zvrba

62 ms·

661.
Thoughts on Intel's upcoming Software Guard Extensions (theinvisiblethings.blogspot.no)
1 points by zvrba 13y ago|1 comments
662.
by zvrba 13y ago
No, and neither are cryptographic keys derived from passwords, and neither are cipher tables derived from cryptographic keys. A simple defense would be to access all such material through a permutation table. (Which need not be explicitly s
663.
by zvrba 13y ago
I think it's more likely that they'll eventually re-purpose these opcodes (further ISA extensions), and string operations will be optimized through simple hardware matching of documented instruction sequences. Already today, Intel
664.
by zvrba 13y ago
Java of today is not the same as Java from 2001.
665.
by zvrba 13y ago
Can you use it? How much training (approx hour count) is needed before you can really use the gun safely (i.e., shoot the bad guy instead of yourself or bystanders (which may be passive, inside their apartments, unaware of what's going
666.
by zvrba 13y ago
Approximately a year and half ago I when I was evaluating Evernote, everybody was speaking warmly of it. Now, a sudden bunch of people arises mentioning rather serious problems. Has something in Evernote drastically changed over time, or di
667.
by zvrba 13y ago
Built-in sandboxing with user-defineable data flow policies.
668.
by zvrba 13y ago
Everybody seems to forget that addition in exact (arbitrary-precision) arithmetic is not O(1), so the "O(n)" solution is no longer O(n).
669.
by zvrba 13y ago
You're not allowed to post your accepted manuscripts on "systematic distribution services" (except arxiv). Defined as: "Subject repositories that aim to aggregate and openly distribute AAMs authored by researchers in spe
670.
by zvrba 13y ago
It states no such thing. In fact, the website clearly states exactly the opposite, in "normal" (i.e., not legalese) language: "For subscription articles: These rights are determined by a copyright transfer, where authors reta
671.
by zvrba 13y ago
> It's a shock because people are used to uploading their papers in final published form How common is this? Aren't people used to reading what they're agreeing to before they sign a contract? Because: > but I don&#x
672.
by zvrba 13y ago
> had the right to distribute their papers on their personal websites Elsevier allows you to post the preprint, but not the final published version (which includes Elsevier's typesetting, logo, etc.)
673.
by zvrba 13y ago
> yet they're demanding take-down notices of such pre-prints hosted on 3rd party machines. When you agree to the copyright form, you also agree that you won't systematically distribute preprints or submit them to a systematic d
674.
by zvrba 13y ago
When you agree to publish with Elsevier, you sign a contract where you agree not to publish the final version of the article on-line. Many (most?) Elsevier journals DO permit you to post the so-called "author's manuscript" if
675.
by zvrba 13y ago
Why do you think that there must be a tradeoff between simplicity of denotational and operational semantics?
676.
by zvrba 13y ago
I didn't try to imply that it was difficult to find the performance problem. It's an observation on something else: Haskell is often mentioned for its equational reasoning. I find it interesting that correct equational reasoning
677.
by zvrba 13y ago
So the original line of code has apparently been present since the very first import by Sigbjørn Finne in https://github.com/nominolo/HTTP/blob/c4765e822eb92196fec955... (check line 443). If a Haskell expert
678.
by zvrba 13y ago
Yes, again: https://www.fsf.org/news/fsf-responds-to-microsofts-privacy-... with a completely bogus jail analogy. FSF is on a witch hunt, and I dislike it very much. Regardless: sharing zero-day exploits ahead of time
679.
by zvrba 13y ago
> Microsoft Windows provides back doors for the NSA. FSF FUD again. Can they substantiate their claims?
680.
JonDonym: another anonymizing proxy and onion network(anonymous-proxy-servers.net)
1 points by zvrba 13y ago|0 comments
681.
by zvrba 13y ago
Oh, thanks for reminding me of complex analysis. For me it was the most beautiful math course I had at the uni.
682.
by zvrba 13y ago
So you've basically experienced the benefits of actors (message-passing style, no shared state). But you can use message-passing paradigm in imperative languages too, though it's rather cumbersome in non-extensible languages like
683.
by zvrba 13y ago
> I ask for your first orange then you give me that one, in your first hand It's the difference between ordinals and cardinals. In human languages I see ordinals as a pure shorthand: you could just as well say "give me orange n
684.
by zvrba 13y ago
Replace "Microsoft" with manufacturers of food, cars, medicines, personal hygiene products, etc. They are regulated, inspected, but all under the same / similar conditions: > or access granted to outsiders covering very li
685.
by zvrba 13y ago
> it's reliable in the sense that it doesn't crash, and also reliable in the sense that it handles minor failures gracefully. This is an incomplete definition of reliability. It seems that the author is only considering program
686.
by zvrba 13y ago
> A lock on your own house to which you do not have the master key is not a security system, it is a jail. This is completely bogus. The owner of the master key may have the access (understandably undesirable), but that does not keep you
687.
by zvrba 13y ago
> It's just a ton of system administration work. Let's say I'd like to have a context menu where I can choose "Run in sandbox", then I would either choose a preexisting sandbox configuration or define a custom on
688.
by zvrba 13y ago
> How about OSs that target the hypervisors? Yup, that's definitely a new area. I guess you're using the hypercall API instead of pretending to talk to the raw HW? In a way, the hypervisor has become "the" OS, while &
689.
by zvrba 13y ago
I'm aware of these, as well as of Solaris containers. But they all seem to do too much. I would like to have a "container" for each instance of an untrusted application. One for Firefox. One for Thunderbird. One for acrobat r
690.
by zvrba 13y ago
This paper is more than 10 years old. Since then a new systems research arena has emerged: virtualization / hypervisors. (Not exactly new, but new on the consumer market. Before, VMs were only in the mainframe land.) "Compatibilit

More ›