Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:Let him keep the debris (Score 1) 57

Arguably, the homeowner may not want to give it up -- the debris is likely to be worth way more to a collector than the damage it caused, especially since there's video of the crash.

Of course, then the question of "who owns it?" comes up -- the ISS *clearly* discarded it, and by chance it ended up in the homeowner's possession.

Typically, meteorites belong to the land owner where they fall, and this isn't debris from a crash like we had with Columbia -- it's literally trash from space.

So, maybe the lawyers will be arguing about it for a while, or maybe the homeowner will just give it to NASA without any drama -- I know that the previous article says that NASA now has it, but that doesn't mean they get to keep it. Or maybe NASA will analyze it and then return it without any drama.

Either way, I imagine that the homeowner will file a claim with their own insurance, who will then file a claim with NASA or Japan (or both?) and if they recover the money, the homeowner will get their deductable back.

Comment Re:And no crappy systemd or xz libs in sshd (Score 2) 62

To answer some other parts of this that I forgot in my other comment, I've never used Devuan, but it's described as :

Devuan GNU+Linux is a fork of Debian without systemd that allows users to reclaim control over their system by avoiding unnecessary entanglements and ensuring Init Freedom.

... so if you're looking to keep things simple, keeping systemd out sounds like a big step in that direction, so choosing Devuan over Debian should be a big step in that direction.

But if the system doesn't have systemd, how can it possibly "patch a version of libsystemd into sshd"? Is systemd in there after all somehow anyways?

Comment Re:And no crappy systemd or xz libs in sshd (Score 2) 62

If you want to compile OpenSSH from scratch who cares if a specific distribution gives you the option? You're just going to not install their package or rip it out, and install your own.

Compiling such things isn't hard -- it's typically some variation of "wget tarball, extract tarball, cd into directory created, ./configure ; make ; make test ; make install" though OpenSSH might need a bit more configuration tweaking than that to work with whatever you're trying to slap it into -- or that might work as-is.

It's fine that you want to do this with OpenSSH, but you're trying to close the barn door after the horses have escaped. Sure, the very latest xz got backdoored, and a given OpenSSH may use it even though it doesn't *need* to use it, and so on, but this is just the very tip of the iceberg. All eyes are on xz now, but what about the other hundred or so libraries your system may have? Running ldd on my /usr/sbin/sshd finds 28 libraries linked, and while some of these would not be there after a rebuild with all the options turned off, there would still be more than a few left -- better rebuild them net.

And OpenSSH isn't the only thing you've got to worry about.

Ultimately, as a practical matter, most people are going to have to trust somebody else to build their system for them -- one person can do it on their own (and there are distributions aimed at trying to help with the process at least somewhat), but it quickly turns into a huge job just building all your own things to your own specifications, and then you're personally on the hook for all updates. Only if it's a super paired-down system (maybe in a container?) does it become practical for most people to do this all themselves. And even then they're still trusting that the code they're running is secure -- and the xz issue make it clear how hard people can try to obfuscate their backdoors.

Comment Re: Kinda like "security theater" (Score 1) 395

Men are full of bumps and lumps and other than the "pretty boys" aren't much to look at.

I understand that you are not one of these people, but there are *plenty* of people who like looking at these bumpy, lumpy men. Even the ones who aren't "pretty boys".

Ultimately, men aren't usually described as "beautiful" because the word is at least somewhat gendered and tied to feminine standards for beauty. But there are plenty of "gorgeous" guys out there too, even if the traditional standards for attractiveness/beauty are different for men and women.

Comment Re:Wait, Airpods have cell service? (Score 2) 164

I have an AirTag sitting at home right now that seems to have been recently pinged and the error circle covers about half a dozen homes on my street.

Indeed.

And so this is definitely a *great* lead for the police to follow up on -- show up on the street and start looking around -- but it's nowhere near enough to pick a specific house and knock its door down, not by itself. And the police should absolutely already know this.

But here we are.

Comment Re:I see that Microsoft hasn't really changed .... (Score 2) 163

Same attitude that Google had that led to Chrome winning browser wars.

