Programming

TechCrunch Urges Developers: Replace C Code With Rust (techcrunch.com) 505

Software engineer and TechCrunch columnist Jon Evans writes that the C programming language "gives its users far too much artillery with which to shoot their feet off" and is "no longer suitable for the world which C has built." An anonymous reader shared Evans' post: Copious experience has taught us all, the hard way, that it is very difficult, verging on "basically impossible," to write extensive amounts of C code that is not riddled with security holes. As I wrote two years ago, in my first Death To C piece... "Buffer overflows and dangling pointers lead to catastrophic security holes, again and again and again, just like yesteryear, just like all the years of yore. We cannot afford its gargantuan, gaping security blind spots any more. It's long past time to retire and replace it with another language.

"The trouble is, most modern languages don't even try to replace C... They're not good at the thing C does best: getting down to the bare metal and working at mach speed." Today I am seriously suggesting that when engineers refactor existing C code, especially parsers and other input handlers, they replace it -- slowly, bit by bit -- with Rust... we are only going to dig ourselves out of our giant collective security hole iteratively, one shovelful of better code and better tooling at a time."

He also suggests other fixes -- like using a language-theoretic approach which conceptualizes valid inputs as their own formal language, and formal verification of the correctness of algorithms. But he still insists that "C has become a monster" -- and that we must start replacing it with Rust.
Transportation

Is Homeland Security's Face-Scanning At Airports An Unreasonable Search? (technologyreview.com) 146

schwit1 shares an article from MIT's Technology Review: Facial-recognition systems may indeed speed up the boarding process, as the airlines rolling them out promise. But the real reason they are cropping up in U.S. airports is that the government wants to keep better track of who is leaving the country, by scanning travelers' faces and verifying those scans against photos it already has on file... The U.S. Department of Homeland Security has partnered with airlines including JetBlue and Delta to introduce such recognition systems at New York's JFK International Airport, Washington's Dulles International, and airports in Atlanta, Boston, and Houston, among others. It plans to add more this summer...

As facial-recognition technology has improved significantly in recent years, it has attracted the interest of governments and law enforcement agencies. That's led to debates over whether certain uses of the technology violate constitutional protections against unreasonable searches... Harrison Rudolph, a law fellow at Georgetown Law's Center on Privacy and Technology, and others are raising alarms because as part of the process, U.S. Customs and Border Protection is also scanning the faces of U.S. citizens... They say Congress has never expressly authorized the collection of facial scans from U.S. citizens at the border routinely and without suspicion.

"We aren't entirely sure what the government is doing with the images," the article adds, though it notes that the Department of Homeland Security is saying that it deletes all data pertaining to the images after two weeks. But Slashdot reader schwit1 is still worried about the possibility of an irretrievable loss of privacy, writing that "If the DHS database gets hacked, it's hard to get a new face."
Sci-Fi

Vintage SciFi Magazine 'Galaxy' Preserved Online - And Hopefully Also SoundCloud (archive.org) 52

Long-time Slashdot reader Paul Fernhout writes: Archive.org has made available 355 issues of Galaxy Magazine for free access. Galaxy Science Fiction was an American digest-size science fiction magazine, published from 1950 to 1980 with stories from many sci-fi greats [including Harlan Ellison, Ray Bradbury, and Robert Heinlein]. At its peak, Galaxy greatly influenced the science fiction field. See also Open Culture and The Verge for more about the history of a magazine that help shape the imaginations of a generation of techies..
Meanwhile, Archive.org's Jason Scott -- who also founded textfiles.com -- says his own group of preservationists "plans large scale backing up of Soundcloud soon" -- or at least part of it. A placeholder page already informs visitors that "We are currently working on getting all the API data... We also are writing the scripts to get a good grab of everything we can." Scott told Motherboard Saturday "Our main concern is artists and creators suddenly finding their stuff gone, and making it so it's not in oblivion."
Businesses

Are America's Non-Compete Laws Too Strict? (nrtoday.com) 167

Slashdot reader cdreimer shared an article from the New York Times: Idaho achieved a notable distinction last year: It became one of the hardest places in America for someone to quit a job for a better one. The state did this by making it easier for companies to enforce noncompete agreements, which prevent employees from leaving their company for a competitor... The result was a bill that shifted the burden from companies to employees, who must now prove they have "no ability to adversely affect the employer's legitimate business interests." The bar for that is so high that Brian Kane, an assistant chief deputy in the Idaho attorney general's office, wrote that this would be "difficult if not impossible" for an employee to do...

