matu3ba

5 ms·

1.
by matu3ba 7mo ago
> Engineering isn't free, models tend to grow obsolete as the price/capability frontier advances, and AI specialists are less of a commodity than AI inference is. I'm inclined to bet against approaches like this on a princ
2.
by matu3ba 7mo ago
The ideas sound intriguing at first sight, so I have some questions: 1 Do you have a mathematical formalization and/or why not (yet)? 2 What would be necessary as data/proof to indicate/show either result? 3 Did you try to ap
3.
by matu3ba 8mo ago
Sorry, it's 4am and I should sleep, but got very interested. Thank you very much for the excellent overview. This explains all my current questions.
4.
by matu3ba 8mo ago
1 Does this mean that Sledgehammer and Coqhammer offer concolic testing based on an input framework (say some computing/math system formalization) for some sort of system execution/evaluation or does this only work for hand-rolled
5.
by matu3ba 9mo ago
> we could design something faster, safer, overall simpler, and easier to program I do remain doubtful on this for general purpose computing principles: Hardware for low latency/high throughput is at odds with full security (absence
6.
by matu3ba 9mo ago
CHERI on its own does not fix many of the side-channels, which would need something like "BLACKOUT : Data-Oblivious Computation with Blinded Capabilities", but as I understand it, there is no consensus/infra on how to do effi
7.
by matu3ba 9mo ago
The blog looks nice, especially having simple to understand numbers. To me the memory subsystem articles are missing the more spicy pieces like platform semantics, barriers, de-virtualization (latter discussed in an article separate of the
8.
by matu3ba 9mo ago
Sorry for necro-bumping, but there is a paper doing exactly that besides various other things to eliminate timing channels claiming also to prevent attacks based on speculative execution etc: "BLACKOUT : Data-Oblivious Computation with
9.
by matu3ba 10mo ago
> I still think sans-io at the language level might be the future, but this isn't a complete solution. Maybe we should be simply compiling all fns to state machines (with the Rust polling implementation detail, a sans-io interface c
10.
by matu3ba 10mo ago
What would be more sane alternatives, when it becomes obvious that any side-effect of timing is a potential attack vector? See https://www.hertzbleed.com/ for frequency side channels. I do only see dedicated security cores
11.
by matu3ba 10mo ago
I like the idea of voluntary thinking very much, but I have no idea how to properly formalize or define it.
12.
by matu3ba 10mo ago
> Forming deterministic actions is a sign of computation, not intelligence. What computations can process and formalize other computations as transferable entity/medium, meaning to teach other computations via various mediums? >
13.
by matu3ba 10mo ago
> I mean, we've proven that predicting certain things (even those that require nothing but deduction) require more computational resources regardless of the algorithm used for the prediction. I do understand proofs as formalized det
14.
by matu3ba 10mo ago
My definition of intelligence is the capability to process and formalize a deterministic action from given inputs as transferable entity/medium. In other words knowing how to manipulate the world directly and indirectly via determinist
15.
by matu3ba 10mo ago
Can you recommend a more factual and complete overview on Apple security architecture and bootchain than this bug-ridden article? I'm interested in hardware security (models).
16.
by matu3ba 10mo ago
Money is created and distributed via 1 banking system and 2 government. Are 1 rules, 2 checks and 3 punishment enforced against the banking system and government or only to stabilize and extend those systems? I'd argue the introductio
17.
by matu3ba 10mo ago
> Regulations are practically the only thing standing between the rich and the powerful and their incessant attempt to drive even more wealth into their own pockets at the expense ordinary people's health, wealth, future, welfare, h
18.
by matu3ba 10mo ago
> Call me grumpy and sleep deprived, but every year I look at this talk again, and every year I wonder... "now, what" ? What am I supposed to do, as a programmer, to change this sad state of things ? That depends on your goals.
19.
by matu3ba 10mo ago
What is the most optimal Erlang/Elixir you can think of regarding standardized effect systems for recording non-determinism, replaying and reversible computing? How comparable are performance numbers of Erlang/Elixir with Java and
20.
by matu3ba 10mo ago
> Author completely misunderstands how to use exceptions and is just bashing them. A lot of what he says is inaccurate if not outwardly incorrect. Do you mind to elaborate what you believe are the misunderstandings? Examples of incorrect
21.
by matu3ba 10mo ago
I do agree with point 1 and with most of point 2 besides some more arcane things like intentionally racy memory access and some write-cache eviction instruction not being properly modeled (in for example Rust).
22.
by matu3ba 10mo ago
I would expect more of the opposite for languages offering easy to enable bound checks. Only observing the general trend for when bound checks are available (and used) would be helpful information. Temporal ones will remain tricky to debug
23.
by matu3ba 10mo ago
1 The numbers on memory safety should nowadays separate between spatial ones (bounds-checked in most languages with sane flags) and temporal ones. Temporal ones will be lower than 70%. 2 The article does not mention (compilation) time costs
24.
by matu3ba 11mo ago
Thanks. Sounds like a good developer experience attempt.
25.
by matu3ba 11mo ago
Scheduling means to generate enumerations/combinations of possible ui events. If interleaving events are possible and to what degree, then providing a notion of that and/or at least documentation would be helpful. Yeah, although I
26.
by matu3ba 11mo ago
Since you think the UI scene is maturing: Where do I find 1. design docs and 2. debugging infra docs (Validation, Testing, Stepping, Logging, Tracing, Recording, Scheduling, Reversal Computing as typical ones) and/or how to apply them
27.
by matu3ba 11mo ago
> inherent to the problem domain that you're working with and which there is no way around for I'd phrase it to reasonable taken trade-offs for customer/user support and/or selling products. > going for a microserv
28.
by matu3ba 11mo ago
> right now I want to actually make a super easy to install memory safe sshd distro That is amazing and looks like an excellent first use case.
29.
by matu3ba 11mo ago
Is this your last design iteration? Benchmarks would be great and some performance justification based on the design (techniques). Are all possible memory problems checked, which to me include those listed in https://matu3ba.gith
30.
by matu3ba 11mo ago
1 Do you have benchmarks for the RISC-V "physical memory protection unit" and/or where can I read more? I'm looking ideally for things like type 1/2 hypervisor or Kernel tutorials for RISC-V to exemplify technical t

More ›