Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Wine doesn't run drivers (Score 1) 156

Perhaps this is a golden opportunity for civic minded programmers to spend some time getting WINE to the point where most users can comfortably run WINE instead of Windows XX.

Wine runs in user space. I don't see how Wine could ever run drivers, such as peripheral drivers required by things like the iPhone sync functionality of iTunes or kernel-level anti-cheat required by major online games supporting pickup matches with strangers.

Comment Bootstrapping with stage0 and Mes (Score 1) 19

Start with stage0 (whose binary seed is about 1 KiB) and GNU Mes. Use mescc to build tinycc, then GCC 2.95, then GCC 4.7, then fairly modern GCC, and then use mrustc to build some version of Rust. The time-consuming part is that each version of the Rust toolchain uses fairly new features in the Rust language, so yes, you'll probably have to build the world a couple dozen times starting with the most recent version supported by mrustc.

Comment Kellogg v. Nabisco; Dastar v. TCF (Score 1) 93

So what's the basis of the lawsuit against Disney? There's no damages, so equitable relief? Of what?

You probably guessed correctly: equitable relief in the form of an injunction against Disney bringing a trademark lawsuit. I haven't read the complaint, but I'd be surprised if it didn't cite Kellogg and Dastar.

The Supreme Court of the United States has decided a few cases about the interaction between the Lanham Act, which inclues trademark law, and exclusive rights pursuant to the Copyright Clause. Key cases includes Kellogg Co. v. National Biscuit Co., 305 U.S. 111 (1938), and Dastar Corp. v. Twentieth Century Fox Film Corp., 539 U.S. 23 (2003). In both cases, the Court ruled that the Lanham Act cannot be used to extend the effective term of exclusive rights in an invention whose patent has expired or a work whose copyright has expired. Disney's legal counsel ought to be familiar with the latter case, seeing as it involved a company that is now a subsidiary of Disney.

Comment Trusting trust when bootstrapping a compiler (Score 1) 19

From the article:

The Go project recently arranged for Go itself to be completely reproducible given only the source code, meaning that although a build needs some computer running some operating system and some earlier Go toolchain, none of those choices matters."

[...]

The Multics review is famous for pointing out the possibility of adding a back door to a compiler to insert back doors in critical system programs during compilation [...]. Reading the report inspired Ken Thompson to implement exactly that attack on an early Unix system, probably in early 1975. He later explained the attack in his 1983 Turing Award lecture, published in Communications as "Reflections on Trusting Trust."

David A. Wheeler described a defense against a back door that propagates through the compiler in a 2009 PhD dissertation titled Fully Countering Trusting Trust through Diverse Double-Compiling . Diverse double-compiling (DDC) involves choosing two or more other independently developed compilers A and B for a language, bootstrapping compiler C from source code through each of them (building C with A or B and then building C with itself), and ensuring that the output is byte-identical. This relies on previous effort to make builds reproducible.

However, DDC also relies on having more than one implementation of a particular language. Go and Rust each have only one widely used implementation. This means someone trying to wrangle a supply chain has to do one of three things: trust a particular old version of a compiler not to have a back door, compile every version since the dawn of the language (such as when Rust was prototyped in OCaml), or implement a usable subset of the language in a more widely implemented language. This is why mrustc is so important, as it's a way to skip forward by several years' worth of versions when bootstrapping a Rust compiler.

Comment It always comes back to key distribution (Score 2) 19

From the article: "The only problem left is key distribution: The verifier must know who should have signed the code. [...] To the extent that questions of identity can be solved, having authors sign their software can provide even stronger guarantees." It goes on to describe how Debian and Go package repositories include the expected hash value of a package, so that package downloading tools can reject a package that has been replaced.

However, the approach used by Debian to verify developers' identity, that of new developers physically meeting existing trusted developers at key signing parties to exchange OpenPGP public keys, doesn't scale very well. A lot of contributors are disconnected from the strongly connected set of the web of trust because they cannot travel to key signing parties. This can be because of cost, work or child care scheduling, regulatory restrictions related to geopolitics, or regulatory restrictions related to public health (most recently during 2020-2021). These disconnected contributors must forever rely on the bottleneck of "sponsors" (trusted developers who forward packages from the maintainer to the distribution) to get their work into a distribution.

