munin

16 ms·

91.
by munin 9y ago
> The thing I hear the most from people who have moved to Dallas recently or visiting is "Everyone here is so nice" I lived in Dallas, it was the only place I've lived where people would yell "faggot" at me on th
92.
by munin 9y ago
Employers can hire whoever they want to do research, and mostly they hire PhDs. Why?
93.
by munin 9y ago
There are words on the interstate sign that say “HOV-2 6AM-9AM M-F”. It was the first thing I noticed about that road as a new driver. Maybe fewer people read signs? Few people definitely read speed limit signs...
94.
by munin 9y ago
Maybe! You'd have to look at the numbers. I remember the last time someone showed me numbers, actually most of the money went into core operations cost to offset money that the state used to contribute. Though I think in this particula
95.
by munin 9y ago
The university is using that money for something already, and now it isn't. I guess this depends on what that something is. If they're just stuffing it under their mattresses or using it to pay some associate under provost for s
96.
by munin 9y ago
The money doesn't exist to do that. Graduate student stipends are paid out of government grants, and the amount of money issued by the government as grants is going down.
97.
by munin 9y ago
Just don't develop any hardware problems or you'll get stuck in a customer support loop around uninstalling and installing nvidia drivers. I haven't been able to use my oryx for about a year, and each time I ask support (the
98.
by munin 9y ago
True, but you can prevent the introduction of new commands. In this setting, if there's a central point, it can be cut. It's different if there is no central point (i.e. conficker P2P).
99.
by munin 9y ago
No, you reverse engineer the "domain generation algorithm" and figure out what the secret seeds are as input, then every time you need to know the name of the rendezvous point you figure out what the current seed is (easy if it&#x
100.
by munin 9y ago
> the rolling codes mean they would need to either have access to the "secret" and ban all future codes, or just ban "imnotabot*" which wouldn't be sustainable if multiple botnets started using this method They w
101.
by munin 9y ago
MSR has been heavily prioritized onto doing products and commercialization, stimulated by a re-org. In my research area, there have been a number (more than ten) of high profile departures of researchers from MSR, frequently going back t
102.
by munin 9y ago
> (This has probably been explored in a Tom Clancy/Michael Crichton -type novel...) This is the plot of Rainbow Six, where a scheming group of evil environmentalists plan to unleash a weaponized strain of Ebola on the world to wipe
103.
by munin 9y ago
It's great if you're white and a boy, and straight.
104.
by munin 9y ago
Isn't this the "fallback mode" that Kees describes? It honestly seems like Linus latches on to one sentence that he doesn't like, then melts down over it. It really seems like you should walk on very fine eggshells aroun
105.
by munin 9y ago
This is (I'm told by my cousins) what they do in Europe and it terrifies me. When I was 10, I was kind of a shit-head and didn't know what I wanted to do, and wasn't really on a path to go to college. You would have locked me
106.
by munin 9y ago
> All of this gets easier if you can augment your static analysis with control flow traces from program executions with coverage of the relevant branches, so you don't miss basic block entry points. That's only true if the trac
107.
by munin 9y ago
There's an interesting vein of research work here in making software reverse engineering more difficult, and measuring how much more difficult. A precursor to decompilation is control flow analysis, the production of the control flow g
108.
by munin 9y ago
Those are the last two things that happened to me when I rode Metro, waiting for a change at l'Enfant. So, I don't know about regularly, but after that, I was done with Metro.
109.
by munin 9y ago
There are only so many times that your morning commute can involve someone standing in your face for minutes screaming about how he's going to stab you in the chest, or you can watch some guy beat his girlfriend to a pulp in front of y
110.
by munin 9y ago
What if you accept applications for 30 days, then write the name of each applicant on a card, put the cards into a deck, shuffle the deck, then draw cards off the top of the deck and make offers until you run out of open positions? It isn&#
111.
by munin 9y ago
things you can do in the native app to mitigate this risk: * run rendering in a sandbox * closely monitor your deps for vulnerabilities and ship patches as quickly as possible * choose deps with a better security track record, when possible
112.
by munin 9y ago
Every CS department I have ever heard of has a 20 hour TA load as standard.
113.
by munin 9y ago
That's a very light TA load. It's far more normal to have a 20-30 hour a week commitment to your TA responsibilities (multiple lectures, grading a few hundred assignments every few weeks, etc) so it's a lot harder to fit rese
114.
by munin 9y ago
It often seems like the biggest con that physical pen testers pull on their clients is convincing them to hire them in the first place. What's the threat, exactly? Let's say you do something like BeyondCorp. Gaining "network
115.
by munin 9y ago
Many won't pay for health insurance, or if they do, it is the health insurance that only gets you access to the student health center, which is basically just a dispenser of tylenol and condoms. Most will waive "tuition" but
116.
by munin 9y ago
> I’m not very familiar with SGX, though, so maybe there’s some magic I’m missing here. There is magic you are missing. I don't want to be the person that glibly says "you should read more about this" and then vanishes, bu
117.
by munin 9y ago
This is also true. I think the particular threat I was replying to was "can employees, on a whim, go into stored e-mail and view it?" You're right that there's another possibility, which is that on a whim the employees w
118.
by munin 9y ago
> that doesn't mean G employees will go in and look at your emails There are two forms of this assurance. The first is running into some guy at a party, or on an internet message board, who either works at Google or "knows a gu
119.
by munin 9y ago
We did formally verify the 802.11i protocol, though: https://link.springer.com/article/10.1007%2Fs12204-009-0122-...
120.
by munin 9y ago
> No one had the hard discussions with clients to reduce scope and cut high effort/low reward features? They did as soon as they had someone to blame, though.

More ›