Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror

Comment Aux In (Score 1) 166

I have a Honda with an obsolete "infotainment" system, but at least it has an Aux In next to a USB port that provides power, so I can plug in an $11 UGreen dongle and listen to whatever I feel like. If I cared there are some nice 7" 1080p screens for cheap in the Raspberry Pi space that could be shoehorned in and run at 12V. But I'd rather have no screen at all.

Funny thing is that UGreen pairs faster than any other bluetooth device I have and never doesn't work. For eleven bucks.

With the fickleness of Google and Apple there's no chance they'll even support the current CarPlay and Android Auto in 20 years. I like to keep my vehicles 15-30 years, depending on how well they handle rust.

Maybe Crutchfield will make bypass harnesses for these systems in ten years when absolutely nothing works but the screen and speakers are still useful.

We really should be looking for standards at that level, so the compute modules could be upgraded after the manufacturer abandons their platforms.

As Louis says, you shouldn't be a felon for disabling ads on your refrigerator that you never agreed to.

Comment This reads like an ad for SASE solutions (Score 1) 54

This reads like an ad to get folks to move to SASE solutions, which arguably may often be less secure for remote authentication into your network than a traditional VPN solution.

One area I've seen fall short in authentication between SASE solutions and say, Palo Alto's GlobalProtect VPN is GlobalProtect *in addition* to a SAML flow will also do a client certificate validation flow. And this works with hardware-backed private keys on TPMs in Windows (using the Microsoft Platform Crypto Provider). SASE solutions are very often pure IDP only, and what the access token says, the SASE will deliver. I'm not saying GlobalProtect is good (it's really god awful tbh), but in this specific regard it offers a little more connection verification beyond blindly trusting an access token in a world where token theft is becoming more and more of a problem.

Beyond that, the rest is fluff, really. A SASE solution can be configured poorly just as much as a VPN/Firewall can be. There's also the inevitable world where a vendor platform like Tailscale could eventually be compromised and all of your issued wireguard keys between systems are downloaded and exploited.

There's no "perfect" solution out there. There's only proper security. You can do good or bad security with traditional firewalls/VPNs or SASE solutions. And the security of both is an evaluation of what your organization is willing to put the work into maintaining. As called out in the original post, "and aren't integrated into centralized logging solutions" isn't a technical problem with the device, but an implementation problem with engineering.

Comment Nadella is missing the mark here (Score 3, Interesting) 51

I think it's time Microsoft replaces Nadella. He's failing in the same way that Ballmer failed, which is suffering from extreme FOMO on literally any and every new hype coming out while ignoring the rug pulling that's slowly gaining steam beneath him.

Open source solutions for most things have surpassed Microsoft's Windows Server platform to the point that Windows Server is effectively dead except in very specific circumstances. Over the next decade that will continue to grow to be a thing, and further financial investment in open source platforms will eventually catch up to cloud products as over time people and companies continue to invest in developing on-premises solutions to replace the ones Microsoft is ignoring.

We are starting to see the cracks in cloud compute. On-premises compute support is growing again as companies realize it's actually cheaper to run all of this random bullshit on some shared hardware than to spend tens of thousands of dollars per month on cloud compute spend.

Sovereign clouds are growing and becoming more of a thing. And the day that Microsoft, AWS, or Google is forced by the United States government to turn over information in a European cloud to the US government will spell the end for massive generalized cloud computing. These major cloud vendors ignored the fact that they've been riding the coattails of trust the world has had in the United States government to trend towards more progress and freedom. And that's clearly not going to be the case anymore.

Broadcom's push to basically force everyone off of VMWare is massively modernizing software which companies still want to run on-premises but moving them all to bare metal k8s nodes. Reducing VMWare licensing will have a direct impact on how many Windows servers exist across the world.

Nadella has put next to no investment in Windows except for chasing AI bullshit. Which itself is already showing cracks with Meta's recent layoffs in AI.

All of this focus on AI and Cloud, both of which are going to be massively reduced over the next 10 years, along with modernizing software to run in containers and getting away from traditional VMs driven by Broadcom's licensing onsense, will make Microsoft virtually irrelevant as soon as someone releases a comparable Office and Exchange stack you can run on-prem again.

Comment Maintenance (Score 1) 99

> Why? Absolutely no idea

This isn't surprising to anybody who's studied the psychology of political science.

Those who identify as 'conservative' value maintenance much higher than those who identify as 'progressive'. You're more likely to see them in their driveway changing their oil and measuring their tire tread depth. It's just different kinds of people with different time-preference mindsets.

Note that with a limited budget maintenance spending is money that cannot be spent on immediate benefits.

You need to allocate some of the benefits money to upgrading the IT systems so there's less to hand out. "How could you possibly cut their benefits?" is the kind of misplaced empathy that undercuts the system that they feel is valuable.

Of course there's usually a Federal bailout in the wings for people who don't plan ahead so the incentive systems are all completely misaligned for good governance. Since the Lockdowns we've seen the weaponization of the Dollar through sanctions and tariffs that have pushed world oil markets to the Yuan and cross-border settlements in sovereign currency exchanges, so the Dollar is in freefall compared to commodities which means those bailouts are going to end very soon.

