Nice! A while back I had started something similar for Azure but it never really got traction (or nearly as polished as this!). It's a rough proof of concept but maybe it'll be useful to Azure users:…
Past work in the area by the folks at Immunant (https://immunant.com/) that appears to be on-going https://github.com/immunant/c2rust. I think the project was also DARPA funded for a time.
I got a panicked call from my parents when Facebook deleted my brother's profile, probably 5 or 6 years after he passed away. After looking into just trying to get the profile restored, I came to the same conclusion as…
I've been off work for two weeks to recover from surgery, and have been playing with a couple projects throughout the day between rest and physical therapy: - A home-rolled router/firewall: Using yocto to create a…
Yeah it's a building block for understanding number theory well, which is important in cryptography.
Relatively common nowadays. It used to be delineated as a feature in Intel chips as part of their vPro line, but I think it’s baked in. Generally an IOMMU is needed for performant PCI passthrough to VMs, and Windows…
It's probably no longer maintained, but a former colleague of mine did some work on this for C++: https://github.com/ainfosec/shoulder. Obviously if the docs are lying it doesn't help much, but there was another effort…
I get the reaction, but what about the trust factor of a box you own and have running on the other side of the world? TPM isn’t an evil concept, it’s fairly useful for some scenarios. Coercion to use TPMs, that sounds…
It's been probably 2 years since I've messed with it, but I was still using the tarball download for Xen in OpenEmbedded builds.
As someone noted above the Commercial Solutions for Classified program has been in existence for a long while (probably over a decade). This package is newer but not wildly newer. Installs of the various 'packages' do…
My old team did some work in this area a few years ago. We got the Talos II BMC code to be binary reproducible, and had a go at automating David A. Wheeler's compiler diversification to stop compiler subversion. We…
At least in NY (and probably true of state/local politics in general) this is not necessarily true. These third parties often will choose a D or R that align with their policy goals. It helps candidates in that their…
I think you're largely correct but Google isn't one person so there may be somewhat emergent patterns that work from an SEO standpoint that don't have a solid answer to Why. If I were an SEO customer I would ask for…
What do you suspect will be the practical uses of this? Could it help researchers run experiments to develop better fertility protocols? Or depending on costs, fertility clinics could test various protocols to find the…
Someone already did: https://news.ycombinator.com/item?id=32498435 Overall the timeline doesn't seem implausible to me.
A friend of mine and I explored a similar offering. We've mostly put it on a shelf as it was very duct taped together and we're both short on time. We don't have any monetization plan but would love to hear any…
I'm always a little shocked when I see someone who isn't keeping personal and work devices (and accounts) very intentionally separate.
The flip side of that is it does cost some money to run a monastery, and there aren't a lot of a modern opportunities for them to make money. Nothing wrong with them keeping their trade secret, and not being interested…
I saw you present a version of this in probably 2016 or so at little security conference in DC (maybe platform security conference?). Anyhow your talk was a huge deal for defense contractors doing proposal work at the…
Because it is open source. It's not Free Open Source Software (FOSS) as deemed by some foundation or another. There is a lot of great open source software not included in Linux because of licensing issues (e.g. BSD…
OT: You can do that with Qt. We played with implementing it ourselves for a project about 10 years ago. Since then I think there is an official QPA that will render Qt apps within the browser, and there is the Wt…
Why not? It's not practical for traditional uses of semiconductors, but it has a mechanism to control conductivity.
Keep in mind that there wasn't flexible infrastructure on demand in those days. User run servers was sort of a low cost market based demand scaler for IP owners. If the game is really a dud, they didn't buy N servers…
MS was knee deep in anti-trust negotiations with the DoJ around that time so I imagine acquisitions of that size and scope were off the table. Sega probably was small potatoes financially for MS at the time, but buying…
A previous team I was on ended up with this role. Strong writer with no technical skills joined the team and worked hand-in-hand with engineers fleshing out docs. It was productive for the engineers because they needed…
Nice! A while back I had started something similar for Azure but it never really got traction (or nearly as polished as this!). It's a rough proof of concept but maybe it'll be useful to Azure users:…
Past work in the area by the folks at Immunant (https://immunant.com/) that appears to be on-going https://github.com/immunant/c2rust. I think the project was also DARPA funded for a time.
