Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:Nonsense (Score 1) 108

You acknowledged further up that larger programs can / have been funded directly by Congress. Fusion is no different. It's a big enough line item that it will show up in a funding request directly unless it falls under one of the secret DOD/CIA/whatever programs not disclosed to the public.

The fundamental problem with fusion besides the physics is the funding and there is only one centralized place in the US where money has been flowing fairly consistently for fusion research and that's Congress. They get to decide how that money is spent and should DOE no longer be the right place for said funding to be spent (say at NRC instead) then Congress can make that change in one funding bill.

In 2017, an all-Republican legislative and executive passed a unfunded multi-trillion dollar tax cut for the 1% and halved funding for fusion research at the same time. In 2018, funding was doubled again. This kind of yo-yo spending is exactly why programs start to run over budget and never meet their deadlines. But it's not DOE's fault that the spigot opens and shuts from year to year, that would be the spending priorities in Congress.

Coming back to physics, a fundamental problem to your approach to distribute fusion research to all sorts of agencies is that no design comes even close to putting out as much net energy than was put in. The Navy can dream feverishly of rail guns and lasers powered by fusion, just as NASA might dream of lightships, but the reality is that, regardless of scale, no one has made a fusion reactor with a net positive energy output for a commercially-useful amount of time. Way back when the Navy wanted to make use of fission reactors, land-based reactors had been proven to work as continuous energy sources for years and had allowed the scientists and engineers to develop the technology, know-how, etc. to adapt the technology to the Navy use case.

I don't really care who is in charge of overseeing fusion research, as long as they're competent and absent any compelling systemic issues with specific examples (which you have yet to showcase) I have no reason to believe that the folk doing this work at DOE are any more or any less competent than folk fulfilling similar duties at other agencies. Can you give specific examples of malfeasance by DOE personnel re: fusion?

Comment Re:Nonsense (Score 1) 108

The folk who allocate the dollars are the people in the DOE. That is unless Congress makes the allocation so specific that the funds will not go to international fusion research as opposed to the far more productive domestic research.

Fusion programs typically by definition are big ticket items that are specifically allocated see the work at national ignition facility, etc. For example, the US allocated specifically $122MM in 2018 as part of the omnibus bill.

Besides, per your free-market-knows-best thinking, there would be no need for government funding of fusion, etc. as the private market would be all over the Skunkworks fusion reactor, stellarator, or whatever most-promising fusion approach is out there. But the reality is different - big ticket items usually require government funding, even SpaceX needed flights paid for by tax dollars to turn into the profitable business it is today by giving it a minim scale, provong the concept, and so on.

You can't have it both ways where on the one hand the market knows best and on the other only certain departments within the government know how to push research while others do not. DOE is not a evil bogeyman out to stop domestic fusion efforts. Just this year they allocated $50MM for efforts at ITER ($20MM) as well as domestically ($30MM). If the US population wanted large scale fusion research to happen in the US, it would; but there has been no inspiration for us all to get behind that the way Kennedy inspired the nation re: the space race. That inspiration has to come from the top and our political leadership has had other priorities.

It doesn't take the DOE to exist for Congress to fund fusion energy research. Congress can allocate the funds and any of a number of executive agencies besides DOE can manage them. It could be NIST, NASA, TVA, NRC, DOD (or more specifically the Navy), or a newly created entity specifically created to manage DOMESTIC fusion energy research...What would stop is the wasted money from the DOE funding busywork to look important...

Look, I don't know where your specific quarrel is with DOE but none of these agencies are inherently any better or worse than DOE at funding research. Centralizing the allocation / supervision / etc. of research under one agency can make a lot of sense however to maximize the value for the investment dollars

There has been very little domestic fusion energy research because the DOE keeps killing these programs.... Again, Congress has been allocating funds for fusion energy research but the DOE diverts that to burn in the dumpster fire of international programs...

See above. For fusion research to make big leaps, far more money would have to flow into funding fusion research. If that doesn't happen then you cannot expect DOE (or any other agency) to provide large scale funding of fusion research. Billions are likely required and Congress has been allocating less than $200MM per annum.

