Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment Re:Define your damn acronyms (Score 1) 74

Could you write the Guardian and tell them that, please?

My point is that expanding the acronym isn't useful, except perhaps to chemists who would already know what the acronym expands to. Explaining what PFAS are is useful. And the article did that:

PFAS are a class of 15,000 chemicals used across dozens of industries to make products resistant to water, stains and heat. Though the compounds are highly effective, they are also linked to cancer, kidney disease, birth defects, decreased immunity, liver problems and a range of other serious diseases.

They are dubbed “forever chemicals” because they do not naturally break down and are highly mobile once in the environment, so they continuously move through the ground, water and air. PFAS have been detected in all corners of the globe, from penguin eggs in Antarctica to polar bears in the Arctic.

So, I think the Guardian did a fine job of explaining what matters.

Comment Re:Welcome to the machine (Score 1) 259

The Chinese beg to differ with Ms. Thatcher. I would contrast their performance to Great Britain's.

Let's do that: GDP per capita of the UK: $46k. GDP per capita of China: $12k. But maybe China does better at distributing the wealth? Nope. UK Gini coefficient: 35, China, 47 (higher is more inequality). Until recently China had phenomenal growth rates, but that's only because (a) they started from a very depressed level and (b) they mostly abandoned socialism. As Xi is reasserting more socialist policies their growth engine has largely stopped and their growth rate is currently below that of the UK. It's still positive at the moment, but if Xi continues what he's doing, it will likely go negative.

Socialism -- not social democracy, which is a thoroughly capitalist economy that accepts high but strongly progressive taxation to fund a strong safety net -- consistently drives economies into the toilet whenever applied on any scale larger than a kibbutz. Without fail, every time.

Comment Re:This has been known for ages (Score 1) 146

Press the power button 5 times rapidly to enable "emergency mode" or whatever they call it. Biometric unlock will be disabled and you will have to enter your password/PIN to access the device again.

I don't think this is true. If you enable emergency mode video recording you have to enter your PIN to end the recording, but biometrics will still unlock the lockscreen. While the recording is going, hit the power button to activate the lockscreen, which will be unlockable with biometrics. You can also swipe up from the bottom (assuming gesture navigation) and switch to other apps. The device is not locked and not in lockdown mode while in emergency mode.

What you can do is press power and volume up to bring up the power menu, and then tap the "Lockdown" icon. That will lock the device and disable biometric authentication.

If you really, really want to lock it down, power the device down, or reboot it and don't log in. Android's disk encryption scheme uses your PIN/pattern/password ("lockscreen knowledge factor", or LSKF) along with keys stored in secure hardware to derive the disk encryption keys. It would make for a long post to go into all of the details, but given the hardware-enforced brute force mitigation,if the attacker gets a device in this state it's extremely difficult to decrypt any of the credential-encrypted data on the device without your LSKF. This is particularly true on devices that implement "StrongBox" (all Pixels, some Samsungs, some others). Android StrongBox moves some crucial functionality, including LSKF authentication and LSKF brute force resistance, into a separate hardened, lab-certified[*] security processor with its own internal storage, a "secure element".

Of course, note that appellate courts in the US have split on whether or not your LSKF can be compelled. Some have ruled that unless the PIN/pattern/password is itself incriminating, it's no different than compelling the combination to a safe, which has long been held to be constitutional.

[*] For anyone interested in the details, the required certification is Common Criteria EAL 4+ (5+ is recommended, and common, many devices meet 6+), using protection profile 0084 for the hardware and equivalent "high attack potential" evaluation for the software, plus AVA_VAN.5 penetration testing, all performed in a nationally-accredited security testing lab. While certification isn't a guarantee of security (nothing is), the required certification applies the highest level of scrutiny you can get for commercially-available devices. Apple also uses a similarly-certified SE in their devices, but it's not clear whether they use it for LSKF authentication, or whether they use their (uncertified) Secure Enclave.

Comment Re:Who on SLASHDOT is using biometric data for con (Score 1) 146

Must be quite entertaining to watch you unlock your phone hundreds of times a day.

JFC...why in the world would you need to be accessing your phone "hundreds of times a day"???

