This kind of question is a gold mine, IME. When I interview network protocol devs, my favorite question is:
"tell me what happens between the time you type something into the address bar and when you see a result". so many opportunities to show understanding at various levels there.
I've got a customer that wants to get access to the PTP[1] registers of a NIC from user space. The customer suggests that context switches introduce too much latency and indeterminism (pre systems integration phase - lots of software from different teams ends up running on the final platform) to introduce a reference monitor (capability-based microkernel or otherwise) given known techniques on modern hardware. I'm afraid I can't share the specifics because I don't have them, but I trust the source.
I will grant that this case is an outlier, but this customer use-case is real enough to drive development dollars. It may not be the norm, but precision timing access appears to be very useful in some hard real-time contexts given current hw/sw realities.
> The misunderstanding first...we are not selling anyone to anything. We have no involvement in finding you the job, we are not recruiters, we are not headhunters. So we have no alignment with anyone other than YOU.
How do you get paid? ... and the obvious corollary, why should I trust that our interests are aligned? (either as a candidate or a hiring manager?)
Xilinx has being doing CPU+FPGA for longer than that. I did some C runtime enhancements for the PPC 440 included in the FX70 for a product made by a former employer (shadow stacks for better CFI, more locked down MMU use, etc).
How large is large? Hiring junior engineers or developers definitely happens in companies smaller than FB or GOOG.
Perhaps you mean something specific by "capable"?
I won't disagree that c++ (as a technology) can be a minefield, but this also holds for many technologies and markets (civil aviation being a great example).
I may have missed an implicit /s, for which I apologize in adavance...
Do you watch professional sports (football, basketball, etc)?
Watching competitive video games (starcraft 2 is my favorite) has a similar appeal, to me. If you don't watch any sports, than the appeal of esports may not make sense to you.
Of course, twitch is bigger than esports, but each viewer category has their own needs & content that fills them.
Thanks for the references - I'll look into them, I'm definitely interested in multi-tool workflows given my experience (systems programmers aren't necessarily mathematicians). If only the systems programmer could be pointed at tools that don't have horrible false positive rates ... ;)
Yeah, dealing with vendors can be frustrating, for sure.
I'm still a little sad about the I-178 eval, since a lot of the work I saw done by RC was quite good, if limited in scope. Seeing The vendor (imo) misrepresent that effort to sell other software was rather disappointing to someone who had (at the time) just spent a couple years jumping on the formal methods bandwagon.
I'm also not particularly happy with the trend towards process, rather than results based evals. (DO-178, and CSFC, I'm looking at you), but I can see how we got here after the EAL7 well was poisoned.
Regarding the arxiv link on verification methods, I'd be careful reading too much into the summary tables. The authors don't appear to have done their homework there (they overstate the C&A accomplishments of the company I work at and our competitors).
On an unrelated note, I'm pleasantly surprised to see a tech report I contributed to as an undergrad cited - How on earth did they find it?
volume pixel (voxel) is already a term of art. I'm not aware of jargon to decouple the sampling precision in different axis, though that probably exists too.
I disagree that it's undesirable for back-up and restore to be impossible in all cases.
Instead, I would argue that plain-text export of private and secret keys is undesirable, as it removes any protections the HSM was supposed to provide (2 man rule for access, audit of use, etc). Back-up schemes that export these keys (in encrypted form) to another HSM that enforces the same rules as the original HSM can be useful, IMO.
Are you using and/or developing for SGX? I looked into it and got put off by the need to deal with intel for licensing and signing keys, but I'd be curious to know if anyone is doing something interesting with it.
Yes it is. Some variants even include a hardware security module so that you can store your encryption keys on it and keep everything but the bootloader encrypted (assuming proper software support of course).