klt0825

4 ms·

1.
by klt0825 9y ago
By reading from the actual memory address, yes. Defeating kASLR with side channels is meh. Reading from actual addresses is a different matter entirely.
2.
by klt0825 9y ago
Bigger than KASLR it seems. https://twitter.com/brainsmoke/status/948561799875502080 Not good.
3.
by klt0825 10y ago
"Do you think maths is discovered or invented? To tell you the truth, I don't think I know a mathematician who doesn't think that it's discovered." Anyone else struck by this? It has really never occurred to before
4.
by klt0825 11y ago
Seeing this at 11 is honestly what made me interested in computers and pushed me towards my current career, so seeing that it is 20 years old is sort of a shock. I can also certainly can relate to the portion of the audience that found phre
5.
by klt0825 11y ago
I tend to agree with most points. I always credit my undergraduate CS education with teaching me about how to think about a variety of computational problems using a variety of languages as lenses. I actually think that is why I've b
6.
by klt0825 12y ago
For now. Reading into it, it seems like they found one of the useful UAFs that facilitates a memory write instead of your less useful CALL virt_func. Flash is just a means to create an infoleak by over-wrting the vector length, it is like
7.
by klt0825 13y ago
This is actually one of the reasons I do what is now called "Intermittent Fasting". I found in my teens that I was much, much more focused and alert on an empty stomach. I've always assumed it had to do my insulin response t
8.
by klt0825 13y ago
Agreed, don't run AV at all. It is always fun to take something from metasploit, see that is detected by most AVs - change one or two strings that are obvious choices for signatures and watch detection rates drop to close to 0. Even
9.
by klt0825 13y ago
I would be interested to see what the blood levels of EPA/DHA were in the patients studied, the article isn't really helpful in that respect and it may be important.
10.
by klt0825 13y ago
Burnout in tech circles is like Depression in the population in general. 90% of people who say they have it really don't and the people who say it doesn't exist have no idea what in the world they are talking about. But for thos
11.
by klt0825 13y ago
2 is particularly relevant and more than solid grasp of CS is required depending on what you choose to do within the field. Malware Analysis for example can require understanding data structures, calling conventions, x86, compiler internal
12.
by klt0825 13y ago
Frankly, this is a bigger problem that isn't nationally recognized. The mayor is under federal investigation for his campaign and I've lost count of how many officials have been arrested or investigated at the federal level. Livi
13.
by klt0825 13y ago
I couldn't agree with you more. I actually said this at my last job interview when asked why I was leaving. I've learned more in the last 6 months being surrounded by much smarter people than the 6 years of being "the smart
14.
by klt0825 13y ago
"Snowden's hacking prowess" So we're back to this. First the "Snowden had a Hacker Certification" nonsense (ignoring that CEHs are required by DoD for OPS jobs and aren't exactly high-quality to begin wit
15.
by klt0825 13y ago
Not a Snowden fan in the least but ignoring the fact that CEH certification is "highly valued" for quite a few DoD jobs ( http://www.eccouncil.org/Support/dod-8570 ), this reeks of attempting to write off terri
16.
by klt0825 13y ago
Exploits or vulnerabilities? If they are handing out fully built exploits, I have a problem with it. If they are just vulns then yeah, it is probably MAPP which isn't news really.
17.
by klt0825 13y ago
I've been reading far too much about the downsides lately when trying to decide if I want to do it, so this was a fun diversion. I'm 28, fresh out of a CS MS program, work full time at a job doing computer security 'research
18.
by klt0825 13y ago
This hits home as I just finished a very well known part-time course-work only (with a pseudo-thesis option) program. I actually have a little different opinion - what's killing the value of an MS in CS is the fact that CS curriculum is bec
19.
by klt0825 14y ago
I wish more universities taught courses along the lines of real 'hacking', or at least close to it. I just finished a course about Malware and Vulnerability Analysis/Reverse Engineering as part of my MS and it was fascinating. What is als
20.
by klt0825 14y ago
I'm not opposed to this at all but I question how exactly enforcement would/can work. We don't know with 100% accuracy who was responsible for Stuxnet, Flame, Operation Aurora, etc and especially with code, it is going to be exceedingly di
21.
by klt0825 14y ago
That was actually my first thought as well. To be fair, it was C with Simple Object Orientation so not quite as terrible as misidentifying C++ straight up though it was still a bit of a fiasco. From their perspective, I'm sure (over)hyping
22.
by klt0825 15y ago
Almost always when I visit. There are very interesting things that just never make it to the top-stories for one reason or another so I don't want to miss them.
23.
by klt0825 15y ago
I have been keeping a list of books I used to augment my CS Masters Degree courses on various topics, here are the relevant ones I have found useful for the topics you have listed: --Computer Organization--: Computer Systems: A Programmer's
24.
by klt0825 15y ago
We used Concepts of Programming Languages ( http://www.pearsonhighered.com/educator/product/Concepts-of-... ) in my undergraduate Comparative Languages course which was very good and seems to cover much of the same material as the course. I
25.
by klt0825 15y ago
I think people underestimate how their relatively late release hurt them for the low-tech consumer. A number of people probably went with Iphone or Android before the first WP devices came to market and now are too entrenched to change. Fo
26.
by klt0825 15y ago
At 27, I agree. I wouldn't work for pennies to be able to solve interesting problems and learn new things but I would certainly take less if it was reasonable. It seems like at most companies, developers have a shelf-life before you are too
27.
by klt0825 15y ago
This is a very good point. I thought I knew a lot about programming/CS until I decided to get my M.S. Now, the more I learn, the more I realize I don't know. It is actually a little defeating in the sense that I have had to accept that I
28.
by klt0825 15y ago
MIR seemed to have broader coverage of evaluation metrics for IR systems, better coverage of UI related concerns such as interface design, better coverage of Multimedia retrieval and better coverage of web-search. I liked intro to IR better
29.
by klt0825 15y ago
I actually used this as a supplement to Modern Information Retrieval ( http://www.amazon.com/Modern-Information-Retrieval-Concepts-... ) for my IR class this semester. I found the Stanford book to be much more detailed in terms of the math