trishankkarthik

7 ms·

1.
by trishankkarthik 2y ago
Very cool, and congrats! The corresponding ToB blog post says the following: > Longer term, we can do even better: doing “one off” verifications means that the client has no recollection of which identities should be trusted for which di
2.
by trishankkarthik 6y ago
Sorry to hear the bad news, John and Daniel. Thanks for all your great work, especially in promoting TUF. Hope you guys have found greener pastures now.
3.
by trishankkarthik 6y ago
I work in this area. This is not a supply chain attack. This is a typosquatting "attack" people keep rediscovering every year or two. I know, because I wrote an as yet unpublished paper on safely pulling packages from private and
4.
by trishankkarthik 6y ago
This is NOT a supply chain attack. Solarwinds was a supply chain attack. This is a typosquatting demonstration that happens every one or two years.
5.
by trishankkarthik 6y ago
How was I "attacking" others, when they were allowed to put words in my mouth? Go ahead and ban me: @paulgraham and @sama were right about the intolerance of free speech in Silicon Valley.
6.
by trishankkarthik 6y ago
Thanks, yes, I try to write in a way where even I don't fall asleep, unlike our "nirvana fallacy" friend below...
7.
by trishankkarthik 6y ago
Not a criticism if the worst you can say about someone is that he is "mean," not that he is wrong.
8.
by trishankkarthik 6y ago
Show me the money: did they warn about COVID-19 way BEFORE it be came a problem, or did they not? If not, why should we take them seriously? It is easy to prognosticate AFTER the fact.
9.
by trishankkarthik 6y ago
You cannot fundamentally predict the future, fuhgedaboutit, partly for the same reasons we cannot use Turing machines to solve the halting problem for Turing machines. What you can do, however, is control your exposure to outcomes of unpred
10.
by trishankkarthik 6y ago
This is the most dangerously stupid thing I've ever heard. Tetlock is a known academic charlatan pushing his absolutely useless "superforecasting" nonsense which @nntaleb keeps debunking on Twitter. If Tetlock and friends are
11.
by trishankkarthik 6y ago
100% Tech companies could hire and train students straight from high school instead of making them go through the academic priestly class, but nope, everyone wants expensive degrees and pay more for it.
12.
by trishankkarthik 6y ago
BS. Big-O is designed by academics for academics. This is not how you would teach high school students with an apprenticeship model.
13.
by trishankkarthik 6y ago
I was just thinking about this the other day: at the same time, they keep adding weird, inscrutable nonsense at the end of every Google Search URL, so what's the point of hiding the protocols and www and whatnot?
14.
by trishankkarthik 6y ago
This is why you should use a well-designed system such as The Update Framework (TUF) that aims to make security as usable as possible: [1] https://www.python.org/dev/peps/pep-0458/ [2] https://theu
15.
by trishankkarthik 6y ago
If you guys can't even take a "bad" joke, gods help you all. Feel free to ban me.
16.
by trishankkarthik 6y ago
dang, I was clearly joking...
17.
by trishankkarthik 6y ago
YAML IS NOT AN EFFING PROGRAMMING LANGUAGE, EVEN IN 2020
18.
by trishankkarthik 6y ago
That's a bit like saying: well, encrypting the iPhone isn't all that jazz, because all I have to do is hit the owner with a $5 wrench. I mean, yes, but cryptography alone cannot solve that problem. TUF and in-toto provide cryptogr
19.
by trishankkarthik 6y ago
This is why we designed TUF and in-toto to detect MitM attacks anywhere in the software supply chain between developers and end-users themselves, and provide E2E compromise-resilience. It's strange that the paper doesn't mention u
20.
Proving Darwin: A Review(medium.com)
2 points by trishankkarthik 7y ago|0 comments
21.
How to defend yourself against targeted attacks(medium.com)
4 points by trishankkarthik 7y ago|0 comments
22.
by trishankkarthik 7y ago
Last I checked, Chrome uses CUP, which is more like TLS than TUF
23.
Human Intelligence, Computation, and the Universal Machine(medium.com)
2 points by trishankkarthik 7y ago|0 comments
24.
by trishankkarthik 7y ago
Hi Stan!
25.
by trishankkarthik 7y ago
Hihi, me too: https://github.com/trishankkarthik/notebooks/blob/master/Eva...
26.
by trishankkarthik 7y ago
1. ?? You do realize there are self-appointed geniuses who actually make this kind of arguments, right? 2. That snake-oil AI paper guy, right though he may be here, you know he's jealous of Bitcoin, right? Wrote a whole academic paper
27.
by trishankkarthik 7y ago
If you're so smart, and this idea so obvious, why didn't you write about it?
28.
by trishankkarthik 7y ago
Define it rigorously. We have, in terms of the amount of computation in m time steps.
29.
by trishankkarthik 7y ago
You get it (I was a PhD, too)
30.
by trishankkarthik 7y ago
You tell me: why would it? And if it could, why can't we build similar machines?

More ›