Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:You don't need 900 tabs (Score 1) 107

Just relabel bookmarks as tabs and there you go.

Its already treating them as bookmarks though.. I just wish mozilla would fix smaller things like giving a site storage size limit that actually worked and didn't just ignore it and also wouldn't churn disk as much for no reason at all.

Comment If Lemkin were not a “founder” (Score 5, Insightful) 151

that would 100% be a firing offence.

Honestly, setting an AI you don’t control lose on your production database? Really? That’s just gross incompetence. This is code that a) wasn’t written or reviewed by a human, and b) code that wasn’t even tested on a development copy of the database.

Developers that do things like that are a liability. Unfortunately as “founder” he’ll likely just post something on LinkedIn about learning from his mistakes and “personal growth”, and that will be the end of it. Anyone else would have been shown the door to accelerate their “personal growth”.

Yaz

Comment Re:Bullshit. This is just malware propaganda (Score 1) 55

Yes inherently its just running on the customers computer anyway, so they don't actually have control.

Not sending other players locations when not necessary etc would be cooler.

And you can cheat by off-device means anyway, you can do an aimbot that doesn't run any code on the computer now.

Comment you don't need massive amounts though (Score 1) 70

To teach you don't need massive amounts of content, lessons don't need to be superfacially unique at all, they're scalable on their own.

The need to make new books for schools etc every year is based just on the need to sell them too, basics of languages do not change every year, a student doesn't benefit from unlimited amounts of basic class learning material.

Comment Re:Yay! (Score 1) 37

Thats not entirely true. To update an old ios app to be uploadable into the store is significant amount of work due to apple themselves deprecating stuff and requiring you use a newer xcode. You can't just "update the api call" and expect it to be publishable.

Comment Re:This will just encourage more hacking (Score 5, Insightful) 73

You can only download, put it on the device and read it as long as they decide that they and by extension you have the right to read the book.

You're just renting an access to the book with the drm. Under terms that aren't clear to you since you don't know these dates and contracts that they have with the creator and publisher.

Comment Timeline doesn’t quite work (Score 3, Interesting) 138

"The area that Google did well in that would not have happened had I not been distracted is Android, where it was a natural thing for me. I was trying, although what I didn't do well enough is provide the operating system for the phone. That was ours for the taking."

The antitrust case was overturned by the Appellate Court in 2001. The DOJ and Microsoft settled the outstanding portions in November 2001.

Android Inc. was started in 2003, and was four guys using pre-existing Open Source components to build an OS for mobile phones. Google bought them in 2005, and the first handset using Android was released in 2008.

Bill, you had seven years and the entire backing of a massive corporation (including all of its employees and intellectual property) after the antitrust case was settled, and couldn’t pull off what four guys started and Google finished in five using Open Source components.

Yaz

Comment Re:Just saying... (Score 1) 189

Dear Crowdstrike, you insisted on software with "god level" privs.

It’s not as if Microsoft leaves them a whole lot of choice. Since Windows NT 3.1, Windows has only ever supported two of the four Intel rings of execution — Ring 0 (kernel mode) and Ring 3 (user mode). If drivers had the option of running in Ring 1 they could potentially be isolated when they misbehave without risking corrupting kernel structures — but that option doesn’t exist. The only place where CrowdStrike Falcon Sensor can functionally run on Windows is in Ring 0. That’s a Windows architecture flaw IMO.

AFAIK there are no sufficient APIs to allow Ring 3 processes in Windows to monitor kernel events.

In contrast, on macOS CrowdStrike Falcon Sensor runs as a System Extension entirely in user space (Ring 3 on Intel; I’m not sure if Apple Silicon uses the same notation). It used to be a kext (kernel extension) that ran in Ring 0/kernel mode, but after Apple introduced Endpoint Security Framework (and limitations to running/installing kexts on Apple Silicon) CrowdStrike redeveloped Falcon Sensor to use these new facilities to run completely in Ring 3. Had this flaw hit macOS, the OS simply would have isolated the misbehaving Falcon Sensor without crashing the system.

So I’d say it’s less that CrowdStrike “insisted” on “god level” privs on Windows than it is that they don’t have any choice. Where they do have choice (macOS) they run in plain old user mode — and by all accounts, continue to function just as well as they ever did running in kernel mode.

Yaz

Comment Re:This is stupid (Score 1) 139

I’ll admit I’ve never done development with fanotify, so I’m open to being corrected here.

From what I understand of fanotify, it’s well suited for something like a virus scanner — but what CrowdStrike Falcon Sensor does is much more than file-level scanning. It’s also doing in-memory checks, and looks for patterns of events that may indicate malicious activity.

Indeed, the P-code file that killed Windows instances the other week was intended to check for certain types of improper use of Windows named pipes (one of the reasons why the flaw didn’t affect any other platforms was that only Windows was vulnerable to the type of attack being monitored, and thus macOS and Linux didn’t require that specific p-code). From what I understand of fanotify, it wouldn’t have been useful in this situation.

Yaz

Slashdot Top Deals

"Text processing has made it possible to right-justify any idea, even one which cannot be justified on any other grounds." -- J. Finnegan, USC.

Working...