tyoma

55 ms·

181.
by tyoma 8y ago
Agree. Also a random input generation tool should really be run multiple times against each target, etc.
182.
by tyoma 8y ago
Author here. The predictions and insights from the two papers were fascinating to read with 30 years of hindsight. I also ran the random input generating “fuzz” tool against everything in /usr/bin (after some very minor fixes to g
183.
by tyoma 8y ago
Visual Basic 6. Fantastically easy to learn and let you make extremely useful GUI apps quickly. And the edit and continue debugger is still a dream compared to some of today’s debugging setups.
184.
by tyoma 8y ago
The general sense seems to be that you either get long keys or fast computation but not both?
185.
Optimizing for Security(immunant.com)
3 points by tyoma 8y ago|0 comments
186.
by tyoma 8y ago
This paper is absolutely fascinating. Fuzzers have some inherent nondeterminism, meaning that some runs agains the same program will differ in how many bugs they find. It turns out pretty much every fuzzer evaluation to date has not been st
187.
by tyoma 8y ago
Thanks for posting this. I also find single offices lonely and isolating. It is much easier to both help people and get help in an open office environment versus the friction and isolation of single person offices.
188.
by tyoma 8y ago
The blog post has a fantastic visual explanation of store to load forwarding, along with a few other concepts.
189.
by tyoma 9y ago
Hopefully these and other smart contract analysis tools can become a part of a CI/CD system for Ethereum. It seems like that would have prevented some of the massive losses due to simple programming errors.
190.
by tyoma 9y ago
I fully agree. Maybe the VM and language were originally designed for faster time to market and developer adoption? Whatever the original reasons were, it is certainly time for better tooling.
191.
by tyoma 9y ago
Maybe its possible to forge something together with emscripten?
192.
by tyoma 9y ago
One of the McSema contributors here. McSema 2.0 has been a very big release for us with a complete re-architecture of how we do instruction semantics definitions and lifting. Aside from architectural improvements, it is also much faster tha
193.
by tyoma 9y ago
Matt Mazur maintains an archive of aol-files.com, which has a lot of old AOL content: https://mattmazur.com/projects/aol-files-com/
194.
by tyoma 9y ago
Honest answer? I was just starting grad school. I went for my MS and had a wonderful experience. Would do it again in a heartbeat. There are many positives about grad school if you enjoy learning and research. There is definitely an opportu
195.
by tyoma 9y ago
I should have clarified my point better. Yes, those two main types of people are exactly who is supposed to go to grad school. But desire and qualifications are not enough. One also has to be willing to live in near poverty and delay st
196.
by tyoma 9y ago
The monetary value proposition of grad school simply isn't very good if you're a US citizen. There is non-monetary value (like advancing human knowledge) that makes grad school worth it for some, but the pay is low. Imagine you ju
197.
by tyoma 9y ago
Tavis's code ran on Linux and hooked the import table of Defender's scanning engine to report Windows XP as the underlying Windows version [1]. Originally the author didn't hook and let Defender call the native version check
198.
by tyoma 9y ago
The browser and renderer is a perfect analogy. Only the scanning code that contains the format parsers, emulators, etc, needs to be sandboxed.
199.
by tyoma 9y ago
Its great that the CTF organizers fielded a neutral architecture that no one would be familiar with. This helps put everyone on a more even footing and tests their knowledge of their tools and reverse engineering instead of knowledge of arc
200.
by tyoma 9y ago
HN gets regular "what VPN should I use?" questions and my answer is always the same: Algo [1]. It is designed to be simple to set up, simple to tear down, and usable with numerous cloud providers or your own Linux server. [1] htt
201.
by tyoma 9y ago
You can use Algo [1]. It packages everything you need to create a VPN on DO droplets and many other cloud platforms. [1] https://github.com/trailofbits/algo
202.
by tyoma 9y ago
Please add a "i did not sign up for this account" link to disavow account to email links. There is someone who keeps using my email thinking its theirs. I am tired of constant reminders to verify my email from noreply addresses, w
203.
by tyoma 10y ago
Intel's HTM and CET are both very exciting developments. Now that both clang and Visual Studio have mainlined control flow integrity, it can be made fast using hardware. It looks like CET matches the Microsoft implementation of CFI mor
204.
by tyoma 10y ago
This is a great article but only really covers half the issue. The other half is why journalists should use secure messaging applications, and not email. Sometimes the most succesful attacks are phishing attacks that no device will protect
205.
Why are chip payments so slow in the US?(quora.com)
3 points by tyoma 10y ago|0 comments
206.
by tyoma 10y ago
Yes, this! At least in the US, there is zero benefit to me as a consumer from chip cards. The banks have not increased rewards, or lowered interchange fees (thereby lowering retail prices). Federal law protects me from fraud no matter the c
207.
by tyoma 10y ago
Wont the debtors have to report the forgiven debt as income on their taxes, potenially triggering a very difficult tax situation?
208.
by tyoma 11y ago
The Illinois supreme court is only interpreting the Illinois state constitution, which guarantees state employee pensions. If state lawmakers want the court to deliver a different result, they have to amend the state constitution.
209.
by tyoma 11y ago
AOL used to have an active hacking scene. Some of that is also still archived: http://mattmazur.com/projects/aol-files-com/
210.
by tyoma 11y ago
Benefits like healthcare coverage are usually explicitly exempted. For example, see the relevant law in the State of Alaska: http://www.touchngo.com/lglcntr/akstats/statutes/title18/cha... , specifically

More ›