phw
Joined 13 years ago
Karma
163
Submissions
36
Member since
Oct 23
[email protected]
View on Hacker NewsRecent submissions
Comment · 10 days ago
There are no guardrails because they could easily be removed and exitmap's intended use case (verifying exit relay integrity) is far more important than its potential for abuse. Besides, the Tor network has seen several DDoS attacks over the years and I'm not aware of any that used exitmap.
Comment · 11 days ago
I built exitmap over ten years ago. Glad to see it's still of use :)
Comment · 3 months ago
I've been building WhyNotLog to answer tricky questions using statistics. Example questions include "what gives my dog allergies?" or "what affects my sleep?".
Available at https://whynotlog.com and promo code HACKERNEWS gives access to the pro plan for six months.
Comment · 2 years ago
An unrelated but practical example: I used to play a competitive ski racing game. You would race a course and upon finishing, your client sent the locally-determined finishing time back to the server, where it would end up on the global leader board. It was possible to modify the finishing time in-flight, and set it to whatever you wanted because the server had no way to know if a client was lying. To be fair, I did not succeed because the time was still "protected" by a hash whose input I could not be bothered to figure out.
Comment · 3 years ago
In case it's helpful: I'm maintaining a tool kit that makes it possible to run unmodified, general-purpose code inside Nitro enclaves:
https://github.com/brave/nitriding
Comment · 3 years ago
Brave Software | Security/Privacy Researcher | Remote (in-office also possible)
Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy ads and trackers by default, a private search engine with a truly independent index, a browser-native crypto wallet, and a private ad network (opt-in!) that directly rewards you for your attention. And we’re just getting started. Already 50 million people have switched to Brave for a faster, more private web.
Brave is looking for an experienced security/privacy researcher to join Brave’s research team to develop new ambitious security and privacy research products and work alongside our engineering teams to implement the results of research into our products. This job involves working side-by-side with researchers, research engineers, engineers, and product managers across multiple departments so Brave’s research findings can benefit millions of daily active users around the world. The Researcher will be responsible for a wide range of privacy and security research areas, including privacy-preserving analytics, trusted computing, and detecting and fighting fraud. They should have a passion for helping protect users’ privacy and security.
https://brave.com/careers/?gh_jid=4761953
Feel free to reach out if you have questions. My email address is in my profile.
Comment · 3 years ago
I've been working on a book for new Ph.D. students:
https://research-power-tools.com
It's 95% done. Most of the (unedited) content is available for open review: https://nymity.ch/book/
Comment · 4 years ago
Brave Software | Security Researcher | Full Time | Remote
Brave is on a mission to protect the human right to privacy online. We’ve built a free web browser that blocks creepy ads and trackers by default, a private search engine with a truly independent index, a browser-native cryptocurrency wallet, and a private ad network (opt-in!) that directly rewards you for your attention. And we’re just getting started. Already 50 million people have switched to Brave for a faster, more private web.
Brave is looking for a Security Researcher to join Brave’s research team to help with both developing new ambitious research ideas and in transferring advanced research prototypes into Brave products. This job involves working collaboratively with both researchers and developers to design, develop, and implement new systems for preserving user security and privacy. Learn more about the Brave Research team here.
For more information: https://brave.com/careers/?gh_jid=4091909
Comment · 4 years ago
Consider adding Tor onion services to that list. The idea is that you run a Tor daemon that starts an onion service which can expose any TCP-based service. Communication is facilitated via another node, which makes it possible to host onion services behind NAT.
Comment · 4 years ago
I've written a few paragraphs on the topic. Maybe it's helpful:
https://nymity.ch/book/#make-your-code-public
Comment · 5 years ago
UAP sightings are rarely taken seriously, which is no surprise considering that 99% don't hold up against any kind of scrutiny. There are however a number of credible sightings, the 2004 USS Nimitz incident being the most well known. Unfortunately, studying UAPs in an academic context is still mostly career suicide, so exploratory and speculative work like uaptheory.com can only be found at the fringes. As physicist Avi Loeb said before: if we don't look, we will never find anything. If only we could take the topic more seriously, we may eventually find that the Fermi Paradox is not a paradox after all.