mjg59

8 ms·

121.
by mjg59 11mo ago
My fees came to about 260K GBP so far - while it's likely I'll be awarded some percentage of that, that doesn't mean I'll actually see any of it. As you say, it's not the sort of thing that anyone actually comes out
122.
by mjg59 11mo ago
The final order implementing the judgement isn't out yet so I'm not going to go into too much detail here as yet, but there's additional publicly available information I can share: The original claim: https://codon
123.
by mjg59 11mo ago
There's a lot of UEFI in the phone ecosystem, it's not the BIOS later that's missing - it's the ACPI layer.
124.
by mjg59 11mo ago
The article says it supports enough 486 and Pentium instructions to boot modern Linux
125.
by mjg59 11mo ago
This is beautiful, but the real takeaway should be that even proprietary software you only have binaries for is still mutable. The computer runs the code you want it to run. We always need to maintain that and prevent scenarios where genera
126.
by mjg59 1y ago
808x registers are all 16 bit, despite it having a 20 bit address space. That means you can't fit a full memory address in a single register, which means memory is split into 64K "segments" and you have a separate segment reg
127.
by mjg59 1y ago
Meanwhile, roughly contemporaneously, the Motorola 68000 was a CPU with 32-bit registers and a 16-bit bus (there was also the 68008 which had an 8-bit bus) - but in the 80s both the PC and 68000 devices were generally referred to as 16-bit.
128.
by mjg59 1y ago
If you want to implement UEFI secure boot and verify existing signed objects then you need to incorporate Microsoft-issued certificates into your firmware, but that's very different from needing Microsoft to be in the loop - the certif
129.
by mjg59 1y ago
In 2000 my neighbour built a small network using two Orinoco Gold cards - an ad-hoc[1] network between his laptop (A Sony with a Neomagic chipset, I don't remember the precise model but it was beautiful) and the desktop in his room, an
130.
by mjg59 1y ago
The entirely unsupported insinuation that the customer Cisco is describing is the NSA. What's even supposed to be the motivation there? The NSA want weak crypto so they're going to buy a big pile of Ciscos that they'll never
131.
by mjg59 1y ago
Kyber is not known to be weaker than any other well used algorithm.
132.
by mjg59 1y ago
If the argument is "Why adopt a protocol that may rely on a weak algorithm without any additional protection" then I think it's up to you to demonstrate why that argument doesn't apply to any other scenario as well.
133.
by mjg59 1y ago
Why don't we hybridise all crypto? We'd get more security if we required RSA+ECDSA+ED25519 at all times, right? Or is the answer that the benefits are small compared to the drawbacks? I am unqualified to provide an answer, but I
134.
by mjg59 1y ago
They're adhering to their charter. If you show up to my manager demanding to know why I made a specific engineering decision, he's not going to tell you - that's not the process, that's not his job, he's going to tr
135.
by mjg59 1y ago
Hey, look, you're free to read the mailing list archives and observe that every issue Dan raised was discussed at the time, he just disagreed with the conclusions reached. He made a complaint to the ADs, who observed that he was using
136.
by mjg59 1y ago
As is made clear from the fact that those issues all link to the mailing list, these are not novel issues. They were raised during discussion, taken into account, and the draft authors concluded they were answered adequately. Complaining ab
137.
by mjg59 1y ago
Poor quality analogy: should ed25519 only have been incorporated into protocols in conjunction with another cryptographic primitive? Surely requiring a hybrid with ecdsa would be more secure? Why did djb not argue for everyone using ed25519
138.
by mjg59 1y ago
There's a bunch of content that's not actually the complaint, and then there's section 4 which is the actual complaint and is overwhelmingly about procedure.
139.
by mjg59 1y ago
Have you read the complaint? It's not about engineering concerns, it's about whether procedures were followed correctly.
140.
by mjg59 1y ago
I feel like if your argument is that the rules weren't followed, you have a pretty strong obligation to follow the rules in submitting your complaint.
141.
by mjg59 1y ago
It's a touch odd to make a big deal of the fact that you've filed a complaint and fail to mention that it was formally rejected three days before you published the post: https://datatracker.ietf.org/group/iesg
142.
by mjg59 1y ago
Boeing currently has an awkward gap between the 737 and the widebodies that was previously filled by the 757 - the 737 Max 10 (which still isn't certified!) only has about two thirds of the range of the A321XLR, and a slightly lower pa
143.
by mjg59 1y ago
I'm already suing over the security deposit - that's actually an open and shut case. In this case it's not clear that I actually suffered any personal damage so it's not immediately clear whether I have standing in a civ
144.
by mjg59 1y ago
Right, it's the hash of the document before they add the certificate page, but unfortunately there's no easy way to extract that to calculate it
145.
by mjg59 1y ago
No, the modified copy included the same certificate page simply because it was a modified copy of the PDF with the certificate page. There's no actual way I've determined to verify the signed checksum field.
146.
by mjg59 1y ago
As yet, nothing - I'm in the process of drafting a complaint to the department of Real Estate, but the agency hasn't said anything further
147.
by mjg59 1y ago
It's difficult, because the certification page is part of the PDF so obviously can't include a hash or signature of itself. And you can't just rely on a hash since someone could tamper with the file and just update the hash.
148.
by mjg59 1y ago
The ISA was published in 2000, there was plenty of time to start working on an implementation before AMD shipped actual product.
149.
by mjg59 1y ago
Pentium 4 was never marketed as Centrino - that came in with the Pentium M, which was very definitely not 64-bit capable (and didn't even officially have PAE support to begin with). Atom was its own microarchitecture aimed at low power
150.
by mjg59 1y ago
David was the first person to employ me as a software developer (working on Dasher, a research project he'd received a grant to turn into an accessibility tool). At the time it felt like a ludicrous amount of money, and I got to travel

More ›