jeff_marshall

9 ms·

31.
by jeff_marshall 10y ago
from the article: >Domain validation is hard. It isn't as simple as one may think, and WoSign isn't the first to have a problem. They are still a trusted CA for now, and hopefully they will get their act together quickly. The v
32.
by jeff_marshall 10y ago
When I worked as an RA while getting my BSCS (and for a time during my first post-college job), I spent quite a bit of time with ACL2 (a language, logic, and proof assistant using a first-order variant of common lisp). I spent a lot of time
33.
by jeff_marshall 10y ago
Only "Military or intelligence cryptographic (including key management) systems" are included in the current US munitions list [1]. Everything else is handled by the Department of Commerce as part of the export administration regu
34.
by jeff_marshall 10y ago
Symmetric doesn't mean 'power of two'. Quite a few ICs have had even numbers of cores on them (I'm not aware of any with an odd number of cores, but that doesn't seem like the end of the world either). Lots of other
35.
by jeff_marshall 10y ago
well, at least as recently as Windows 8.1[1], windows was on that list and microsoft said to use DHCP for that (which has always bugged me as it's yet another protocol to support). Have things changed? I haven't checked on win 10.
36.
by jeff_marshall 10y ago
How are you getting DNS configuration (server + search domain) via SLAAC?
37.
by jeff_marshall 10y ago
If you would have substituted coq (or even ACL2 with guards checking enabled...) in the place of haskell I would agree. hindley-milner style type checking is nice, but once you admit that things like arrays exist (rather than just algebraic
38.
by jeff_marshall 10y ago
Yes, instead you have parameter passing bugs (what, it's not state if it's not an implicit global variable?). I suspect the bugs have more to do with what is considered an acceptable design pattern (and resulting cognitive load) t
39.
by jeff_marshall 10y ago
IMO, the premise that hypervisors can have a smaller (thus more assurance-friendly) attack surface relative to a monolithic or microkernel-based operating system is not challenged by any attack against xen. Xen has a very feature-rich inte
40.
by jeff_marshall 10y ago
I agree re: the secure backplane (though I would prefer to see it done outside server software in a more comprehensive manner). I'm surprised that the bar isn't set a bit higher inside the cloud provider infrastructure for tenant
41.
by jeff_marshall 10y ago
Which provider won't give you a /64 (that supports IPv6 at all)? Even my residential cable provider gives me a /60. Anything less seems absurd.
42.
by jeff_marshall 10y ago
Any details on handset availability (even rumors)? I'd love to get my hands on a phone with an LTE transceiver that can operate in this spectrum range having an unlocked bootloader on the application processor. Setting up a base statio
43.
by jeff_marshall 11y ago
Thanks for the pointer to Seastar, I wasn't aware of that project. Good luck with your work - I'm curious to see the result.
44.
by jeff_marshall 11y ago
As I'm sure you are well aware, there is quite a large gap between the DPDK and a working TCP stack. Do you plan to write the TCP stack from scratch? If not, are you planning to leverage one of the golang unikernel back-end ports? 10Gb
45.
by jeff_marshall 11y ago
Using brute force (i.e. "immense computing capabilities") for properly sized keys is unlikely to ever be practical with classical computers. With quantum computers, many currently deployed key lengths that would be impractical to
46.
by jeff_marshall 11y ago
Good point re: general purpose cores in devices whose primary purpose is other things. I've been spoiled by the ability to choose parts that don't go quite so retro for the CPU in my own designs. Regarding power, is the difference
47.
by jeff_marshall 11y ago
Fair enough, but the device in question would have to be made in serious quantity to feel the difference (though that is a rational use-case). Per digikey, the cheapest 8-bit PIC is 0.35 USD in MOQ of 3K. When 15 cents matters to your BOM c
48.
by jeff_marshall 11y ago
Tell that to the people who debug new CSP/BSPs using binary search on "which line did the boot sequence make it to" using GPIO to an LED. Thankfully, most of us don't spend a lot of time doing that sort of thing these da
49.
by jeff_marshall 11y ago
Is there any reason to use PIC instead of ARM these days? On the low end, 32 bit arm microcontrollers can be had for ~ 0.50 USD in modest quantities (digikey minimum order quantity in the thousands). It's not like there is a shortage o
50.
by jeff_marshall 11y ago
Yes, ASICs to break DES were done back in 1998: https://en.wikipedia.org/wiki/EFF_DES_cracker
51.
by jeff_marshall 11y ago
Detecting AC vs. DC coupling would be obvious to a practicing EE, if presented with the problem, yes? I'm just a software guy with an electronics hobby and I think I could have figured that one out. That said, DC vs. AC coupling detect
52.
by jeff_marshall 11y ago
Yes! I did the telnet thing to mail servers while I was in high school to good effect ;). I would almost certainly cringe if I could see those mails today. Showing the school IT department what could be done with a semicolon in a URL on the
53.
by jeff_marshall 11y ago
I have fond memories of the transition from local BBSes (my parents were annoyed enough by my constant phoning of the local BBS to download commander keen and the like), to IP connectivity via Trumpet. The reach of the internet (esp IRC!) w
54.
by jeff_marshall 11y ago
While hearthstone may be fun, I don't think it's existence speaks to the value (good or bad) of the game engine it was developed in. It's technical excellence (esp. w.r.t. rendering) was low relative to the competition the la
55.
by jeff_marshall 11y ago
You are lucky you don't have astigmatism :) Even with diopter adjustment, I still prefer to wear my glasses (oculus DK2 in my case). I should really look into corrective surgery (lasik, etc.) again...
56.
by jeff_marshall 11y ago
I think there is still some nuance available. Perl is great for succinct syntax, which is something I admire (who doesn't appreciate backtick for invoking another program?) This same brevity is valuable in other contexts, but the chall
57.
by jeff_marshall 11y ago
For me, it's less about the throughput than the total experience given the services I use. I have a less than stellar connection for the US (~25/5-ish?), and getting my voip to work took some real tuning in PFsense. The move to PF
58.
by jeff_marshall 11y ago
"don't hate the employee, hate the employer" That sums it up for me.
59.
by jeff_marshall 11y ago
The existance of "the" key is not an inherent problem in situations like this. Instead, it speaks to poor key management practices by the people responsible for implementing cryptography for an organization. Consider, as an analog
60.
by jeff_marshall 11y ago
Back when I was doing crypto at the algorithm implementation level, I found the proceedings of the CHES[1] conference had a lot of good information on where the public state of the art was regarding side channel attack and defence. Keep in

More ›