If the DOE didn't exist then it would be more difficult to withhold funding for enforcement. The people that enforce safety standards would the same people that enforce efficiency standards. It's because the DOE existed that made it possible to defund this enforcement so easily.

You seem to fundamentally not understand how federal allocation works. Why do you think Obama wasn't able to close Gitmo? Because Congress blocked him via specifically stopping him from access to any funding to close Gitmo. No different with enforcement AT ANY AGENCY. If the funding bill for an agency specifically includes zeroing out enforcement funding for a specific activity, guess what will happen? The agency won't be able to conduct that enforcement. Has nothing to do with DOE.

Comment Re:Nonsense (Score 1) 108

Per my logic the DOE can't look completely incompetent because then they'd set themselves up to have everyone fired and the department eliminated, which is precisely what they want to avoid. By being far too competent in solving the nation's energy problems then they become redundant, and that gets everyone fired and the department eliminated.

Nope. As I mentioned above, there are far too many missions that DOE is involved with for that to happen. Consider the various standards that have to be codified as the country modernizes energy distribution to allow renewables to become a bigger part of the energy mix. Then there is nuclear waste disposal, nuclear regulatory, etc. None of these things will go away anytime soon and there is plenty of work to go around. Plus, the agency is only around as long as Congress allocates funding to it. Should the people ever feel that DOE should be de-funded, the mechanism is there.

They have to appear to so something and things like convincing people to buy energy efficient light bulbs would be one of those things. Because LED lighting is just plain awesome we don't need a government office to tell us to buy them. They practically sell themselves and the people that make these lights are certainly motivated to advertise them to consumers.

Incorrect, DOE and EnergyStar in particular intervened to avoid the same issues in LED-land that plagued CFLs. That's where CRI requirements for LED light bulbs came from, for example. The market didn't provide them on its own, industry didn't come together, it was DOE and the EPA that made it happen. From there on, LEDs became the darlings of utility rebate programs because they were the least expensive way to reduce energy consumption on a wide, predicable scale. However, utility consortia undertake these programs in part due to constraints (not enough transmission capacity to keep up with people growth) or because regulators pressured them to do so. The increased demand in turn increased scale, lowered prices which explains why stuff came to the market much quicker than in the absence of demand stimulated by utilities, tax rebates, and the like.

Energy efficiency programs don't need the DOE to "coordinate" them. Energy efficiency is something people seek naturally because it's a money saver.

That's another statement not supported by the facts. For example, consider split incentives where an apartment owner will buy the cheapest, lowest-efficiency appliances and the renter pays the operational costs. Similarly, Senators like Ted Cruz moved to make the enforcement of energy efficiency standards re: lightbulbs impossible by blocking any funding for enforcement. Hence, you can still buy inefficient 100W incandescents even if there are better incandescents out there that cost less to operate over their life than the old-fashioned tungsten wire kind.

OEMs in this country would also like to beg to differ re: your statement on coordination. It is precisely the coordination that ensures that not all efficiency rulemakings come into effect on the same day/year, creating an insurmountable financial tsunami of R&D, CAPEX, etc. for US industry. Even diversified OEMs like Whirlpool can make their investments over time to meet standards, continue non-efficiency-related R&D, etc. because standards phase in across many product categories over time. Coordination makes that possible, particularly in the context of developing test procedures, amending them as needed, before setting standards.

If this is a matter of reducing use of coal and oil then this can fall under departments like Interior, Defense, Homeland Security, Commerce, Transportation, Agriculture, and ultimately under the Office of the President. That's coal and oil use affects many things in our lives besides energy independence, and energy independence will likely be a priority of all the US Cabinet level departments I listed. Any coordination among them would necessarily have to fall under the Office of the President because the Secretary of Energy can't tell the Secretary of Defense what to do.

Various departments are tasked with specific missions. The department of transportation (DOT) coordinated the CAFE standards with the White House and the industry, for example. Where the mission is housed is not as important as everyone being a team player and coordinating efforts under the auspices of the White House.

Why do you need the windmill people to talk to the nuclear power people? Or the hydro people to talk to the solar people? Assuming that they do need to talk then this can happen in private industry, where this balance in implementation must be struck.

