🦞🌯 Lobster Roll

Stories by indolering

Why are true and false so large? (unix.stackexchange.com)
The World of OCR (C. 1960) [video] (youtube.com)
"Why don't you use dependent types?" (lawrencecpaulson.github.io)
StarMalloc: verified memory allocator (dl.acm.org)
LionsOS Design, Implementation and Performance (arxiv.org)
seL4 2025 Playlist (youtube.com)
LionsOS Design, Implementation and Performance (arxiv.org)
Fuzzcheck: structure + coverage guided fuzzing for Rust (github.com)
Unikernels: The Next Stage of Linux's Dominance (dl.acm.org)
Almost all we know about Browser Security in one paper [2017] (cure53.de)
NSA and IETF, part 3: Dodging the issues at hand (blog.cr.yp.to)
Update on JS verification tool JaVerT
The authors (finally) published their code and sent me the following note: > Here's the link for a public repository with the POPL'19 version of JaVerT on GitHub: > >https://github.com/javert2/JaVerT2.0 > > You can also download our POPL artifact (in the form of a virtual machine) using the ...
TAG: Tagged Architecture Guide (dl.acm.org)
The Ada++ Programming Language (adapplang.com)
Google: Software is never going to be able to fix Spectre-type bugs (arstechnica.com)
IELE: Formally verified Ethereum VM based on LLVM (runtimeverification.com)
Report on Secure Compilation Research (drops.dagstuhl.de)
KOI8-R, a phonetic Russian text encoding based on Morse code: "Русский Текст" -> "rUSSKIJ tEKST" (en.wikipedia.org)
Are CRDTs suitable for shared editing? (blog.kevinjahns.de)
Optics vs copper interconnect technology from the perspective of Thunderbolt 3 (sci-hub.tw)
TS*: Gradual Typing Embedded Securely in JavaScript [2014] (prosecco.gforge.inria.fr)
I can't find a source code repo, but I managed to track down a [slidedeck](https://www.slideserve.com/stamos/gradual-typing-embedded-securely-in-javascript) and a (broken) [tutorial](https://rise4fun.com/FStar/tutorial/tsStar) with some code samples.
Survey Paper: Formal Methods for Web Security (2016) (dais.unive.it)
DOI: [https://doi.org/10.1016/j.jlamp.2016.08.006](https://doi.org/10.1016/j.jlamp.2016.08.006)
CHERI: The Arm Morello Board (cl.cam.ac.uk)
Approximate Normalization for Gradual Dependent Types (arxiv.org)
JaVerT 2.0: Symbolic Execution for JavaScript (doc.ic.ac.uk)
They bury the lead a bit: JaVerT now has the ability to perform symbolic verification of contracts in the form of "tests" written in plain JavaScript. It's getting close to something that is usable by mortal developers.
SeL4 Summit 2024 Playlist (youtube.com)
Trade-offs of Using Compilers for Java (AOT/JIT < JIT + Caching < JIT Server) (infoq.com)
[Slides](https://drive.google.com/file/d/19yaYn4rMyD5E39ZDEchvTgQ_bDOTVZ5P/view?usp=sharing)
Are Code Contracts going to be supported in .NET Core going forwards? (2018) (github.com)
SafeStrings: Representing Strings as Structured Data (arxiv.org)
Landlock: Userspace Sandboxing for Linux (landlock.io)
* Uses and extends eBPF, making it stackable with existing LSMs (like SELinux or AppArmor). * [Latest patch][LKML] revision submitted to the Linux kernel mailing list. * [FOSDEM 2018 talk][fosdem] with overview of Landlock and explainer on how per-file access control works. [LKML]: https://lkml...