ngneer

33 ms·

421.
by ngneer 9y ago
yes, that was my point
422.
by ngneer 9y ago
open source does not imply modifiable
423.
by ngneer 9y ago
I was thinking along the lines of Kerckhoffs' principle. You seem to be conflating open source with key extraction or decryption ability. You seem to be saying that if a specification is known then that implies an ability to modify the
424.
by ngneer 9y ago
I disagree. Technologically it is possible to build a content protection system without obscurity, using open source software and open source hardware (and suitable cryptographic bootstrapping). That no one chooses to do so is another matte
425.
by ngneer 9y ago
These are horrible stories. Interesting to see if folks on HN have had the experience of being attracted to an interviewee/interviewer, or investee/investor, and how they dealt with it given the complexities involved.
426.
by ngneer 9y ago
An enclave does not make any system calls directly like the rest of the process would, but a system call can definitely be made through the use of a shim layer. In SGX parlance, calls to the outside of the enclave are known as OCALLs. The d
427.
by ngneer 9y ago
Agreed. Thus far it appears that Intel itself has been vacillating with regard to launch enclave policy. As a reminder, all technology can be used for good or evil, whatever your definitions of those may be. The issue is one of control, but
428.
by ngneer 9y ago
Upvote if you grew up on Fravia and tKC
429.
by ngneer 9y ago
Evan's debugger is nice for Olly fans
430.
by ngneer 9y ago
The guidelines appear rather rudimentary. It is a sad state of affairs that IoT developers need these.
431.
by ngneer 9y ago
ACM Queue, at http://queue.acm.org
432.
by ngneer 10y ago
Itamar. Great post. Given that work occupies a large majority of our lives, one should strive to be passionate about their work. That is the global ideal (global over the lifetime of a person). The local reality is that not all jobs through
433.
by ngneer 10y ago
LANGSEC
434.
by ngneer 10y ago
Good insurance companies do not go bankrupt because they measure risk correctly and do not take too much of it on themselves. Essentially it is their job to distribute the risk such that the company remains profitable. A global reaching eve
435.
by ngneer 10y ago
Glad someone mentioned this. LANGSEC encourages you to think about computational power as privilege, and the principle of least privilege will guide you to constructing machines that are easier to reason about, leaving less room for ambigui
436.
by ngneer 10y ago
Why is this on HN?
437.
by ngneer 10y ago
Indeed, the scales are isomorphic.
438.
by ngneer 10y ago
More specifically, going up a fifth augments the fourth by a semitone to become the seventh and going down a fifth diminishes the seventh by a semitone to become the fourth. In your example, F the fourth became F# the seventh and B the seve
439.
by ngneer 10y ago
The interested reader is referred to "Mathematics and Music" by David Wright, published by the American Mathematical Society. The realization that the circle of fifths is really there because 5 and 7 (aka -5) are co-prime to 12 wa
440.
by ngneer 10y ago
I do not know about "Unfortunately" and "as usual", but surely Intel cannot be held liable for researchers getting their hopes up about a system they have yet to examine. Defending against a software side-channel adversa
441.
by ngneer 10y ago
What I never liked about gdb was that I could not really figure out a way for it to show me what has changed when stepping over an instruction or a call, a feature that I often find very useful in other debuggers (especially in x64dbg and e
442.
by ngneer 10y ago
Fair point, though at times it seems that the markets and regulators in this space tend to favor turnkey products, appliances, et cetera. To ride on your car analogy (pun intended), one finds it is not easy buying directly from a manufactur
443.
by ngneer 10y ago
IMHO, the security industry has been guilty of adding complexity to existing systems rather than doing its duty of stripping it away.
444.
by ngneer 11y ago
Then why did I move to the states?
445.
by ngneer 11y ago
Ghandi "came up with it"
446.
by ngneer 11y ago
This.
447.
by ngneer 11y ago
"Identical copies" is informal, as is "copies" for that matter. You can think of the information that is defining the shape as what is being copied, hence mirroring and other variations are allowed. A possibly related te
448.
by ngneer 11y ago
Lots of info here: http://sgxisca.weebly.com/ Not a whole lot on remote attestation though
449.
by ngneer 11y ago
The problem that you describe is not an SGX problem, it is an OS trust problem. The current trust model for general purpose computing is such that a processor is not in a position to prevent a malicious OS from controlling which application
450.
by ngneer 11y ago
Cute

More ›