stefan brunthaler's Avatar

stefan brunthaler

@sbrunthaler.bsky.social

Language-based security is the continuation of compiler construction by other means. PLs, pretty much all things compilers. (Just a blackboard from systems programming 101. Is it tacky? 100pct yes; but then again, did you *really* come for nice pictures?)

41 Followers  |  28 Following  |  17 Posts  |  Joined: 25.11.2024  |  2.0562

Latest posts by sbrunthaler.bsky.social on Bluesky

Preview
Add a "don't scroll with load new" option Β· Issue #976 Β· bluesky-social/social-app Β· GitHub I like to pick up where i left off if I left app for a few hours. What I don't like is that the load new just auto scrolls to top, which then leaves me having to read in reverse until I "catch up" ...

Bluesky still doesn't support to continue from where I left off. Whilst checking for alternative clients, I found github.com/bluesky-soci... (only two years in the making)

13.06.2025 14:05 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I think there is space for updating Landin's classic: The next 700 smart contract languages.
(In particular highlighting security problems that inevitably occur since deeper knowledge of proglangs hasn't proliferated as much as it should.)

13.06.2025 13:53 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Post image

-Lazarus Group ran a watering hole + zero-day combo attack
-Targets included at least six South Korean tech companies
-The zero-day was in CrossEx, a browser security tool

securelist.com/operation-sy...

24.04.2025 11:19 β€” πŸ‘ 12    πŸ” 5    πŸ’¬ 1    πŸ“Œ 0
Preview
Socket Acquires Coana to Bring Reachability Analysis to Ever... Socket is bringing best-in-class reachability analysis into the platform β€” cutting false positives, accelerating triage, and cementing our place as th...

Coana has been acquired by Socket! 🀩 From basic research in static program analysis to real-world impact - read more πŸ‘‰ socket.dev/blog/socket-...

23.04.2025 12:41 β€” πŸ‘ 12    πŸ” 2    πŸ’¬ 2    πŸ“Œ 0
Preview
Robert Dennard, DRAM Pioneer, Dies at 91 IEEE also remembers the lives and legacies of other members

I totally missed that Dr. Dennard passed last year. I use his DRAM chips all the time! #dram #rip spectrum.ieee.org/in-memoriam-...

17.04.2025 14:16 β€” πŸ‘ 22    πŸ” 4    πŸ’¬ 0    πŸ“Œ 2
Preview
How I implement SSA form How I implement SSA form. GitHub Gist: instantly share code, notes, and snippets.

For everyone not on Mastodon:

Fil Pizlo wrote a highly recommend post on his approach to SSA construction:

gist.github.com/pizlonator/c...

14.02.2025 19:02 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

What is the latest estimate for global datacenter energy consumption? The last estimates from 2023 estimated that 2022 consumption of ~460 teraWh would go to 1.1 pWh by 2026, but I think we have accelerated past that? Does anyone have better numbers? Is 1.1 pWh still reasonable?

13.02.2025 10:11 β€” πŸ‘ 4    πŸ” 2    πŸ’¬ 1    πŸ“Œ 0

Wise choice. The original term Cohen used in 93 is program evolution. Great paper, similarly vocabulary unfit for 47 and his Musk-eteer, I'm afraid...

13.02.2025 16:43 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Even worse, we built a compiler that enables large-scale D. 😱!

13.02.2025 15:08 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Wow, pretty sure my research in software diversity would also fall into this neo Marxist/DEI search & replace strategy...

13.02.2025 05:56 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0
KΓΆln 75   International trailer
YouTube video by ScreenFlanders KΓΆln 75 International trailer

A film all about Keith Jarrett's legendary 1975 KΓΆln concert? Ja mann!
youtu.be/j83Ps9SmpF8?...

05.02.2025 10:45 β€” πŸ‘ 46    πŸ” 17    πŸ’¬ 6    πŸ“Œ 1

Or is it a *me* thing? What do I need to do to make this work? Self patch a la revanced?

05.02.2025 07:42 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Haven't really followed up on bsky recently, stuck with Mastodon, which has a small, but active PL crowd, highly recommended. The diversity of Twitter was what attracted me in the first place and bsky fills this need nicely. But damn, their client still goes to the most recent post upon loading πŸ€¦β€β™‚οΈ

05.02.2025 07:41 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

O1, R1, etc. are so good that we evaluate them on β€œPhD-level” benchmarks. But, these benchmarks are so hard that most people can’t even understand what they are testing. We’ve built a benchmark with problems that are hard to solve but easy to verify: for both humans and models.

04.02.2025 02:37 β€” πŸ‘ 9    πŸ” 4    πŸ’¬ 1    πŸ“Œ 1
Home Β· SoCal PLS

SoCal Programming Languages and Systems is back and will be @ucsd_cse in February!
Submit your abstracts!
socalpls.github.io

@ranjitjhala.bsky.social @manu.sridharan.net @cristalopes.bsky.social
Reposts appreciated!

20.12.2024 19:50 β€” πŸ‘ 24    πŸ” 11    πŸ’¬ 2    πŸ“Œ 1

Every 25 minutes of this is video from **1981** is worth watching. Wow. This is what they took away from us.
HT @gregorkiczales.bsky.social

18.12.2024 18:21 β€” πŸ‘ 30    πŸ” 6    πŸ’¬ 4    πŸ“Œ 0

I like that Bahnhof and Schule are relevant!

17.12.2024 19:16 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0
SMBlog -- 9 May 2024

"The best cryptography in the world will not guard against buggy code." (1994) from Steve Bellovin's retirement talk www.cs.columbia.edu/~smb/blog/20...

