Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment Re:credit/debit card numbers, including security c (Score 1) 20

As I remember, the PCC code for handling CC transactions explicitly states that the security code must not be stored...

I haven't looked at the code in years, but the last time I did, storing the codes meant that the merchant was responsible for any fraudulent charges in the event of a data breach. I've mercifully not had to store credit card data for a few years now. Back then it wasn't strictly prohibited, just a really bad idea from a risk management perspective.

Comment Re:Zero-day SQL injection flaw ? (Score 2) 20

“The SQL injection exploit was first documented in 1998 by cybersecurity researcher and hacker Jeff Forristal”

To me, this means that the CDC has reason to fine Delta Dental for negligent exposure of PHI.

If this is the case. Delta Dental could be subject to a fine of up to $482 billion. is a reasonable primer on how bad the fines could get.

Comment Re:so, is no one smart enough to realize (Score 1) 121

It is simple at small startups: the person doing the firing coordinates with the person who is going to pull access at the beginning of the termination meeting the access is pulled and the person pulling access texts the person doing the firing when access is revoked and it is okay to end the meeting.

Now if you don't have a list of your critical accounts.... well you have bigger problems, but you can probably at least figure out that the password manager, AWS, and Google access needs pulled.

Comment Re:If you read the article and the studies (Score 4, Insightful) 172

More issues is a more or less bogus statistic that Consumer Reports has.

If you have a car with 1,000 features and 10 of them have issues and another car has 12 features and 8 of them have issues consumer reports would consider the car with 2/3rds of the features failing as more reliable. Yes, the numbers I'm giving are exaggerated but they illustrate the point.

It made sense years ago when cars had a similar number of features, but now that the number of features varies by orders of magnitude it doesn't make much sense.

Consumer Reports has some strong biases and has skewed tests to arrive at predetermined outcomes. (The Suzuki Samari being one of them, they modified the test until they rolled the car even though it survived the first dozen or so attempts.

They could have just said that cars with more features have more things go wrong with them.

Comment But is that "training data" the actual data? (Score 4, Interesting) 73

The question the researchers aren't answering is that they assume it is true data, but what percentage of the "training data" is fictional data made up by the model?

They have only proven that the model spits out things that look like it might possibly be training data, but could also just be probablistic strings that are not in the training data. I'm not sure how they are proving that the data exposed is real.

Comment Re:Well, that's not exactly right (Score 1) 40

Totally. Even PHP 7.4 will continue to be semi-supported (at least security patches) on most "server" distros at least through 2024, even though the PHP devs stopped officially supporting it already. Upgrading for the sake of upgrading is never a good practice, though it's never good to be left high and dry either...

I'll argue the other side. With every upgrade that fixes bugs, it is just a matter of time before those bugs are turned into CVEs that require upgrading.

As such, developers need to design their code to work with shifting versions of dependencies, and CI/CD systems need to be designed so that they can adequately test code so that they can reliably run updates in an automated manner. If you fail to do that, your software will eventually be viewed as unusable by internet connected computers.

Comment The big issue is just the rise in interest rates. (Score 2) 229

Let me elaborate. Most office buildings are purchased with interest only loans that have balloon payments after five to 10 years. The financing is based on the rents that the building generates covering the interest payments.

Anyone paying attention to interest rates can see where this is going wrong. Interest rates are roughly twice what they were five years ago, so to cover the increased interest rates rents would have to double to refinance to make the balloon payment and rents are down, so people are walking away and losing their down payments.. I'm not sure I understand the logic of giving those loans at 3% in previous years. Probably theory would have said you had at least a 20% and maybe 30% chance of losing money for a 1% increase in your yield

Comment Re:What is shows.... (Score 1) 46

What it shows is that people in San Francisco who have purchased a $2,295 smart mattress topper and have not successfully opted out of Eight Sleep's analytics

What is shows is for your data to be impacted by OpenAi's current drama even if just in the SF area, you have not sold very many of your mattress toppers.

Or that people who buy $2,000 mattress toppers in San Francisco are a specific demographic that has a large intersection with the people who work in AI. As there are thousands of people in San Francisco who work in AI in San Francisco

Comment Re: Huh? (Score 4, Informative) 384

How about an Apples to Apples comparison:

  • BMW M3 weight: 3,840 to 3,990 lbs
  • Tesla Model 3 weight: 3,862 to 4,048 lbs

That puts the EV less than 100 lbs more than an ICE car which is roughly the same. (performance and size wise)

I'm not sure that the "EVs are heavier" stands up to closer scrutiny. Modern cars with all of their safety and convenience features are heavy

Comment Re:true but kernel developers don't grow on trees (Score 1) 78

I bet if there were half a dozen kernel developers whose primary focus was Itanium support (like, if Mark Zuckerberg had Itanium as one of his personal interests and personally bankrolled a small IT shop whose sole focus was maintaining Itanium ports) Linus would never have decided to drop the architecture. As long as an old architecture doesn't get in the way of supporting new stuff (e.g., the 386 and 486) they will keep stuff around as long as developers actively maintain it. Fact is nobody is using Itanium anymore and it's not worth wasting the scarce time of kernel developers who have the knowledge and resources to maintain the Itanium port.

They could spend all their time trying to get GCC to constantly compile decent code on Itaniums. Either that or create a new language and compiler that makes it possible to write performant code on Itaniums.

Slashdot Top Deals

IF I HAD A MINE SHAFT, I don't think I would just abandon it. There's got to be a better way. -- Jack Handley, The New Mexican, 1988.

Working...