Forgot your password?
Close
typodupeerror

Comment Re:Note that this is a local exploit (Score 1) 82

Everyone might as well be root, if one with bad intentions gets access to a system, well they should be assumed to just be root anyways?

That's how AWS does it.

I used to run a data ingest system where we gave limited shell accounts to somewhere around 1,000 clients, plenty of similar but much larger systems are out there. No one *at my company* had messed up in any way if one of those accounts went rogue.

If they have hacking skills, the "limited shell access" wouldn't be limited long. Giving someone local access is insecure.

Comment Re:Note that this is a local exploit (Score 2, Informative) 82

In the Linux kernel (as with most kernels) privilege escalation exploits are a dime a dozen. You should not use shared machines as a form of security unless you trust everyone involved.

The reason is because the kernel/userland interface is huge and was not designed with security in mind (it was designed for efficiency, functionality, and sometimes outright braindeadedness). Even OpenBSD doesn't count local privilege escalation exploits, only remote exploits.

Comment Re:That's not a high paying job in SV (Score 1) 76

There's a shortage of labor, even with recent layoffs. There are few highly skilled engineers sitting around unemployed wishing someone would give them a chance. Most of them took shittier jobs if they didn't suck

In Silicon Valley, the recent trend (for the past 15 years) is to find a programmer you can control, rather than a programmer who is good.

Comment Re:I Wonder Why? (Score 3) 76

Sometimes companies outsource development to India to save money. That doesn't work well, because of communication issues and such.

So they decide to bring the best members of the outsourced team into America, since they already are familiar with the codebase, etc. This is the process that is commonly used across the country to get H1 visa holders.

It's common, advertise for the role and find a reason to reject everyone who applies for it.

Comment Re:Mythbusters (Score 4, Insightful) 80

by phantomfive (#66116252) Attached to: The Silent Frequency That Makes Old Buildings Feel Haunted
When mythbusters debunks something, they usually debunk it in a single scenario. They don't go through all the effort to exhaustively explore the search space. That is why they are criticized for not being scientific.

Mythbusters shines when they prove something is possible. Break a glass with your voice? That's where they are at they strongest. (There is still room for alternate hypothesis, maybe the singer held the glass too tightly? But it's a solid piece of experimental evidence).

Comment You can hear below 20 hz (Score 5, Informative) 80

by phantomfive (#66116236) Attached to: The Silent Frequency That Makes Old Buildings Feel Haunted
20hz is not the level you can hear, it's the level where repeated pressure changes get unified in your brain to a single tone.

Below that level, your brain perceives them as individual beats. At 20hz they are coming pretty quick, but if you listen (and they are loud enough) you can distinguish each one.

Comment Re:Ideologically fueled insanity. (Score 1) 279

Is it though? Given how offshore wind with fixed platforms can be competitive with gas turbines without subsides,

I have no idea, ask ChatGPT. She probably knows all the answers to everything ever and she's really good at logic and math.

Even then the approach is stupid. Some of these projects are very early on. Just remove the subsidies and they'll fail their FID and cancel themselves.

According to the article, they had to pay the companies to keep them from suing the government, because their method was "unorthodox." That is to say, not entirely putting the bell on the cat. Or in other words, illegal.

Comment Re:Ideologically fueled insanity. (Score 3, Interesting) 279

According to the administration (in the article):

“The companies that bid for these offshore wind leases were basically sold a product in 2022 that was only viable when propped up by massive taxpayer subsidies,” [Interior Secretary] Mr. Burgum said in a statement.

I have not looked at the numbers to see if that's a true pretext, but anyway that is their pretext.

Slashdot Top Deals

"my terminal is a lethal teaspoon." -- Patricia O Tuama

Close