16.12.2024 07:53 β€” πŸ‘ 7    πŸ” 4    πŸ’¬ 1    πŸ“Œ 0
Post image

Congratulations to this year's second #ACSAC2024 distinguished paper award winners: AndrΓ© RΓΆsti, Stijn Volckaert, Michael Franz, Alexios Voulimeneas πŸ‘πŸ‘πŸ‘ The talk "I’ll Be There for You! Perpetual Availability in the A8 MVX System" is Thursday in the "System Security" session!

11.12.2024 18:57 β€” πŸ‘ 4    πŸ” 2    πŸ’¬ 0    πŸ“Œ 0
It's Not Easy Being Green: On the Energy Efficiency of Programming Languages, by Nicolas van Kempen, Hyuk-Je Kwon, Dung Tuan Nguyen, and Emery Berger, at the University of Massachusetts Amherst

It's Not Easy Being Green: On the Energy Efficiency of Programming Languages, by Nicolas van Kempen, Hyuk-Je Kwon, Dung Tuan Nguyen, and Emery Berger, at the University of Massachusetts Amherst

"It's Not Easy Being Green: On the Energy Efficiency of Programming Languages"

Nicolas van Kempen, Hyuk-Je Kwon, Dung Tuan Nguyen, Emery D. Berger

Does the choice of programming language affect energy consumption? Previous highly visible studies have established associations between certain programming languages and energy consumption. A causal misinterpretation of this work has led academics and industry leaders to use or support certain languages based on their claimed impact on energy consumption. This paper tackles this causal question directly. It first corrects and improves the measurement methodology used by prior work. It then develops a detailed causal model capturing the complex relationship between programming language choice and energy consumption. This model identifies and incorporates several critical but previously overlooked factors that affect energy usage. These factors, such as distinguishing programming languages from their implementations, the impact of the application implementations themselves, the number of active cores, and memory activity, can significantly skew energy consumption measurements if not accounted for. We show -- via empirical experiments, improved methodology, and careful examination of anomalies -- that when these factors are controlled for, notable discrepancies in prior work vanish. Our analysis suggests that the choice of programming language implementation has no significant impact on energy consumption beyond execution time.

"It's Not Easy Being Green: On the Energy Efficiency of Programming Languages" Nicolas van Kempen, Hyuk-Je Kwon, Dung Tuan Nguyen, Emery D. Berger Does the choice of programming language affect energy consumption? Previous highly visible studies have established associations between certain programming languages and energy consumption. A causal misinterpretation of this work has led academics and industry leaders to use or support certain languages based on their claimed impact on energy consumption. This paper tackles this causal question directly. It first corrects and improves the measurement methodology used by prior work. It then develops a detailed causal model capturing the complex relationship between programming language choice and energy consumption. This model identifies and incorporates several critical but previously overlooked factors that affect energy usage. These factors, such as distinguishing programming languages from their implementations, the impact of the application implementations themselves, the number of active cores, and memory activity, can significantly skew energy consumption measurements if not accounted for. We show -- via empirical experiments, improved methodology, and careful examination of anomalies -- that when these factors are controlled for, notable discrepancies in prior work vanish. Our analysis suggests that the choice of programming language implementation has no significant impact on energy consumption beyond execution time.

It's Not Easy Being Green: On the Energy Efficiency of Programming Languages
arxiv.org/abs/2410.05460 @nicovank.bsky.social

11.12.2024 15:30 β€” πŸ‘ 20    πŸ” 4    πŸ’¬ 2    πŸ“Œ 0

Registration for PLISS (Programming Language Implementation Summer School) 2025 is now open! If you're interested in programming languages, this is the place to be -- great speakers and a conducive location! pliss.org/2025/

09.12.2024 17:10 β€” πŸ‘ 42    πŸ” 23    πŸ’¬ 1    πŸ“Œ 1

Hopefully this is going to usher in a new era in business school thinking. After Boeing, Intel, multiple car manufacturers, and god knows what else, detailed analyses of business cases and decisions should uncover enormous management failures...

09.12.2024 16:03 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

For the hackers among us: o1 can do @halvarflake.bsky.social 's crackaddr-mini without any problems , which no other model can do. It's going to revolutionize the AIxCC program and automated vulnerability finding in general.

05.12.2024 18:05 β€” πŸ‘ 29    πŸ” 8    πŸ’¬ 5    πŸ“Œ 0
dblp: What is the meaning of the acronym dblp? FAQ: What is the meaning of the acronym dblp?

TIL: dblp.org/faq/1474577....

Other question: What's inside the book? Are the contents available online? Is it all APL meets Prolog? (I'm imagining SIMD parallel logic queries, should I go and see a doctor?)

04.12.2024 13:41 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Haven't been a big DB guy (stayed with compilers ;), how is the Kanellakis book?

04.12.2024 13:17 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

It seems to me that the EU lacking a single market for startups, is less and less true. Granted there are bureaucratic problems (legal and tax issues), but the majority of people understand some form of English, with rates continuously improving. (Seems like an enormous opportunity, going forward.)

02.12.2024 16:02 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Not an expert in any way, but it seems like French car manufacturers are a lot less exposed to Chinese problems, esp. compared to Germany. If that turns out to be true, would be super interesting to get some background information.

02.12.2024 15:57 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Glad you found the time to write it down, given you suspected obstacles. We should have a Pulitzer prize for science articles, this one would qualify! (If only there'd be a collection of such articles somewhere...)

02.12.2024 08:20 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Beautifully written post about frequently misunderstood aspects of PLs, esp. Lisp and derivatives. Required reading, IMHO.

02.12.2024 08:17 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

@sbrunthaler is following 19 prominent accounts