lvh

8 ms·

1.
If it could have, why didn't it?(alexgaynor.net)
2 points by lvh 5mo ago|0 comments
2.
by lvh 10mo ago
"The operating system makes it easy to mess with" doesn't seem like a particularly useful property for application file formats.
3.
by lvh 1y ago
That doesn't really explain why , you're just saying that the thin you claimed was desirable is desirable. (I don't disagree! I'm just saying: you haven't advanced your argument or answered GP's question.)
4.
by lvh 2y ago
This is a fantastic example of applying deception strategies in practice as part of a detection & response plan. The most common use case is as a canary, but it absolutely works as evidence of compromise, too. I won't comment on th
5.
by lvh 2y ago
Some of our customers, like Tailscale, are a helluva lot more picky than that.
6.
by lvh 2y ago
Re: hashing: Yes, but I'll leave that one to Paul who is a lot smarter than I am :) Re: QA: can you say a bit more about the type of coverage you're worried about? Is your concern that we'd be missing APIs, or that the storag
7.
by lvh 2y ago
FYI: we're planning a followup post for people who are less interested in the Datomic mechanics and more interested in the usefulness to investigations and other security functions. Informally, I think of it this way: your SIEM has the
8.
by lvh 2y ago
(I'm one of the founders of Latacora and reviewed the post.) If any of you are at Heart of Clojure, I'll be there both wearing my Latacora hat and my Clojurists Together hat :)
9.
Datomic and Content Addressable Techniques(latacora.com)
166 points by lvh 2y ago|40 comments
10.
by lvh 2y ago
I don't know if I count as a "feline friend", but: SIDH kept the DH shape. Being able to upgrade the protocols we had relatively closely is appealing. "Structure is useful but seems precarious" wasn't exactly s
11.
by lvh 2y ago
We did an updated version of the Cryptographic Right Answers for PQC. Given how quick the field is moving, I'm sure we're going to have to edit it a bunch :) https://www.latacora.com/blog/2024/07/29&
12.
by lvh 2y ago
These standards are developed out in the open. Are you suggesting a true backdoor, or just "the NSA knows something about lattice algorithms the rest of us don't"?
13.
Cryptographic Right Answers: Post Quantum Edition(latacora.com)
109 points by lvh 2y ago|52 comments
14.
by lvh 2y ago
The additional information you need is that that's what Thomas Wouters does (and has done for as long as I've known them, which is many, many years).
15.
by lvh 3y ago
You should try C-f "Chinese".
16.
by lvh 3y ago
We're talking about chips: stuff optimized for inference and training. It may have a lot of memory, it may be able to perform a lot of operations, but it would be difficult for it to enforce high-level concepts like "woke ChatGPT&
17.
by lvh 3y ago
Thanks! I'm glad you liked it. Happy to answer any questions about that talk.
18.
by lvh 3y ago
How do you know this person (Tal Broda) made this? It doesn't seem to list an author.
19.
Our approach to building security tooling(latacora.com)
6 points by lvh 3y ago|0 comments
20.
by lvh 3y ago
They may often be used with small embedded computers, but 1 Coral TPU handily beats even a top-end CPU for the stuff Frigate needs it to do -- and it does it at minuscule power draw. Sure, it's inference-focused, and that means it has
21.
by lvh 3y ago
They sold (and continue to sell) TPUs under the Coral brand, and they're pretty popular for edge inference (e.g. Frigate).
22.
by lvh 3y ago
My daily driver is a 1986 911 Turbo (aka the 930). That's a nearly 40 year old car, they make a similar new infotainment system that works for even older cars. Thing runs like a dream, and they tried very hard to make it "fit&quot
23.
by lvh 3y ago
Good news: you can now, I just installed it and it was easy and fun. https://github.com/PaulWieland/ratgdo But it is external to the device, you're right :) And for some crazy reason this guy is getting a lot of o
24.
by lvh 3y ago
That sounds even dicier than modifying the wall switch, but sure :) There is a part of me that wants to break the damn thing open to hunt for a 3.3V line so I can power the ratgdo without a USB PSU...
25.
by lvh 3y ago
That's fair. Maybe my security background is shining through here. I guess we used to have "slashdotting" but that doesn't generalize well :) I did do some napkin math to quantify how much that bad traffic may have been:
26.
by lvh 3y ago
Sort-of: the newer ones require the physical button to speak the same rolling code protocol the remotes do. So, yes: but you have to modify a real door opener. ratgdo has the advantage that it pretends to be said door opener.
27.
by lvh 3y ago
Perhaps they updated the statement since then, but they're not accusing them of "basically" DDOS: they literally say DDOS now. Which of course prompts the question: is the problem that the CTO doesn't understand what DDO
28.
by lvh 3y ago
A third-party hub would have a similar problem, though, right?
29.
by lvh 3y ago
Why did that software work mostly fine most of the time since 2017? Even Chamberlain admits their blocking is deliberate. Even Chamberlain's external statements suggest this is part of their corporate strategy. Why is Chamberlain'
30.
by lvh 3y ago
My garage was broken into. The open door warning is how I found out.

More ›