All nascent Energy-related technologies at one point or other likely sought and / or received funding from DOE, as research grants, programs, whatever. Ideally, those $$$ are allocated on the programs that have the highest return on the investment, which in turn suggests centralizing the allocation, coming up with fair metrics and then letting the market come up with proposals. That way, the best programs get funding priority. Your alternative would allow sub-par results to come through just because a particular agency gets funding that it has to spend by years end or lose it.

Similarly, there are problems that only the government can take on, such as the risks associated with nuclear power plants, standards on building them, and disposal of the spent fuel, just to name a few examples. Then there is the question of how to structure and potentially restructure energy markets, distribution systems, etc. to account for changes in technology and generation, such as renewables, demand response, resiliency, etc. Someone has to bring everyone in industry to a table and hammer out the new rules of the road. Industry almost never does this successfully on its own. Hence standardized rules for driving, etc.

Any coordination among federal agencies can happen in the Office of the President, the Office of the Vice President, or by some "energy czar" that is an adviser to the different departments on energy policy. The lack of a DOE to coordinate this research doesn't mean it will not be coordinated. The DOE appears to be so large now that there is no coordination on national energy policy.

You vastly overestimate the resources in the office of the president. The White House staff sits on the shoulders of giants. Agencies like DOE do their best to make things happen as the president and Congress direct & fund them to. Plus, remember that the President is supposed to execute the duties of his / her office while Congress does all the funding. Hence, re-allocation of funds via the President is not something the founding fathers intended, nor what Congress usually likes.

That's my whole point, the DOE is not getting you the fusion energy research that you want. At this rate we will never get viable nuclear fusion power because the DOE keeps killing fusion energy research projects.

For the n-th time, it's not DOE that kills these projects, its the folk who allocate the dollars. If it was a funding priority in Congress, the money would flow. This speaks more to the issue of how short-sighted our politicians have become (reducing funding for basic research for over a decade, among other issues) than the problems that DOE may have. All I can do is tell my representatives that I'd like them to pay more attention to fusion research and to spend more $$$ on it. Beyond that, I have to accept in a democracy that there will be decisions made that I disagree with.

Comment Nonsense (Score 1) 108

Like many agencies, the DOE has a ton of missions that have been assigned to it by Congress. Some of these missions may seem contradictory but it's Congress that funds and prioritizes big-ticket programs, not DOE. Just as the DOD allegedly groans every time more M1 Abrahams tanks are built that the army doesn't want (but the congressional districts do), DOE may on occasion have to manage programs that likely do a better job of funneling $$$ to a particular district than advance the scientific frontier... but whose fault is this? Not DOE's. Voters like you and I are ultimately responsible for enabling certain politicians and parties that allocate funds and set priorities.

Your comment suggests deep ignorance / prejudice about DOE and perhaps the government in general. For example, I have been associated with the Energy Efficiency program at DOE for the better part of two decades. In that time, the program has allegedly reduced the power needs of the nation by 6%, obviating the need for hundreds of power plants, etc. Per your logic, DOE wouldn't be involved in this kind of stuff because it reduces the US' dependence on Energy.

Similarly, it makes sense to coordinate research into various approaches towards energy production since it allows the agency to prioritize the ones that have the biggest marginal impact for the lowest investment possible. For example, it was the DOE that dramatically reduced the cost of solar production through decades of investment in research, companies, and incentive programs. Per your logic, DOE wouldn't do this either because it makes the US less dependent on grid based energy sources.

As much as the US has boosted domestic fossil fuel extraction via fracking, this era will too come to an end eventually. It is the job of federal agencies like DOE, DARPA, DOD, etc. to look ahead and figure out what the next energy source will be for specific assignments. With any luck, humanity will be able to add fusion to its quiver of available energy-producing technologies since it might become more attractive than storage + renewable for the base load, for example. In this vein, I'd prefer more funds to flow towards various approaches at ITER, Wendelstein 7-X, etc.

