Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Comment Let AI do it (Score 1) 111

If AI can autonomously write the shipping code, why can't AI produce "new programming systems, languages, and verification methods to ensure AI-generated code remains robust and secure'?

In other words, if we work from the assumption that AI can do the primary coding tasks with hand-wavy magic, why does that leave open any sort of a niche for humans?

Comment The Legal Questions are Clear (Score 3, Informative) 81

In spite of all the heat generated online, all the relevant legal questions are clear cut and resolve solidly in Twitter's favor -- Twitter is not a state actor; it has the First Amendment right to disassociate with users by removing their accounts; and users have no recourse to the courts if Twitter fails to apply their TOS consistently. (And none of those things change whether Section 230 is repealed or remains in force.)

Comment Re:Sideloading malware. (Score 1) 117

The whole point of side loading is running software not blessed by Apple. Apple not being able to control it is the point.

Right, yes. By permitting ways to install alternate roots of trust, the overall security of the system is weakened. Those points are inextricably intertwined -- bypassing Apple as a gatekeeper also bypasses Apple as a security enforcer.

Why would access be any different than normal applications? The existence of the option to side load hurts nobody who does not enable it.

Even if it comes disabled by default, just the fact that a mechanism exists to enable it becomes a juicy target for hackers. They'll look for ways to either surreptitiously enable it without the user's knowledge, or they'll look for ways to social-engineer derpy users into enabling it.

Comment Re:Sideloading malware. (Score 1) 117

Why is that?

The particulars are going to depend on which security mechanism they would bypass to permit sideloading. There's probably lots of different ways they could do it if forced to, but at minimum the sideloading mechanism would take away Apple's ability to revoke a compromised developer certificate. On top of that you'd have to consider the particulars of the sideloading mechanism -- does it provide unfettered access to the Secure Enclave? Does it allow the user to install new root certificates? Whatever it is, a bunch of hackers will immediately try to figure out how to leverage it in a chain of exploits.

Comment Re:Definition? (Score 1) 117

The point is there is an open market for the buying and selling of software not controlled by a single company even for console games.

The article specifically discusses sideloading. The Nintendo Switch doesn't allow sideloading. Any software running on the Switch has been licensed through Nintendo and Nintendo has taken their cut.

Comment Re:Definition? (Score 1) 117

I think he was describing a theoretical scenario where the bill was written specifically to affect only Apple, to the exclusion of other similarly-situated walled gardens like Nintendo, Playstation, Xbox, etc. I'm sure we can imagine a theoretical bill that runs afoul of the bill-of-attainder prohibition by laser-targeting Apple for punitive treatment.

Slashdot Top Deals

Doubt isn't the opposite of faith; it is an element of faith. - Paul Tillich, German theologian and historian

Working...