Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Comment Wine doesn't run drivers (Score 1) 155

Perhaps this is a golden opportunity for civic minded programmers to spend some time getting WINE to the point where most users can comfortably run WINE instead of Windows XX.

Wine runs in user space. I don't see how Wine could ever run drivers, such as peripheral drivers required by things like the iPhone sync functionality of iTunes or kernel-level anti-cheat required by major online games supporting pickup matches with strangers.

Comment Bootstrapping with stage0 and Mes (Score 1) 19

Start with stage0 (whose binary seed is about 1 KiB) and GNU Mes. Use mescc to build tinycc, then GCC 2.95, then GCC 4.7, then fairly modern GCC, and then use mrustc to build some version of Rust. The time-consuming part is that each version of the Rust toolchain uses fairly new features in the Rust language, so yes, you'll probably have to build the world a couple dozen times starting with the most recent version supported by mrustc.

Comment Kellogg v. Nabisco; Dastar v. TCF (Score 1) 91

So what's the basis of the lawsuit against Disney? There's no damages, so equitable relief? Of what?

You probably guessed correctly: equitable relief in the form of an injunction against Disney bringing a trademark lawsuit. I haven't read the complaint, but I'd be surprised if it didn't cite Kellogg and Dastar.

The Supreme Court of the United States has decided a few cases about the interaction between the Lanham Act, which inclues trademark law, and exclusive rights pursuant to the Copyright Clause. Key cases includes Kellogg Co. v. National Biscuit Co., 305 U.S. 111 (1938), and Dastar Corp. v. Twentieth Century Fox Film Corp., 539 U.S. 23 (2003). In both cases, the Court ruled that the Lanham Act cannot be used to extend the effective term of exclusive rights in an invention whose patent has expired or a work whose copyright has expired. Disney's legal counsel ought to be familiar with the latter case, seeing as it involved a company that is now a subsidiary of Disney.

Comment Trusting trust when bootstrapping a compiler (Score 1) 19

From the article:

The Go project recently arranged for Go itself to be completely reproducible given only the source code, meaning that although a build needs some computer running some operating system and some earlier Go toolchain, none of those choices matters."

[...]

The Multics review is famous for pointing out the possibility of adding a back door to a compiler to insert back doors in critical system programs during compilation [...]. Reading the report inspired Ken Thompson to implement exactly that attack on an early Unix system, probably in early 1975. He later explained the attack in his 1983 Turing Award lecture, published in Communications as "Reflections on Trusting Trust."

David A. Wheeler described a defense against a back door that propagates through the compiler in a 2009 PhD dissertation titled Fully Countering Trusting Trust through Diverse Double-Compiling . Diverse double-compiling (DDC) involves choosing two or more other independently developed compilers A and B for a language, bootstrapping compiler C from source code through each of them (building C with A or B and then building C with itself), and ensuring that the output is byte-identical. This relies on previous effort to make builds reproducible.

However, DDC also relies on having more than one implementation of a particular language. Go and Rust each have only one widely used implementation. This means someone trying to wrangle a supply chain has to do one of three things: trust a particular old version of a compiler not to have a back door, compile every version since the dawn of the language (such as when Rust was prototyped in OCaml), or implement a usable subset of the language in a more widely implemented language. This is why mrustc is so important, as it's a way to skip forward by several years' worth of versions when bootstrapping a Rust compiler.

Comment It always comes back to key distribution (Score 2) 19

From the article: "The only problem left is key distribution: The verifier must know who should have signed the code. [...] To the extent that questions of identity can be solved, having authors sign their software can provide even stronger guarantees." It goes on to describe how Debian and Go package repositories include the expected hash value of a package, so that package downloading tools can reject a package that has been replaced.

However, the approach used by Debian to verify developers' identity, that of new developers physically meeting existing trusted developers at key signing parties to exchange OpenPGP public keys, doesn't scale very well. A lot of contributors are disconnected from the strongly connected set of the web of trust because they cannot travel to key signing parties. This can be because of cost, work or child care scheduling, regulatory restrictions related to geopolitics, or regulatory restrictions related to public health (most recently during 2020-2021). These disconnected contributors must forever rely on the bottleneck of "sponsors" (trusted developers who forward packages from the maintainer to the distribution) to get their work into a distribution.

