Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re: AI or not a huge automation boom is coming (Score 2) 90

One analogy I've heard... If it ai were invented 50 years ago, but drones didn't exist yet for another 40 years. Then fast forward to like 2010 and you tell AI to make a drone. It would have advanced a lot in that time but it still wouldn't know how to make the drone because it conceptually didn't exist yet. Somebody would have to teach it. Might not be the best analogy, but it gets the point across. AI can do a lot of things, but even in the business automation space, no matter how good it gets it still need humans to give it direction and tell it what to do, and it still needs developers to teach it how to interact with whatever you're trying to develop that uses it. It will certainly change how we work, but it won't get rid of our jobs entirely. Some low level jobs sure, but until the software can write requirements and interpret the finicky and incomplete requests from humans, then just develop itself; it still needs us.

Submission + - Skype, Slack, Other Electron-Based Apps Can Be Easily Backdoored (arstechnica.com)

An anonymous reader writes: The Electron development platform is a key part of many applications, thanks to its cross-platform capabilities. Based on JavaScript and Node.js, Electron has been used to create client applications for Internet communications tools (including Skype, WhatsApp, and Slack) and even Microsoft's Visual Studio Code development tool. But Electron can also pose a significant security risk because of how easily Electron-based applications can be modified without triggering warnings. At the BSides LV security conference on Tuesday, Pavel Tsakalidis demonstrated a tool he created called BEEMKA, a Python-based tool that allows someone to unpack Electron ASAR archive files and inject new code into Electron's JavaScript libraries and built-in Chrome browser extensions. The vulnerability is not part of the applications themselves but of the underlying Electron framework—and that vulnerability allows malicious activities to be hidden within processes that appear to be benign. Tsakalidis said that he had contacted Electron about the vulnerability but that he had gotten no response—and the vulnerability remains.

While making these changes required administrator access on Linux and MacOS, it only requires local access on Windows. Those modifications can create new event-based "features" that can access the file system, activate a Web cam, and exfiltrate information from systems using the functionality of trusted applications—including user credentials and sensitive data. In his demonstration, Tsakalidis showed a backdoored version of Microsoft Visual Studio Code that sent the contents of every code tab opened to a remote website. The problem lies in the fact that Electron ASAR files themselves are not encrypted or signed, allowing them to be modified without changing the signature of the affected applications. A request from developers to be able to encrypt ASAR files was closed by the Electron team without action.

Comment Oh how ironic... (Score 1) 149

I'm primarily an MS stack Azure developer, but the client I'm working with now has been working on duplicating and in some cases moving their Azure services to GCP. Mainly due to the Azure outage that happened earlier this year which as I understand was due to a DNS issue. My clients excuse was that "GCP was more stable." Then this happens in the middle of a go-live for one of the first major projects they've moved over. Had a good laugh over the irony of that one.

Comment Re:Or start making them in America (Score 1) 125

Sure, but you also have to consider raw materials. I don't believe there are any rare earth mining operations in the US at this point that produce the raw materials necessary for making most of this type of electronic equipment. While we could certainly make and assemble them here, most of the materials necessary would have to come from... guess where... China! China right know mines somewhere in the 90s percent of all rare earth material used in manufacturing, around the world, not just for the US. While this would perhaps be creating more jobs here in the US (which is good obviously), the situation is still the same in that we would still depend on China. Ideally we could help create mining operations here or in other countries and source that material from all over, but right now China is the only company that can keep up with the demand. Also in most cases to source that material from the US we would have to destroy thousands of acres of protected land, and create countless tons of waste that we'd be forced to dispose of, somehow. This is partially why China can do this so cheap, because they don't give a shit about where they are disposing of their waste. This is dirty little secret of the tech industry, your cell phones, laptops, literally everything leaves behind more toxic waste than can be safely disposed of, but that another story entirely.

Submission + - Ecuador hands over Julian Assange's belongings to US (bbc.com)

Joce640k writes: Ecuador has begun giving the US some of Wikileaks co-founder Julian Assange's possessions left behind following his stay in its London embassy. The material includes manuscripts, legal papers, medical records and electronic equipment.