Google "won" (or dominated might be better?) the browser wars because they had the best browser. (Well, at least at first, and for a long time. It's not clear if this is still the case, however.)

As far as attitudes go, Google controls Android like Microsoft controls Windows, so ... does Android complain when you install Firefox?

Comment Re:Even with Boeing it's a coin toss (Score 1) 112

Yeah, it doesn't seem to add up.

If they just lost instrumentation for a few seconds, the plane should have just kept flying as it did before, where the passengers probably wouldn't even notice.

If the lost instrumentation caused the autopilot to move some control surface to the max improperly for a few seconds, I'd expect the resulting movement to not be *that* violent -- these planes are not really nimble, though if it lasted more than a few seconds the accumulated tilt could certainly cause people to fall.

And if the autopilot or something else failed and caused the control surfaces to move unexpectedly -- again, I'd not expect that to be that violent, but given enough time people are going to fall (like if the plane is now banking at a 30 degree angle.)

Whatever happened, it sounds like it's a damn good thing it happened at altitude rather than at takeoff or landing

Comment Re:Gotta love euphamisms (Score 1) 36

The space industry is filthy and needs to sort its act out.

There are only three other ways to get rid of something that is currently at the ISS: bring it back to Earth, send it into deep space or send it into the Sun.

All three of these would require considerable expenditures of fuel (with the corresponding pollution) and considerable cost -- and it already cost a *lot* to get that fuel up to the ISS (around $40,000 per pound) in the first place.

Bringing it back with a trip back down from the ISS would still require additional fuel, but a lot less additional fuel than the other two methods. But it comes with its own risks -- for example, the cargo could cause problems with the trip back, especially if it can't be properly secured, and once it's down it's just ... trash. Or something to be recycled, if you're luck.y

But just throwing it out the airlock? That's relatively cheap and easy.

People burn things like this on Earth all the time. It's not good, but it happens regularly. Letting it burn up in the atmosphere falling from orbit isn't going to be that different.

As long as we are at the mercy of the rocket equation -- and there is no end in sight -- it's going to make the most sense to keep doing this.

Comment Re:"An inode number just isn't a unique descriptor (Score 1) 121

Note that inode numbers have never been unique across filesystems and in the case of BTRFS, across sub-volumes.

Of course. For example, each filesystem root directory on my system has an inode of 2 on the ext4 filesystems, and 34 on the zfs mountpoints. (I thought it was 1, but maybe that's me thinking of something outside of Linux? For Linux, after looking it up, ext2/3/4 use inode 1 to store bad block data. Interesting.)

But if you combine "device" and "inode", that's always been a unique identifier for each file, at least on "traditional" filesystems, and a lot of utilities do rely on this.

For example, changing this would break utilities like "du" and "tar" in how they handle hard links.

I'm having a hard time thinking how this would be a problem for synthetic filesystem, however.

I haven't looked at btrfs much, but I'd expect it to behave like other filesystems in that regard. I can confirm that zfs does.

Comment Re:for an new idea 48VDC may be an better fit but (Score 1) 79

The threshold of requiring warnings is 50 volts. That's why phone lines used 48 volts.

Ehh, maybe.

POTS lines go from 40v to 54v when on-hook, and 5v to 20v when off hook. 48v is nominal, but there's a lot of tolerance there too.

And when the phone is actually ringing they'll throw an A/C voltage in there up to 110 volts. That will definitely shock you.

Comment Re: Ugh, just give me some pseudoephedrine. (Score 1) 143

I am also in the USA and this process is a hassle.

Also, living in Austin, TX we're now entering Cedar fever season (it's really "juniper but I digress), and the amount of pseudoephedrine that they'll let you buy is insufficient for some who really suffer from this, and if one person is buying for a whole family it's pretty much impossible to get enough.

It's bad enough that some people have to plan months ahead -- they'll start "hoarding" (not that there's any shortage) pseudoephedrine months in advance so they have enough when cedar fever arrives.

Slashdot Top Deals

"How to make a million dollars: First, get a million dollars." -- Steve Martin

Working...