing the security of a startup?
1 points by etna_ramequin 3y ago|2 comments
9.
by etna_ramequin 3y ago
I dont disagree with this. I just want to highlight that to do this sort of sandboxing in any systematic manner, you’ll always need to go down at the system level. Because here we’re trying to sandbox the system using abstraction at the la
10.
by etna_ramequin 3y ago
WDYT of WASM capability system? IMO, it would be a good contender for sandboxing dependencies. However, I haven’t tested it in practice.
11.
by etna_ramequin 3y ago
You don’t even need unsafe to reproduce unsafe behaviour on Linux. You can just read and write to `/proc/self` and modify memory arbitrarily. If you have `std::fs`, then you have `unsafe`, then you’ve got everything. In general,
12.
by etna_ramequin 3y ago
In theory, yes. In practice, TCBs are so big, that DRM solutions based on it are nearly meaningless for general purpose computers.
13.
by etna_ramequin 3y ago
I’ve seen many widely deployed applications of TPM for security, never for DRM.
14.
by etna_ramequin 3y ago
Luther’s 95 theses literally condemn « indulgences » as promoting greed… I assume you were making a reference to Weber’s work (the Protestant ethic and the Spirit of Capitalism), which happened a few centuries later and has been heavily cri
15.
by etna_ramequin 3y ago
Yes, that’s right, thanks!
16.
by etna_ramequin 3y ago
> What would be better would be a dTPM that is integrated e.g. into a SoC, such that there are no exposed wires anywhere without decapping the SoC. Some systems such as phones work like that, but this is hard to tell even from the techni
17.
by etna_ramequin 3y ago
> The discrete TPM's threat model was never designed to cover you from attackers using oscilloscope to probe your laptop's SPI bus during the boot process for unencrypted data. I’m always very confused by this. TPM offers encry
18.
by etna_ramequin 3y ago
Sounds like a great idea! What sort of questions did you ask during the interview?
19.
by etna_ramequin 4y ago
Thanks for the layman’s explanation, I didn’t realise something like that was even possible! What are some use cases for using it? Are they all crypto-currency related?
20.
by etna_ramequin 4y ago
That’s "good things happen to (some) bad people. Rejoice!" Quite the opposite of what was said above. I don’t consider myself a Calvinist, so I don’t have skin in the game. However, sweeping statements like this prevent you from
21.
by etna_ramequin 4y ago
Yes, please. I’m pretty sure Calvinism says that everybody is corrupted by sin (not just prisoners) and that everybody is in need of God’s grace. There’s certainly nothing about celebrating when something bad happens to somebody.
22.
by etna_ramequin 4y ago
Thanks for posting! This app has definitely helped me complete many essays!
23.
by etna_ramequin 4y ago
From a more security security research point-of-view, the paper “Bootstrapping Trust in Commodity Computers”[1] is a very good overview. Although it would necessitate a bit of an update for more recent developments with e.g. dm-verity etc.