Mr Assange's lawyer said the move was "completely unprecedented in the history of asylum".

"Ecuador is committing a flagrant violation of the most basic norms of the institution of asylum by handing over all the asylee's personal belongings indiscriminately to the country that he was being protected from," added lawyer Aitor Martinez.

Comment Re:I feel you OP (Score 1) 221

I agree with this. Although for me it tends to be more of an ROI thing. The problem with IT, and in my case software development specifically, is that the people that sign the paychecks don't really understand what it takes to implement their shit and keep it running. Thus this ability is undervalued, underappreciated, and underpaid (sometimes). I always just felt like I could make more money, doing less work, by being in management rather than actually doing the work. Its a little backwards if you ask me, but its DEFINITELY become more apparent to me as I've gotten older and my tastes and lifestyle changes.

Comment My opinion... (Score 1) 221

My opinion on that is not that it gets "harder" per say, But rather that other factors in my life become more important and/or distracting. The net effect being that I tend forget details that less important to my daily 'struggle' so to speak. In other words, when I was younger I would go home and get on my computer all evening, even after being on the computer all day. I kept myself immersed in that world, as such I remembered details like that because I was constantly involving myself with them. These days, I go home and often don't touch my computer. I find other activities more important to my mental health and well being and just don't think about work, at all.

Occasionally with a client I will have a hard push where I'm working 12-16 hour days and am non-stop thinking about work and that ability will resurface. The only thing I have noticed that I might attribute to my age is probably my patience for stupidity, and my willingness to adopt certain technologies or practices that I don't agree with.

Comment Riiiight... (Score 2) 219

I am a consultant currently working at a large client that has completely replaced MS office with G-Suite, including GMail for email. But that is the absolute extent to which any Google "cloud" applications are used. The rest of the environment (desktop wise) is a mixture of Windows 10, Linux, and Mac, also using both Azure and AWS for development via Visual Studio, VSCode, Eclipse, I mean, whatever they want to use honestly. They also use Power BI, and a handful of other data analytics tools that I've never heard of. Anyway, I could keep going, but my point is that most companies do so much more that just cant be done on a Chromebook. It's incredibly naive, and just plain ignorant to assume that a platform serving K-12 schools is even going to come close to providing the same functionality that companies use. Hell, I rarely ever even open any office suite type applications anymore, with the exception of needing to make the occasional flow chart. Anybody that needs to do REAL work is going to need to break out of the Chromebook walled garden, and get on a real desktop OS.

Comment Re:"as a Service" = you have to buy it Every Year? (Score 1) 189

For the record, I pay for an Office 365 subscription for home use because it is easier than pirating it while trying to avoid detection during patches. And also because its a hell of a lot cheaper than buying the full suite even over the span of several years.

Additionally, I will admit I used to pirate every new version of Photoshop when it came out. But now that Adobe offers a subscription at a reasonable cost I don't have to do that any more either and I get access to the entire Adobe suite of applications without having to worry about cracks.

Both are a win/win for me in my opinion considering how much both of those suites usually cost. And certainly a welcome change from the pirating game.

Comment Re:I believe it... (Score 1) 327

I have checked the box to receive offers, but only when I have signed up with separate (dedicated) spam account. To the previous poster, yes I am in the IT field and occasionally TigerDirect or NewEgg will spam with decent deals that I will buy. That said, I agree with your frustrations about (un)checking the "send me special offers" box. Lots of retailers seem to go out of their way to obscure that as much as possible. For example; if you failed some validation check on the form after unchecking the box, it will magically re-check itself with no warning. Or they will have it in some obscure part of the form were most people don't notice it. Or even worse they ask you AFTER you have placed your order when most people usually just close the window and don't notice the opt-out at the bottom of the page. That's the kind of crap that pisses me off.

Slashdot Top Deals

Hacking's just another word for nothing left to kludge.

Working...