Viewing profile — nwf

That's only mostly true; Big CHERI (that is, the 64-bit CHERI systems, not CHERIoT) specifically has support for running legacy binaries within capability confinement. It's true th…

FWIW... Morello boards are hard to come by, but there have been efforts to offer cloud-computing style use of them, especially now that bhyve support exists; if you're interested I…

> it doesn't matter too much whether the emulator is CHERI or not since Rust itself lets me express memory safety in the type system You might be interested in a very timely blog p…

> I wonder to what extent moving bounds checks into hardware provides the potential for efficient memory safety. It's great! The CHERI team at U. Cambridge has recently released th…

You don't sign the whole image as a stream, and you don't sign every block. Recursion is your friend! You sign the Merkle tree root, check it once, and then check O(log n) hashes p…

You may be interested in reading, if you haven't, our 2011 position paper on Dyna. (The 2012 paper on what I think you would call propagator networks was fun, but is nothing you do…

Thanks for your response; it does clarify things. But, I don't think I understand your concern about abstract hashing and how it would need to be something fundamentally new. Both …

Agitate browser implementers to add support for magnet: URIs and you can do exactly that without needing to add new attributes to HTML. :) There's a bug for firefox here: https://b…

First off, let me say that I'm always happy to see people thinking about the robustness of scientific data. It's a thing we do not do well at all, at present, and should be much mo…

Unfortunately, the technology you need to do that is not yet finished: https://trac.torproject.org/projects/tor/ticket/9498 ETA: I should have said "one possible technology"; there…

As far as I can tell, openvpn with TLS authentication is vulnerable as it just uses the usual TLS suite. If you use PSKs or the (mis-named?) --tls-auth PSK additional MAC, then you…

Any possibility of adding this kind of functionality to libotr?

While on the topic of clever UDP-based NAT traversal techniques, I think my favorite to date is pwnat [ http://samy.pl/pwnat/ ]. Uses ICMP in a clever way, requires no 3rd party.

A slight disagreement: the advantage of a ZFS online consistency checker would be to help ensure that there are no bugs in ZFS. It appears that ZFS lacks a full consistency checker…