munin

14 ms·

61.
by munin 8y ago
I disagree - the motivations of the security group and the product group are different. If the security team is under the product team leadership, the security team is disincentivized to interrupt a product launch due to a security issue, b
62.
by munin 8y ago
Microsoft used to have a group, Trustworthy Computing (TWC), that was where all the security expertise lived. TWC was destroyed in 2014. From the outside, it seemed like that was the point where the reporter/outside security engagement
63.
by munin 8y ago
I remember reading that Valve is all self-organized and perf/bonuses are based on shipping. In that environment, is there any incentive for an IC to own something like software assurance / quality / fuzzing?
64.
by munin 8y ago
The executives that made those decisions would be found, arrested, and imprisoned, if they were lucky. You can only jerk the little guy around like that. Knowledge is not power, power is power.
65.
by munin 8y ago
Programming is harder than proving. Well, programming poorly is easier than proving, but making something that you could release and won't look like gum and bailing wire is harder than proving. You wind up with a gum and bailing wire i
66.
by munin 8y ago
A high numbered port (above 1024) can be bound by non root programs. Use some non 22 port below 1024 if you want to change the port. Or use some RBAC system like selinux to keep anyone from binding to 2222 or whatever.
67.
by munin 8y ago
It's funny how grad school is designed to bring out the impostor in you, kind of like a negative image of the different kinds of "impostor" listed. Obviously each of these is false in their own way, but these are messages tha
68.
by munin 8y ago
When you use templates, recompiling a single file can take ten minutes.
69.
by munin 9y ago
This is fine, except then your teams interactions with another team might as well be interactions with a competing company. This produces some behavior that can be difficult for outsiders (customers, the CEO, etc) to understand. So it works
70.
by munin 9y ago
At a CC, you're in a class of between 10 and 30 people with immediate access to the instructor, who is usually an expert and a dedicated educator that wants to help you understand the material and will work with you in and outside of c
71.
by munin 9y ago
> But if 2g is insecure, there's not a single peep from networks or phone manufactures or Google or Apple about phasing out 2g. There isn't even an option to disable it. Good news I guess: AT&T turned off their 2G in Decemb
72.
by munin 9y ago
TT faculty at SLACs don't take graduate students (by and large) and still get tenure...
73.
by munin 9y ago
It's happening, off and on: http://www.businessinsider.com/christian-ott-caltech-profess... https://www.insidehighered.com/news/2017/12/15/uc-davis-prof... http://www.sla
74.
by munin 9y ago
There is a specification: https://github.com/Microsoft/checkedc/releases/download/v0.7... We have been trying to publish a paper on this, perhaps one day we will be successful! Our runtime overhead is ve
75.
by munin 9y ago
We have tried to do this by adding a "null terminated string" type. Start in section 2.4 of the specification ( https://github.com/Microsoft/checkedc/releases/download/v0.7... ).
76.
by munin 9y ago
> Half an hour with a good teacher can save you weeks of table head-butting. I spent a year and change trying to teach myself calculus from a textbook. Eventually I signed up for a class at a community college and learned more in a month
77.
by munin 9y ago
> Those security people are fcking morons. [1] > There's something odd about drm people. [2] > aarch64 is just another druggie name that the ARM people came up with after drinking too much of the spiked water in cambridge. [3]
78.
by munin 9y ago
> Could you send me a detailed copy of your floor plan? This is in the listing information on houses, if you have a business relationship with someone where you know their address, you also know their floor plan.
79.
by munin 9y ago
You're right, and I was reacting poorly to the "don't run this on anything" statement. It's some hacker magic off github, caveat empor. You're also right that future updates could break it. It's brittle. I
80.
by munin 9y ago
> Strongly advise anyone from running this on any system. Oh come on. Your para 2-4 are serious conceptual defects with xnu_override in general, but this is the kind of hacker shit you'd expect to find in something that will live pa
81.
by munin 9y ago
This was in Baltimore. Visit the Hopkins medical campus sometime (but during the day). There are guards with long guns on every street corner.
82.
by munin 9y ago
Yes, I’m serious. Why would I joke about someone getting mugged in the bathroom?
83.
by munin 9y ago
> Do these buildings do this for security? Yes. One building we were in had a problem where people would walk in off the street, then hide in the bathroom to attack or mug people. The hope with the key protocol is that potential attacker
84.
by munin 9y ago
It seems like articles about WeWork take one of two tacks: 1. Isn't this "gig economy" thing weird? Isn't it strange that people don't have stable long term employment? What's up with that? Is it good? 2. Look
85.
by munin 9y ago
The short story version of this was written by Arthur C Clarke in 1951, "Superiority" http://www.mayofamily.com/RLM/txt_Clarke_Superiority.html
86.
by munin 9y ago
The people that want to make criticisms about how this association is not causal can start reading halfway through the first column of page 1252. The authors are careful to phrase their finding as an association, not a causal relationship.
87.
by munin 9y ago
That isn't really correct, as I understand it. The staffers get background checks, the senators and representatives take a secrecy oath in lieu of a process administered by the executive. And really, with the separation of powers, how
88.
by munin 9y ago
> but I'm not aware of a general way of proving no information leakage. As I understand it, the current consensus is to use a tagged architecture, then show that there are no observable differences when the tags involve secret data
89.
by munin 9y ago
For anyone wondering how you could write a solver in 1500 lines of C, the answer is here: https://github.com/DennisYurichev/ToySMT/blob/master/ToySMT.... (i.e., use 'system' to shell out to an
90.
by munin 9y ago
Have you asked them why? Maybe they're taking the video so they can share it with family members that couldn't be there: dad had to work tonight, grandparents love the grandkids but live on the other side of the world, etc.

More ›