293 karma · joined December 5, 2012
The proof must be as succinct as possible so that it's reviewable. It's ok for the same LLM to publish repeatedly, but it's not Ok to drop a bulk 600kb Lean proof.
The proof must build on other works that are similarly bite sized and published before (so that it's incrementally reviewed)
The proof must be published as soon as fully formed, and not in bulk like current LLMs proofs.
compared to say, roughly 1/365 probable downtime window for a 398 days cert lifetime = 0.25% downtime probability
let's pray you don't need to rotate when it's down...
Dan Geer famously said: "Dependency is the root cause of risk"...
PS: even stricter shortlived durations in some context:
Internal/Private 1 – 7 days Corporate VPNs, Internal apps
Ephemeral 5 mins – 1 hour Docker containers, CI/CD runners
Gee... Those who trade privacy for security will get neither (and deserve none?)
Thank you sooo much for making this happen! very happy here
There seems to have many GPS location trackers on the market, are they all based on the same hardware?
"Art is for seeing the world from different perspectives. And also money laundering and tax avoidance."
;-)
It could be VPN originating or maybe Worker originating maybe?
Don’t they have a security.txt and security@ email address?
Looks like posting to social media the full analysis of the attack is the sensible thing to do.
I learned some things. I'll consider making posters of this ;-)
What's the equivalent in python?
They got so much better at advising startups?
Startups are being insulated for real world truth eg. Due to too much funding?
Data is corrupted?
Definitely ground for breakup IMHO.
I was expecting a bit more "Then what" (the rest of the website is okayish).
One thing that also is important is: luck in timing, mass in market.
You can be as daring as you want, if you don't come at the right time for the market, and if the market is not sizable enough, then your effort will be fruitless.
Such crypto backdooring failed in the past, so they're trying to go after the weakest link they can think of. In this case, software publishers.
Yes, there are too much ill conceived attempts against security that in the end will hurt everyone. It's disappointing to see it coming from EU.
Plus they give excellent liquid yellow honey and you can make yummy perfumed donuts with their flowers.
But yeah, it's a pain to get rid of: even if cut, they will regrow nearly endlessly and their thorns are so pointy and durable that they routinely kill tires...
Fun research!
Sorry if it's half a joke, because of course it's not a school per se, but that's the best source for me of great programmers I've seen in my 30+ years dev hiring experience (usually as CTO).
"This content is not available in your country/region."