mballantyne

9 ms·

1.
by mballantyne 7y ago
Racket's "places" work a similar way, though do a bit extra to get down to one memory copy, rather than two: https://www.cs.utah.edu/plt/publications/dls11-tsffd.pdf
2.
by mballantyne 8y ago
I suggest "Programming Languages: Application and Interpretation", available free here: http://cs.brown.edu/courses/cs173/2012/book/ It's an undergraduate-level programming languages class
3.
by mballantyne 9y ago
I believe this is the implementation described in this paper published at POPL 2016: https://www.microsoft.com/en-us/research/publication/transfo... Though it probably also uses more recent work from the same
4.
by mballantyne 9y ago
My understanding is that Z3 is primarily an SMT solver ( https://en.wikipedia.org/wiki/Satisfiability_modulo_theories ), though it has also expanded to support queries beyond SMT. SMT solvers excel at solving finite sets
5.
by mballantyne 9y ago
Other search algorithms can take up lots of memory to store progress they've made down different paths. Having only one active state also lets you map unification down to efficient low level cpu operations. If you have multiple states,
6.
by mballantyne 10y ago
When I've talked to senior researchers about these problems, they say that they have no problem finding distilled information about new results; they get it from in-person conversations at conferences that they attend frequently. The p
7.
by mballantyne 10y ago
First, a small defense of Racket. Racket has a small core relative to its apparent size; most of the bloat is in optional library code. All the fancy special forms for pattern matching, classes, contracts, etc are just optional macros from
8.
by mballantyne 10y ago
Spindle already has some of the things on your TODO list, but seems only semi-maintained. It'd be awesome if you two could join forces!
9.
by mballantyne 10y ago
Can you elaborate on how syntax-case "violates the macro abstraction", and maybe what you think is important about the quality it breaks? Not a description I've heard before. I do agree it is complicated!
10.
by mballantyne 11y ago
Author here, and I agree that using templates for complex code generation is a mess. However, it's a popular mess in some branches of high performance computing right now, especially for dealing with the transition to execution on GPUs
11.
by mballantyne 12y ago
An academic paper summarizing studies on the effect of attitude interventions like those discussed in the OP: https://labs.la.utexas.edu/adrg/files/2013/12/REVIEW-OF-EDUC... Positive feelings of belongin
12.
by mballantyne 12y ago
Do CRLs even work? My understanding is that the only browser that hard-fails to load a page if OCSP is blocked is Chrome for certs in CRLSets. Everyone else is vulnerable to MITM if access to the CRL / OCSP servers is blocked. I would
13.
by mballantyne 12y ago
AFAICT, here isn't really any benefit for most people. If you're using an Extended Validation certificate the revocation would remove the EV presentation in most browsers. The only way you'd get a browser to totally fail to l
14.
by mballantyne 12y ago
Heartbleed affects servers terminating TLS connections using certain versions of OpenSSL. It doesn't impact certificate operations a CA would be doing, and CA root certificates are kept far, far away from front end web servers that mig
15.
Towards Short-Lived Certiﬁcates(w2spconf.com)
2 points by mballantyne 12y ago|0 comments
16.
by mballantyne 13y ago
The security promise is simply "this is better than plaintext email, which is what you'd use otherwise." I'd rather have as much of my communication as possible protected from mass collection by my own government regardl
17.
by mballantyne 13y ago
Yep. They would. Snowden should be using PGP on an air-gapped machine inside a faraday cage, right? This isn't for him. This is for the rest of us that are at most mildly interesting but don't want to give in to the surveillance s
18.
by mballantyne 13y ago
The server can only read arbitrary messages if it changes the runtime that it serves. If it were to serve the wrong runtime to more than a narrowly targeted set of users, it could be detected (by, say, a third party running an automated scr
19.
by mballantyne 13y ago
I hadn't yet seen that particular article but I'm very familiar with those arguments. Thanks for the link! I agree with them that building a crypto library in JS that can be trusted regardless of the security properties of the web
20.
Ask HN: Is sending passwords a good use of JS crypto?
4 points by mballantyne 13y ago|11 comments