Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment MOAR IETF! (Score 1) 77

IETF made everything possible, but has unfortunately been somewhat abandoned, or at least isn't functioning as a mooring-of-sanity as it used to. In some ways, this is inevitable, since the e-world is big enough that even a small company can do its own thing, and still succeed big.

This matters for IoT, since most cloud-enabled IoT devices do totally random things: poke through firewalls with UPNP, shove your private data into some random website, potentially over insecure protocols. (Or protocols that could be secure, but are implemented poorly or are simply in need of an update.) At some level, the problem is really that the easy path, for any given cloud vendor, is to set up their own cloud infrastructure (though it might be layered on Amazon, etc). This is bad for the customer because what happens when the company crashes, or gets bought and dissolved, or when the company just decides to stop supporting the device?

IETF should be thinking along the lines of a *local* data hub that you own, that your devices talk to over a simpler, standard protocol. Not that security can be ignored just because traffic is local, but an extra level of indirection makes all the difference in hardware as well as software. Whether that local hub is intelligent, whether it has storage - open question. And maybe devices need to fall back to trying to talk to the external cloud. But customers will eventually realize that they should want their own data to at least potentially be under their own control, not inherently subject to the vagaries of some whispy, transient external cloud. You don't want your fire alarm dependent on random external sites, or your internet-enabled door locks, or your thermostat, etc.

Comment provenance (Score 2) 112

let people perform whatever edits they want, but track the provenance of *everything*. let readers select some function of provenance as a rendering option, with the default being provenance of a pretty high standard of quality and non-conflicted-interest. letting people attach endorsements or upvotes is a pretty valuable kind of metadata anyway.

the problem seems to be the very idea that wikipedia should present a single, canonical version. absolutes are only found in faith, not the real world...

Earth

GOP Bill To Outlaw EPA 'Secret Science' That Is Not Transparent, Reproducible 618

Hugh Pickens DOT Com writes "Fox News reports that Republican lawmakers in the House are pushing legislation that would prohibit the EPA from proposing new regulations based on science that is not transparent or not reproducible. The bill introduced by Rep. David Schweikert, R-Ariz., would bar the agency from proposing or finalizing rules without first disclosing all "scientific and technical information" relied on to support its proposed action. "Public policy should come from public data, not based on the whims of far-left environmental groups," says Schweikert. "For far too long, the EPA has approved regulations that have placed a crippling financial burden on economic growth in this country with no public evidence to justify their actions." The bill, dubbed the Secret Science Reform Act of 2014 (HR 4012), would prohibit the EPA's administrator from proposing or finalizing any rules unless he or she also discloses "all scientific and technical information" relied on by the agency in the regulations' development including all data, materials and computer models. According to Schweikert's press release a 2013 poll from the Institute of Energy Research found that 90 percent of Americans agree that studies and data used to make federal government decisions should be made public. "Provisions in the bill are consistent with the White House's scientific integrity policy, the President's Executive Order 13563, data access provisions of major scientific journals, the Bipartisan Policy Center and the recommendations of the Obama administration's top science advisors.""

Comment vapid idiots are running the store. (Score 0) 204

the big problem is that all this desktop crap doesn't matter. oh, sure, it's pretty. does it get work done? compared to, say, OLVWM from ages ago. sure, I think wiggly windows are a cool hack, and like to use a GPU to make things smoother. but most of this desktop stuff is just masturbation-by-coding. dbus, systemd, wayland, most of gnome, any form of skinning, etc.

yes, X-over-ssh is non-negotiable. it would be great if the X-now-wayland wankers did their wanking on some more-async, lower-bandwidth interface that didn't throw the baby out with the bathwater. VNC, I think not. Xcb was about the last good idea to come from these people...

pretty soon desktops will be completely irrelevant, since the only GUI of the future is html*.

Comment click-bait? (Score 5, Insightful) 628

No, this is not clickbait.

Normal, mentally-healthy humans have a lot of empathy - otherwise we're psychopaths. Sure, the amount of empathy varies - mainly as a function of whether the animal in question tends to act human-like. We should embrace this, not cynically write it off - empathy *IS* humanity.

Yes, that also means that anyone who is intelligent and reflective will be uncomfortable with eating meat, concerned how the animal died, and of course what kind of animal it was. This is basically orthogonal to issues of environmental or ecological impact.

Comment unlocked doors (Score 2) 195

These systems are the moral equivalent of leaving your door not just unlocked but ajar. It doesn't change the morality of anyone trespassing to steal or destroy, but it does make the owner much more culpable. We do not face a threat to our cyber-infrastructure, but rather have irresponsibly left the infrastructure unprotected, and should not be surprised that people of varying motives might take advantage.

