I'd really like to give them the benefit of the doubt, but at this point it's sheer incompetence. It's been pointed out in the past, and it's still growing.
5 months from graduating I started looking for job offers. I wanted to get into ASICs D&V so I looked up the jobs from all the well-known companies, and applied to the one that was in Europe and looked the coolest. Got the job.
Realised two months after that that my prof could have got me an introduction there, but oh well!
I work at Arm in the UK. They also have offices in France, Sweden, Norway, and Hungary.
It's a great place to work:
* You're surrounded by smart people
* The work is interesting
* Short hours
* Flexible: if I want to work from home or run some errands during the day, I can drop an email "where is <insert name>" to let my team know. No need to ask anyone.
There are hardware and software roles, with everything in between: hardware design and test, infrastructure, cluster, web applications, compilers, and a lot of internal software tools.
The irony is palpable here... The website loads slowly, elements move around the page during the first load, then the fonts blink around and go from system font to some custom font. It loads data from 15 different domains, and four of those are only for tracking.
You're always one git reflog away of undoing the brainfart. Once you know the CLI well enough, you manipulate the git data model easily. When you're using a code review tool like gerrit, it's impossible to do something you can't undo.
Reminder to donate blood, this is what allows medical professionals to save lives, be it in dramatic incidents such as this one, or in more mundane settings.
> Searching for papers/PDFs on specific topics (built a Python wrapper for arxiv/Google/others that goes and fetches the top 5 matches across them and files them on Dropbox)
Any chance you would post your code? This looks interesting, especially if it integrates sci-hub/libgen
Basically, the current in a circuit is dependent of the data manipulated: changing a value from 0 to 1 or 1 to zero generates a current to (dis)charge the gate capacitances.
Maxwell's equations state that a current generates an electromagnetic field, and this field is perceived by the antenna. The attacker is then seeing electromagnetic waves related to the data manipulated.
By carefully comparing the waves with waves where the key is known, the attacker can then guess the key bit by bit.
The keyword you're looking for is masking. Masked implementations of AES resist this exact attack without problem. Higher-order attacks are then needed, and those require exponentially more computation.
If you want to dabble for _cheap_ with SDR, the RTL-SDR [1] is a < $10 USB receiver that works from 24 to 1766 MHz.
It allows to listen to FM radio, decode most 433MHz devices (weather stations), car keys signals, and even NOAA weather satellites [2] with a DIY antenna [3].