munin

50 ms·

421.
by munin 11y ago
> So I got my start in ad based websites. If it wasn't for ads, I would have never really gotten into what we do. I got my start in computer crime (chasing the crimes that others committed) and if it wasn't for others committin
422.
by munin 11y ago
Yes, these reports are nice. I've seen this kind of thing before and I've worked with frama-c and other tools personally. I think that there's some interest in from-scratch methods growing in government circles now that there
423.
by munin 11y ago
The work you have been doing on polarssl is pretty inspiring. I use it as a success story for formal methods and PL technology when I do "science of security" classes or briefings. Someday, I would love to do a research project on
424.
by munin 11y ago
Memory pressure didn't go away with NT 3.1 though... probably in Windows Vista it could have gone away...
425.
by munin 11y ago
That would have been a different file format though, right?
426.
by munin 11y ago
Pre-NT? Are you sure? My understanding of history is that the PE file format was part of NT 3. I would have thought that earlier systems kept as much paged as possible, but maybe that's wrong. Maybe it's not worth it any more. My
427.
by munin 11y ago
ugh. At the root, this issue is probably an oversight. Understanding why things are discardable and pageable is interesting though. Memory is pageable because live memory is precious. Your multi-tasking OS that supports paging can dynamical
428.
by munin 11y ago
Oh, I see. That is more sensible. Regular polling, IME, happens when you're trying to "keep abreast" of a decision making process that you are not directly involved in. Say you are the SME for data security and there is a dis
429.
by munin 11y ago
What is an acceptable timeout? What if the answer is no, there is actually nothing else they could be working on? What if the problem is "hey, you forgot to add this file and the build is broken?" When is it appropriate to interru
430.
by munin 11y ago
Here's a scenario. Someone sends you a message Tuesday morning, asking "hey what is the best way to push data into this system." You are not available, off in your fortress of solitude, so they wait for about 30 minutes to he
431.
by munin 11y ago
> You kinda wonder why these poor communities don't have community-owned businesses. Crowdfunded works so well, why not in ghettos? They do: http://www.amazon.com/dp/0674030710 Is the service better? Unclear.
432.
by munin 11y ago
> Using another language gives you another set of problems No, you have those problems in C too. Using another language gives you the problems you had before and takes away the memory safety problems.
433.
by munin 11y ago
I got an error message saying the document wasn't available at all and to come back after the "crowd clears" which is much more ironic... after I refreshed a bunch it became available...
434.
by munin 11y ago
Some things about this are a mess. For one, they claim that CompCert doesn't have a formally verified C parser, but it does, as of 2014. Instead of citing the CompCert release page, they cite a paper written in 2011 that says that Comp
435.
by munin 11y ago
Answering questions about information flow might be interesting in this regard. You could quantify what sources of information an application retrieves and how far through the application that information traverses. Downsides are that it&#x
436.
by munin 11y ago
I would be interested in pointing a (distributed, imprecise) symbolic executor at each app to gain a sense of the "state depth" of that app, and then correlating that with bugs discovered and rate of code churn in the app, and com
437.
by munin 11y ago
What if the obfuscation removes the ability to construct a control flow graph, but is not self-decrypting?
438.
by munin 11y ago
here's a scenario, let's say that GM goes hog wild after this and hires every expert security researcher with experience in this domain. they create an internal tiger team for security. they re-organize their entire product delive
439.
The Wooden Firehouse(andrumyers.wordpress.com)
1 points by munin 11y ago|0 comments
440.
by munin 11y ago
I don't think that this is a case where you want to trade off security for usability, and I don't think that generally those cases exist. You always want more usability. The problems that OPM has are massive, their solutions need
441.
by munin 11y ago
all of your points totally undermine the benefits of centralization and computerization. perhaps that is the point and that there are some things that should just not be digitized or made "easy to do," but security people also rec
442.
by munin 11y ago
why wouldn't they?
443.
by munin 11y ago
the law doesn't work the way you think it works
444.
by munin 11y ago
what? "if they change the law so that it would be legal then it would be legal" is I think how laws work? oh you mean if material spontaneously appeared? yeah... good luck explaining that one
445.
by munin 11y ago
> This was and still is a perfectly legal loophole no it isn't, EO12333 disallows the intelligence community from asking someone else to do something that they cannot do
446.
by munin 11y ago
the code for the VPN is better because...?
447.
by munin 11y ago
to be fair it's not just the problem with formal methods work - if you start off with a spec with a bug and implement it faithfully in a non-verified context, you'll still have the bug due to the buggy spec, along with a whole bun
448.
by munin 11y ago
> proven that it is possible to take an Int and return an Array of Integers. proving that something is POSSIBLE is very easy: just write this function in an untyped language and call it with an int, and show that you get back an array. p
449.
by munin 11y ago
part of what makes a course "university level" is the assessment, though. there is way more to a course than just sitting in on the lectures - you do the projects and the homework and that is where the real learning happens. cours
450.
by munin 11y ago
we might die in car accidents but at least we don't have an anti porn great firewall...

More ›