If I'm forced to choose between sportsball and human rights, the answer is clear: abolish sportsball.
It's not even a choice really.
Remote
Eric McCorkle
@emc2@indieweb.social
mastodon 4.7.3Senior research scientist at a major UARC, (infosec, distributed systems, formal methods, quantum computing). Non-profit employee. Tech industry veteran. Election worker. Irredeemable workaholic.
#compsci / #infosec background, #physicist in training
Technoprogressive, humanist, reformist, social democrat #socdem, pragmatic left-progressive, hard-line pro-democracy, #OpenSource advocate, user, and contributor #OSS. Pro-#LGBTQ+
Opinions are my own and do not reflect those of any organization.
917 Followers
544 Following
50 Posts
Joined April 29, 2022
Matrix:
@eric_mccorkle:matrix.org
Location:
Baltimore, MD, USA
Pronouns:
He/Him
Keybase:
Replying to
@hacks4pancakes@infosec.exchange we built a society that rewards and promotes psychopaths
Replying to
@raganwald@social.bau-ha.us
Words that stick in my head: always look at what someone could become with the right support and guidance.
Replying to
@RnDanger@infosec.exchange
I tend to reserve "machine learning" for what I consider technically rigorous pattern classification.
I consider "AI" to be an unscientific term, and use it to refer to things I consider hype-driven and lacking technical merit.
Don't worry, we're sending our top cyber operations specialist.
Our top cyber operations specialist:
Replying to
@Em0nM4stodon@infosec.exchange
Privacy has been an essential pillar of democratic society, even all the way back to Pericles' funeral speech:
"The freedom we enjoy in our government extends also to our ordinary life. There, far from exercising a jealous surveillance over each other, we do not feel called upon to be angry with our neighbour for doing what he likes..."
Replying to
@ml@ecoevo.social
Practical languages and tools for formal methods in industrial software development. Iterative development, gradual verification, built for how people actually write software.
We need to fix the fact that everything is broken and vulnerable. Beyond that, a body of high-quality, preferably verified open-source software should be a public utility; let's build the necessary precursors to realizing that.
Replying to
@targetdrone@mastodon.social @sophieschmieg@infosec.exchange
It's that, plus the fact that the day you migrate to PQC, all your *future* comms are safe, but all your past comms *will* be vulnerable some day.
If those comms contain other key / authentication materials for other parts of the system, then the Adversary will gain access to those as well.
That, and the unfortunate reality that a lot of orgs will drag their feet on this and you'll have vulnerable crypto in prod probably even after the first utility scale machines.
Replying to
@ActuallyAubrey@void.lgbt wait until one of the kids sees an actual floppy, and goes "oh is that a 3D printed save icon"
Replying to
@skinnylatte
Yep, I grew up around these people, adjacent to, but thankfully not in their cult. Didn't know about the international reach, though.
Replying to
@petealexharris@mastodon.scot
The open source movement is arguably the most potent refutation of the necessity and supremacy of profit motive in the modern world.
It is also arguably the most successful and largest-scale implementation of cooperative enterprise in history- something oft referenced in radical literature and whose possibility is denied by the oligarchs' Randian / lasseiz-faire capitalist ethos with equal zeal.
Replying to
@lina@vt.social
Had to sit through an AI booster talk yesterday I couldn't get out of. At one point, the speaker was like "AI can write boilerplate code for you, accessors and modifiers, and other boring stuff, change names..."
I'm like "Bro, emacs has done that for decades"
Replying to
Replying to
@squirrel @cwebber
When phony stark took over Twitter, I foresaw a need for decentralized infrastructure, predicting that the Fediverse was taking on a task that required a huge SRE org to run. This would eventually cause problems.
Resilient decentralized systems is a research interest of mine, and I'd just had some IR&D projects about this kind of thing end, so I started building.
At this point I have the core of an architecture that could grow into the foundation for something.
Dear Amazon,
If you didn't abuse the ever-loving fuck out of your employees, you wouldn't be bombarding me with ads trying to convince me how good you treat them. I've been around; I know what's up.
But by all means keep wasting money on those ads. I know how to mute my sound, too.
Replying to
@hacks4pancakes
I keep saying "dairy farm", to the point where it's an inside joke.
One of these days I'll actually do it.
Replying to
@sophieschmieg@infosec.exchange @targetdrone@mastodon.social
This is very true, and in fact I would expect targeting more public infrastructure that would allow massive disruption (e.g. Central banks, public utilities in major cities, CAs, etc) to be a better ROI, if you're after disruptive effects.
Replying to
@targetdrone@mastodon.social @sophieschmieg@infosec.exchange
I can't go into too much detail (propin, ndas, etc) but the actual cost of a utility scale machine will be in the hundreds of thousands per day. The time will vary depending on the architecture, but you're looking at order months to hit the P-256 curve. RSA is more of a moving target, but expect similar.
Replying to
@targetdrone@mastodon.social @sophieschmieg@infosec.exchange
Yes, it will be stuff like "we're going to spend the next two months cracking the key agreement on this intercept from such and such embassy we intercepted in 2007", probably for decades after the first utility scale machines exist.
However, I could see seemingly lower-value targets getting hit in order to set up aggregation, supply chain, or other attacks.
Replying to
@petergleick@fediscience.org
Your periodic reminder that genai lacks object permanence, which is a cognitive capacity possessed by nearly all toddlers.
Replying to
@Em0nM4stodon@infosec.exchange
So you actually can do blind cryptographic protocols, where the verifier can't tell what site they're verifying for, and the site can't tell the identity of who is being verified.
I am wondering if publishing these as standards is an effective way to close down this avenue.
@Remittancegirl@mstdn.social I know about Turkish coffee, but not Turkish tea. Is there some special way of making it?
Replying to on infosec.exchange
Replying to on saturation.social
@clive@saturation.social
My personal OS has been QubesOS or FreeBSD since 2001, broken only by a spell of using MacOS for a while. I don't know how to use windows.
Replying to
@asb *sigh* even in this article, no mention of theory, systems, PL. I don't know why this field despises its own fundamentals so much.
Replying to
@clayrat@types.pl @lindsey@recurse.social
"Automated deduction" refers to something very specific, distinct from ai/ml
https://cadeinc.org/
Replying to
@fluffykittycat@furry.engineer @Em0nM4stodon@infosec.exchange
This is a solved problem. You can have salts and a timestamp. The hard part is double-blind verification.
Replying to
@fluffykittycat@furry.engineer @Em0nM4stodon@infosec.exchange
It can be done with both elliptic curve and ML-KEM cryptographic primitives. The details are more than I can explain in 500 characters.
Replying to
@lindsey@recurse.social
I have actually toyed with the idea of referring to automated deduction as "structural AI", and interactive provers as something similar.
Replying to
@Adorable_Sergal@hachyderm.io
It suggests the person saying it doesn't understand the quantum mechanical view of things, and is trying to apply a classical "billiard ball" model where it doesn't apply. Matter at that scale is probability densities; "empty space" isn't really even a thing.
Replying to on hachyderm.io
@skinnylatte@hachyderm.io
That take is spot on. Also, I hope your dart lands.
That would require actual work and skills. This is beyond the ability of the thin-blooded, Hapsburg-jawed nepobabies that staff the journalistic outlets these days.
Anybody seeing wierd "unconstrained generic constant" errors (the ones that make you add "[(); Type::CONST]"), when you've already added those bounds, when you have associated constants on trait elements that have been touched by equality constraints?
I am wondering if this is a known compiler bug.