Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Not sure what they expected... (Score 4, Insightful) 65

The techbros can obviously buy their way in to the party readily enough(realistically, unless you are talking grungy underground scene events in disused warehouses, it's probably not art-for-art's-sake money that is even throwing the party; though it may be the entertainment industry side sponsoring the artistic side because that's prestigious for the sector as a whole, the way a certain number of Oscar-bait movies that are expected to be critical successes and commercially middling is accepted practice); but that's significantly different from being able to buy the regard of people who they've been more or less directly threatening.

Are they just high on their own supply and didn't realize how it would go over? Is forcing the soon-to-be-replaced labor units to watch videos with you rambling about how brilliant their obsolescence is part of the fun?

Comment Re:What? Fuel inequality? (Score -1) 93

The entire point of colleges is to fuel inequality by providing students with education, thus separating the population into those with and without education. On the other hand it also fuels another type of inequality, where those who do not attend colleges also do not accrue college debt.

There will always be inequality, the very fact that colleges cannot comprehend this and allow themselves to fall into this 'remove inequality' trap shows how useless these schools are.

Comment Re:Well, now I'm eating crow (Score 1) 31

It wouldn't be surprising if there will be some demand for bite-sized physical machines from people who think that they can't assume hypervisors will be security boundaries; but I suspect that getting actual improvement will be harder than it looks; especially if you aren't willing to sacrifice convenience:

VMs are, certainly, in no small part about utilization and economies of scale: until you get to the point of systems 'big' enough that they seriously restrict your choice of vendors(eg. basically everybody sells 1-2 socket systems; 4-8 means Xeon, and only certain more expensive Xeons, more than 8 sockets means some fancy custom interconnect) it's basically always cheaper to slice a bigger system in half than it is to buy two smaller ones: much less redundant hardware that way.

However, they are also about management convenience that you can't really get out of a physical server without adding a (potentially dangerously) capable BMC or similar computer-inside-the-computer(like the "nitro" controllers that AWS uses): and the history of BMC vulnerabilities(both against their network interfaces and against the components they expose to the OS running on the system) is not entirely cheery; with the situation probably looking worse if you want a BMC that can do all the various management things vsphere can do to an ESX VM.

There's also the question of OS driver vulnerabilities and hardware/firmware vulnerabilities: this VM escape relies on ESX's virtual USB device being buggy; it's not as though you would necessarily have greater confidence in the virtual USB device the BMC uses to interact with the OS; or even the firmware of some of the physical devices on the motherboard.

If anything, while they clearly aren't perfect and can't be trusted enough to avoid much greater attention to how to keep guests from interfering with one another; my suspicion would be that the complexity, and thus bug potential, of real peripherals is considerably higher than that of VM peripherals; especially the newer ones that are explicitly abstractions designed to be convenient for virtualization; rather than close imitations of common physical hardware intended for compatibility with OSes that don't expect to be running in a VM.

Comment Re:Well, now I'm eating crow (Score 2) 31

There are some 'usb devices over IP' software offerings that add a virtual USB root and can be used to connect USB devices that are physically connected to other hosts(obviously this works better with relatively low-bandwidth and latency-insensitive things; it's more about license dongles and USB to serial converters than video capture devices); so you do have options(and those offerings also tend to have explicit support for relatively easy switching of the USB devices being redirected between multiple hosts, if that's required); but it seems pretty unlikely that their virtual USB devices have gotten the same amount of probing that the vmware ones have, since they are relatively niche offerings vs. being the de-facto on-prem virtualization option(at least until Broadcom showed up).

Potentially still worth it, if you've got some absolutely unpatchable ESX host running at least one guest that must have USB, since the vulnerability on the vmware side is now a known one; but quite likely to not be a net gain in security vs. a patchable host; just given the relative amount of attention given.

Comment Re:Well, now I'm eating crow (Score 1) 31

There was a somewhat similar(also a bug in the virtual USB device allowing manipulation of the VM host from inside a guest with virtual USB a few years ago. There have also been a couple(CVE-2015-3456 and CVE-2021-3507) targeting the virtual floppy drive device.

They seem to be relatively rare; though tend to be pretty alarming when they do come up because their relative rarity means that people often treat a hypervisor as a reliable security boundary so there isn't necessarily a lot of backup built in to handle cases where that assumption is invalidated.

Comment Re:Class warfare (Score 0) 277

no, this is late stage socialism. Socialism is what created the larger than life government structures, who control the money supply and create inflation, control business practices via laws, regulations, agencies, etc. All of this causes productive jobs to leave the country and then the country has nothing it can offer to the foreign entities, who manufacture everything in exchange for their wares, so the money is printed by the government and handed out. It is printed and handed out as pensions, medicare, and all other forms of welfare, eventually this money loses enough value that everyone has to raise prices. Everyone raises prices, people complain, so companies find ways to nickel and dime you for all the little extras, like checking in baggage. People find ways around checking in baggage by carrying half a dozen bags with them, airlines try to fight against it, etc., this is late stage socialism.