Comment One firmware to rule them all... until now. (Score 3, Interesting) 38

There was a time when Sonos was the comfortable market leader in a niche that was quite profitable. They pioneered a simple-to-setup home HiFi system that could read content off a NAS, eventually stream also. However, there was one glaring flaw in their corporate strategy, the insistence on one firmware for all devices. Here are some of the events that would require you to upgrade all local devices to update their firmware: initial setup, add a device, factory reset, updating the desktop or smartphone App.

As you can imagine, firmwares evolve over time, as do the hardware needs to run them. No matter how much you over-provision on the front end, the hardware will eventually reach its limits, especially if you lay off the teams that developed it in the first place. So sonos has hit a wall, repeatedly, and past experience suggested that they would, once again, resort to mass-bricking, just as they did with the CR100 when they released firmware 8.5. What was different this time is that the company did a better job of communicating the changes in advance and tried to soften the blow by offering a 30% discount on a full-price "upgrade" in return for the user bricking their functional extant device(s) on the euthanasia list.

As usual, this is being done via firmware, i,e. locking out devices from the server once brick mode has been enabled. Without server authorization, these devices can never be setup again. And that is my biggest issue with Sonos - no control over firmware leads to the company effectively dictating what I may or may not do with property I allegedly own. So, while this transition by Sonos away from force bricking is commendable, it still will not allow me to use my CR100's again should my gear need a firmware refresh due to flash corruption. As Sonophone and like Apps have shown, controlling multiple Sonos' devices sporting different firmwares is not a problem. Yes, it will take some additional work, but it can be done.

No, this whole effort to "upgrade" the Sonos fleet while bricking older devices smacks of desperation. I suspect that Sonos is trying to get sold to one of the big three muscling into their turf with smart speakers (i.e. Amazon, Apple, Google). The margins are dropping because the big three are subsidizing their hardware sales while leveraging their AI data centers. The thinking must be that the only thing that will "save" Sonos shareholder value is a quick sale to pimp out their user base to the highest bidder seeking market share. Hence the need for interoperability and voice-enablement for most of their new gear.

I suggest the following to current users: do not trust Sonos. I have a dedicated HDD hanging off a Apple Airport Extreme serving files because Sonos never upgraded their SMB stack beyond SMB1 NLTM v1. Similarly, Sonos.com and its sub-domains are DNS black-holed *and* port-blocked for the fixed IP range that my Sonos gear sits in. Even though sending metrics to Sonos is turned off per the Sonos preferences, every piece of Sonos gear attempts to contact the mothership hundreds of times per day. The company simply cannot be trusted. It's a pity since the company once made the best connected gear - easy to set up, easy to use, and functional.

Comment Parthian Shot (Score 1) 279

Over 90% of Linus' post had to do with whether or not ZFS should be integrated into Linux' kernel or not, focusing mainly on the litigious nature of Oracle, etc. Given the many suits that Oracle has saddled the industry with, his concern may be valid. I don't know how 'free and clear' the legal position of ZFS is at this point. The unsubstantiated allegation re: maintenance was thrown in as some sort of Parthian shot at ZFS while Linus was already galloping off to his next snarky kernel denial.

That said, the many different flavors of ZFS are production-grade, getting maintenance, new capabilities, etc. ZFS may not be for everyone but for those that care about bit-rot and other aspects of file system integrity, it's pretty much the most dominant file system around. However, that population may be too small relative to the total Linux universe to warrant a kernel inclusion from Mr. Linus himself. That, combined with his fears re: Oracle would have been a perfectly adequate answer, even if it will disappoint the user base requesting the official inclusion / maintenance.

The good news is that the folk who care about ZFS can work around Mr. Linus and release their own version of Linux with ZFS enabled. That way, he can shout whatever he wants from his pure white ivory tower while the rest of us get on with our jobs. I've found ZFS to be free of issues other than the user-generated kind. I have encountered bit rot in my older storage media and I'm happy to have an automated tool to detect it for repair.

Comment Re:Protect yourself vs. SMB1 attacks easily (Score 1) 115

That's great advice but see my note below, if you want to run a Sonos from a file server as intended, you have to have SMB1 (NT1) enabled on that file server, which means also enabling NTLM v1 authentication.