And sponsors are indeed a bottleneck. From the article: "And then you need to be ready to update to a fixed version of that dependency." When a package's upstream maintainer releases an updated version of a package, the package's sponsor in a particular distribution may be too busy with other tasks to handle it the same day. This can mean that there is no available labor to forward the update to the rolling distribution and backport the fix to the version of the package in a stable distribution.

Comment Re:Can you imagine needing government permission (Score 1) 111

I dunno. China is a "market socialist" system -- which is a contradiction in terms. If China is socialist, then for practical purposes Norway and Sweden have to be even *more* socialist because they have a comprehensive public welfare system which China lacks. And those Nordic countries are rated quite high on global measures of political and personal freedom, and very low on corruption. In general they outperform the US on most of those measures, although the US is better on measures of business deregulation.

Comment Re: 200 million angry, single disaffected young m (Score 1) 111

It makes no sense to claim Chinese courts have a lot of power, although it may seem that way â" itâ(TM)s supposed to seem that way. One of the foundational principles of Chinese jurisprudence is party supremacy. Every judge is supervised by a PLC â" party legal committee â" which oversees budgets, discipline and assignments in the judiciary. They consult with the judges in sensitive trials to ensure a politically acceptable outcome.

So it would be more accurate to characterize the courts as an instrument of party power rather than an independent power center.

From time to time Chinese court decisions become politically inconvenient, either through the supervisors in the PLC missing something or through changing circumstances. In those cases there is no formal process for the party to make the courts revisit the decision. Instead the normal procedure is for the inconvenient decision to quietly disappear from the legal databases, as if it never happened. When there is party supremacy, the party can simply rewrite judicial history to its current needs.

An independent judiciary seems like such a minor point; and frankly it is often an impediment to common sense. But without an independent judiciary you canâ(TM)t have rule of law, just rule by law.

Comment Re: 200 million angry, single disaffected young me (Score 1) 111

Hereâ(TM)s the problem with that scenario: court rulings donâ(TM)t mean much in a state ruled by one party. China has plenty of progressive looking laws that donâ(TM)t get enforced if it is inconvenient to the party. There are emission standards for trucks and cars that should help with their pollution problems, but there are no enforcement mechanisms and officials have no interest in creating any if it would interfere with their economic targets or their private interests.

China is a country of strict rules and lax enforcement, which suits authoritarian rulers very well. It means laws are flouted routinely by virtually everyone, which gives the party leverage. Displease the party, and they have plenty of material to punish you, under color of enforcing laws. It sounds so benign, at least theyâ(TM)re enforcing the law part of the time, right? Wrong. Laws selectively enforced donâ(TM)t serve any public purpose; theyâ(TM)re just instruments of personal power.

Americans often donâ(TM)t seem to understand the difference between rule of law and rule *by* law. Itâ(TM)s ironic because the American Revolution and constitution were historically important in establishing the practicality of rule of law, in which political leaders were not only expected to obey the laws themselves, but had a duty to enforce the law impartially regardless of their personal opinions or interests.

Rule *by* law isnâ(TM)t a Chinese innovation, it was the operating principle for every government before 1789. A government that rules *by* law is only as good as the men wielding power, and since power corrupts, itâ(TM)s never very good for long.

Comment Re:for profit healthcare needs to go and the docto (Score -1) 51

This is retarded.

1. It isn't for profit healthcare that is the problem, it's THIRD PARTY PAY.
2. I don't use third party pay, ever, for healthcare. I've been insured nonstop for over 30 years, and NEVER ONCE has my insurer paid my doctor.
3. Even when I've had emergencies, I still called around, negotiated a fair cash up front rate, paid cash up front, and billed it to my insurer. My cash up front rate was sometimes below any co-pay negotiated with my insurer, lol.

I just recently had some elective surgery that would have cost me about $2000 on my annual deductible, but I was able to cash pay a negotiated rate of $400 including a follow-up "free". I submitted the $400 to my insurer and they reimbursed me.

Third party insurance exists because YOU VOTERS demanded the HMO Act of the 1970s, which tied health care to employment, and then employers outsourced it to third parties.

Health care is remarkably cheap in the US (cash pay, negotiated) and I don't have to wait months to see a doctor when I call and say I am cash pay. They bump me up fast.

Comment Re: Legal/illegal bikes (Score 1) 146

Class 1 and 2 e-bikes limit assist to 20 mph, not 15. You can ride them faster than that, but you have to provide the power. 20 mph is well above what most recreational cyclists can maintain on a flat course, so if these classes arenâ(TM)t fast enough to be safe, neither is a regular bike. The performance is well within what is possible for a fit cyclist for short times , so their performance envelope is suitable for sharing bike and mixed use infrastructure like rail trails.

