Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Define your damn acronyms (Score 1) 74

Could you write the Guardian and tell them that, please?

My point is that expanding the acronym isn't useful, except perhaps to chemists who would already know what the acronym expands to. Explaining what PFAS are is useful. And the article did that:

PFAS are a class of 15,000 chemicals used across dozens of industries to make products resistant to water, stains and heat. Though the compounds are highly effective, they are also linked to cancer, kidney disease, birth defects, decreased immunity, liver problems and a range of other serious diseases.

They are dubbed “forever chemicals” because they do not naturally break down and are highly mobile once in the environment, so they continuously move through the ground, water and air. PFAS have been detected in all corners of the globe, from penguin eggs in Antarctica to polar bears in the Arctic.

So, I think the Guardian did a fine job of explaining what matters.

Comment Re:Are they stupid? (Score 1) 86

You’re moving the goalposts from this being about safety to it being about accountability, but neither of those are concerns in practice.

For accountability, there are obvious paths for dealing with it, the most obvious of which is that manufacturers are liable for their products’ features and functionality while operators are liable for the vehicle’s maintenance. And the fact that no one gets arrested for a product safety issue is a feature of our system, not a bug, because jail time is an option of last resort, not the thing you should immediately jump to on a whim. We already have effective means for holding these companies accountable. Between regulation and civil suits, we’ve seen auto manufacturers held accountable for their misdeeds, forced to pay restitution, and compelled to adjust their behavior. And we still see criminal charges and jail time when businesses engage in egregious behavior (e.g. that pharma guy who jacked up prices).

We don’t need to be throwing people in jail every time there’s an accident if we want to hold these companies accountable. We already have the means to do so.

Comment Re:Are they stupid? (Score 2) 86

If an autonomous car could be shown to be safer than a professional driver with years of experience that isn't tired or under the influence of alcohol or drugs then I'd be happy for that car to be on the road.

So if the technology is demonstrably safer than 99% of drivers and results in a comparable reduction in deaths, you’d still be opposed to it?

The roads aren’t filled with professional drivers who have years of experience. Remember: half the drivers on the road are below average, but even the top half isn’t that great either. People are already killing people in car accidents in massive quantities every year. That’s what this technology needs to do better than. It needs to be safer than what we have today, not perfectly safe.

Comment Re:Welcome to the machine (Score 1) 260

The Chinese beg to differ with Ms. Thatcher. I would contrast their performance to Great Britain's.

Let's do that: GDP per capita of the UK: $46k. GDP per capita of China: $12k. But maybe China does better at distributing the wealth? Nope. UK Gini coefficient: 35, China, 47 (higher is more inequality). Until recently China had phenomenal growth rates, but that's only because (a) they started from a very depressed level and (b) they mostly abandoned socialism. As Xi is reasserting more socialist policies their growth engine has largely stopped and their growth rate is currently below that of the UK. It's still positive at the moment, but if Xi continues what he's doing, it will likely go negative.

Socialism -- not social democracy, which is a thoroughly capitalist economy that accepts high but strongly progressive taxation to fund a strong safety net -- consistently drives economies into the toilet whenever applied on any scale larger than a kibbutz. Without fail, every time.

Comment Re:This has been known for ages (Score 1) 146

Press the power button 5 times rapidly to enable "emergency mode" or whatever they call it. Biometric unlock will be disabled and you will have to enter your password/PIN to access the device again.

I don't think this is true. If you enable emergency mode video recording you have to enter your PIN to end the recording, but biometrics will still unlock the lockscreen. While the recording is going, hit the power button to activate the lockscreen, which will be unlockable with biometrics. You can also swipe up from the bottom (assuming gesture navigation) and switch to other apps. The device is not locked and not in lockdown mode while in emergency mode.

What you can do is press power and volume up to bring up the power menu, and then tap the "Lockdown" icon. That will lock the device and disable biometric authentication.

If you really, really want to lock it down, power the device down, or reboot it and don't log in. Android's disk encryption scheme uses your PIN/pattern/password ("lockscreen knowledge factor", or LSKF) along with keys stored in secure hardware to derive the disk encryption keys. It would make for a long post to go into all of the details, but given the hardware-enforced brute force mitigation,if the attacker gets a device in this state it's extremely difficult to decrypt any of the credential-encrypted data on the device without your LSKF. This is particularly true on devices that implement "StrongBox" (all Pixels, some Samsungs, some others). Android StrongBox moves some crucial functionality, including LSKF authentication and LSKF brute force resistance, into a separate hardened, lab-certified[*] security processor with its own internal storage, a "secure element".

Of course, note that appellate courts in the US have split on whether or not your LSKF can be compelled. Some have ruled that unless the PIN/pattern/password is itself incriminating, it's no different than compelling the combination to a safe, which has long been held to be constitutional.

[*] For anyone interested in the details, the required certification is Common Criteria EAL 4+ (5+ is recommended, and common, many devices meet 6+), using protection profile 0084 for the hardware and equivalent "high attack potential" evaluation for the software, plus AVA_VAN.5 penetration testing, all performed in a nationally-accredited security testing lab. While certification isn't a guarantee of security (nothing is), the required certification applies the highest level of scrutiny you can get for commercially-available devices. Apple also uses a similarly-certified SE in their devices, but it's not clear whether they use it for LSKF authentication, or whether they use their (uncertified) Secure Enclave.

Comment Re:Who on SLASHDOT is using biometric data for con (Score 1) 146

Must be quite entertaining to watch you unlock your phone hundreds of times a day.

JFC...why in the world would you need to be accessing your phone "hundreds of times a day"???

Maybe not hundreds, but at least dozens. For most people their phone is their digital assistant in all sorts of ways... not only for communication for for calendaring, looking up random things, reading the news or books, listening to music, getting directions, checking their bank account/brokerage, doing calculations, fitness tracking, managing shopping and to-do lists... the list goes on and on.

Slashdot Top Deals

I've noticed several design suggestions in your code.

Working...