Yes, there is a complicated workaround by using Plex or subsonic as a means of feeding the Sonos data without the need for SMB1 insecurity, but implementing this system is not the faint of heart. Plus, with every new service enabled on the server, you add more potential exploits.

All I want is to be able to enable SMB 3+ on my home file server or shut it off altogether. Presently, the best solution may be to use a burner file server just for the Sonos with one-way updates. Nuts!

Comment Sonos requires SMB1 for locally-stored content (Score 3, Interesting) 115

Ned Pyle and others have eloquently described why everyone should drop SMB1 support, yet NAS suppliers and Sonos continue to ship products that use SMB1.

Despite being deprecated by MSFT for years, SMB1 is alive and well with Sonos. There is no SMB2+ support, there is no timeline nor any commitment to add SMB2+ support. Please note: this issue only affects those that use Sonos with a local file server such as a NAS, your PC, etc. to store the music library and then make it accessible via the LAN.

I don't understand how a company that prides itself on making premium audio products doesn't put security ahead of other software development priorities. One juicy scandal can cause way more damage than the modest cost of implementing readily-available SMB2-3.11 server/client software packages.

SMB1 support on the Sonos, if allowed at all, should be on a opt-in basis, with adequate warnings to consumers re: potential pitfalls. Modern incarnations of SMB servers have NTLM v1 and SMB1 support turned off by default for a reason.

Comment Not sure I agree (Score 1) 49

I bought a Arris telephony modem on Amazon that I then provisioned my account with. It took longer than it should have, i.e. multiple phone calls, a visit from Comcast (to replace a shot overhead line), etc. but it can be done, and as far as I am concerned, it should be done.

Sure, there are folks for whom renting makes more sense than owning. But for anyone who is looking to stay in a particular domicile for a couple of years, owning makes a lot of sense. Particularly, if you happen to live in a town that only has one high-speed ISP, i.e. where you have little to no opportunity to switch among providers.

Comment Re:Don't install Comcast equipment... (Score 1) 49

Basically, I want a firewall that is completely closed by default, whose holes (if any) are explicitly opened by the end user. That cannot be guaranteed with Comcast-supplied equipment.

Given that Comcast can 're-provision' the cable modem at will means that my settings may get wiped at their pleasure. I am happy to given them that freedom (i.e. control the equipment that interfaces with their network) as long as I get to control what enters my network. So that's why I like a separate device to run my firewall than ISP-supplied gear.

Also, Comcast is not necessarily the source of the problem. For example, consider that Comcast packages that include phone service require an eMTA telephony modem (i.e. one that allows a telephone to be attached to the modem). Arris modems appear to be the only kind that allow this on the US market and thanks to innumerable back-doors Arris' modems have been pwned in more ways than should be possible. Given that Arris has shown apparent zero interest in patching these issues, I would consider any Arris-made modem to be a potential malware/etc/ cesspool.

I have a lot more trust in equipment like my Edgerouter (see online tutorials re: preferred settings or use the HTTP Wizard) than relying on Comcast to have the 'right' firewall settings on their router. And if you put in the time to learn the specifics of your firewall/network equipment, there is a huge benefit, such as being able to segment the network between guest and home users (to keep your server separate), prevent visiting friends from abusing your network connection (i.e. data caps), and so on.

Even relatively inexpensive (and easy to set up) consumer grade gear like the Airport Extreme can offer these features. While the Edgerouter I currently use has a *very* steep learning curve for an inexperienced network admin, there are other solutions out there that are equally effective. Plus, you can retrofit a large number of older routers with DD-WRT and like firmware replacements to add features, etc.

Comment Don't install Comcast equipment... (Score 3, Informative) 49

... problem solved. The only reason this attack vector exists in the first place is that people are too lazy to install their own equipment. Instead, they rent a Comcast Wifi router at an exorbitant cost and questionable security. To me, relying on a firewall that was developed by Comcast is like making love with a leaky condom. It might work some of the time, but not for the right reasons.

The solution is simple: If you have to use Comcast, then buy your own cable modem. They can still install it (if you lack the technical skills). Then, put a real firewall between the modem and your network. Whether you buy an integrated router (i.e. with Wifi) or separate components, is totally up to you.

