ngneer

34 ms·

391.
by ngneer 8y ago
The latest in a long long line of TEMPEST research. I think I would prefer to see academic security research steered in the direction of solving problems affecting millions, but an interesting discovery nonetheless.
392.
by ngneer 8y ago
OpenGrok supports JS and helps to navigate the codebase easily, in turn helping you to reason about it. Good luck!
393.
by ngneer 8y ago
The paper is interesting in that it shows the extent to which an untrusted enclave is capable of owning its host. This is not an attack within the adversary model of SGX, as the authors state, because an enclave can, by design, write to hos
394.
by ngneer 8y ago
https://en.wikipedia.org/wiki/Zooko%27s_triangle
395.
by ngneer 8y ago
Assuming a fair bidding process...
396.
by ngneer 8y ago
Spooky23 seems to be implicitly relying on uniqueness that is leveraged by the underlying message routing system. With the case of "123 Main St, anytown, AK" there is an implicit assumption that no one else lives at that address.
397.
by ngneer 8y ago
Capitalism is involved for sure, but "debt" seems harsh. How about "resource allocation"?
398.
by ngneer 8y ago
Numbers have to be assigned in order to break the symmetry. Otherwise how would you tell humans apart?
399.
by ngneer 8y ago
I remember my father taking me to see the Sierra offices, right by Coarsegold, CA. They were closed, but it was a fun trip, given how happy those games made my childhood. I know I am not the only one here.
400.
by ngneer 8y ago
News?
401.
by ngneer 8y ago
Specifically for information security, have the team members had PREVIOUS ROLES IN THE FIELD?
402.
by ngneer 8y ago
This is not news...
403.
by ngneer 9y ago
https://en.wikipedia.org/wiki/Zooko%27s_triangle
404.
by ngneer 9y ago
I am not seeing the connection to LANGSEC. The Spectre and Meltdown attacks turn the processor into a confused deputy, that is all. If anything, this is predicted by LANGSEC. The beef is not even with hardware verification, as some have sug
405.
by ngneer 9y ago
https://github.com/featurist/coypu is nice for browser automation. A related question: what are good tools for database scraping, meaning replicating a backend database via a web interface (not referring to compromisin
406.
by ngneer 9y ago
That implication was not intended. I was merely attempting to address the FUD. If anything, I took care to mention that all systems are vulnerable and must be assumed as such.
407.
by ngneer 9y ago
Thanks. The citation describes the existence of vulnerabilities and laments the lack of transparency. While the latter is indeed lamentable, and is known to be a contributing factor in increasing risk, vulnerabilities do exist in any system
408.
by ngneer 9y ago
I do not like the post. It seems scant on details and rife with conclusions. The Google presentation linked to has a bit more detail on the underlying technologies. A modern processor is a complex beast, and a security argument can always b
409.
by ngneer 9y ago
Anyone else notice how circular that mass was? Nature loves economy.
410.
by ngneer 9y ago
Agreed. Note that the update mechanism in itself involves microcode to operate on the blob.
411.
by ngneer 9y ago
Ben Hawkes' analysis of the update mechanism comes to mind, unclear why the authors did not mention it. inertiawar.com/microcode/hawkes_intel_microcode.pdf
412.
by ngneer 9y ago
Are you certain that the advice you are giving is suited to the security and privacy objectives of the masses? Also, the management engine is more about the chipset than about the core, which is what the announcement is about.
413.
by ngneer 9y ago
Could they not have done that before?
414.
by ngneer 9y ago
Got one of those to play with that others left for dead. Ended up gluing the bit to a long pencil and it worked!
415.
by ngneer 9y ago
Happened to me some years back during an interview :-/
416.
by ngneer 9y ago
It would be nice if we could figure out a way to encode knowledge in the genotype (serialization) to be extracted by the phenotype (deserialization). Injecting Wikipedia into an embryo...
417.
by ngneer 9y ago
Chip vendors do the same in the course of validation, and technically even before any silicon has been fabricated, using simulators.
418.
by ngneer 9y ago
This one had addresses, phone numbers and dates of birth.
419.
by ngneer 9y ago
This has happened in Israel in the past :(
420.
by ngneer 9y ago
Interesting. A similar concept is applied in microscopy, where multiresolution TIFFs are the norm. Another option to consider would be Deep Zoom. The common denominator is that users are essentially wanting a differently zoomed version of t

More ›