Maybe not hundreds, but at least dozens. For most people their phone is their digital assistant in all sorts of ways... not only for communication for for calendaring, looking up random things, reading the news or books, listening to music, getting directions, checking their bank account/brokerage, doing calculations, fitness tracking, managing shopping and to-do lists... the list goes on and on.

Comment Re:Who you are; Something you know (Score 1) 146

The classic "username" and "password" combo provides two pieces of information in order to verify identify: who you are, and something you know.

Actually, it doesn't. Nothing in the username field has anything to do with identity. I can enter whatever I want there, or where it is an e-mail I can just enter whatever I want followed by @gmail.com once I've registered that as my e-mail account.

These are not two differen things. There's no actual difference between "username+password" and "password1+password2".

but using them to replace your password seems like a bad idea.

Only because passwords are such a stupid idea.

I want my biometric devices to have a distress function. Like "if I try to log in with THIS finger, lock the device, encrypt the drive, flush all secrets and require a password to unlock it".

Comment Re: Israeli Fanboys (Score 1) 512

They don't get to claim the moral high ground.

True, and neither does Hamas. For that matter, neither the Israeli nor the Palestinian people get to claim the moral high ground, since both overwhelmingly support the actions of their governments. Both are in the gutter, and digging downward. A pox on both their houses, and I don't think we should support either one. I am okay with humanitarian aid to starving people, though.

Comment Re: Shame they didn’t cover NOx, SOx, etc as (Score 1) 164

There's a third and fourth reason too: 1. Fewer charges per year. It's a minor but still useful additional convenience to only have to plug in once a fortnight instead of once a week

I suppose. I prefer to plug in every time I park, then I basically never have to pay any attention to range except on long trips.

2. Fewer charge-discharge cycles per year, so the battery should last longer

Yeah, that's another side of my second reason, though cycles really only begin to bite when you get close to full or close to empty. Oscillating near the middle is fine.

Comment Re:people who drown panic and flail around wildly (Score 1) 204

No matter how enshittified it gets, there seems to an endless lineup of umm.. kids... to create content, get famous, and burn out, for money. I'm having a hard time seeing how youtube is really failing.

The bubble is bursting. These days, you need about a million views per month, every month to have a career on YouTube that actually pays the bills. For one person. If someone else does the video editing for you, add their cost.

A million views equals $5k. The kids realise that as soon as they don't live at home anymore. Pretty much all big YouTubers theses days make their money from Patreon, merchandise or sponsors.

Comment Re:people who drown panic and flail around wildly (Score 1) 204

The algorithm is likely optimising not for your pleasure but for ad revenue.

I see a TON of what is essentially an entire video of product placement, thinly veiled as "10 kitchen gadgets you need to know" or "12 new must-have tech gadgets", probably because a year ago I clicked on one or two of those before realising that they're not really interesting tech news but just full-out advertisement.

It keeps doing that even after I've clicked a ton of them away as "not interested".

It also keeps recommending me old videos from my subscribed channels that I've already watched. WTF?

The algorithm is shit these days.

Comment Re:people who drown panic and flail around wildly (Score 1) 204

Revenue is a bullshit number. YT keeps its actual profits (which is the number that matters) a secret.

I should be more specific, though. I mean "dying" not in the immediate sense, that's why I said slowly and it'll be around for years to come. But the time where everyone wanted to be a YouTuber because it's easy money are over. You need over a million views per month, every month to make YouTube a viable career choice these days.

Lots of even big channels these days are largely and openly finances by Patreon or sponsors. That means that they are no longer tied to YouTube in any meaningful way. Which means the platform is now interchangeable and the moment a competitor appears with similar numbers of users, the content creators can move elsewhere.

I was there when the dot-com bubble burst (for some reason I hear that in the voice of Elrond in my head, despite it's not actually that long ago, anyway) - I saw first hand how quickly your entire business can disappear when your only leg is "I'm very popular and have lots of users". The first company I worked for went from "we're in the top three" to "we're a subsidiary of someone else and btw 90% of you can go" in a week.

Slashdot Top Deals

UNIX is hot. It's more than hot. It's steaming. It's quicksilver lightning with a laserbeam kicker. -- Michael Jay Tucker

Working...