Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:Using an economic lens (Score 1) 77

I think they are holding out to sell the buildings at full price.

Never gonna happen. Full price was before 10 years of decay and rodent infestation + neighborhood gone to shit. Nevertheless, high supply, low demand is supposed to result in low prices.

What a nice idea! But then the commons are not only not commons, but they become properties and whatever herdsman gets the biggest herd will buy it all up and you get a monopoly.

One, how so if the agreement is ownership in common. And two, how is it worse than it all being owned by a (land)lord who rakes in the better part of the profit while considering herding animals to be beneath him?

Sounds like you drank the cool aid.

Comment Re:No because... (Score 1) 123

Android github app is not allowed to save files into pyDriod3 data directory.

Android file manager app is not allowed to copy files to/from ibochs android app data directory.

In general data owned by app A is not readable/writable by app B. This is a pretty important security feature. There are ways for apps to choose to share data, but by default every app's data is private to that app.

I can see how that might inconvenience you, but I think it's Really Good Idea.

Comment Re:At least something (Score 1) 33

I guess they read a few EU laws and came to the conclusion that they need to provide a bare minimum by themselves if they don't want the EU to decide what they are required to provide.

Nah, their previous plan already provided the bare minimum, since it didn't restrict sideloading of unverified apps via ADB. This is just an attempt to calm the complaints by offering an even easier sideloading option. Unfortunately, it will probably make the whole scheme pointless, since malware authors will just train users to click through the scary warnings.

Comment Re:Already an option for 'advanced users' (Score 3, Interesting) 33

Whatever method it is, it will probably defeat the purpose of ending unsigned side loading. Whatever the hoops are, users will be trained to jump through them.

This is sadly true. They're going to attempt to throw up a lot of warning dialogs to dissuade users, but we know from long experience that users will click through anything to get to cat videos.

This is actually not a change, really, since they were already going to leave sideloading via ADB open, so their plan already included an "advanced user option" which users could be trained to do. This new thing must presumably be easier than ADB. My guess is that it will feature more scary warnings than enabling ADB, but will allow sideloading without using a USB cable to connect to another computer so that on balance it will be approximately as hard.

During another discussion of this I posted a story that an Android OEM related to me when I worked on Android security, when they asked me when we were going to "close the USB vulnerability", i.e. disable ADB.

Comment Re:Already an option for 'advanced users' (Score 2) 33

The problem is that alternate app stores would have had to verify all their apps with Google which defeats the purpose of being alternate.

How so? The developer verification does not require compliance with any of the Play store policies or anything at all other than the rule "don't distribute malware", since distributing malware would result in the developer account (and signing certificate) being revoked, which is the point of the whole thing, to enable Google to shut down malware authors. Or at least to slow them down, since they'd have to register for a new account, with a different government ID.

This does leave determination of "what is malware" up to Google, but they've been doing that for a long time and I've yet to see any case where people disagreed with their assessment. Note that I'm talking about designation of malware, not about removal from the Play store. Identified malware is removed from the Play store, but there are lots of other policy violations that can trigger Play store removal.

Comment Re:Already an option for 'advanced users' (Score 2) 33

It's called ADB.

The point was that that was going to go away as a route for unsigned apps to be replaced with a requirement for signatures even when using ADB or other alternative installation methods

This is not correct. Per the information on Google's developer console sideloading of unverified apps via ADB was not going to be disallowed:

Q: If I want to modify an app and install it on my own device, or if I'm a power user, is there a way to turn this verification requirement off?

A: We understand that's an important use case for many developers and power users. While the verification requirement itself is a core OS feature to help protect the broader ecosystem from malware and can't be turned off, developers and power users can still use Android Debug Bridge (ADB) to continue to build, test, and install modified or unverified apps on their own devices.

(Emphasis mine)

This information has been up since shortly after the announcement.

Comment Re:Collective Risk (Score 1) 168

Yeah, it would probably take legislation forcing all of them to post and advertise prices including taxes. If everyone had to do it no retailer would be disadvantaged by being the first.

That said, I think it's a bad idea, unless retailers also have to itemize out the taxes on receipts so that consumers can see how much tax they're paying, which typically doesn't happen in Europe, as far as I've noticed (other than VAT, which is often itemized out on some purchases so that foreigners can get a VAT rebate). I think it's important that people see the taxes they pay so they can evaluate whether they think they're getting good value for their tax money. This is why I also oppose corporate taxes and any other sorts of taxes that are ultimately borne by individual taxpayers but are hidden by layers of obfuscation. Actually, there's another reason to oppose corporate taxes: Corporate taxes delegate to corporations the decision of how to allocate the cost of the taxes between customers, employees and shareholders. That allocation is an important public policy matter, and it should be decided by legislation, not by corporate bosses.

To be clear, I think there are a variety of public services that absolutely should be funded by taxpayers, and wholeheartedly support taxation for those purposes. But exactly what should be taxpayer-funded, at what level and with what efficiency are all important questions that voters should have input into, and that requires that they actually see what taxes they're paying.

Comment Re: Make them occasionally? (Score 1) 168

So back then, prices were incremented by more than today's quarter.

People need to consider: Rounding to a nickle isn't going to be greater than 2 cents more inaccurate than rounding to pennies. Let's say you live in a backwater state, and still only make $7.25 per hour. Each transaction could potentially cost you at most 10 seconds of extra wages. However, transactions randomly round up and down, so the average error gets reduced by the square root of the number of transactions you make. Statistically speaking, you'll gain or lose only a couple of seconds of your time per purchase. Probably less time than it took to fumble for all those pennies.

But it sucks to be poor. Without pennies, someone who makes $50k per year will gain or lose only milliseconds worth of salary per transaction on average.

"But the stores will set prices so that it always rounds up!!!!1!" -- That only works for one item at most. Savvy shoppers would strategically buy combinations of items that always round down.

Comment Re:Rationality versus rationalism (Score 1) 77

That smells a LOT like BS. I'm just going to eat all this food in your pantry to make sure you don't get food poisoning, and such.

Compare, instead of the nobleman charging rent, the herdsmen do get together and own the commons in common, working out a fair deal between them for sustainability.

As for the NYC situation, if there's a glut, why don't prices fall? Where are the buildings for sale cheap to someone who wants to do a residential conversion?

Comment Re:That secure feeling. (Score 1) 23

If they're using the enclaves built into Intel and AMD, there may be side-channel issues to deal with. ARM is closer to what Apple is trying with their enclave.

ARM's TrustZone is definitely more secure than the alternatives on Intel/AMD, but TrustZone is also subject to side-channel attacks. To a first approximation, it's impossible to run two workloads on the same CPU and keep them perfectly isolated from one another.

However, I don't think any of these secure enclave concepts are relevant in this case. The way you'd build a private AI cloud is not to run it in enclaves (which are essentially just security-focused VMs) on CPUs that are running other tasks, the way you'd do it is to devote a bunch of CPUs solely to running the private AI workloads. Then your isolation problem becomes the traditional ones of physical access control to the secure machines and securing data flowing into and out of those machines over network connections.

Slashdot Top Deals

Behind every great computer sits a skinny little geek.

Working...