Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re: Previous attempt at this lasted 6 years (Score 1) 109

That's right, I am assuming the connection from the sensor to the rest of the camera electronics is not part of the secure system. I think that's a fair assumption, as CCD or CMOS sensors are relatively simple devices and don't have room or time for cryptographic processing at the moment the image is recorded and read out. Even if not, the point remains that you could leave the electronic parts untouched and just project in the image you want to record.

Comment Re:Previous attempt at this lasted 6 years (Score 1) 109

But you don't have to crack the TPM or the secure enclave. You just have to replace the camera sensor with a custom device that outputs the image you want, and if necessary set the camera's date and time or fake some GPS signals. You could even keep the hardware untouched and use a slide duplicator attachment to make an authenticated copy of any image you want.

Comment Drug addiction is a medical condition... right? (Score 2) 265

For many years advocates of more liberal drug policy have argued that addiction should be treated as a medical condition. And we're always told that mental illness should be seen as just another illness -- you wouldn't stigmatize or blame someone for having a broken arm, so you shouldn't do so if they are schizophrenic.

Well, isn't this the logical outcome? If a medical condition is severe enough to destroy your quality of life, and it isn't curable, then in some countries you have the option of assisted suicide. Why would you refuse that to someone whose condition is being addicted, if that's just another medical condition?

Comment Re:Roundabouts (Score 1) 93

Hmm, you say a roundabout takes more space than a 4-way light *for the same amount of traffic*.

If that's true, it implies that roundabouts aren't that good after all? Since I thought their advantage was handling a higher volume of traffic. Like for example, if you put a four-way intersection with traffic lights it can handle an average flow of ten cars per minute, but a roundabout could take twenty cars per minute. In other words, greater throughput. (I don't know what the true numbers are.)

Perhaps the throughput is the same but a roundabout reduces the average time for a car to clear the junction -- in other words, same throughput but improved latency?

Comment Re:Uh wut? (Score 4, Insightful) 35

I do remember back in the day Google was known for its contrarian approach. Consultants would tell you that for an "enterprise" data centre you needed expensive servers, redundant power supplies on each unit, RAID on each unit in case a disk failed, ECC memory and so on. But Google decided to get the reliability at the large scale, throwing together large numbers of cheap systems with off-the-shelf parts and if one of them fails, well you just leave it there and use the remaining ones.

Nowdays it's conventional wisdom that servers should be "cattle, not pets". Perhaps in even in 1999 the smart people knew that. Perhaps I am setting up a straw man with these "consultants" who wanted an expensive, gold-plated approach. For sure it would have happened anyway without Google. But this guy did have to swim against the current.

Comment Re:Be wary of Apple here. (Score 1) 97

Typically, for small devices at least, the wall charger has a USB output and then you use a USB cable to connect it to your device. The device might have mini-USB or micro-USB or USB-C or Apple's Lightning. So you need a variety of different cables. Standardizing on a single connector means you don't need so many cables but in practice I don't think it wiill reduce the number of power bricks since USB was already a de facto standard there. And yes, there are different kinds of USB and not all the bricks will deliver the same power output, but this isn't really an issue for phones, and I think that standardizing the connector doesn't really change it.

Comment Re:Not enforced anywhere? (Score 1) 137

Blockchains don't enforce anything. They are a record, nothing more, nothing less.

But that's all an NFT is too. It is simply a record in a blockchain following certain rules, stating that a certain identity"owns" the token. The rules of the blockchain could be designed so that in order to transfer the token from one account to another, a certain amount of currency must at the same time be transferred to a fixed identity we'll call the "artist".

I don't see how you could make sure it be a proportion of the sale price, because people could arrange to buy and sell outside the blockchain, paying each other in real money, and then put the transaction through with an artificially low price. But it should be possible to guarantee a fixed sum on every transfer.

As for enforcement, nothing about NFTs is enforced anyway. I could create my own blockchain declaring that I am the owner of all of these NFTs, and also declaring myself emperor of Canada for good measure. The blockchain is simply an accepted convention. So when I say "enforced in the blockchain" I mean specified as part of the code in the blockchain system. That code is the only thing which determines "ownership" of an NFT to start with. (If NFTs are subject to the real world system of copyright, that's a separate consideration really. You could agree to buy the rights to an NFT and never bother to update the blockchain.)

Comment Paid services may be the answer (Score 1) 185

If the service is free of charge, Google isn't going to employ human technical support staff to validate people's identity and make a best-guess attempt to restore locked accounts to their rightful owners. That's just too expensive.

If you pay for the service, even if it's only a couple of dollars a month, then you can always be identified as the account holder, just by tracing it back through your bank account (and identifying bank customers is a well known, if not completely solved, problem). Moreover if you're paying then you will have a human "account manager" whose job it is to sort out this stuff.

That's why for important things I prefer to use a paid service. That said, I haven't put the theory to the test - like if I lost access to my current email address and I had to ask for the password to be reset just on the basis of being the person paying for the account. There still might not be a clueful helpdesk, if 99% of accounts are free ones.

Slashdot Top Deals

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (5) All right, who's the wiseguy who stuck this trigraph stuff in here?

Working...