Forgot your password?
typodupeerror

Comment Re:There it is (Score 2) 47

"Share fixes upstream so that open source communities can include them in long-term maintenance."

I do not see those words in the summary above.

You do understand that the freedom and licenses you're defending, specifically allow others to use your work for purposes you don't agree with, right? If you're opposed to "evil" (but legal) uses of FLOSS, you're opposed to the core values of FLOSS.

I did not say "evil" nor did I say it was illegal. I said it was abusive.
-If they do in fact upstream the fixes (as you assert) then it is not abusive.

Comment There it is (Score 3, Informative) 47

These capabilities will be offered through commercial subscriptions, allowing enterprises to integrate secure patches directly into their existing software supply chains with enterprise-grade validation and lifecycle management.

Selling security patches as a subscription service instead of submitting them upstream to fix the problems for all users.

An abominable abuse of open source.

Comment Re:90 days (Score 3, Insightful) 73

Here's 23,000 vulnerabilities that we found ...

Vulnerability. They keep using that word. I do not think it means what they think it means.

A real vulnerability can be exploited. Flaws in code, may be vulnerabilities, or they may not be. Until they are proven exploitable, they are lower priority. Still worth fixing... as time allows.

Comment Re:Smart move (Score 1) 85

Now imagine that Trump could deplatform all Democrats from government, employment and the financial system by simply deleting their Digital ID. One click, all gone. Nothing they can do about it because they no longer exist in the digital world.

Delete? No. No one is freed from the system. Marked as a threat to national security, denied employment, travel, housing, banking, etc. But still tracked and logged. Even prisoners have IDs.

Comment Re:Possibly the only good thing... (Score 1) 143

Solar ain't gonna help, because nowhere gets full 24-hour sunshine 365-days, and wind turbines only help if they're built someplace that has wind 24/7/365.
What do ya do at night on a calm wind night? Can't fall-back on those polluting sources of power.

Draw on the stored energy from when the sun was shining and the wind was blowing. There are these things called "batteries" that you may have heard of....

or

Rely on "the grid" to transport power from where the sun is shining or the wind is blowing to where you need to consume it. The sun is always shing somewhere, and the wind is always blowing somewhere. Blows your mind eh? Witchcraft! Sorcery! Technology!

Comment As expected (Score 4, Insightful) 41

The "worst case scenario" was never likely. Neither was the "best case scenario" likely.

It was always going to be somewhere in the middle.

Life is gonna suck for a whole lot of the world. Humanity will survive. Life will go on. We can still choose just how bad we are going to make it. How many of us survive. How we live. How many other species survive. How many don't.

Comment Re: Propagation takes time! (Score 2) 23

Yeah so tell me the time. Updating the UI (instantly) long before the task is complete (20 min) is not okay in a security context.

It is not possible. The update happens instantly on the local node, but how long it will take to propagate to all systems is a guess.

Best practice would be to warn the user that updates may take time to propagate, but not to give a promised completion time for an uncertain process.

Comment Re:Propagation takes time! (Score 1) 23

Propagation delays in an auth table did not cause the keys to leak.

The root cause remains the root cause, whether it is accidentally posting the keys on your github repository or a disgruntled former employee acting maliciously.

I once pushed a BGP update with an error in it. I caught it right away and pushed a correction. But thanks to propagation delays... it caused problems for hours. Lesson learned.

Slashdot Top Deals

"And do you think (fop that I am) that I could be the Scarlet Pumpernickel?" -- Looney Tunes, The Scarlet Pumpernickel (1950, Chuck Jones)

Working...