By his own narrative, it wasn't creating PowerShell specifically that got him demoted. It was doing "unassigned" work during work hours.

He details that it was specifically that Microsoft did/does not have the 80/20 type thing some competitors have, where you get some time to free range random concepts and ideas, so some pissy middle manager got mad that he wasn't going through the whole project approval (you know, the let everyone comment on the color of the shed stage) and he got demerits.

*What is YOUR source for this. Do you even have one?*

THE PAPER THAT WAS SUBMITTED. They are very open about the *incredibly* narrow known threat model (basically ASLR pointer obscuring *in the same process*), albeit -- as all papers do -- opining that maybe there is something worse that could be done. These sorts of security papers come out by the dozen per year, and generally no, there isn't any further risk, and the latent risk is negligible to irrelevant.

To be clear, when security researchers are pitching a novel vulnerability, the foundation of their claim is a proof of concept, because the chasm between "well it could...." and the actual can be enormous. No proof of concept. Not even a vague inclination of the knowledge of how to make a proof of concept. And this issue has been very widely disseminated, every hacker group pounding on Augury -- theoretically it is trivial to exploit on an array of pointers -- and no one else has a proof of concept yet. Weird, right?

ROFL. Classic Slashdot. Good god.

"No bias there at all."

Because I have an M1 Mac I have a "bias"? Yeah, not really. I'm typing this on an Intel box. I have servers on AMD, Graviton 2, among many others. That's a modern life.

"Sources are people in the security industry in which I work."

ROFL. Yeah, no you don't. You are claiming ridiculous things.

These sorts of "you know it *could* hypothetically be exploited" (in a profoundly narrow sense) security papers come up by the dozens per month. The overwhelming majority have no real impact whatsoever. This one is particularly spurious.

The "amateur hour" bit in your comment was particularly hilarious, and betrayed that you're just some guy saying dumb stuff.

What source says it's "impossible to mitigate this"? Do you have even one?

Because the notion is preposterous. Not only is this largely a theoretical attack (I'm being generous by not calling it a fully theoretical attack), with extremely little real world consequences, mitigations are *trivial* if it were something real.

"I really want Arm on the workstation and server to succeed."

You seem to know literally nothing about security or chip design, and decided to post some tosser, laugahble anti-Apple screed. Me, I'll keep using my M1 Mac, and have been using ARM on the server for half a decade now. Hurrr.

They're using a payment processor. Meaning a third-party is converting cryptocoins to real money, and the real money is transmitted to Newegg.

Bitpay added dogecoin a month ago, so now they can milk this with every retailer that has Bitpay as an option.

Let's hope people get franchise fatigue! I've heard people here say that these movies are made by comic book fans, which maybe true but that doesn't mean these fans have that much control. When a studio/distributor like Disney spends $230 million just on the film and the same again on marketing they couldn't give a stuff what fans want. They need a return on the money they spent and no one in the project is left free of micro management, they can't be with that type of money being spent.

There maybe parallels with the past here. When tv was biting into the market for cinema film in the 50s and 60s Hollywood decided it was going to concentrate it's wealth in sure fire hits, the musicals. When these started to bomb studios had an issue on it's hands. They responded by making cheaper films by auteur directors, and as a consequence we had the cinema of the 70s. Lets hope Disney & Co lose confidence in what they think people will watch, only then will we get the Taxi Driver and Serpico type films being made again.

https://downloads.aaronia.com/datasheets/solutions/drone_detection/Aaronia_AARTOS_DDS_FAQ.pdf

"Last time I checked the public statistics, it's actually already doing that."

Tesla's stats on this are incredibly deceptive.

Firstly, the only place where Tesla drivers engage autopilot is on highways. The accident rate on highways is dramatically lower than city streets and aren't separated out, yet Tesla compares their autopilot numbers of that overall number. Highway driving is the baby first steps of self driving.

Secondly, Tesla drivers already are significantly less likely to be in accidents minus any of the aids. 1 accident per 1.82 million miles for Tesla drivers, versus 1 accident per 479,000 miles for the average vehicle. Again, this is with zero of the assists or safety aids in the Tesla. This is courtesy, presumably, of newer cars (older vehicles are in far more accidents) and perhaps a more enthusiast owner who is more attuned to the world.

Elon Musk has been pitching full self driving for years, increasingly trying to get buyers to pay for a product they aren't actually getting. And I'm sure Elon is looking at the progress and thinking "wow, we're at 95%...only the last little bit left", but in realms like this that last 5% takes 5000% of the time and effort.

Ah, the death certificate claim. This is an argument presented by two types of people-

a) Liars and people who just want to see the world burn
b) The gullible who have been misled by a) and just don't realize it

The CDC gets death certificates often with MONTHS of delay. If you track their counts in real time, past periods will continually percolate up as death certificates from all causes eventually make their way to the CDC.

https://www.cdc.gov/nchs/data/...

The CDC gets COVID-19 data very rapidly because it's a pandemic. They get data on every other cause of death much more slowly.

It's remarkable how virtually any topic gets exploited and misdirected by people who just like trolling the world.

Currently the deaths / known cases (positive tests) = 5% CFR

If 10x more people have had COVID-19 than known (e.g. 25 million rather than 2.5 million), that would make the CFR 0.5%. Which would still be terrible, as an aside.

If we assumed 100X more people had it than known, that would still be a CFR of 0.05%, which would still be quite bad for a highly viral disease. But given the spreading patterns of the virus, that is clearly and obviously not even remotely possible.

The current CFR in the US is >5%. 10x less deadly (0.5% CFR) for a super-virulent respiratory is still incredibly bad.

I mean...are the deniers still doing the no biggie thing? Amazing.

Not really, friend. At this point it's clear discussion with a fanatic is futile.