ngneer

21 ms·

241.
by ngneer 3y ago
Median survival is just that: half the people have less, half the people have more. Since you are not an oncologist, could you please cite the recent paper in question? That would be helpful for understanding the context in which the statem
242.
by ngneer 3y ago
I genuinely hate this "cute" yet condescending name. Maids are on the low skill low wage end of the spectrum. Even if there is a motive to mount a physical attack, possibly a targeted one, it will either be performed by a person i
243.
by ngneer 3y ago
Interesting, had not realized. I suppose my thresholds for truth were conditioned through prior observations of the HN comment distribution, and that such observations were incomplete. Given the new information, the story now takes two seco
244.
by ngneer 3y ago
I did not believe what you wrote for even a second (who would be commenting on HN during an emergency?) and therefore became neither unsettled nor wished to help. Never eval() untrusted input.
245.
by ngneer 3y ago
I fail to see what the distinction between control and data planes (or lack thereof) has to do with anything. The security question is about who gets to control system behavior, be it through the control or data planes or both. With prompt
246.
by ngneer 3y ago
Buffalo buffalo (that) Buffalo buffalo buffalo (themselves) buffalo Buffalo buffalo.
247.
by ngneer 4y ago
Wow, very nice work!
248.
by ngneer 4y ago
Precisely! We need to structure programs so as to behave within a well defined transitive data closure.
249.
by ngneer 4y ago
Awesome, thanks for the great analogy and explanation! What you are proposing is the compartmentalization approach, like sealing off areas of a ship or cordoning off a fire using walls (or fire trails in a forest). I am definitely a propone
250.
by ngneer 4y ago
Could you please elaborate? One must trust programs that handle data to handle data, that requirement is difficult to get around.
251.
by ngneer 4y ago
We only ask because we have been burned in the past. For the existence of encryption to comfort a security savvy crowd, we often need to see that it was implemented correctly, as there are far too many ways of getting it wrong than there ar
252.
by ngneer 4y ago
The 13 weighs 1.3kg, how much does the 16 weigh?
253.
by ngneer 4y ago
Cool. I saw a proposal to use TEEs for secure aggregation. OpenFL uses Gramine for that. Not sure if that provides sufficient protection, really, but worth having on the radar. https://arxiv.org/abs/2105.06413 https:&
254.
by ngneer 4y ago
Awesome, thanks for taking the time to elucidate!
255.
by ngneer 4y ago
I vaguely recall basic PIR schemes turn a database from O(n) to O(n^2). While this would be transparent to users of the service, could you comment on space overhead?
256.
by ngneer 4y ago
This capability is not exactly Fully Homomorphic Encryption (FHE). In the cryptographic literature this is typically referred to as PIR, or Private Information Retrieval [ https://en.wikipedia.org/wiki/Private_informatio
257.
by ngneer 4y ago
Can it reason about the code it generates?
258.
by ngneer 4y ago
Infinitely Classic
259.
by ngneer 4y ago
You can invert colors with a command line option, usually that does the trick
260.
by ngneer 4y ago
I reverse engineered several microscopy formats, it can be a lot of fun. If anyone is interested in contributing to similar such efforts there is also https://openslide.org/
261.
by ngneer 4y ago
The security industry has a lot of people looking for shortcuts or claiming to provide them.
262.
by ngneer 4y ago
Why not prevent control transfer to the ROP gadget?
263.
by ngneer 4y ago
Neat. I coded a similar idea for fun, back when Java Applets still roamed the earth. The backend would harvest Project Gutenberg files and the frontend would present those to the user.
264.
by ngneer 4y ago
https://ieeexplore.ieee.org/document/194051
265.
by ngneer 4y ago
Irish immigrant descendants had also intermingled with the Choctaw, so now there are tribe members of Irish ancestry.
266.
by ngneer 4y ago
SGX is probably not the right answer, but there have been suggestions to that effect, https://lifeasageek.github.io/papers/seonghyun-blackmirror.p... https://web.cse.ohio-state.edu/~lin.3021/file&#
267.
by ngneer 4y ago
Anything that hardware can do to improve the situation? How about pointer authentication or memory tagging? Do these measures also fall into the band-aid category?
268.
by ngneer 4y ago
I had reviewed this before, but went for ONYX instead and never looked back. Having a general purpose machine has served me really well on countless occasions including various unforeseen use cases. I think reMarkable is branding away their
269.
by ngneer 4y ago
Same as with all attacks, you protect against them by making the return lower than the cost...
270.
by ngneer 4y ago
Cryptography: Theory and Practice, Third Edition by Douglas R. Stinson

More ›