Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:They didn't think of this? (Score 4, Informative) 41

GPS Spoofing has been a known issue in both the GPS and flight safety industries for a long time. There were debates around it when ADS-B was rolled out but they weren't taken seriously because it has never been a significant practical issue.

The military GPS bands have a code that encrypts the signal, this prevents spoofing for military users. The catch the military has is that the military equipment is rare and fairly shit compared to the civilian equipment. In desert storm soldiers were relying on civilian equipment procured personally and by the military. My understanding is that this is still the case, soldiers carrying Garmin watches for example. So the military is still impacted by spoofing, despite the military band.

My understanding is that most of the current spoof attacks are fairly crude and can be detected by looking for discrepancies between the signal over time, signal strength or between the multiple bands and systems now available. However once detected you've still lost GPS and it's now a critical component for many industries.

Comment Re: What's to stop Mozilla (Score 1) 239

> Is that because Chrome does something non-standard, or because Firefox fails to do something standard?

Very non-standard.

Chrome has an extension "Google Docs Offline", made by Google, which enables Copy/Paste and offline access for GDocs. I believe when you navigate to the docs site it actually transparently switches you into a browser app, now you are running local code which can access copy/paste buffers, and local files for offline use.

Where it gets a touch messy is that Google includes this extension as part of Chrome, I believe it's the only included extension. So for a Google Chrome user Docs "just works". An Edge user doesn't get it bundled and is prompted to download it from the Chrome App Store. Firefox users just get told no, but the buttons remain there to taunt them.

Comment Re:What the fuck is Wayland? (Score 5, Insightful) 72

Wayland was designed by young systemd fan boys to replace X11. Young dudes think anything already existing is bad and needs to be replaced.

I'm sure Kristian Hogsberg would be amused and being called young, and Keith Packard would probably fall over laughing.

As the initial Wayland release was 2008 and the initial systemd release was 2010 these fan boys were clearly prescient and maybe should be listened to.

Comment Re:The other search engines suck? (Score 1) 72

> Google search became a near monopoly because the other search engines can't compare.

I agree Google search is better, and I make a deliberate decision to primarily use it.

But I don't think it's that clear cut or far ahead. If it were Google wouldn't be donating $10B USD per year to other companies to maintain the default search position.

Comment Trying to understand their thinking (Score 2) 117

I've been pondering this and I'm torn between two options

A) This is a carefully planned maneuver. They have quantified the expected additional profit and the cost of the moral and reputation hit. The downsides are probably worse than expected but there's a crack team of MBA grads trying to re-quantify the outrage, how much it will be mollified by a back down, and choosing the most profitable path for Redhat.

B) Some senior manager made the decision without consulting anyone. Now they are locked in, their back is against the wall, egos are in play and jobs are on the line.

I can see evidence for both. I'm not sure which is worse.

Comment Re:Another proprietary communication platform dyin (Score 4, Informative) 224

Graveyards are filled with proprietary communication platforms that eventually screw up and die. From ICQ to Digg to Google+ to Reddit to Vine to name it. Eventually Slack, Instagram, Facebook will all follow. I'm surprised Slashdot still exists.

Meanwhile, e-mail (1971), Usenet (1980), IRC (1988), Jabber/XMPP (2004) are still alive.

Maybe it's time we realize that unless no one owns the communication platform, it's going to die sooner than later.

Except ICQ and Digg are actually still around. Shadows of their former selves, but still alive.

Usenet, IRC and Jabber also also shadows of their former selves.

IRC currently peaks at about 350k simultaneous users across major servers. ICQ currently has about 7M monthly users. (data from wikipedia)
ICQ is less visible to us as their main ongoing user bases are in Russia and China.

While I ideologically prefer open platforms, I don't think your argument is actually correct.
Communication platforms evolve and the old ones fade away, as they should. Proprietary or open.

Comment Re:Solution: Build housing in SF (Score 1) 218

The council area is too small, it prevents diversity and significantly hampers the potential solution to problems.

The entire greater bay area should be one very significant council. That would lead to holistic solutions around where people live, work and play. You could get coherent planning decisions for things like housing encompassing the whole area, SF, Daly City and all.

Comment Re:KPMG did nothing wrong (Score 1) 103

It's because that's how the accounting works.

That's how US GAAP accounting works. IFRS allows for and encourages ongoing revaluation of assets like property.

Under IFRS rules the Silicon Valley Bank would have been required to report the bonds at fair value, what they were currently worth on the market. The difficulties they were facing would have been absolutely clear.

Comment Re:Crazy Idea (Score 3, Interesting) 38

While FIPS ensures that you haven't just used base64 and called it encryption, FIPS validated code is typically worse, from a security perspective, than non-validated code.

Once a piece of code is FIPS validated it can't be changed, even if it has a potentially exploitable flaw like a buffer overflow. Any change requires recertification before it can be used, certification can take two years... it just doesn't happen in practice.

So you fix the buffer overflow, in the main tree of the code base. But the "secure" products that require and run FIPS, they run the old vulnerable but "validated" code.

And because the validation process is long and expensive, you will aggressively reuse that FIPS validated code for as long as you can, spreading that vulnerability.

A concrete example, openssl 3.0 just got a new FIPS validation a few months ago, which means that a huge number of FIPS certified products are running openssl v1.0.2 (certificate #1747), with all the known and publicly documented vulnerabilities. And they don't have to upgrade or stop, their certification isn't impacted by all the known issues.

Comment Re:Caning in Singapore (Score 1) 35

Yay, off topic.

I'm a big fan of Singapore and while it has some serious issues I don't think caning rates particularly high up the problematic list.

Singapore has a single party political system, while they have regular free elections only the PAP party has ever formed government, the PAP party currently has 89% of the seats. This has been achieved through a mixture of deformation lawsuits, arrests including indefinite detention, and threatening to withhold funds to seats that vote for the opposition. This political repression extends to the country's journalists, Singapore ranks very poorly on most press freedom reports.

The impact of the single party ruling for the last 57 years extends beyond simply the political system, the government appoints positions like judges and the leaders of major government owned companies such as DBS, Singapore Airlines and Singtel. This feeds back into the repression, external legal observers have commented that the judges on cases where the prime minister sued others for deformation seemed compliant to the will of the party.

The other side of the discussion is that declaring caning a cruel and unusual punishment is controversial. For starters a prohibition against cruel and unusual punishment is a uniquely American right, the standard equivalent is a prohibition on torture. Also cruel and unusual has to be interpreted from within the culture it sits at the time it is being examined, while caning may be viewed and cruel and unusual to an American it obviously isn't unusual to a Singaporean. The USA also conducted floggings up until the 1950s, at no point prior to then was this considered cruel and unusual by courts.

Comment Embedded devices (Score 1) 89

A big target of esims is the embedded device (IoT) market.

It allows an embedded device to provision as part of the standard programming configuration process, devices can be reconfigured remotely, and you don't have to worry about the user messing around with fragile card trays.

There's also new systems being proposed which allow the sim to be integrated into the secure area of an ARM processor, so no extra hardware would be required.

Slashdot Top Deals

E = MC ** 2 +- 3db

Working...