Capitalism is just private ownership and operation of property, socialism is what destroys the economies and causes this nonsense.

Comment Re:Some questions.... (Score -1) 93

Are pro Palestinian protests fueled by the right or by the left in the USA? I just traveled through 5 countries in the last 15 days, in half of the cities I ran into such protests, with most of the protesters being white, non Arab and non Muslim looking women, led by a few Islamists that look and behave as you would expect.
I went through Zurich, Interlaken (great paragliding), Lauterbrunnen, Bern, Basel, Strasbourg, Luxemburg, Brussels, Antwerp, Rotterdam, Utrecht, Amsterdam, then again Antwerp, Lille and then Paris.

The protesters are yelling pro terrorist slogans, but of-course they are also fully brainwashed to yell out all sorts of propaganda, such as this idiotic notion of 'apartheid' and of-course the dead children (not giving a fuck about the fact that dead children is what Israel experienced first and then retaliated, as they should, against the military targets, who have weapons provided by Iran and money provided by the UN, Red Cross, EU and USA and others).

I don't think those white women and those Islamist share anything close to what you would call 'right wing ideology', in their heads they are marching against 'USA Imperialism', which is what they left wing in the USA are also screaming about.

Seeing same sort of protests and events in the USA, Canada as well as in EU and elsewhere, it's not a surprise that the West now cannot even deal with a bunch of terrorists with Iranian supplied weapons, sinking ships and causing massive ecological catastrophe in the Red Sea. Are these people right wing? Left wing? Whatever wing? I think we have a problem with the uninformed, stupid people ready to march to whatever tune, even the most outrageous tune out there.

Comment The opposite here (Score 0) 243

I can see anything I want, from simple objects (and I can modify them any way I like, including slicing them in time and overlaying them to see every frame) to any real or imaginary image, visual effect and any sort of animation. I can play back a movie sequence in my head, change camera positions, position myself anywhere within the frame, rotate it, change color schemes, extract parts of images, whatever. Wish there was a way just to connect myself to a screen, so I could play this for others to see, unfortunately that's very unlikely to happen in our lifetimes.

Comment government knows best when you should fail (Score -1) 38

So apparently government knows best when an airline is allowed to try and merge with another one to attempt thwart an impending implosion. Spirit will likely go bankrupt, much good that will do for the airline ticket prices and jobs, etc. For whatever reason so many are certain that everything that businesses do must be regulated, because apparently the governments and politicians and judges know better what a business is, how it works, when it is likely to succeed or fail, governments are wonderful at such a thing, which is why government always picks winners, like Solyndra for example...

Comment Seems pretty plausible. (Score 1, Troll) 169

I don't know whether they'll be able to get past the requirement that Apple have sufficient market power in at least one of the tied products; but it seems like a pretty straightforward argument that iCloud is tied to iDevices in a number of ways that typically aren't wholly without justification(eg. having iCloud be the only thing you can restore from reduces the complexity of the first-run restore option because it can just assume iCloud; rather than Apple having to define an interface that 3rd party restore providers would offer or add a pre-restore app install section so that the relevant 3rd party app could be installed to provide the restore interface(the way 3rd party apps can snap into the "Files" app); but which are...awfully convenient...given Apple's margins on both cloud storage and higher storage phone models.

It probably doesn't help(if Apple seeks to make some sort of "we do it for the security of the people!" argument) that iOS historically(and still does, though it is much de-emphasized) supported either unencrypted or encrypted backups and restores over USB when directly connected to a computer; so clearly it was possible to design a backup mechanism for an untrusted storage medium back when cabled syncs were still general practice; and they specifically didn't bother to do that for networked backup and restore.

Comment Seems dubious... (Score 2) 215

This seems like a pretty tenuous theory. There's a reasonably solid suspicion when businesses with clear connections to the cube farms, like restaurants and coffee places whose main draw is proximity to offices(and, typically, because of the way the zoning shakes down, significantly less proximity to things that aren't offices) are involved that people no longer seeing them as convenient, because they aren't in the office, or requiring their convenience, because it's a lot easier to make your own coffee when you don't have a commute.

This is a department store though: furniture, clothing, cosmetics, jewelry, housewares of various sorts. Am I claiming that literally nobody has ever popped over in an emergency after spilling coffee on their pants; or that it has never benefitted from being more convenient because it's on the way home from work? No, that sort of thing must happen at least occasionally. Do I buy that people drawn to the area by the fact that they work there are the primary audience for those sorts of (more typically) planned purchases? That seems like a hard sell.

Slashdot Top Deals

If all else fails, lower your standards.

Working...