And sponsors are indeed a bottleneck. From the article: "And then you need to be ready to update to a fixed version of that dependency." When a package's upstream maintainer releases an updated version of a package, the package's sponsor in a particular distribution may be too busy with other tasks to handle it the same day. This can mean that there is no available labor to forward the update to the rolling distribution and backport the fix to the version of the package in a stable distribution.

Comment Why does it matter? (Score 5, Insightful) 93

If China wants to invest In space and constructive things instead of using their military as a way of employing a huge part of their country, they should.

The US doesn't need constructive things. That's socialism which is bad. Instead, the US can hire a few million children to swing around guns and pick fights. China just teaches their kids how to mass produce drone swarms so they don't have to give their babies guns.

Hopefully for the US China will play nice and try to look scary so the US can hire more children and teach them to swing around guns.

Comment Huawei is closer to 2.5x the price (Score 1) 22

I've been buying Huawei SSD and hard disk. I buy tape in tens of petabytes, disk in petabytes and SSD in hundreds of terabytes. Huawei is shipping cheap 64TB SSDs, but they need Huawei backplanes. So $120k gets you started with 100TB across 3 controllers and dual hundred gig switches. Growth is much cheaper. It looks like about $260k per petabyte. I'm paying about $100K per PB for hard disk but on 18TB drives. I expect $80K for 30TB drives when we switch. But that will put 3PB in a single chassis which at 20GB/s is somewhat impractical for evacuating or migrating.

IBM tape by comparison is closer to $18K per PB when adding a new drive per PB. But it really doesn't make sense until 10PB

Comment Re:One non-inconsistent observation != PROOF (Score 1) 40

> "Proves" might be too strong

Different fields have different standards of proof. The most rigorous that I'm aware of, is in mathematics, wherein a proposal that almost all the experts think must surely end up being true, can be heavily studied and yet remain "unproven" for an arbitrarily large number of centuries, until eventually someone finds an actual real-world use case for the math that you get if it's NOT true. (The poster child for this is non-Euclidean geometry, but there are lots of other examples.)

There's an old joke about three university professors from England who took a trip up north together, and on their way out of the train station, the journalism professor looked over at some livestock grazing on a hill, and said, "Oh, look, the sheep in Scotland are black!" The biology professor corrected him, "Some of the sheep in Scotland are black." But the math professor said, "There exist at least three ship in Scotland, and at least three of them appear black on at least one side, at least some of the time."

Comment Re:Hurry up already (Score 1) 243

Sorry, no, that isn't the issue either. The problem the OP is running into is much, much more basic than that.

Forget, for a moment, that the ports are USB ports, and that the peripherals are USB peripherals, because as long as they match up (which they do, in the OP's scenario), none of that is the problem. The number of ports doesn't even matter, we can abstract away the 4 (or 2 + 2, same difference) and just call it N. The problem is that he's got N ports, and N peripherals that he wants to keep plugged into ports all the time, and that leaves N - N ports available to plug anything else into, if he needs to plug something in temporarily. But N - N is 0, so something has to be unplugged to free one up. That's a number-of-ports problem, entirely irrespective of the port type.

If you were proposing replacing the 2 USB-A ports with a *larger* number of USB-C ports, then your argument might have some relevance. But just changing the type of port won't bend the arithmetic in any useful direction. They could be upgraded to the new USB type K ports introduced in 2042, and it still wouldn't solve the problem: if there are still four ports and four all-the-type peripherals, there still won't be any unoccupied ports available for temporarily plugging in transitory things.

At least USB is (mostly) hot-pluggable. But, again, that's as true of A as it is of C.

Comment Re:S Mode (Score 1) 24

I imagine that the first question after installing Linux would be "Now how do I sync albums that I bought on the band's Bandcamp page onto my iPhone?" As far as I'm aware:

- iTunes for Windows uses the Apple Mobile Device Service driver to sync over a USB cable, and drivers don't run in Wine.
- libimobiledevice on Linux can write files to an iPhone but not the music database that the included Music app uses.
- Though the VLC app can play music from files, nothing but the included Music app can make playlists containing both purchased music and rented music from the roommate's Apple Music family plan. Not all bands are with a label that's on Apple Music.

I left Windows on her laptop and turned off S Mode.

Slashdot Top Deals

There must be more to life than having everything. -- Maurice Sendak

Working...