Viewing profile — e79

If you’re interested in computer science, have you ever looked at the Software Foundations course by UPenn? It follows a similar approach of having you build all sorts of fascinati…

If you were to participate, could Google then refuse to hire you or generally do business with you?

I don’t think RNG or modular math were really the culprits here. PuTTY’s k value generation is deterministic and the biasing was caused by a mismatch of integer sizes and the resul…

Updated link with corrected title: https://ericrafaloff.com/biased-nonce-generation-in-putty-fo...

Good catch! I wrote the title before I had dug into the matter and forgot to update it. Thanks for pointing that out. Any k generation and subsequent signature generation are going…

I did a bit of a deep dive into this, in case anyone is interested. I think reading the code is a great way to understand _why_ this vulnerability happened: https://ericrafaloff.co…

I never got diagnosed with COVID, but I was almost certainly exposed. Mine developed suddenly during one of the early peaks in 2020. Unfortunately I was also producing music at the…

For anyone curious about how the exploit worked: https://www.aon.com/cyber-solutions/aon_cyber_labs/an-analys...

I think my ideal setup is still the Push 2. You’ve got your mouse and keyboard for more tedious workflows and VST usage, and then the Push as an expressive platform to jam with and…

Agreed, but with the caveat that depressed people often struggle with making the changes they need the most. Similar thing with obesity. There often needs to be some kind of interv…

It’s fascinating how many potential modalities are at play with depression. Serotonin, inflammation, direction of brain signals. This suggests that depression may be a label that p…

This is not my experience in NYC at all. For example, waiting to see a sleep specialist took me about six months. An endocrinologist took about the same. In both cases I spent hour…

The contest approach wouldn’t necessarily hold rigor, because it doesn’t formally prove that all 2-MAXSAT problems can be solved using this algorithm. Just that one or more cherry-…

Too bad it’s Windows only. I would love an open source alternative to TouchDesigner.

This is a lot less depressing when you consider that vaccines have shown astounding results so far at preventing disease. COVID is a lot less scary if you’re extremely unlikely to …

I generally think of it as “cheap” inclusivity. Companies looking to cast the biggest virtual signal with the smallest amount of capital. On paper it looks nice enough, but dig a l…

The “smart guessing” approach reminds me a lot of SAT solving. Certain search problems become easier when you introduce randomness and clever heuristics to optimize and guide your …

Re #3: I held off investing significant money into Bitcoin because I was convinced that the forces of the market would pull it back down to $10 where it belonged soon enough. I’ve …