Viewing profile — etna_ramequin

I see that Meta’s engineers are still busy and happy to build a dystopia in exchange of money. Damage is already done, they’ve shipped nearly working software to any creep and poli…

That’s a self-defeating definition. Work that can be automated at no marginal cost is economically worthless. Edit for clarity: “worthless” as in “no value add”, its worth is only …

Recently, Yilei Chen reported an attack on a post-quantum cryptography primitive: Learning With Errors (LWE), a hard problem on lattices.[1] Hongxun Wu and Thomas Vidick found a bu…

I spotted a few oddities in the reporting of these ‘secret papers’.[1] The only extract of the report the journalists show is, at the very least, misleading. They’re claiming that …

Still requires special hardware and authentication, AFAICT. Plus, you often have got length (hundreds of km) and connection constraints (e.g., only over fibre optic).

Quantum Key Distribution (QKD) requires special (expensive) hardware, so it really doesn’t solve the problem of key size. Moreover, QKD still requires an authenticated channel, so …

Thanks!

I come from a research/architecture background in security and pivoting to a more operational security role (managing compliance, audits, annual pentests, vulnerability scanning, i…

I dont disagree with this. I just want to highlight that to do this sort of sandboxing in any systematic manner, you’ll always need to go down at the system level. Because here we’…

WDYT of WASM capability system? IMO, it would be a good contender for sandboxing dependencies. However, I haven’t tested it in practice.

You don’t even need unsafe to reproduce unsafe behaviour on Linux. You can just read and write to `/proc/self` and modify memory arbitrarily. If you have `std::fs`, then you have `…

In theory, yes. In practice, TCBs are so big, that DRM solutions based on it are nearly meaningless for general purpose computers.

I’ve seen many widely deployed applications of TPM for security, never for DRM.

Luther’s 95 theses literally condemn « indulgences » as promoting greed… I assume you were making a reference to Weber’s work (the Protestant ethic and the Spirit of Capitalism), w…

Yes, that’s right, thanks!

> What would be better would be a dTPM that is integrated e.g. into a SoC, such that there are no exposed wires anywhere without decapping the SoC. Some systems such as phones work…

> The discrete TPM's threat model was never designed to cover you from attackers using oscilloscope to probe your laptop's SPI bus during the boot process for unencrypted data. I’m…

Sounds like a great idea! What sort of questions did you ask during the interview?

Thanks for the layman’s explanation, I didn’t realise something like that was even possible! What are some use cases for using it? Are they all crypto-currency related?

That’s "good things happen to (some) bad people. Rejoice!" Quite the opposite of what was said above. I don’t consider myself a Calvinist, so I don’t have skin in the game. However…

Yes, please. I’m pretty sure Calvinism says that everybody is corrupted by sin (not just prisoners) and that everybody is in need of God’s grace. There’s certainly nothing about ce…

Thanks for posting! This app has definitely helped me complete many essays!

From a more security security research point-of-view, the paper “Bootstrapping Trust in Commodity Computers”[1] is a very good overview. Although it would necessitate a bit of an u…