otini @otini@functional.cafe

Hi everyone! I'm new here so, time for an #introduction?

I'm an M2 student living near Paris, interested in :
• Type systems (Curry-Howard ❤ )
• #CategoryTheory
• #Nix
• #metaprogramming

Today I program a lot in #OCaml, because French research teams use it a lot, but I also use #Haskell and I like dependently-typed languages like #Agda.

For some work I have done on the OCaml compiler you can check out http://otini.chnik.fr/.

Glad to be here :)

All literal constants and variable identifiers are dropped during feature extraction. Truly black magic

“JaSt: Fully Syntactic Detection of Malicious (Obfuscated) JavaScript” by Aurore Fass. Pretty surprising: just doing machine learning on the ASTs (abstract syntax trees) of Javascript files enables classifying them as either malicious or benign with great accuracy, even when the JS is obfuscated.

Looks like black magic to me 🤔
#DIMVA

Takeaway: trackers are everywhere and blacklist-based blocking is clearly not enough.

All combined together, the blacklist-based blockers only block 64 % of the known trackers…

Blockers are hindered, among others, by script renaming.

Over these 1 million websites, more than half of the scripts are trackers…

“The top categories with *only tracking* scripts were malicious, questionable, unkown, and websites with adult content.” 😁

#DIMVA 2018: current talk:

Knockin’ on Trackers’ Door: Large-Scale Automatic Analysis of Web Trackers

where you learn than among the Alexa top 1M websites, only 5 % do not use Javascript…

Many claims that “Russia did it”, I wonder what backs it

Keynote at #DIMVA about cyberattacks on elections. The title slide:

Talk by Victor van der Veen at #DIMVA 2018: RAMPAGE, a new “Rowhammer” attack on the latest Android devices that enables arbitrary memory read/write 😱
And its mtiigation.
http://rampageattack.com/

My friend @lesly just arrived on the fediverse. I can certify her coolness.