Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re:The Republican party has been sabotaging educat (Score 2) 15

I can tell that you have no idea what you're talking about because the vast majority of public K-12 school funding is through local taxes, not federal funding. The federal government has almost no control over it so they can't cut funding. If you look at the actual spending on a per pupil basis it's gone up significantly in red and blue areas alike.

The percentage of students enrolled in private schools tends to be slightly higher in blue states as well. The biggest private schools tend to be Catholic (or other religious) schools that aren't that expensive. There are also many states that have charter schools that perform better for less money than the public schools, so it's not a money problem.

The U.S. should invest in expanding the number of charter schools. The real problem is that the public school system has very little competition and therefore no reason to improve. When Sweden expanded charter schools they found that the public schools performed better as well because they had to provide better service.

Comment Re:It's great at solving small hard problems. (Score 1) 72

Great discussion, thanks for not being smarmy or nasty (it's /. I gotta say that). I code for a living and I explain it like this. Police often use police dogs. They don't always use them. However, if they are in a situation where the dog's abilities help, they can really help. A cop cannot sniff out a bomb or might be outrun by a fast criminal. Nobody is outrunning a Belgian Malinois.

Are cops not cops without dogs? Well of course that's ridiculous. Are all dogs cops. No. However, cops can do SOME police work better with dogs. They are just tools that sometimes help in specific situations. They might find new ways to use them that work better. They aren't going to stop using them, but they also don't solve all the problems cops have.

Comment Re:Credit scores are not what you think they are (Score 1) 102

Not really.

If you have a lot of credit, but low utilization the risk to new lenders is higher.

Consider this:

You have five credit cards with limits of 20k, and only about 2k in current balance. That means you can potentially run out tonight and rack up 98k in new debt. You don't have a 'history' of being able to service that much additional debt successfully.

Now lets compare you to another person with 5 cards also with 20k limits, but a normal balance of something like 75k outstanding.. They have been paying on it for years, and never missed a payment or otherwise been in default.

Now both of you are applying for a an auto loan, the monthly minimum payment will be $200. All other things being equal which one of you do I actually know more about you likely being able to pay me?

Its the guy with more credit utilization. He is already showing he make payments on most of his current credit, his current liability situation can't deteriorate significantly - his other lendors will decline payment authorizations. If he seems 'stable and sane' right now he thinks he can handle the additional $200 he can. I don't know you won't get in a fight with the wife tomorow that ends in her running out and replacing all the furniture in your house to vex you, and leave you bills you can't pay, or that you won't develop a serious problem with Draft-kings, etc.

Comment Re:It's great at solving small hard problems. (Score 1) 72

Hmm, yes, I think the heart of what you say is true. LLMs *can* build something, so it's more useful to articulate the limits, not simply poo-poo it's ability to do anything at all useful, which is beyond doubt at this point. It's useful. The question is how much and what are the drawbacks, if any.

Comment Re:It's great at solving small hard problems. (Score 1) 72

Hmm, I can't find much to disagree with. The only thing is that I think you might be over-emphasizing that a tetris clone == shovelware. While it is, technically, it's complexity is fairly low, it's dynamics are well known, and there is reference code for the LLMs to parse/consume before trying. Put another way, I think it's not as complex a task as most things I'd personally consider better examples of shovelware.

Nonetheless, I think your main assertions are true. One can code *something* with LLMs, but as it if it'll meet folks expectations (ie.. the Vibe Coding hype) I still have major doubt. I personally think the flood of crapware is delayed, and it'll take the form of small Tetris-sized programs that one can bite off with an LLM in one pass.

You also make an especially good point about how apps are more than just coding.

Comment Re:"and found no evidence of exploitation" (Score 1, Troll) 26

It is easy to not find evidence of something if you don't look to hard.

This is a case where even if there were IOCs and you found them the clean up would be nearly impossible. Think about their 'Shared Responsibility Model' and the implication here. If MS were acknowledge some kind of serious breach occurred in their core Entra-ID IAM platform...they'd either have to be able to be able to conclusively identify all the impacted subscriptions or every single one of their subscribers would have to kick off their own IR process because how could they know they have not been backdoor'ed from inside their subscription.

Microsoft does 'dog food' so if Entra was exploited MS's internal management is possibly compromised so they could not be 'certain' about the impacted customers, at best they might get some sort of 'beyond a reasonable doubt level of certainty but we could never hit the 'yes the sky is blue standard'.

A not insignificant portion of MS clients (even pretty big important ones) likely have pretty deficient IR capabilities, independent of if they know it or not. Even the good ones are not at the 'we can assuredly remove any persistence work a state-level-actor did on our compromised systems' level without resorting to a large scale rollback-restore. Think the Azure infrastructure could handle that level of activity, the amount of storage-I/O to do all the analysis and IOC searches? the compute and I/O to do mass restores, all in small window...doubtful?

There is also the core defect in MS's approach to authentication that go back to the earliest days of NT, Microsoft stuff gratuitously authenticates all-the-time...Even when that isn't being directly exploited to gather authentication assets like hashes etc for attacks, it means the number and often meaningless or outright spurious log events make understanding what an actor malicious or otherwise was doing with an given set of credentials in terms of intent challenging. (Don't attack me for this statement I did not say impossible, IR professionals and good network security admins can, it just isn't simple.) Which adds a lot of cost to cleaning up an incident like this - if one were to be triggered.

So I don't think we should over look the POWERFUL motivations to declare this one contained. I do think we should recognize that Azure and AWS are probably 'TBTF' and really Congress should be taking a hard look at forcing some divestment and perhaps limiting the size of SaaS/PaaS providers in general. It is just to many eggs in one basket, there is a serious National Security and economic risk here. It comes down to a poorly managed or neglected mill pound might flood a few neighboring farms from time to time but if the damn breaks a large hydro electric resivor it might wipe entire towns off the map. The former might happen a lot more often because of who is in charge, and what resources the have to secure and maintain it, but you have to look at costs in terms of impact * probability. At some point the impact factor is just to large, for anything but a zero probability to be tolerable.

Slashdot Top Deals

The sooner you make your first 5000 mistakes, the sooner you will be able to correct them. -- Nicolaides

Working...