For the most part, states have been moving toward making it easier for people to switch teams... The most extreme end of the spectrum is California, which prohibits noncompete agreements entirely. Economists say this was a crucial factor behind Silicon Valley's rise, because it made it easier for people to start and staff new businesses. But as states like Utah and Massachusetts have tried to move closer to this approach, legislators have run into mature companies trying to hold onto their best employees... A recent survey showed that one in five American workers is bound by a noncompete clause. They cover workers up and down the economic spectrum, from executives to hairdressers.

Two economists tell the newspaper that since 2000, U.S. workers have changed their jobs less and less, which is sometimes blamed on strict employment contracts as well as the occupational licensing laws which affect a third of America's workforce. The Times reports that noncompete clauses ultimately end up keeping workers' salaries lower, "because most people get raises when they switch jobs."
AI

Elon Musk Warns Governors: Regulate AI Before It's 'Too Late' (recode.net) 201

turkeydance shared a new article from Recode about Elon Musk: He's been warning people about AI for years, and today called it the "biggest risk we face as a civilization" when he spoke at the National Governors Association Summer Meeting in Rhode Island. Musk then called on the government to proactively regulate artificial intelligence before things advance too far... "Normally the way regulations are set up is a while bunch of bad things happen, there's a public outcry, and after many years a regulatory agency is set up to regulate that industry," he continued. "It takes forever. That, in the past, has been bad but not something which represented a fundamental risk to the existence of civilization. AI is a fundamental risk to the existence of human civilization"... Musk has even said that his desire to colonize Mars is, in part, a backup plan for if AI takes over on Earth.
Several governors asked Musk how to regulate the emerging AI industry, to which he suggested learning as much as possible about artificial intelligence. Musk also warned that society won't know how to react "until people see robots going down the street killing people... I think by the time we are reactive in AI regulation, it's too late."
Windows

Ask Slashdot: What Software (Or Hardware) Glitch Makes You Angry? 484

This question was inspired when Slashdot reader TheRealHocusLocus found their laptop "in the throes of a Windows 10 Update," where "progress has rolled past 100% several times and started over." I pushed the re-schedule dialogue to the rear and left it waiting. But my application did not count as activity and I left for a few moments, so Windows decided to answer its own question and restart (breaking a persistent Internet connection)... I've had it. Upon due consideration I now conclude I have been personally f*ck'd with. Driver availability, my apps and WINE permitting, this machine is getting Linux or pre-Windows-8...

That's mine, now let's hear about the things that are pushing you over the edge this very minute. Phones, software, power windows, anything.

There's a longer version of this story in the original submission -- but what's bugging you today? Leave your best answers in the comments. What software (or hardware glitch) makes you angry?
Music

EU Sides With RIAA, Says YouTube Underpays For Music Streaming (mercurynews.com) 82

Profits from both CD sales and digital downloads are declining, while online streaming now accounts for the majority of the $7.7 billion U.S. music market, according to a new article. And the music industry's newest complaint is that 25% of music streaming is happening on YouTube, which they believe is paying them too little. An anonymous reader quotes the San Jose Mercury News: Now, the battle is heating up as the European Union is expected to release new rules later this year for how services such as YouTube handle music, potentially upending some of the copyright protections that undergird the Internet... The E.U. has formally recognized that there is a "value gap" between song royalties and what user-upload services such as YouTube earn from selling ads while playing music... How such a law would address the gap is still being decided, but the E.U. has indicated it plans to focus on ensuring copyright holders are "properly remunerated." Even the value gap's existence is disputed.

A recent economic study commissioned by YouTube found no value gap -- in fact, the report said YouTube promotes the music industry, and if YouTube stopped playing music, 85 percent of users would flock to services that offered lower or no royalties. A different study by an independent consulting group pegged the YouTube value gap at more than $650 million in the United States alone. "YouTube is viewed as a giant obstacle in the path to success for the streaming marketplace," said Mitch Glazier, president of the Recording Industry Association of America... YouTube pays an estimated $1 per 1,000 plays on average, while Spotify and Apple music pay a rate closer to $7... The music industry claims YouTube has avoided paying a fair-market rate by hiding behind broad legal protections. In the United States, that's the "safe harbor" provision, which essentially says YouTube is not to blame if someone uploads a copy-protected song -- unless the copyright holder complains.