Class 3 bikes can assist riders to 28 mph. This is elite rider territory. There is no regulatory requirement ti equip the bike to handle those speeds safely, eg hydraulic brakes with adequate size rotors. E-bikes in this class are far more likely to pose injury risks to others. I think it makes a lot of sense to treat them as mopeds, requiring a drivers license for example.

Comment Re: Legal/illegal bikes (Score 1) 146

Would treating them as mopeds be so bad?

What weâ(TM)re looking at is exactly what happened when gasoline cars started to become popular and created problems with deaths, injuries, and property damage. The answer to managing those problems and providing accountability was to make the vehicles display registration plates, require licensing of drivers, and enforcing minimum safety standards on cars. Iâ(TM)m not necessarily suggesting all these things should be done to e-bikes, but I donâ(TM)t see why they shouldnâ(TM)t be on the table.

I am a lifelong cyclist , over fifty years now, and in general I welcome e-bikes getting more people into light two wheel vehicles. But I see serious danger to both e-bike riders and the people around them. There are regulatory classes which limit the performance envelope of the vehicle, but class 3, allowing assist up to 28 mph, is far too powerful for a novice cyclist. Only the most athletic cyclists, like professional tour racers, can sustain speeds like that, but they have advanced bike handling skills and theyâ(TM)re doing it on bikes that weigh 1/5 of what complete novice novice e-bike riders are on. Plus the pros are on the best bikes money can buy. If you pay $1500 for an e-bike, youâ(TM)re getting about $1200 of battery and motor bolted onto $300 of bike.

Whatâ(TM)s worse, many e-bikes which have e-bike class stickers can be configured to ignore class performance restrictions, and you can have someone with no bike handling skills riding what in effect is an electric motorcycle with terrible brakes.

E-bike classification notwithstanding, thereâ(TM)s a continuum from electrified bicycles with performance roughly what is achievable by a casi recreational rider on one end, running all the way up to electric motorcycles. If there were only such a thing as a class 1 e-bike thereâ(TM)d be little need to build a regulatory system with registration and operator licensing. But you canâ(TM)t tell by glancing at a two wheel electric vehicle exactly where on the bike to motorcycle spectrum it falls; that depends on the motor specification and software settings. So as these things become more popular, I donâ(TM)t see any alternative to having a registration and inspection system for all of them, with regulatory categories and restrictions based on the weight and hardware performance limitations of the vehicle. Otherwise youâ(TM)ll have more of the worst case weâ(TM)re already seeing: preteen kids riding what are essentially electric motorcycles that weigh as much as they do because the parents think those things are âoebikesâ and therefore appropriate toys.

Comment Re:S Mode (Score 1) 24

I imagine that the first question after installing Linux would be "Now how do I sync albums that I bought on the band's Bandcamp page onto my iPhone?" As far as I'm aware:

- iTunes for Windows uses the Apple Mobile Device Service driver to sync over a USB cable, and drivers don't run in Wine.
- libimobiledevice on Linux can write files to an iPhone but not the music database that the included Music app uses.
- Though the VLC app can play music from files, nothing but the included Music app can make playlists containing both purchased music and rented music from the roommate's Apple Music family plan. Not all bands are with a label that's on Apple Music.

I left Windows on her laptop and turned off S Mode.

Submission + - So many birds are migrating that they're appearing on weather radar (washingtonpost.com)

alternative_right writes: Between 2010 and 2013, the radars were upgraded with technology that allows both horizontal and vertical pulses of energy to be emitted. By comparing the returned signals, meteorologists can determine the shape of whatever is in the sky. Raindrops are a bit wider than they are tall, and shaped like hamburger buns; snowflakes are — obviously — flaky; but lofted tornado debris is spiked or jagged.
Birds, meanwhile, appear as somewhat spiked objects, as do insects. But insects appear a bit more round and uniform on radar, and are also lightweight enough to become caught up in the wind. Birds travel higher than most bugs, and also can fly against or perpendicular to the wind. After all, they have places to go — southward. Meteorologists can also determine their direction of motion through their analyses.

Slashdot Top Deals

The computer is to the information industry roughly what the central power station is to the electrical industry. -- Peter Drucker

Working...