Viewing profile — ballard

It's easy to be an armchair critic dispensing unasked-for advice but harder still to just listen.

In formal, established companies this does exist: it's called "decision support analysis (or researcher)." Whether a particular staff person is steeped in academic research, which …

Impossible to calculate considering "truth" is not fact. Also war on drugs: http://boingboing.net/2014/02/27/us-prison-population-up-800...

Contrarian clickbait for sure. Also couldn't load the page.

For embedded/industrial applications the future is in domain-specific operating systems that are JEOS by virtue of not compling unneeded syscalls. OSes like Linux have way too many…

Does "ultimatum" and "raft of complicated last-minute changes" not raise anyone else's tinfoil paranoia alarms? Those commits should get significant scrutiny, because it sounds lik…

Choose one of my adventures: - Deploying a financial app through 4 bastion hosts by keeping Russian doll ssh tunnels up (clients outsource IT bouncing across the world to get to th…

Ah yes exactly. The "prove them wrong" part, it's important not to attack the accuser but demonstrate that their claims don't hold up. Also if there is something to claims, admit i…

Seems the same as google hangouts more/less. Looking for something that's 1:N anonymously without a viewer plugin... has a page somewhere that shows a live feed: vimeo, ustream or …

Denying something doesn't carry the same weight and it seems like a PR move, whereas "actions speak louder than words."

Right now, researchers are putting together functional brain structure maps combining fMRI, SPECT and PET scans for Alzheimer's research. Apart from the inconvenience of wearing a …

They're not, never will be. Especially if there were a concerted effort to put together a GNU/Linux like open source hardware stack to get rid of the fear, uncertainty and doubt of…

BusinessWeek (2013) also has a video interview at McMoon: http://businessweek.com/videos/2013-08-15/abandoned-mcdonald... Also yelp reviews of the former McD's (map position is wro…

This is a dupe because it's already synced to git mirrors of openbsd sources. http://anoncvs.estpak.ee/cgi-bin/cgit/openbsd-src/tree/lib/l... "When I grow up..." Tandem multiplicat…

Sounds good because it suggests sec industry disengagement. Probably simpler to do that and maintain it as a set of minimal patches to LibreSSL, because not many people need it. Ei…

I guess it begs the question (FIPS mode seems to fail the "talk to a cryptographer rule"): why don't/aren't sec folks more involved to assure standards are meaningful? Was this a N…

Definitely. It'll be expensive commercial open source w/ a subscription and delayed to pass FIPS. And LibreSSL will still be more secure.

Yup. And it's simpler and therefore more secure to support a smaller codebase without magical modes.

FIPS mode is like a clipboard audit. It appears to fulfill a requirement like A+ certifications do for hiring qualified candidates, but instead puts blind faith in process ahead of…

The problem is that being abrasive without displaying a clear, correct opinion won't lead to greater influence. The latter stance is the important bit. Security projects need adver…

Abrasiveness and being opinionated are mostly orthogonal. I think this is more of a correct opinion (to reduce whale blubber) than intentionally pissing people off.

This is great news. FIPS mode is as my grandfather would say: "eyewash." Something that appears to address something by checking boxes on a clipboard audit but doesn't provide anyt…

FIPS mode is as my grandfather would say: "eyewash." Something that appears to address something by doesn't. (FIPS mode is a "clipboard audit.")