brendank310

21 ms·

1.
by brendank310 9mo ago
Nice! A while back I had started something similar for Azure but it never really got traction (or nearly as polished as this!). It's a rough proof of concept but maybe it'll be useful to Azure users: https://github.com&
2.
by brendank310 1y ago
Past work in the area by the folks at Immunant ( https://immunant.com/ ) that appears to be on-going https://github.com/immunant/c2rust . I think the project was also DARPA funded for a time.
3.
by brendank310 1y ago
I got a panicked call from my parents when Facebook deleted my brother's profile, probably 5 or 6 years after he passed away. After looking into just trying to get the profile restored, I came to the same conclusion as the title essent
4.
by brendank310 1y ago
I've been off work for two weeks to recover from surgery, and have been playing with a couple projects throughout the day between rest and physical therapy: - A home-rolled router/firewall: Using yocto to create a distribution for
5.
by brendank310 2y ago
Yeah it's a building block for understanding number theory well, which is important in cryptography.
6.
by brendank310 2y ago
Relatively common nowadays. It used to be delineated as a feature in Intel chips as part of their vPro line, but I think it’s baked in. Generally an IOMMU is needed for performant PCI passthrough to VMs, and Windows uses it for DeviceGuard
7.
by brendank310 2y ago
It's probably no longer maintained, but a former colleague of mine did some work on this for C++: https://github.com/ainfosec/shoulder . Obviously if the docs are lying it doesn't help much, but there was anot
8.
by brendank310 2y ago
I get the reaction, but what about the trust factor of a box you own and have running on the other side of the world? TPM isn’t an evil concept, it’s fairly useful for some scenarios. Coercion to use TPMs, that sounds evil.
9.
by brendank310 2y ago
It's been probably 2 years since I've messed with it, but I was still using the tarball download for Xen in OpenEmbedded builds.
10.
by brendank310 3y ago
As someone noted above the Commercial Solutions for Classified program has been in existence for a long while (probably over a decade). This package is newer but not wildly newer. Installs of the various 'packages' do exist.
11.
by brendank310 3y ago
My old team did some work in this area a few years ago. We got the Talos II BMC code to be binary reproducible, and had a go at automating David A. Wheeler's compiler diversification to stop compiler subversion. We checked the boxes we
12.
by brendank310 3y ago
At least in NY (and probably true of state/local politics in general) this is not necessarily true. These third parties often will choose a D or R that align with their policy goals. It helps candidates in that their name is on the bal
13.
by brendank310 3y ago
SB is definitely imperfect, but a useful tool in moving toward a trusted boot. I think we'd all agree having a trusted boot sequence is desirable, the point of contention being who gets to decide the criteria for trust. It's been
14.
by brendank310 3y ago
I think you're largely correct but Google isn't one person so there may be somewhat emergent patterns that work from an SEO standpoint that don't have a solid answer to Why. If I were an SEO customer I would ask for some proo
15.
by brendank310 3y ago
What do you suspect will be the practical uses of this? Could it help researchers run experiments to develop better fertility protocols? Or depending on costs, fertility clinics could test various protocols to find the optimal "hormone
16.
by brendank310 3y ago
Someone already did: https://news.ycombinator.com/item?id=32498435 Overall the timeline doesn't seem implausible to me.
17.
by brendank310 3y ago
A friend of mine and I explored a similar offering. We've mostly put it on a shelf as it was very duct taped together and we're both short on time. We don't have any monetization plan but would love to hear any feedback: htt
18.
by brendank310 3y ago
I'm always a little shocked when I see someone who isn't keeping personal and work devices (and accounts) very intentionally separate.
19.
by brendank310 4y ago
The flip side of that is it does cost some money to run a monastery, and there aren't a lot of a modern opportunities for them to make money. Nothing wrong with them keeping their trade secret, and not being interested in scaling produ
20.
by brendank310 4y ago
I saw you present a version of this in probably 2016 or so at little security conference in DC (maybe platform security conference?). Anyhow your talk was a huge deal for defense contractors doing proposal work at the time (and since). In t
21.
by brendank310 4y ago
Because it is open source. It's not Free Open Source Software (FOSS) as deemed by some foundation or another. There is a lot of great open source software not included in Linux because of licensing issues (e.g. BSD clashing with GPL).
22.
by brendank310 4y ago
OT: You can do that with Qt. We played with implementing it ourselves for a project about 10 years ago. Since then I think there is an official QPA that will render Qt apps within the browser, and there is the Wt project. Might be worth loo
23.
by brendank310 4y ago
Why not? It's not practical for traditional uses of semiconductors, but it has a mechanism to control conductivity.
24.
by brendank310 4y ago
Keep in mind that there wasn't flexible infrastructure on demand in those days. User run servers was sort of a low cost market based demand scaler for IP owners. If the game is really a dud, they didn't buy N servers and M bandwid
25.
by brendank310 4y ago
MS was knee deep in anti-trust negotiations with the DoJ around that time so I imagine acquisitions of that size and scope were off the table. Sega probably was small potatoes financially for MS at the time, but buying one of the three comp
26.
by brendank310 4y ago
A previous team I was on ended up with this role. Strong writer with no technical skills joined the team and worked hand-in-hand with engineers fleshing out docs. It was productive for the engineers because they needed to articulate the ide
27.
by brendank310 4y ago
Until the numbers get revised in 4 months.
28.
by brendank310 4y ago
With RS232 you can hook up an old oscilloscope and measure what the right baud rate should be. Even in the "won't transmit unless it receives" case, a sweep on a waveform generator and well configured trigger will get you on
29.
by brendank310 4y ago
David Wheeler's Ph.D dissertation on the subject hasn't been refuted as far as I know, so the diverse double compilation method should be sufficient to mitigate the compiler subversion threat. I worked on a project to do this in O
30.
by brendank310 4y ago
I'll have to give it another look if the situation presents itself. I think one factor of Java being remembered so unfavorably was it being early in my career. I do think there should be a distinction on what is lumped as verbosity. Go

More ›