I got a panicked call from my parents when Facebook deleted my brother's profile, probably 5 or 6 years after he passed away. After looking into just trying to get the profile restored, I came to the same conclusion as…
I've been off work for two weeks to recover from surgery, and have been playing with a couple projects throughout the day between rest and physical therapy: - A home-rolled router/firewall: Using yocto to create a…
Yeah it's a building block for understanding number theory well, which is important in cryptography.
Relatively common nowadays. It used to be delineated as a feature in Intel chips as part of their vPro line, but I think it’s baked in. Generally an IOMMU is needed for performant PCI passthrough to VMs, and Windows…
It's probably no longer maintained, but a former colleague of mine did some work on this for C++: https://github.com/ainfosec/shoulder. Obviously if the docs are lying it doesn't help much, but there was another effort…
I get the reaction, but what about the trust factor of a box you own and have running on the other side of the world? TPM isn’t an evil concept, it’s fairly useful for some scenarios. Coercion to use TPMs, that sounds…
It's been probably 2 years since I've messed with it, but I was still using the tarball download for Xen in OpenEmbedded builds.
As someone noted above the Commercial Solutions for Classified program has been in existence for a long while (probably over a decade). This package is newer but not wildly newer. Installs of the various 'packages' do…
My old team did some work in this area a few years ago. We got the Talos II BMC code to be binary reproducible, and had a go at automating David A. Wheeler's compiler diversification to stop compiler subversion. We…
At least in NY (and probably true of state/local politics in general) this is not necessarily true. These third parties often will choose a D or R that align with their policy goals. It helps candidates in that their…
I think you're largely correct but Google isn't one person so there may be somewhat emergent patterns that work from an SEO standpoint that don't have a solid answer to Why. If I were an SEO customer I would ask for…
What do you suspect will be the practical uses of this? Could it help researchers run experiments to develop better fertility protocols? Or depending on costs, fertility clinics could test various protocols to find the…
Someone already did: https://news.ycombinator.com/item?id=32498435 Overall the timeline doesn't seem implausible to me.
A friend of mine and I explored a similar offering. We've mostly put it on a shelf as it was very duct taped together and we're both short on time. We don't have any monetization plan but would love to hear any…
I'm always a little shocked when I see someone who isn't keeping personal and work devices (and accounts) very intentionally separate.
The flip side of that is it does cost some money to run a monastery, and there aren't a lot of a modern opportunities for them to make money. Nothing wrong with them keeping their trade secret, and not being interested…
I saw you present a version of this in probably 2016 or so at little security conference in DC (maybe platform security conference?). Anyhow your talk was a huge deal for defense contractors doing proposal work at the…
Because it is open source. It's not Free Open Source Software (FOSS) as deemed by some foundation or another. There is a lot of great open source software not included in Linux because of licensing issues (e.g. BSD…
OT: You can do that with Qt. We played with implementing it ourselves for a project about 10 years ago. Since then I think there is an official QPA that will render Qt apps within the browser, and there is the Wt…
Why not? It's not practical for traditional uses of semiconductors, but it has a mechanism to control conductivity.
Keep in mind that there wasn't flexible infrastructure on demand in those days. User run servers was sort of a low cost market based demand scaler for IP owners. If the game is really a dud, they didn't buy N servers…
MS was knee deep in anti-trust negotiations with the DoJ around that time so I imagine acquisitions of that size and scope were off the table. Sega probably was small potatoes financially for MS at the time, but buying…
A previous team I was on ended up with this role. Strong writer with no technical skills joined the team and worked hand-in-hand with engineers fleshing out docs. It was productive for the engineers because they needed…