I happen to be very happy with my Edgerouter but past installations with Apple Airports worked well also. Bottom line: Save money and eliminate the potential security risks with renting Comcast equipment by buying your own gear.

Comment Encryption? Air-gapping? Pah! That's for pansies! (Score 1) 173

The folk at OPM should have been well aware that someone, somewhere would really like to get their hands on that information. The lack of protection mentioned in the news around OPM records is simply hilarious.

You'd think that the sort of data that OPM stores would be kept on air-gapped machines in a prepper's-fantasy facility without cell phones, under a mountain, etc... but no, that would be too logical. Instead, they may as well have stored the stuff on a public library computer.

Whoever hacked OPM is not only laughing themselves silly at all the stuff that is in those files, they also have job security for next 20 years to sift through 14 million records. Well done, OPM!

Unfortunately, the next likely step by the government will be to augment OPM's budget 500%, just as with all the other agencies that failed the US population repeatedly. We only have ourselves to blame, we voted them into those positions in the first place.

Comment "This isn't a permanent feature" (Score 4, Interesting) 367

The article mentions that this 'feature' will be turned off once Windows 10 reaches broad distribution. Makes perfect sense actually

First you prove that the back door you've installed in the OS operates as expected. Then you sell key logger access to your user base on a case-by-case basis to the FBI, CIA, NSA or any other agency that is shaking big wads of cash in front of your nose while holding a 'keep it all secret' and 'get out of jail free' card for good measure (see various sections of the patriot act and other anti-terrorism, save-the-children, etc. legislation that have been aggressively 'interpreted').

Thus, encryption and other defensive measures are easily rendered useless as no AV system will detect a key logger 'feature' that is part of the operating system.

More profit for MS, less security for it's users. Brilliant.

Comment E15 may be an issue... and not just for cars (Score 5, Insightful) 375

The percentage of ethanol is not just an issue for cars... boat owners have reported extreme issues with molded-in-place gas tanks where the fiberglass resin mix wasn't just right, which then led to the resins softening and dissolving into the gas. The resin juices then proceeded to destroy the engines in the boats by coating / clogging the fuel system and the chambers with this juice. Folks were allegedly going up and down the coast looking for gas stations that could guarantee 0% ethanol gas or forced to undertake a $$$ diesel repower of their power boats.

It's not as if refineries are going to ship a different blend of gas to most ship docks, doesn't make sense, is a distribution nightmare. They're going to ship whatever they have.

And here's the rub: The ethanol will also result in worse gas mileage because the stuff does not have the same bang per cubic volume as gasoline (i.e. 66%). Thus, the higher the ethanol volume fraction, the lower your vehicle's range is going to be. It's why cars designed to run on E100 in Brazil and elsewhere feature bigger gas tanks than cars designed for use with gasoline, for example.

At the end of the day, the ethanol debate is one of the best examples of how lobbying results in extreme market distortions, i.e. the adoption of a fuel substitute at the behest of the corn farmers in the midwest and the large corporate interests (ADM, etc.) which profit from the processing and marketing of the stuff. Now that natural gas is too practically too cheap to meter, expect even more fuel conversion efforts of this sort.

Comment Nothing new here (Score 1) 232

Is it a good idea to have your offsite backups in place? Sure, but why wait for a predictable natural disaster as opposed to a man-made one? The whole point of a viable backup strategy is not to have a single point of failure, including a reliance on predictable events.

In an ideal world, I'd have several heavy-duty chain saws at the ready, dripping in anticipation of cutting down wayward trees. But this being the real world, I'll leave my big boy chaps, kevlar gloves, etc. in fantasy-land and hire a professional should a tree make a unexpected entry into our home.

In fact, we're pretty carefree here... spoiled by the reliability of the electrical grid, with the longest off-line period being 23 hours thanks to a neighbor cutting the roots on a street tree, allowing said tree to tumble into the street and taking out two electrical poles in the process. So, no gen set, for example. Living on the edge...

Slashdot Top Deals

"You need tender loving care once a week - so that I can slap you into shape." - Ellyn Mustard

Working...