Viewing profile — gtank

Gotcha. I was wondering about both - it seems possibly useful to be able to automate my authZ and groups in ShareWith, but mostly I would like to see what a Zanzibar-aaS can do. Gu…

Super cool. I've been waiting for someone to pick up Zanzibar since the paper came out! What are your plans for surfacing the policy relations to developers?

This is a user-facing implementation of https://wiki.mozilla.org/Security/Binary_Transparency , built on top of Let's Encrypt ( https://letsencrypt.org/ ) and exisiting Certificate…

It’s enough because of the underlying PAKE technique. The passwords do not directly become the key, and an unsuccessful bruteforce attempt breaks the session. PAKE isn’t really new…

Author here, glad you enjoyed the talk! Looking into it more I noticed that there's a Go implementation[1] that is noted to be constant-time with a !amd64 build tag. So it isn't ju…

URL mistake. Direct link: https://www.nccgroup.trust/globalassets/our-research/us/whit...

You should see their (much faster!) subsequent paper. It develops an entirely new mapping to take advantage of Intel vector extensions, then invokes Valefor instead of Bael.

There's a lot more to defeating traffic analysis than random padding: http://freehaven.net/anonbib/cache/oakland2012-peekaboo.pdf

CoreOS has released one: https://github.com/coreos/go-oidc We're currently using it in our own OAuth/OIDC identity provider.

I have a very similar set of good memories. I put more time into deobfuscation, updating, detection evasion, and (eventually) server emulation than bots per se. My contact info is …

I highly endorse this sort of thing! Reverse engineering online games is how I really got started with computers. It's a great teaching tool because the reward loop is short and im…

People who object to javascript crypto usually mean that in the context of "browser javascript", which is fraught with peril [1]. The javascript language itself isn't necessarily t…

I've been interested in formal treatments of ledgers for a while now. Does anyone know if other work has been done in this area?

Development of mlpack has been going on for at least 7 years and my impression is that it's pretty mature. It was originally affiliated with a lab at Georgia Tech, where its curren…

Speaking for northern NM: I was in Albuquerque recently and can't say enough of the hiking nearby. The city actually backs into the Sandia Mountains, which are full of good trails.…

I've spent tons of time in Greenville. The wholly-walkable downtown hosts lots of restaurants (recommended: The Lazy Goat), coffee shops, the Greenville Symphony Orchestra, and an …

As a former longtime resident of the south, including a few years in Tuscaloosa (we seem to have overlapped - 2008-2010), I'd advise against judging the region by the standard of T…

It's the default port for running a local rack app (sort of a ruby-web-stuff middleware). For specific values of "developer" :)