Live data from Hacker News

Viewing profile — thinkmoore

thinkmoore

HN member
Joined
Fri, Jun 14, 2013, 4:25 AM UTC
HN karma
292
Public activity
97 items

About thinkmoore

I'm a Principal Scientist at Galois. I study the intersection of Programming Languages and Security: how can we use language design and formal reasoning techniques to build secure software. My CV is online at http://thinkmoore.net.

Recent public activity

  1. comment
    Comment #46163791

    The political appointees pushing this new policy have not presented any evidence of these deaths beyond a vague assertion in a leaked internal email. They have not provided that ev…

  2. comment
    Comment #45847614

    Recalls happen because they are required by regulators...

  3. comment
    Comment #43696260

    Also discussed here (but flagged, of course...): https://news.ycombinator.com/item?id=43691142

  4. comment
    Comment #43435071

    Yes, that's a good way to think of it---we need to come up with a valid / reasonable context in which to explore the function at all, which will subsequently let us look for other …

  5. story
  6. comment
    Comment #32668990

    Part 1: https://galois.com/blog/2022/08/cclyzer/

  7. story
  8. comment
    Comment #32611929

    Developer here: "not actively developed" might be a little strong---we currently don't have resources dedicated to quickly responding to issues, but we're not planning on abandonin…

  9. comment
    Comment #17487054

    Various components of the SGX system (launch approval, remote attestation quote signing, etc) are implemented as Intel provided enclaves. AESM manages those enclaves and provides a…

  10. comment
    Comment #16268762

    Who is "you"? From the terms of service: "Absent a reasonable legal justification not to redeem Tether Tokens, and provided that you are a fully verified customer of Tether, your T…

  11. comment
    Comment #16268689

    My understanding is that their terms of service say that they have no legal obligation to do so, regardless of where you have a bank account...

  12. comment
    Comment #14157860

    There is some very cool language design work from Chinawat Isradisaikul and Andrew C. Myers at Cornell on adding very powerful matching constructs to a Java-like language. Paper: h…

  13. comment
    Comment #14114289

    Database choice aside, I'm shocked that this wasn't noticed when designing the app... It's clearly not a design decision because they refer to it as an error later in the paragraph…

  14. comment
    Comment #14060102

    Coming soon to an insurance broker near you: https://www.newsroom.co.nz/@health--science/2017/04/04/17972... Of course, this article is about New Zealand, but I will not be surpris…

  15. comment
    Comment #14060056

    Oh neat, do you have a list of those? /sarcasm...

  16. comment
    Comment #13940145

    I think the alternative being suggested is that rm shouldn't accept a string that magically can reference anything in the filesystem... In our capability-based shell scripting lang…

  17. comment
    Comment #13811388

    I (with some colleagues) developed a capability-based shell scripting language ( http://shill-lang.org ) that makes it easier to apply the Principle of Least Privilege to system ad…

  18. comment
    Comment #13521674

    There is some great existing work in the academic community on better models for web interactions: https://cs.brown.edu/~sk/Publications/Papers/Published/mk-in...

  19. story
  20. comment
    Comment #13196820

    In a Typed Racket program that does not import any untyped racket code, there is no runtime enforcement. Runtime contracts are only introduced at the boundary between typed and unt…

  21. comment
    Comment #12928033

    Well, for one, that he chose to say "will be taken away" when responding to this criticism, instead of "should be taken away," implying that he thinks they ought to be taken away (…

  22. comment
    Comment #12915720

    Uh, we are paying it back? Why would any sensible household or business pass on ~1% APR loans to fund investment? Our interest payments are less than 1.5% of GDP (down from 3% of G…

  23. comment
  24. comment
    Comment #12766510

    This is among the many use cases we're hoping to solve with our secure shell scripting language Shill ( http://shill.seas.harvard.edu/ ). We're currently working on a commercial ve…

  25. story