phw

6 ms·

1.
by phw 2mo ago
I've been building WhyNotLog to answer tricky questions using statistics. Example questions include "what gives my dog allergies?" or "what affects my sleep?". Available at https://whynotlog.com and prom
2.
Validating Data in Go(nymity.ch)
1 points by phw 5mo ago|0 comments
3.
by phw 2y ago
An unrelated but practical example: I used to play a competitive ski racing game. You would race a course and upon finishing, your client sent the locally-determined finishing time back to the server, where it would end up on the global lea
4.
by phw 3y ago
Location: Chicago, IL Remote: Yes Willing to relocate: Yes Technologies: Go, Python, JavaScript, React, PostgreSQL, Docker, k8s Résumé/CV: https://files.nymity.ch/resume.pdf Email: identityfunction@gmail.c
5.
Work and Emotional Management(nymity.ch)
1 points by phw 3y ago|0 comments
6.
Moving from Academia to Industry(nymity.ch)
2 points by phw 3y ago|1 comments
7.
by phw 3y ago
In case it's helpful: I'm maintaining a tool kit that makes it possible to run unmodified, general-purpose code inside Nitro enclaves: https://github.com/brave/nitriding
8.
by phw 4y ago
Brave Software | Security/Privacy Researcher | Remote (in-office also possible) Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy ads and trackers by default, a privat
9.
by phw 4y ago
I've been working on a book for new Ph.D. students: https://research-power-tools.com It's 95% done. Most of the (unedited) content is available for open review: https://nymity.ch/book/
10.
by phw 4y ago
Brave Software | Security Researcher | Full Time | Remote Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy ads and trackers by default, a private search engine with a trul
11.
by phw 5y ago
Consider adding Tor onion services to that list. The idea is that you run a Tor daemon that starts an onion service which can expose any TCP-based service. Communication is facilitated via another node, which makes it possible to host onion
12.
by phw 5y ago
I've written a few paragraphs on the topic. Maybe it's helpful: https://nymity.ch/book/#make-your-code-public
13.
by phw 5y ago
UAP sightings are rarely taken seriously, which is no surprise considering that 99% don't hold up against any kind of scrutiny. There are however a number of credible sightings, the 2004 USS Nimitz incident being the most well known.
14.
by phw 5y ago
There's research on the same idea but with a (presumably) sounder method behind it: https://sandlab.cs.uchicago.edu/fawkes/
15.
by phw 5y ago
> IEEE seems to have no problem with this paper though. IEEE is just the publishing organisation and doesn't review research. That's handled by the program committee that each IEEE conference has. These committees consist of
16.
by phw 7y ago
You generally start as an assistant professor, which means you are on the tenure track but you don't yet have tenure. After several years, if you did well, you get promoted to associate professor, meaning that you got tenure. Finally,
17.
by phw 7y ago
We used an online survey to study this, and some other questions: https://nymity.ch/onion-services/ Figure 10 shows that most users (52%) use bookmarks, followed by locally-saved text files (37%), and referral to trust
18.
by phw 8y ago
This idea has since been applied to several other domains. Last year we had a look at all archived RSA keys of Tor relays: https://nymity.ch/anomalous-tor-keys/ We found that several thousand relays that shared prime f
19.
by phw 8y ago
Ideally, a geolocation system should also work in an adversarial setting, when somebody is trying to spoof their geolocation. We recently learned that some VPN providers do that, to appear to have proxies in more countries: https:/&#x
20.
by phw 9y ago
If the SYN queue is more than half full, the kernel (used to?) adapts the number of SYN/ACK retransmissions to mitigate the load. Interestingly, this opens a side channel that can be determined remotely, and used to measure packet filt
21.
by phw 9y ago
I'm one of the authors. You are right, these are the only onion services that were most likely targeted. The others are part of our publicly available dataset, but most likely false positives.
22.
by phw 10y ago
Here's a summary that's a bit easier to digest: https://blog.torproject.org/blog/learning-more-about-gfws-ac...
23.
by phw 10y ago
Citation needed. I have been hosting various IEEE papers on my websites for years and have never heard from IEEE. My understanding is that CS publishers tolerate researchers hosting their own papers, but I'm very interested in evidenc
24.
by phw 10y ago
The bots in the "botnet problem" were connecting to a hidden service that was hosted in the Tor network. That isn't quite the same thing as bots that connect to hosts outside of Tor. Therefore, this isn't an issue for Cl
25.
by phw 11y ago
Raspberry Pis don't make very good relays. They don't have enough CPU power to relay non-trivial amounts of data, and slow relays that clog easily aren't useful to the network.
26.
by phw 11y ago
The Library Freedom Project is working on deploying exit nodes in libraries: https://libraryfreedomproject.org/
27.
by phw 11y ago
There are 2^80 possible onion domains and only ~10,000 are currently used. Simply brute-forcing the entire namespace isn't effective, especially because the verification step is a web service that has to try and fetch an onion service
28.
by phw 11y ago
We have a discussion on this in Section 5.6 of our paper: https://nymity.ch/active-probing/imc2015.pdf By "hijacking" we mean that an entity in the network is "borrowing" IP addresses meant for Inte
29.
by phw 12y ago
That's entirely possible and wouldn't be the first time that an exit relay's upstream or data center is responsible for MitM attacks.
30.
by phw 13y ago
That's a good point. It's not possible right now (unless you wrap it into a shell script) but we want to add some sort of "continuous scanning" option over the coming days/weeks.

More ›