Email or username:

Password:

Forgot your password?
lcamtuf :verified: :verified: :verified:'s posts Back to profile
10 posts total
lcamtuf :verified: :verified: :verified:

Ah yes, I remember buying that textbook
3 September at 4:29 | Open on infosec.exchange
Show previous comments
shimst3r

@lcamtuf "Category theory for the seasoned category theorist who lost all interest in communicating with non-category theorists but has to pretend like they are to get at least one grant per year to pay for heating and food"

3 September at 6:27 | Open on chaos.social
Shane Celis

@lcamtuf @xameer AUTHOR: I will prove to others that _I_ know the thing!

3 September at 6:34 | Open on mastodon.gamedev.place
Ken Shirriff
lcamtuf :verified: :verified: :verified:

Liked the product? Be sure to leave a positive review.
9 June at 19:20 | Open on infosec.exchange
lcamtuf :verified: :verified: :verified:

OK, this is a silly but trippy post - Sir, there's a cat in your mirror dimension:

lcamtuf.substack.com/p/sir-the

27 April at 16:05 | Open on infosec.exchange
Artificial Stupidity

@lcamtuf this case, when science seems like magic

27 April at 16:10 | Open on lor.sh
lcamtuf :verified: :verified: :verified:

OK, so here's my slightly more eloquent take on the xz thing, complete with a zinger closing paragraph:

lcamtuf.substack.com/p/technol

30 March at 2:45 | Open on infosec.exchange
Show previous comments
Wyre

@lcamtuf@infosec.exchange I hear you and I think what you're saying is the real villain is systemd.

30 March at 6:38 | Open on cyberia.dms100.net
Force of Habit

@lcamtuf @jerry If only someone would have a sleeping defensive security podcast and could reactivate it. Why not, with a guest this time.

30 March at 7:02 | Open on infosec.exchange
Åki 🐐

@lcamtuf
„You probably can’t build a career on being very familiar with some boring, old dependency that’s just taken for granted by everyone else.“
That’s the point and the failure of the whole business. Throw money on diligent people who constantly creates new stuff, but disregard the solid, „boring“ infrastructure.

There‘s a crucial difference between being lazy and acting responsible - even if both end up in doing nothing for long time.

@lcamtuf
„You probably can’t build a career on being very familiar with some boring, old dependency that’s just taken for granted by everyone else.“
That’s the point and the failure of the whole business. Throw money on diligent people who constantly creates new stuff, but disregard the solid, „boring“ infrastructure.

30 March at 7:17 | Open on digitalcourage.social
lcamtuf :verified: :verified: :verified:

The unsung heroes of today are all the backdoor authors who do proper benchmarking and profiling, so that they don't get caught because SSH logins are too slow.

29 March at 18:52 | Open on infosec.exchange
Maybe(oz)

@lcamtuf let's add that to the debrief^W retrospective under "what we learned".

29 March at 19:10 | Open on mastodon.social
Parade du Grotesque 💀
lcamtuf :verified: :verified: :verified:

Did you ever wake up in the middle of the night wondering what would happen if you applied JPEG-style lossy compression to text?

Well, here's the tool you've been waiting for - The Text Lossifizer: lcamtuf.coredump.cx/lossifizer

17 March at 0:31 | Open on infosec.exchange
Show previous comments
Joby (chaotic good)

@lcamtuf it would be fun to try a keymap that puts letters close to their common typing error neighbors. Lossy compression that can be further improved by applying automatic spellchecking.

18 March at 5:03 | Open on hachyderm.io
Lucent Maven Katanova

@lcamtuf
Compression implies something else.

I would say this is a kind of lossy data transmission.

Compression would suggest a restricted character set intended to convey the same message.

18 March at 5:47 | Open on social.coop
RealGene ☣️

@lcamtuf
Excuse me, but I don't see it getting any smaller…

18 March at 9:51 | Open on mastodon.online
lcamtuf :verified: :verified: :verified:

This is a pretty good quote from Matt Levine:

"I used to write a lot about crypto. The reason I liked writing about crypto is that it seemed to be rediscovering all of regular finance from first principles, quickly, in public. It was a fabulous laboratory for understanding financial structures. If you wanted a public demonstration of why, I don’t know, infinitely leveraged shadow banks were bad, you could wait 20 minutes and crypto would give you one."

I made the same point before: the most interesting part of the phenomenon wasn't that it's necessarily good or bad, that it's energy-hungry or not - but that you're getting an empirical validation of many of the crusty old principles of "classical" finance. Funnily, delivered to you by the folks who rejected all that dogma in the first place.

This is a pretty good quote from Matt Levine:

"I used to write a lot about crypto. The reason I liked writing about crypto is that it seemed to be rediscovering all of regular finance from first principles, quickly, in public. It was a fabulous laboratory for understanding financial structures. If you wanted a public demonstration of why, I don’t know, infinitely leveraged shadow banks were bad, you could wait 20 minutes and crypto would give you one."

3 January at 19:42 | Open on infosec.exchange
Show previous comments
rateexportpilot

@lcamtuf the man is a national treasure. Money Stuff is the only newsletter I have ever signed up for that I legitimately read every day.

7 January at 15:30 | Open on infosec.exchange
Claudius Link

@lcamtuf
Would you share the source of this quote?
I would like to read more 😀

7 January at 19:52 | Open on infosec.exchange
abadidea

@lcamtuf my husband is a financial lawyer and he did his master’s thesis on this stuff. he’s both a traditional finance expert and a cryptocoin expert and owns zero coins, that should be a hint…

16 January at 9:06 | Open on infosec.exchange
lcamtuf :verified: :verified: :verified:

I hate Elf on the Shelf. I think it teaches children that it's OK to live under constant surveillance. Why not come up with a more benign explanation, such as that Santa is just one of many parties buying behavioral information from an online data broker?

18 Dec 2023 at 18:29 | Open on infosec.exchange
Show previous comments
Liam Reimers

@dan Yeah, rules-as-written, the Elf is a fascist. He plays a different role at our house - a bringer of snacks, a player of tricks, and eventual confidant. :)

18 Dec 2023 at 20:49 | Open on mastodon.social
Steve Lord

@lcamtuf Santa outsourced his list making to Palantir

18 Dec 2023 at 22:00 | Open on bladerunner.social
Jhooper

@lcamtuf

"Dad, why does Santa only deliver presents on Christmas Eve?"

"It's because he spends the rest of the year in prison for breaking and entering."

18 Dec 2023 at 23:06 | Open on techhub.social
lcamtuf :verified: :verified: :verified:
lcamtuf :verified: :verified: :verified:

You know that horror film staple where the victim is trying to get away from an axe murderer and they turn the key but the car won't start?

Well, it's time to upgrade that trope, so to speak
24 Dec 2022 at 16:37 | Open on infosec.exchange
Show previous comments
Karl Williams

@lcamtuf I'm a software person and I haven't had a car for over a decade but, if I ever have one again, it will have a electromechanical switch to start it, no software involved.

25 Dec 2022 at 23:00 | Open on mastodon.social
gelim

@lcamtuf holly cow that looks like a 2019 something update. What's your take on not updating it?

26 Dec 2022 at 11:32 | Open on infosec.exchange
Sean Eric Fagan

@lcamtuf Another one with Teslas (maybe other EVs, I don't know?) is that they can go into a deep sleep, and can take multiple minutes to wake up enough to be driven.

Every time that happens to me, I think about axe murderers.

22 Jan 2023 at 13:10 | Open on mastodon.cloud
Go Up