Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Reassuring? (Score 1) 234

Why yes, we should trust CarrierIQ at their word for what their software does and does not do. Being closed source makes it quite difficult to verify their claims ...

True, the closed-source nature limits third party evaluation to sniffing LAN traffic. I'll be interested to hear more as the digging continues. As of now, all I've seen is that there are "references" to CarrierIQ in iOS. Lots of people seem to be making a leap that CarrierIQ's software is running on iOS. It's possible, but it doesn't seem likely for the company that completely shut-down the possibility of carrier-mandated apps on their phones.

Comment Re:Reassuring? (Score 1) 234

the (free, open) Android version is more akin to a rootkit

Carrier IQ is not free or open. The post you responded to was arguing that closed source is more difficult to analyse, which is clearly true. If Carrier IQ were open source, we would have known about it years ago, and we wouldn't need to reverse engineer it to figure out what, when and how it's doing what it does, and under what conditions the logs get transferred to remote servers, etc.

I would also argue that, as much as we dislike Carrier IQ, it isn't really a rootkit - the software itself makes no effort to hide its presence, which is one of the defining characteristics of a rootkit. Also, you say that the Android version has a "backdoor" - could you provide a reference for this? As far as I can see, this is not actually true, as it doesn't enable any secret authentication-bypassing remote access (which would be the very definition of a backdoor).

You're right and though the discussion was leaning that way, I didn't actually mean to take a position on open versus closed. No, the software in question doesn't technically meet the definition of a rootkit but I maintain that it's "akin" to one. It is not part of Android as released by Google, and although it doesn't alter APIs to hide itself (such as removing itself from process lists or filesystem calls), it's not an application that shows-up in the launcher, nor do users have any meaningful control over it. A backdoor provides a means for bypassing access control... and this software, as it's been seen on many Android devices, is a secret means of accessing data stored on or passed by (even over SSL) potentially PIN-secured, filesystem-encryped devices. It doesn't seem to be remotely initiated so maybe it's not a backdoor so much as a back window. They can't come in but they can stand outside and see everything you do.

Comment Re:Reassuring? (Score 1) 234

You might want to re-think what you said. How would we even KNOW about Carrier IQ if Android wasn't open enough to find out?

Um, by reading the "diagnostic and logging" screen that pops-up during the initial configuration of my phone? By looking at the logged data in the settings menu? The only thing that we've learned today is that the diagnostics and logging system in iOS is vaguely-tied to CarrierIQ. It's not been a secret that it's there and there's no evidence that it does anything more than what it discloses to every new user. Yesterday, it didn't have a name. Today, it does.

Comment Re:Reassuring? (Score 1) 234

I can put CyanogenMod on my Android handset. I can load ROMs based on carrier firmware that has CIQ removed.

Thanks to Open Source Software, I have this choice.

Agreed... but you represent maybe a couple percent of total Android users in regard to your ability and will to do that. My son tells me that Android runs great on his first gen iPhone... so I guess Android provides the same benefit to similarly-minded Apple users. The remaining ones are stuck with a "Automatically Send / Don't Send" radio button. What do the other 98% of Android device owners have?

Comment Re:Reassuring? (Score 5, Informative) 234

I've found it useful as an example for people who don't understand why we need free/open software. ...

You might want to re-think that after reading the article, including its updates. Ironically, the (closed, walled garden) Apple version appears to send only diagnostic data that could be conceivably used for legitimate troubleshooting of dropped calls and the like whereas the (free, open) Android version is more akin to a rootkit, complete with backdoor and key logger.

Comment Re:And in other -- er, actually, the same -- news. (Score 1) 183

Meh, tell that to my old iphone. It took 20-30 seconds to display text after I typed it. You can imagine what scrolling around webpages felt like. The thing was painful. :(

iPhone 3G on iOS 4.0? Been there and it was painful. I missed calls because of the crappy performance. Web pages would take 3 forevers to load... Still, once they did, they scrolled flawlessly in the "you're moving a page with your finger" sense. No choppy animation or pixel by pixel jumping of the page contents. Score one for using the device's GPU to do your UI rendering, huh?

Comment Re:Blackberry (Score 1) 315

Have you RTFA? The battery drains completely in six hours. That's pretty freaking frequent.

Read the article and have the phone. I've not experienced a six hour drain. Nor has my wife. Nor have three coworkers and two friends. Still, I have no doubt that it happens... just not to the majority of users. For those who do experience it, yeah, six hours probably sucks... but I'm far from being convinced that temporarily having the normal battery life of a 4G Android phone while Apple looks into it is the injustice some are making it out to be.

