moyix

42 ms·

421.
by moyix 10y ago
You may also be interested in seeing how well the x86 processor met these requirements (before they added hardware virtualization support, of course): https://www.usenix.org/legacy/events/sec2000/robin.html T
422.
by moyix 10y ago
A little known fact is that Microsoft actually used an embedded Prolog interpreter for network configuration in Windows NT: http://web.archive.org/web/20040603192757/research.microsoft...
423.
by moyix 10y ago
And who can forget when the debate went meta with "Considered Harmful" Essays Considered Harmful : http://meyerweb.com/eric/comment/chech.html
424.
by moyix 10y ago
This is totally doable. PANDA [1], e.g., takes recordings of full-system execution by recording non-deterministic hardware inputs in a modified QEMU. This is much more compact than a full instruction trace, but you can then replay the recor
425.
by moyix 10y ago
By the way – the study that the Coding Horror post is based on has been retracted: http://retractionwatch.com/2014/07/18/the-camel-doesnt-have-... But I think it's what spurred all the interest into the
426.
by moyix 10y ago
Folks may also be interested in the accompanying blog post by the first author: http://patitsas.blogspot.ca/2016/01/cs-grades-probably-more-...
427.
Evidence That Computer Science Grades Are Not Bimodal [pdf](cs.toronto.edu)
146 points by moyix 10y ago|140 comments
428.
by moyix 10y ago
Coverity has been doing "dynamic analysis" in the way this article uses the term for a long time; they ended up creating a system call tracer that lets them monitor an arbitrary build process to find code to analyze: http:/&
429.
Deep down the certificate pinning rabbit hole of “Tor Browser Exposed”(seclists.org)
24 points by moyix 10y ago|4 comments
430.
by moyix 10y ago
People have written about anti-fuzzing before: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/b... http://publications.lib.chalmers.se/records/fulltext/238600/...
431.
by moyix 10y ago
Thanks so much for posting this. I probably would have missed out on the content otherwise, and it's a fantastic survey. I hadn't seen the 2005 result that decomposing programs doesn't make them easier to prove!
432.
by moyix 10y ago
Exactly. Nothing stops someone from pulling open their AirBuds and recording the analog signal that drives the speaker.
433.
by moyix 10y ago
Quick question for the more cryptographically inclined: apparently after decryption the code does an HMAC validation: /* Check that the key decrypted properly. */ sr_crypto_calculate_check_hmac_sha1(sd->mds.mdd_crypto
434.
by moyix 10y ago
It's not quite that simple: https://www.buzzfeed.com/josephbernstein/dissent-and-distrus...
435.
by moyix 10y ago
I think that's right for just picking a different PRNG seed. When you start looking at modifying the search heuristics, mutation operators, or other parts of the "strategy", you definitely start finding different bugs, though
436.
by moyix 10y ago
The question of whether randomized testing or program analysis gives you more coverage of a program is a really interesting one. Böhme actually has an earlier paper that addresses this question: https://www.comp.nus.edu.sg/~
437.
by moyix 10y ago
The paper [1] on AFLFast is, IMO, a great example of where academia shines: carefully looking at how and why something works, developing some theory and a working model, and then using that to get a substantial improvement on the state of t
438.
by moyix 10y ago
Still, I wonder how long before we see it weaponized by adding this as a payload to ordinary desktop malware. A nice trick would be something that scans the local network, infects the ASA (people are pretty good about keeping SNMP off the i
439.
by moyix 10y ago
I haven't been following the Silk Road coins, but I thought they'd been auctioned off? http://www.coindesk.com/four-winners-44000-bitcoins-final-si...
440.
by moyix 10y ago
Suppose the ace02468bdf13579 is a random hex string. That's 8 bytes of data, or 1/2^64 to get that specific value. With the birthday paradox, that only gets you down to 1/2^32 or one in 4 billion chance. Not happening.
441.
by moyix 10y ago
It's the timing that makes the connection. The sequence of events is: 1. Snowden leaves NSA with documents. Some of these (but, crucially, not all) are published. 2. Shadow Brokers release something claiming to be NSA hacking tools con
442.
by moyix 10y ago
To what end?
443.
by moyix 10y ago
More confirmation that it's actually from NSA: https://theintercept.com/2016/08/19/the-nsa-was-hacked-snowd... There's a string ("ace02468bdf13579") that is mentioned in a previously-unrel
444.
by moyix 10y ago
Washington post got former NSA TAO employees to go on record (anonymously) confirming the leaked toolkit comes from NSA: https://www.washingtonpost.com/world/national-security/power...
445.
by moyix 10y ago
This is the vulnerability exploited by EXTRABACON: https://xorcatt.wordpress.com/2016/08/16/equationgroup-tool-...
446.
by moyix 10y ago
Instead of copying & pasting, you should be able to click on the timestamp of the comment and then click "Vouch" (which I just did for XORcat's comment).
447.
by moyix 10y ago
Could you change the link to the tumblr? The github page has been pulled.
448.
by moyix 10y ago
I took one of the binaries from the free sample and started playing with running it (!) in a VM: https://asciinema.org/a/72dry36qqo8o97kma1gs4e6jj
449.
by moyix 10y ago
The command and control ("listening posts" in intelligence community parlance) for even NSA implants has to be on the public internet so the victims can phone home. This stuff could be from one of those servers.
450.
by moyix 10y ago
Yep, I bungled the link. The tumblr has all of the information but it's split into separate posts: https://theshadowbrokers.tumblr.com/

More ›