irundebian

9 ms·

61.
by irundebian 2y ago
A similar approach is required in some safety-critical related programming contexts. Search for "safety assurance case".
62.
by irundebian 2y ago
And how you will get a billion messages with 1 frame per second?
63.
by irundebian 2y ago
I don't like his style of communication.
64.
by irundebian 2y ago
I thought about developing a community based open (CC0 licensed) hardening standard and tool which allows giving more details about the system to be hardened to cover even more hardening options. I'm working as an Information Security
65.
by irundebian 2y ago
I've tested Qubes OS for about half a year as a primary OS and ended up switching to another OS. The concept and ideas behind it are great, but battery management and support of my Thunderbolt dock was awful. I switched to Fedora and w
66.
by irundebian 3y ago
thank you
67.
by irundebian 3y ago
I disagree.
68.
by irundebian 3y ago
Ada/SPARK
69.
by irundebian 3y ago
That is more authoritarian than what is suggested by the guidelines.
70.
by irundebian 3y ago
How do you define "penetration attackers with a moderate attack potential"? No EAL>4 certification does not imply that something is insecure. Judging something as "insecure" or "structurally insecure" is hig
71.
by irundebian 3y ago
It's just a guideline.
72.
by irundebian 3y ago
EAL is not a measure of security but a measure of the depth of analysis. Looking at the complexity of monolithic-kernel-based operating systems, I don't much can be derived from certifications with an EAL < 5.
73.
by irundebian 3y ago
Intent could be derived by parliament debates minutes.
74.
by irundebian 3y ago
Regarding to the struct packing: That's why I love Ada, there are so called representation clauses which can define the size of struct-alike types called records. In C you have to rely on compiler options or features like __attribute__
75.
by irundebian 3y ago
Many bugs can be prevented.
76.
by irundebian 3y ago
The chromium developers do all this but this hasn't prevent this bug.
77.
by irundebian 3y ago
It should be possible with Ada/SPARK. It's focused on low level systems programming and compilable programs are free from run-time errors. In addition, the correctness of the program or key properties can be proven at compile-time
78.
by irundebian 3y ago
Okay, but I mean the initial finders of the vulnerability. If they are conducted manual code reviews, automatic static analyses or fuzzing.
79.
by irundebian 3y ago
It would be interesting to know how this vulnerability has been found.
80.
by irundebian 3y ago
Software written in Ada/SPARK.
81.
by irundebian 3y ago
Great comment!
82.
by irundebian 3y ago
From this logic, most serious scientific studies are typical of conspiratorial writing.
83.
by irundebian 3y ago
No, that's just the theory of CBT but there are other theories. Studies apparently shows that several psychotherapy types such as CBT are roughly equally effective despite having different underlying theory.
84.
by irundebian 3y ago
Ada/SPARK does not do model checking.
85.
by irundebian 3y ago
You don't need annotations to write memory safe programs in SPARK. With annotations you can verify properties of the program up to functional correctness which is not integrated in the Rust ecosystem.
86.
by irundebian 5y ago
Looks that you don't have any idea of ISO/IEC 27001. ISO/IEC 27001 is actually a standard which forces you to think about your security practices and goals.
87.
by irundebian 5y ago
Actually it's the job of the operating system to handle file system authorizations. It's just the case that we have shitty default configurations for operating operating systems which allows a lot of ambient authority.
88.
by irundebian 5y ago
Why isn't it enough to disable WiFi?
89.
by irundebian 5y ago
The same could apply to blocking. What's your problem?
90.
by irundebian 6y ago
The problem is that in safety critical contexts you are using special subsets of C (e. g. like in MISRA C). I would probably make more sense to analyze languages like Ada/SPARK or Rust which already have some safety considerations resp

More ›