Come back and make your RIM comparison when half the iPhones in the world stop working for three days straight.

I'll be glad to once iCloud goes down. Which it will, eventually. And it will be hilarious.

I fear this day... I'm not sure how I'll operate when everything on my phone operates as it always has except for my unused .me email account and photo synchronization.

Comment Re:Blackberry (Score 3, Interesting) 315

Had this been an issues with a new blackberry, you know they would be crucified. The media loves to let apple getaway with stuff like this all the time, but any mistakemade by RIM and it means the end of the company. If this is a software bug, why are we waiting weeks for a fix? Because apple knows they can do as they please, and these devices will still fly off the shelves faster then they can build them.

Because it's nothing more than a minor inconvenience for a small number of users? Great, your battery drains before the day's over. So what? Charge your phone more frequently for a couple of weeks while Apple looks into the issue. Come back and make your RIM comparison when half the iPhones in the world stop working for three days straight.

Comment Re:Inexcusable incompetence for this failure (Score 1) 90

It is completely inexcusable for Google to botch up a high-profile app release like this. Google has thousands of engineers, PMs, and testers, and they can't release an app for Gmail, one of their flagship user-facing products?

Inexcusable? Maybe. ...but not at all unexpected. Anyone who's attempted to make use of the Google Voice iOS app over the last ~year that it's been available would think that an app that errors-out at launch is the next evolutionary step. It's had at least three updates but none of them have addressed abysmal performance, hangs, lock-ups, and false "call failed" error messages that were present and widely experienced from the very start.

Submission + - Libya taps engineer as interim leader (cnn.com)

PolygamousRanchKid writes: Libya's transitional government picked an engineering professor and longtime exile as its acting prime minister Monday, with the new leader pledging to respect human rights and international law. The National Transitional Council elected Abdurrahim El-Keib, an electrical engineer who has held teaching posts at the University of Alabama and Abu Dhabi's Petroleum Institute, to the post with the support of 26 of the 51 members who voted. El-Keib emerged victorious from a field that initially included 10 candidates. He is currently listed as "former faculty" on the website of The Petroleum Institute, which said he served as chairman of its electrical engineering department and lists him as an expert in power system economics, planning and controls.

PRK: Has there ever been an engineer in the top spot . . . ? Anywhere . . . ? Ever . . . ? Is this a good idea . . . ? Or are techies doomed in politics . . . ?

Comment The world of senders is not black and white (Score 1) 301

Remember that not every non-spam email originates from a perfectly-configured self-hosted SMTP server. Many organizations outsource their email, spam filtering, compliance filtering, notice / statement delivery, etc. While it's easy to posit that the IT departments in such organizations have a duty to maintain reverse DNS records for all their partners' servers, don't fall into the trap of thinking that every organization has a fully-staffed, knowledgeable IT department... or an IT department at all.

Comment Re:Baed on numbers... (Score 2, Interesting) 149

The most interesting part of the article for consideration with SSDs is that SMART is going to be near useless for them. Since most failures are random occurrences in electronics which SMART isn't good at detecting, we may need better technology for detecting SSD failures.

Have you ever seen SMART perform in a useful way on a mechanical disk? At work and at home, I've gone through a crap-ton of hard disks in the last decade or so that SMART's been prevalent and never have I seen SMART flag a drive as problematic before I already knew I had a serious problem. More often than not, I've had systems slow to a crawl due to massive numbers of read errors and sector reallocations while the drive firmware actively lied to me about the drive's condition. Only looking at the raw SMART stats and watching the counters increase wildly reveals the truth.

Comment Re:UNC Greensboro (Score 0) 432

Have IT staff ever ridiculed you for asking questions about Linux?

Yes. They seem to be from the MS School of thought. You remember those people...everything must run MS and if it doesn't, it sucks. The guys who run Ultimate editions of everything even though they don't need it, and brag about having a beta version of Office. Well now they work in IT.

Yeah, it's because the IT staffs are inept and brainless, not because IT training, culture, and best practices center around what actually works in business where most of these oppressed students will spend 50 years of their adult lives. Don't get me wrong, there are plenty of clueless losers in IT who don't even know what Linux is, but if you're looking at entering any non-tech field and think your college Linux experimentation and personal rebellion against Microsoft's evil empire will offer you any advantage in the business world, you're in for disappointment.

Slashdot Top Deals

One man's constant is another man's variable. -- A.J. Perlis

Working...