Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment teething (Score 4, Insightful) 53

"There'll be some teething problems," O'Leary said of the move.

That's putting it mildly.

Smartphones can crash, run out of battery or any number of problems. On important trips I usually have a paper boarding pass with me as a backup. Only needed it once, but I'm just one person with fairly normal travel amounts. Multiplied over the number of people flying Ryan Air, statistically speaking this happens constantly.

Frankly speaking, I think it's a gimmick to milk the customers for more money. Someone at Ryan Air has certainly done the calculation, estimated how many people can't access their boarding pass at the gate for whatever reason, and how much additional money they can make by forcing all these people to pay the additional fee for having it printed.

Comment Re:Isn't this the idea? (Score 2) 104

Eventually whoever has most to lose is bound to step up and help.

That, or your project gets sidelined. Which is where the danger lies.

I work for a big multinational software company that uses a lot of Open Source Software. We have a security office that audits all of our products several times a year. If any piece of our stack shows any open CVEs we have a fixed amount of time to fix the issue, with the amount of time varying from a few days (for CRITICAL severity issues) to roughly half a year for the lowest severity issues. A lack of a fix for a published CVE isn’t an excuse for not fixing the issue on our end — the software still has a security flaw in it, and the organization is so incredible security averse (thanks in part to having contacts in the defence industry) that they don’t want to risk expensive lawsuits and the loss of reputation if a vulnerability is exploited.

A lot of bigger organizations now work this way. We’ve all seen what has happened to organizations that have had significantly security breaches, and it’s not pretty. Our customers are big corporations and government entities — and if they even sniff a risk there are going to be problems. So if there is an unpatched exploit, we’re expected to either switch to something comparable, or DIY a solution (either replacing the library in question, or potentially patching it ourselves).

If ffmpeg allows known and published vulnerabilities to languish, the risk here is that organizations that use their code will simply stop using it and will look for other solutions. That’s a tough pill for an Open Source Software developer to swallow, especially when they make it as big and important as ffmpeg. You might wind up in a situation where an entity like Google forks your code and takes ownership, and eventually gets everyone to migrate to using their version instead (like what they did with WebKit to Chrome), leaving you sidelines. Or maybe someone else jumps in with a compatible solution that works well enough for enough users that they switch to that instead.

Now in an ideal world, the Google’s of this world would not only submit a CVE but would also submit a patch. Having been an OSS developer myself I’ve always encouraged my staff if they find a bug in a piece of software we use to file a bug report and ideally a patch if they know how to patch the issue correctly — but I know that is hardly universal within our organization, and probably even less so elsewhere.

TL;DR: a lot of OSS success relies on having lots of users, or at least some big and important users. But you risk losing those if you leave CVE’s open for too long, as company policies may require scrapping software with unfixed CVEs. That loss of users and reputation is dangerous for an OSS project — it’s how projects get supplanted, either by a fork or by a new (and similar) project.

Yaz

Comment Re:I wouldn't care if my taxes hadn't paid for it (Score 1) 88

Mostly true but not entirely. For the moment at least there are still applications such as airplanes where fossil fuels have no reasonable alternative. But yes, a large number of things that we currently power by burning long-dead dinosaurs could just as well work with other sources of energy.

And yeah, I think the whole world looks at the Middle East and is thinking: If you all so much want to kill each other, why don't we just step back and let you?

Comment Re:It won't last. (Score 1) 39

Another way to go would be to keep burning jet fuel but purchase bricks of carbon from a sequestration company that captures it from the air.

I know there are more efficient types of carbon credits, like investing in cleaner energy in the first place, or increased efficient at the point of usage such as insulation, or preserving rainforest that would otherwise be developed.

The problem is all that gets complicated and thus subjective. Maybe carbon credits could work if it is based on a new type of 'coin' that is 1 kg of pure carbon that is chucked into an old mine.

Comment uh, both, dummy ? (Score 2) 94

Obviously, sooner or later we will want to do things that require our physical presence. And be it because the ping time to Mars really, really sucks.

Robots are way easier to engineer for space than humans, even though space is so unforgiving that that's not trivial, either. The same is true for other planets. Building a robot that works well in 0.2g or 5g is an engineering challenge but doable even with today's tech. Humans... not so much.

But let's be honest here: We want to go out there. The same way humans have found their way to the most remote places and most isolated islands on planet Earth, expansion is deeply within our nature.

So, robots for exploration to prepare for more detailed human exploration to prepare for human expansion.

And maybe, along the way we can solve the problem that any spaceship fast and big enough to achieve acceptable interplanetary travel times (let's not even talk about interstellar) with useful payloads is also a weapon of mass destruction on a scale that makes nukes seem like firecrackers.

Has What If? already done a segment on "what happens is SpaceX's Starship slams into Earth at 0.1c" ?

Comment Re:That dog won't bring home Huntsman's Rewards (t (Score 1) 155

I agree with GP, it's a big kickback scheme for employees that have discretion over business expenses. Most types of card rewards are not reportable as income, which sweetens the deal even further. Score one for the upper-middle-class little guy, I guess...

Submission + - Is Google/YouTube ripping off advertisers? 1

Anne Thwacks writes: I have been on YouTube since it started, and I have never clicked on an advert. Not once. I was taught by my grandmother "if they need to pay for advertising, what they are selling must be terrible!" (OK, this was in the 1950's when food, clothing and everything else was rationed — but hunger is hard to forget).

However, If I go on YouTube, I am literally pounded with adverts, even though YouTube know I won't click. I am a pensioner — I can't afford to pay for the stuff, even if I did want it. But advertisers are paying for it — and I know its not cheap — my employers used to buy Google Ads.

Google Ads are pocketing the money — knowing it won't ever sell anything. How is this not theft?

Slashdot Top Deals

A rock store eventually closed down; they were taking too much for granite.

Working...