lcvw

4 ms·

1.
Security After Remote Attestation(liamcvw.com)
2 points by lcvw 2mo ago|0 comments
2.
by lcvw 2mo ago
I definitely want to do a post on confidential computing as well. Super cool stuff.
3.
by lcvw 2mo ago
I think consumer devices should have opt-outs for sure. But personally I am much more comfortable with myself and my family having fully locked down apple phones then anything else on the market right now, precisely because of how difficult
4.
by lcvw 2mo ago
I mean, all tech can be used in different ways. My experience has been much more on the preventing root kits side, rather then vendor lock in. Yes, there can be exploits, but hardware exploits over a restricted interface (TPM2) are signific
5.
Remote Attestation(liamcvw.com)
110 points by lcvw 2mo ago|109 comments
6.
by lcvw 1y ago
I don’t think that is at all accurate. https://en.m.wikipedia.org/wiki/British_genocide
7.
by lcvw 2y ago
I’ve carved out a niche of very low level systems programming and optimization. I think it’ll be awhile before LLMs can do what I do. I also moved to to staff so I think a lot of what I do now will still exist with junior/mid level dev
8.
by lcvw 2y ago
I see safety issues all the time, even from mid level and seniorish devs who are not 100% familiar with cpp. I think it really depends on your codebase. Things like parsers tend to explode when you first put them in a fuzzer.
9.
by lcvw 2y ago
I feel like he is missing the boat here. C++ is on a path to dying as a language because of a lack of safety features, and he’s talking about zero cost abstractions. Exceptions cause massive compiler issues and are hardly zero cost anyway,
10.
by lcvw 2y ago
How could it be? The radiation wavelength is far too high to cause any sort of chemistry. I know there are those that will still believe it does though.
11.
by lcvw 2y ago
No because when the electricity is used it creates heat.
12.
by lcvw 2y ago
My understanding is that the theory behind nuclear winter is that all of the nuked cities will ignite, and the massive firestorms will eject ash into the upper atmosphere where it will persist for years. Aka you still need to blow up some c
13.
by lcvw 2y ago
Doesn’t perf also support reverse callgraphs? I seem to remember doing this pretty easily with that.
14.
by lcvw 2y ago
That seems highly illegal. I’m not sure I believe that.
15.
by lcvw 2y ago
Isn’t excel subscription only now?
16.
by lcvw 3y ago
Is there a way to get your house (currently with hydronic gas heat) retrofitted for heat pumps that doesn’t result in either a ton of demo or ugly lines all over the exterior? I tried to switch over last year only to find the savings were n
17.
by lcvw 3y ago
There is a legal loophole campaigns use where if a text message was sent by a human it’s not considered spam. So of course a program exists that dispatches the message you want to send to a call center and they dial the thousands of numbers
18.
by lcvw 3y ago
I don’t know about the past, but you can absolutely dereference userspace memory in ebpf.
19.
by lcvw 3y ago
As someone who uses bpf for security monitoring every day, every one of those problems is a has a workaround. And the only real competitor is writing a kernel module which has serious safety issues.
20.
by lcvw 3y ago
One of the stated benefits is that the compiler optimizer can optimize the regex state machine that gets created, resulting in significantly faster match times at runtime. There are some benchmarks if you look up her cppcon talk about the l
21.
by lcvw 3y ago
You can write ebpf programs in rust. Bpftrace generates programs from an awk like language, you can make the program however you want. Solana does it with rust, I don’t know what it gains you though given the verifier protecting you from mo
22.
by lcvw 3y ago
I feel that this proposal defeats the entire purpose of ebpf. The point is to have a bytecode language that can do simple processing in the kernel. This code is frequently generated adhoc, such as with bpftrace. I don’t like all the limitat
23.
by lcvw 3y ago
It’s worth noting the verifier doesn’t verify C code, it verifies the compiled ebpf bytecode. You can generate that bytecode from rust (the solana cryptocurrency does this) but you still need to verify the actual instructions since someone
24.
by lcvw 3y ago
1. Using eBPF requires root 2. The verifier checks memory bounds access, guarantees termination in a certain number of instructions, and restricts function calls to a limited number of helper functions provided by the kernel. 3. BPF code ru
25.
by lcvw 3y ago
It requires root to use, if someone has root they’ve already owned your system anyway.
26.
by lcvw 3y ago
Agreed. Russia and China have alienated every one of their neighbors by invading them, trying to take them over economically, and other bs. The US is the global hegemon mainly because of fear of Russia/China, which is not going to go a
27.
by lcvw 3y ago
You need the mirrors to focus the light. X-rays have been tried and they had problems, such as requiring the use of gold to block the x-rays in the mask.
28.
by lcvw 4y ago
Those numbers are just for marketing. There is no feature on the chip that is actually 5 nm, 4 nm, or whatever.
29.
by lcvw 4y ago
How is it that you need the screenshot? Doesn’t the app/backend keep records of matches?
30.
by lcvw 4y ago
High school has sports and activities though. I know many families that use the sports team as if it were a day care. If they do sports the kids usually get out somewhere between 4:30 and 5:30. Where I live now, a lot of the high schoolers

More ›