moyix

58 ms·

571.
by moyix 11y ago
It's based on dynamic taint analysis. We assign each byte the input file a unique label and then track the propagation of those labels throughout a computation. Additionally, we track the "compute number"; basically, if you h
572.
by moyix 11y ago
I've done some preliminary work that measures the amount of "attention" an image processing algorithm pays to a given pixel (in terms of amount of computation done on it). Hard to tell at the moment how well it's working
573.
by moyix 11y ago
This appears to be the source of the mysterious image that showed up on Reddit's /r/machinelearning the other day too: https://www.reddit.com/r/MachineLearning/comments/3a1ebc/ima...
574.
by moyix 11y ago
If you're interested in defeating stylometry, you should check out Sadia Afroz's PhD thesis as well: https://www.eecs.berkeley.edu/~sa499/thesis.pdf
575.
by moyix 11y ago
The relevant search term is "stylometry". One particular paper I remember is from Dawn Song's group at Berkeley a couple years back: http://www.cs.berkeley.edu/~dawnsong/papers/2012%20On%20the%... T
576.
by moyix 11y ago
C11 actually adds the memset_s function, which is guaranteed by the language spec not to be optimized away: > memset may be optimized away (under the as-if rules) if the object modified by this function is not accessed again for the rest
577.
by moyix 11y ago
There was actually a more lively thread about it last year: https://news.ycombinator.com/item?id=7901612
578.
by moyix 11y ago
Disclaimer: this was about a year ago, so some things may have changed. Specific comments mainly apply to Google's own end-to-end, since that's the one I remember best. In general, they tended to not mesh well with the gmail UI –
579.
by moyix 11y ago
What more or less sunk PGP for me was gmail. The various gpg-in-chrome plugins I've tried have been pretty uniformly terrible (including Google's own end-to-end), so the standard web interface is out. And unfortunately, by allowin
580.
by moyix 11y ago
I wrote a similar article on this a few years ago: https://moyix.wordpress.com/2012/04/06/computing-with-tiles/ The tilings, with an appropriate color scheme, turn out to be quite beautiful: https:&#x2F
581.
by moyix 11y ago
Implantable devices typically have to have a wireless interface of some sort. The alternative is to put a physical port on someone's body, which is a great way to cause infections.
582.
by moyix 12y ago
I believe that's "The Gentle Seduction", by Marc Stiegler: http://www.skyhunter.com/marcs/GentleSeduction.html
583.
by moyix 12y ago
Construct is lovely. I've used it on everything from MS debug symbols [1] to talking with USB devices [2]. [1] https://github.com/moyix/pdbparse [2] https://github.com/moyix/fbtools
584.
by moyix 12y ago
I showed up around 3:45pm and it was gone by then. NYPD were looking around though: https://twitter.com/moyix/status/585181778438180864
585.
by moyix 12y ago
I'm honestly surprised they had to make a law against it. It has always seemed to me that warrant canaries would not survive their first contact with the judicial system; it's a clear attempt to circumvent the intent of the law th
586.
100 Days of Malware(moyix.blogspot.com)
2 points by moyix 12y ago|0 comments
587.
by moyix 12y ago
This sort of thing is really fascinating. I've been reading Daniel Kahneman's Thinking, Fast and Slow recently, and at the same I've been trying to make a difficult decision between two job offers. I have been astounded t
588.
by moyix 12y ago
Argh. From the article: > The fears of machine superintelligence are based on the belief that true AI is just around a corner. After all, we’re so advanced and the progress is only accelerating, it’s probably a few years away, at most. V
589.
by moyix 12y ago
Did you just include Tony Stark in a list of people worried about AI? ;)
590.
by moyix 12y ago
Do you mean unpacked in memory? Most packers don't write unpacked files to disk (it would make bypassing them a lot easier if they did...)
591.
by moyix 12y ago
If it's the study I'm thinking of [1], they essentially tried to measure how much more actual merit hires would need to have to justify the inequality of hiring decisions: > Despite the confounded nature of merit and social sta
592.
by moyix 12y ago
You are actually correct that you were scanned by an official, funded project at the University of Michigan. The research team specializes in "internet-wide measurement", meaning they scan for vulnerabilities on a regular basis in
593.
by moyix 12y ago
The same folks providing the list this time around also made one for Heartbleed. It was posted roughly the same time as the initial disclosure, from what I recall. http://web.archive.org/web/20140411064356/https:&#
594.
by moyix 12y ago
It is "Coming soon", but if you click on it the section of the page it links to does tell you what to do (disable export ciphers), and furthermore links to a detailed guide [1] on setting up a secure set of ciphers, which even inc
595.
by moyix 12y ago
Running zmap or masscan is such a low barrier to entry (compared to the expertise required to then factor the key and set up a MitM attack) that it's hard to argue this is really making it that much easier for attackers. Aside from the
596.
by moyix 12y ago
What good is the source code if you can't build it and flash it to your device? What good is it if you can't verify that the binary firmware was built from the source you have?
597.
by moyix 12y ago
More generally, the Forensics Wiki has a list of available memory imaging tools: http://www.forensicswiki.org/wiki/Tools:Memory_Imaging Anecdotally, I've heard from forensic practitioners that the KnTTools are ver
598.
by moyix 12y ago
Yep; indeed, Volatility itself has a plugin called `yarascan` that will tell you about any hits on Yara signatures inside of a memory image. https://code.google.com/p/volatility/wiki/CommandReferenceMa... Edi
599.
by moyix 12y ago
Here it is: https://www.youtube.com/watch?v=75oun5gvDAU#t=169
600.
by moyix 12y ago
WiFi routers kind of inherently need to do a lot: 1. Drivers for wifi & ethernet ports, and other hardware needed for the device. 2. TCP stack and routing mechanisms for forwarding packets between the two. 3. Access control for wifi por

More ›