YouTube argues that its automatic Content ID system recognizes 98% of all copyright-infringing uploads -- and that each year they're already paying the music industry $1 billion in royalties.
United States

White House Releases Sensitive Personal Info From Voters Concerned About Privacy (vox.com) 330

Huge_UID shares an article from Vox: The White House just responded to concerns it would release voters' sensitive personal information by releasing a bunch of voters' sensitive personal information. Last month, the White House's "election integrity" commission sent out requests to every state asking for all voters' names, party IDs, addresses, and even the last four digits of their Social Security numbers, among other information. The White House then said this information would be made available to the public. A lot of people did not like the idea, fearing that their personal information could be made public. So some sent emails to the White House, demanding that it rescind the request. This week, the White House decided to make those emails from concerned citizens public through the commission's new website... It didn't censor any of the personal information -- such as names, email addresses, actual addresses, and phone numbers -- included in those emails.
Some of the emails also included the commenter's place of employment -- though at least one commenter helpfully informed the White House that their voter info was available at Goatse. But the voting comission is now also facing new lawsuits from the ACLU, Public Citizen, and the Lawyers' Committee for Civil Rights Under Law, McClatchy reported on Monday, noting that "Trump's voting commission has told states to hold off on sharing the data until after a judge's ruling in a lawsuit."
Programming

Open Source Contributions More Important Than Tabs Vs Spaces For Salary (opensource.com) 164

Jason Baker, a Red Hat data analyst, doesn't believe developers who use spaces make more money than those who use tabs. An anonymous reader quotes Baker's blog post: After reading the study one data scientist, Evelina Gabasova, performed some additional analysis and came to a slightly different conclusion, which feels a little more precise: "Environments where people use Git and contribute to open source are more associated both with higher salaries and spaces, rather than with tabs." In other words, if you're at a company where you're using version control and committing open source code upstream, you're statistically a little more likely to be a space-user and a higher wage-earner.
Even across all experience levels, contributing to open source still correlates to higher salaries, Gabasova concludes. "My theory is that when diverse people are working on open source projects together without enforced coding style, the possible formatting mess is nudging people towards using spaces simply because the code is consistent for everyone.

"This is just one of the possible theories, I didn't look to see if possibly language communities that use predominantly spaces (like Python or Ruby) are more active in open source."
United Kingdom

UK Wifi Provider Tricks Customers Into Agreeing To Clean Sewers (upi.com) 71

An anonymous reader quotes UPI: Unwitting customers in the United Kingdom who didn't read the terms and conditions for use of a public WiFi hotspot agreed to perform 1,000 hours of community service, including unclogging sewers and scraping gum off the street. The gag was conceived by WiFi provider Purple. The company inserted the clause into its terms and conditions -- the technically legally binding agreement consumers approve in exchange for use of free Internet, though virtually few actually read the terms. The company said it did so to call attention to the fact consumers are regularly agreeing to terms that they may not actually like, including granting access to private information and data about their web browsing habits.
Other community service tasks agreed to by users included "providing hugs to stray cats and dogs" and "painting snail shells to brighten up their existence." The agreement also promised a prize to anyone who actually became aware of the prize's existences after reading the terms and conditions -- yet after two weeks only one person came forward to claim the prize.
Power

Microsoft 'Cuts The Cord' With A Local Power Utility To Pursue Greener Energy (seattletimes.com) 62

Frosty Piss summarizes the Seattle Times: Microsoft will bypass Puget Sound Energy to secure carbon-free power on wholesale markets under an agreement with state regulators. In 2015, 60 percent of PSE electricity came from coal and natural-gas plants, according to company statistics. The agreement calls for Microsoft to pay a $23.6 million transition fee to Puget Sound Energy, which the utility will pass on to its Western Washington customers... But the settlement does not address one major financial issue that hangs over PSE and its customers -- how to handle the costs of shutting down coal-fired units in the Colstrip, Montana, power station... State regulators and Puget Sound Energy determined that Microsoft is legally responsible for a share of the Colstrip, Montana coal-fired generating plant costs.
Businesses

WSJ Op-Ed: The Post Office Is Delivering Amazon's Packages Below Cost (zerohedge.com) 188

schwit1 shares a pay-walled op-ed from the Wall Street Journal (also excerpted at the URL below): The U.S. Postal Service delivers the company's boxes well below its own costs. Like an accelerant added to a fire, this subsidy is speeding up the collapse of traditional retailers in the U.S. and providing an unfair advantage for Amazon... First-class mail effectively subsidizes the national network, and the packages get a free ride. An April analysis from Citigroup estimates that if costs were fairly allocated, on average parcels would cost $1.46 more to deliver...