As this reckoning becomes too real to ignore the populations will move strongly to vote for candidates who seem to understand the value of maintenance.

Comment Re:Wait... (Score 1) 99

Yeah, and Healthcare is 20% of GDP.

According to Keynesian economists, if we were all much healthier the economy would be worse off.

I'm not sure how much more evidence you need that the entire economic school is a bunch of self-styled money-priests making excuses for government spending.

Keynes did some really good early work but then he got caught diddling kids and after that the King's spending was all the best thing anybody could do.

An early version of "trust the experts".

Comment Software Engineering? (Score 3) 105

So the code was written by people who aren't familiar with the idea of "fail-safe"?

I might have gone to school for software engineering but I never equated it with building a bridge at 4000' over a canyon. Those are different things.

But none of my classmates would have thought about building a stack that fails into random or dangerous conditions. We always built from the ground up and verified states as new functionality was added with test evaluation of the possible error states.

And those classes were in C++89 without the advantages of proper exception handling like Java or Python provide.

I think if I were in the market for a $5000 IoT mattress I'd want to see something like a UL label on it. I guess the hardware guys put in a thermal switch so the heating elements shut off at 110*F? Thank goodness a runaway fire wasn't a failure mode.

I wouldn't personally ever spend that kind of money on something like that but if I were rich and disabled maybe there would be use cases.

Comment Re:get over yourself its called android no google (Score 1) 67

They're talking about LineageOS. Think Graphene but it doesn't just run on Google hardware. Over a hundred devices and they just added mainline kernel and qemu support so it potentially runs on thousands of devices.

Sadly with less hardening. I wish Lineage would take some Graphene patches. The crazy thing is Lineage descended from Cyanogenmod which had many of these patches!

Comment "sustain the development" (Score 1) 90

Yeah, nobody is buying this "sustain the development" nonsense.

Somebody needs to keep the servers patched. Somebody needs to keep the app targeting an API that the app stores will host. Bose can afford maybe 1.5 FTE's with redundancy on a rolling basis.

Did they ignore due diligence for a decade and just get nabbed running RHEL 5 and unlicensed Oracle Java on an old VMWare or something?

If Bose is a public corporation perhaps the FTC should have a look at their deliberations.

Comment whoa this thread (Score 2) 82

Clearly the programmers haven't woken up yet :)

The hypothesis is probably a correct one, although I am still wondering exactly where AI will land in the grand scheme of things.

It's obvious the intention of management types is to replace highly skilled engineers with lower paid vibe coders. The MBAs would love nothing more than that. But as the author hypothesized, I'm guessing the most high folks will be the entry level positions. Exactly where that lands, I'm not sure. Is it a 10% replacement? 5%? 25%? Will we ultimately not change the number of engineers needed and just their overall output goes up by a few points? My guess is the latter, and definitely not this promised utopia of "we can finally not hire all of these overpaid software engineers!". Just like this ultimately didn't happen with the cloud + BYOD shift in the 2010s. The largest push for cloud, devops, and BYOD was to get rid of both on-prem datacenters AND to get rid of IT folks. But what ultimately happened is that software development organizations realized that IT operations is a distinct set of skills, so instead they created the "SRE"--which is a fancily-renamed operations person in a software development org. Oh, and the average SRE makes 2-3x as much money as the IT ops folks they replaced.

  Given the way LLMs work I highly doubt wholesale replacing entire large chunks of software engineers is going to be a thing anytime soon. Most interestingly is the fact that LLMs can only know what we have already put out there, and we'll basically need to continually train newer models with more information. As technology changes, give it another 5-10 years, and today's LLMs may be in fact completely useless. Particularly as sites like Stack Overflow's knowledge becomes more obsolete.

I liken LLMs to the know-it-all at a bar. They speak like they know everything about everything, but you're just trying to get drunk in a bar and don't feel like correcting them. They might have most of the answers to that night's trivia game, but if you deep dive any particular area they're going to make up a bunch of bullshit to avoid saying "I don't know." Unfortunately (or fortunately?) the world doesn't run on such people. Jim Bob's trivia knowledge doesn't architect and engineer buildings, bridges, roads, nor would you trust him for the bar's financials. You don't ask Jim Bob how many drinks you sold in a night, "oh around 1000 or so" when your livelihood depends on knowing that you actually sold 1315 drinks. And the rest of the world isn't going to let you use Jim Bob's guesstimates to pay your taxes, "Well Jim Bob said we sold around 1000 drinks so we paid taxes on 1000 drinks worth of income!"

There's going to be *some* AI impact, but I doubt it'll be as revolutionary as the smart phone.

Comment Wrong numbers (Score 2) 47

See Seyonic's Youtube video.

The 512-SIM racks can only addreses 64 at a time. This comports with what people noticed about the antenna count.

8x is nearly an order of magnitude difference and chaged my mind about the likely purpose.

Presumably the spammers expect the SIM's to get blacklisted and move on?

But WHO is provisioning a quarter million cards at a time without tripping flags?

Slashdot Top Deals

Each honest calling, each walk of life, has its own elite, its own aristocracy based on excellence of performance. -- James Bryant Conant

Working...