munin

46 ms·

391.
by munin 11y ago
neither necessary nor sufficient. you can have a "turing complete" input with no exploitable bugs (or really, no bugs at all) and you can have a very simple recognizable and computationally limited input that has all kinds of craz
392.
by munin 11y ago
> This could easily become the norm, and should. a stronger version of this IS the norm in many countries in Europe and large security conscious enterprises in the united states: an ID card issued that is also a high security module. it&
393.
by munin 11y ago
> I'd suggest starting with schools. Make sure that kids go to school. We already try to do this, they already fight this with violence (on us and on their own children).
394.
by munin 11y ago
one parent does shift work and the other doesn't, i.e. medical residency / EMT or something in network operations that does a swing shift.
395.
by munin 11y ago
> child-centric lives can lose touch with one another to the point where they have nothing left to say to one another when the kids leave home. there are couples like this because the way they made kids + 2 careers work on middle class s
396.
by munin 11y ago
oh ok. this is actually harder to solve than just 'here have thunderbird'. how do you replicate keys across computers? how do you send e-mail from a new computer when you don't have access to your old computer (it turns out t
397.
by munin 11y ago
so like hushmail?
398.
by munin 11y ago
> it's as simple as adding a server password is there a way for me to, instead of using a server password, use something like OAuth so that I can grant access to the server based on my companies central login database? otherwise, ev
399.
by munin 11y ago
the story I have heard is that some things about french tanks were superior to german tanks - they had more armor and a more powerful main gun. however, the french had a 2 person crew, a driver and a commander/gunner, while the german
400.
by munin 11y ago
> America built 74,000 Sherman hulls and engines; Germany built just 1,347 Tigers.
401.
by munin 11y ago
the history that I got about WWII was that Germany built wunder-weapons that individually were of far superior quality to anything else, but couldn't be built at any kind of scale. their tanks were initially technologically superior, b
402.
by munin 11y ago
pretty much! this 2013 paper added low overhead (4%?) forward and backward CFI at the binary level, tested on internet explorer and firefox: http://www.cs.berkeley.edu/~dawnsong/papers/Oakland2013-CCFI... this pap
403.
by munin 11y ago
different kinds of CFI have been under active development since 2002 with recent (2013, 2014) deployments to major web browsers like chrome and IE. IE already ships with a forward CFI implementation in windows 10. chrome will probably ship
404.
by munin 11y ago
those debates don't use facts or evidence, so, probably not ;)
405.
by munin 11y ago
it would be really, really interesting if fuzzing found an error in the proof! there isn't a good track record for this though. i've been thinking about what to do to have a chance of success with that for a little.
406.
by munin 11y ago
Next, they should fuzz IronFleet: http://research.microsoft.com/apps/pubs/default.aspx?id=2558...
407.
by munin 11y ago
> Nobody wants to be the parent of the most mentally stable Starbucks Barista here's an important question to ask yourself: if you had to choose, would you rather your children be kind, or smart?
408.
by munin 11y ago
in my experience the grad classes are whatever the professor can slap together at the last minute. the reason to get a graduate degree is for the research and mentorship and maybe you can get that out of a masters degree but probably not mo
409.
by munin 11y ago
Because masters degrees are for suckers? Especially paying for one?
410.
by munin 11y ago
it's especially confusing since model checking and verification research has been lively for the past twenty years and recently produced some pretty good results (like bedrock and ironclad), but this is all willfully ignored by the lan
411.
by munin 11y ago
There is definitely some degree of executive decision their management could make but it would shred one of the two leads careers. This kind of hard call is why you're boss, so it says something about someone when they don't make
412.
by munin 11y ago
> But to hold the entire company hostage seems like it would be a career-ending move to me, regardless of sides. It would be, if you lose. If you win, you are rich beyond the dreams of avarice. It would also be a career ending move to ad
413.
by munin 11y ago
> Fewer US based students are going into graduate STEM programs Because if you're a US citizen, getting a PhD for the money is a racket. Just take your BS in CS over to Silicon Valley and start making bank working on Tinder for Dogs
414.
by munin 11y ago
https with a modern transport security stack that uses HPKP, HSTS and cert pinning, sure. curl doesn't use those, though.
415.
by munin 11y ago
That works once. Are you going to do it every time you compile? I guess the side channel crew can be appeased in the llvm bitcode view of the world - write your side channel resistant stuff in inline assembler. The bitcode optimizer can&#x2
416.
by munin 11y ago
> The concern about introducing side-channels into crypto apps seems legitimate If you're relying on compiler optimization levels to enforce stuff about crypto, you're gonna have a bad time. What happens when compiler behavior
417.
by munin 11y ago
I think that this work is a lot more thorough: http://www.cl.cam.ac.uk/~dc552/papers/asplos15-memory-safe-c... They go through and identify C programming idioms as they are reflected in real code, and design their
418.
by munin 11y ago
There are "good" and "bad" uses for this technology. Bad uses: Netflix will put their video stuff into this and now you will never jack content from their software. Good uses: Your IM and email can live in this and no co
419.
by munin 11y ago
what's the difference? ;)
420.
What is a bug?(pl-enthusiast.net)
1 points by munin 11y ago|0 comments

More ›