My analysis of available data suggests that around two-thirds of Amazon's domestic deliveries are made by the Postal Service. It's as if Amazon gets a subsidized space on every mail truck... Congress should demand the enforcement of the Postal Accountability and Enhancement Act, and the Postal Service needs to stop picking winners and losers in the retail world. The federal government has had its thumb on the competitive scale for far too long.

NASA

Scrap Dealer Finds Apollo-Era NASA Computers In Dead Engineer's Basement (arstechnica.com) 104

Long-time Slashdot reader Joe_NoOne quotes Ars Technica: A pair of Apollo-era NASA computers and hundreds of mysterious tape reels have been discovered in a deceased engineer's basement in Pittsburgh... Most of the tapes are unmarked, but the majority of the rest appear to be instrumentation reels for Pioneer 10 and Pioneer 11, NASA's fly-by missions to Jupiter and Saturn... At some point in the early 1970s, an IBM engineer working for NASA at the height of the Space Race took home the computers -- and the mysterious tape reels. A scrap dealer, invited to clean out the deceased's electronics-filled basement, discovered the computers. The devices were clearly labelled "NASA PROPERTY," so the dealer called NASA to report the find. "Please tell NASA these items were not stolen," the engineer's heir told the scrap dealer, according to the report. "They belonged to IBM Allegheny Center Pittsburgh, PA 15212. During the 1968-1972 timeframe, IBM was getting rid of the items so [redacted engineer] asked if he could have them and was told he could have them."
"NASA told the family of the deceased that it was not in the junk removal business," Ars Technica reports, adding "The two computers are so heavy that a crane was likely used to move the machines." A NASA archivist concluded there's no evidence the tapes contained anything of historic significance.
Biotech

Can AI Replace Hospital Radiologists? (cnn.com) 112

An anonymous reader quotes CNN: Radiologists, who receive years of training and are some of the highest paid doctors, are among the first physicians who will have to adapt as artificial intelligence expands into health care... Today radiologists face a deluge of data as they serve patients. When Jim Brink, radiologist in chief at Massachusetts General Hospital, entered the field in the late 1980s, radiologists had to examine 20 to 50 images for CT and PET scans. Now, there can be as many as 1,000 images for one scan. The work can be tedious, making it prone to error. The added imagery also makes it harder for radiologists to use their time efficiently... The remarkable power of today's computers has raised the question of whether humans should even act as radiologists. Geoffrey Hinton, a legend in the field of artificial intelligence, went so far as to suggest that schools should stop training radiologists.
X-rays, CT scans, MRIs, ultrasounds and PET scans do improve patient care -- but they also drive up costs. And now one medical imaging startup can read a heart MRI in 15 seconds, a procedure which takes a human 45 minutes. Massachusetts General Hospital is already assembling data to train algorithms to spot 25 common scenarios. But Brinks predicts that ultimately AI will become more of a sophisticated diagnostic aid, flagging images that humans should examine more closely, while leaving radiologists with more time for interacting with patients and medical staff.
Security

EternalBlue Vulnerability Scanner Finds Exposed Hosts Worldwide (helpnetsecurity.com) 38

Orome1 quotes Help Net Security:After the recent massive WannaCry ransomware campaign, Elad Erez, Director of Innovation at Imperva, was shocked at the number of systems that still sported the Microsoft Windows SMB Server vulnerabilities that made the attack possible. So, he decided to do something about it: he created Eternal Blues, an easy-to-use vulnerability scanner that he made available for download for free... The statistics collected by the tool, as well as the total number of downloads, show that after the NotPetya attack, people's awareness of the threat did increase... Over 8 million IP addresses were scanned, and a total of 60,000 vulnerable hosts were identified (out of ~537,000 that were responsive). Of the ~537,000 responsive hosts, some 258,000 still had SMBv1 enabled.
One organization in France found two vulnerable hosts after scanning over 13,000 IP addresses, and Erez believes that without his tool, "finding those two needles in the haystack would have been an almost impossible mission... Here is a lesson for IT/Security departments: don't be so certain that you know your network well. Deploy a multi-layered stack of security tools for both risk analysis and real time enforcement."

Slashdot Top Deals