tdullien

16 ms·

181.
by tdullien 5y ago
Shameless plug: We just launched Prodfiler last week -- it's continuous in-production profiling based on eBPF, handles C/C++/Go/Rust/JVM/Python/Perl/Ruby (with NodeJS and .net in the pipeline), and it
182.
by tdullien 5y ago
We are generally aiming for ~1% of CPU, but on very fork-intensive workloads we exceed this (in order to do symbol-less native code stack unwinding, we need to do some housekeeping for each new process). There are also approx 250m of memory
183.
The mystery of Kubelet eating (too much) CPU and IOPS(prodfiler.com)
21 points by tdullien 5y ago|0 comments
184.
Show HN: Whole-fleet continuous profiler for C/C++/Rust/Go/JVM/Python/Ruby/PHP(prodfiler.com)
33 points by tdullien 5y ago|3 comments
185.
by tdullien 5y ago
Former Googler here, too -- 2011 to 2018. The Google I joined was definitely a different place from the Google I left, and seeing the "phase change" up close was ... interesting. Your sentence about salaries resonates; the Google
186.
by tdullien 6y ago
Perhaps mine is a bit of a strange/controversial view among the HN crowd - but I find the conflation of "right to free speech" and "right to a platform for said speech" to be odd. I don't agree that "infri
187.
by tdullien 6y ago
For what it is worth: The OECD has made a lot of changes to their transfer pricing guidelines, and starting in 2018, individual countries have a lot of leeway in re-assigning profits to other jurisdictions. The effect is not fully felt yet
188.
by tdullien 6y ago
Thanks for that! :-). The PDF is definitely worth the download :)
189.
by tdullien 6y ago
When I was 11 or 12, my father gave me a copy of “Parkinsons Law” ( https://www.amazon.com/Parkinsons-Law-Pursuit-Progress-Busin... ), explaining that this is the most important book on management I will ever read. I found it
190.
by tdullien 6y ago
Getting the current weather from the command line.
191.
TIL: Curl Wttr.in(wttr.in)
2 points by tdullien 6y ago|1 comments
192.
by tdullien 7y ago
Author of one of the linked weird machine papers here. The use of “Turing complete” in both the ROP and the weird machine literature is both incorrect and misleading; I wrote some comments on this here: http://addxorrol.blogspot.
193.
by tdullien 7y ago
Author of one of the cited papers here. The author of the post falls into a common misconception of the weird machine literature (which led me to write my paper): conflating TC (the ability to compute any function worth computing) with the
194.
by tdullien 8y ago
So I think we should distinguish between "gluten intolerance" (which is often self-diagnosed) and "celiac disease" (actual medical condition with allergic reaction to gluten). For people with the latter, even trace amoun
195.
by tdullien 8y ago
It is somewhat doubtful, though, that SGX achieves what it was supposed to achieve. While you get full-RAM encryption & integrity, the trouble is that CPUs tend to only work-as-defined for a narrow range of environmental parameters. In
196.
by tdullien 8y ago
sorry, but this article is breathless crazy hyperbole. I am a cybersecurity expert that actually reverse engineered a nontrivial part of Stuxnet at one point, and I have reverse engineered other government-built worms and persistence mechan
197.
by tdullien 9y ago
I think this is too dark a post, but it shows a useful shock: Computer Science likes to live in proximity to pure mathematics, but it lives between EE and mathematics. And neglecting the EE side is dangerous - which not only Spectre showed,
198.
by tdullien 9y ago
Jann Horn's results & report pre-date the blog post though. The topic was "ripe", so to speak, so multiple parties investigated it at roughly the same time.
199.
Weird machines, exploitability, and provable unexploitability(ieeexplore.ieee.org)
30 points by tdullien 9y ago|4 comments
200.
by tdullien 9y ago
How would one reach out in private via email to you?
201.
by tdullien 9y ago
As much as I love RR, I am not sure it would've helped here, as the bug requires multiple threads to concurrently run? Also, RR is based on achieving deterministic replay IIRC, so I am not sure it'd be the first choice for a nonde
202.
by tdullien 10y ago
I looked at both.
203.
by tdullien 10y ago
Also, it is safe to say that ChakraCore (the JS interpreter inside Edge) is much more broken / easier to find bugs in than Firefox, at least at the moment.
204.
by tdullien 10y ago
Just to provide some balance: Chrome exploits are not as rare as you claim in this post. Pretty much any time Pwn2Own or similar contests are held, with non-trivial prize money, somebody brings a fully working Chrome exploit. If you check
205.
by tdullien 10y ago
In which way is paying returns on the investment to build housing unproductive, but buying Disney stock is productive? I think you are measuring with unequal yardsticks here.
206.
by tdullien 10y ago
I spent a few years driving the integration of "our" technology inside Google. So yeah, there is agency.
207.
Process and flexibility in startups and larger organisations(addxorrol.blogspot.com)
2 points by tdullien 10y ago|0 comments
208.
ECFR Policy Article “Creating European Digital Champions”(ecfr.eu)
1 points by tdullien 10y ago|0 comments
209.
by tdullien 10y ago
A note for everybody asking "why on earth does anybody run this software": When my company had to get corporate liability insurance in 2007/2008, the actual insurance contract stipulated "having AV installed on all machi
210.
by tdullien 10y ago
I am a mathematician by trade, and was doing development along with other stuff (reverse engineering and security work, first in my own company, then at Google). So ... 1) I think working knowledge of ML is extremely useful to many develope

More ›