We do not need a cyber-infrastructure police force, unless they're actually tiger teams who publicly shame the idiots who leave their systems unprotected...

X

23-Year-Old X11 Server Security Vulnerability Discovered 213

An anonymous reader writes "The recent report of X11/X.Org security in bad shape rings more truth today. The X.Org Foundation announced today that they've found a X11 security issue that dates back to 1991. The issue is a possible stack buffer overflow that could lead to privilege escalation to root and affects all versions of the X Server back to X11R5. After the vulnerability being in the code-base for 23 years, it was finally uncovered via the automated cppcheck static analysis utility." There's a scanf used when loading BDF fonts that can overflow using a carefully crafted font. Watch out for those obsolete early-90s bitmap fonts.

Comment The stupid thing is (Score 2) 341

The really really stupid thing is that desktop isn't even the reason why Linux. Obviously no server needs dbus let alone kdbus, and plenty of desktops don't either. Yes, it's amusing that I get a popup when I plug in a USB stick, but is that essential functionality? Sure, some very simple form of event multicast would be good, but is this it?

Everything LP touches seems to epitomize rebellion against, or ignorance of, the *nix/OSS philosophy (you know, modularity, loosely joined, liberal-in-what-you-accept, etc). systemd is the USSR of rc systems. pulse only remains because apps can still bypass it.

Iphone

Apple Again Seeks Ban On 20+ Samsung Devices In US 235

An anonymous reader notes that Apple has renewed its patent attack against Samsung, asking U.S. District Court Judge Lucy Koh to prohibit Samsung from selling over 20 different phones and tablets. Apple made a similar request after it won a $1 billion judgment in 2012, but Koh did not allow it. An Appeals court later ruled that Apple could resubmit its request if it focused on the specific features at the center of the 2012 verdict, and that's what we're seeing today. Apple's filing said, "Samsung’s claim that it has discontinued selling the particular models found to infringe or design around Apple's patents in no way diminishes Apple’s need for injunctive relief. ... Because Samsung frequently brings new products to market, an injunction is important to providing Apple the relief it needs to combat any future infringement by Samsung through products not more than colorably different from those already found to infringe."

Comment this is idiotic. (Score 2, Insightful) 201

the proliferation of distros is just stupid - people don't seem to understand what "distro" means, or why they should be offering addons to an existing distro, rather than pretending that they are building a new OS.

the ONLY value a distro offers is in establishing a particular set of versions, with a modicum of consistency of config and hopefully some testing. none of them offer anything significant that is also distinctive - just slightly different versions of the same packages maintained by others and used by all the other distros. yes, apt vs rpm, so what? they're functionally equivalent.

the real point is really a matter of software engineering: forking a distro is bad, since it increases the friction experienced by source-code changes. streamOS (sic) people may be dilligent and honestly propagate their changes upstream, but fundamentally, they should really just be running an apt repo containing their trivially modded packages. sure, that may mean a different kernel, big whoopie (very little of user-space is sensitive to anything but huge kernel changes.)

but yeah: it wouldn't be very sexy to say "I've got a repo of 37 tweaked packages I call a brand new whizzy *OS*".

Debian

Under the Hood of SteamOS 201

jones_supa writes "SteamOS has been further inspected to see what kind of technical solutions it uses. The Debian-based OS uses Linux 3.10, shipping with a heap of patches applied, with the most focus being on real-time-like features. The kernel is also using aufs and they seem to be sitting on some bug fixes for upstream on top of that. The kernel is not using the new Intel P-State driver, with the reported reason being, 'it causes issues with sound being choppy during BigPicture trailer video playback.' SteamOS is using SysVinit as its init system. The desktop is backed by X.Org server 1.12.4 and a custom desktop compositor which seems to be a 4,200-line patch on xcompmgr. Catalyst and Mesa components can be found on the system, but so far only NVIDIA is officially supported. The system boots into Big Picture Mode, but the user can drop into a GNOME desktop. Responsible for a great deal of the kernel changes, SteamOS compositor work, and other SteamOS code is Pierre-Loup A. Griffais, a.k.a. 'Plagman'. He was a NVIDIA employee dealing with their Linux support. Another Valve employee doing lots of the SteamOS system-level work is John Vert, who up until last year was a Microsoft employee since 1991. There's also other former Microsoft employees on Valve's Linux team, like Mike Sartain."

Slashdot Top Deals

The Tao is like a glob pattern: used but never used up. It is like the extern void: filled with infinite possibilities.

Working...