Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Wine doesn't run drivers (Score 1) 147

Perhaps this is a golden opportunity for civic minded programmers to spend some time getting WINE to the point where most users can comfortably run WINE instead of Windows XX.

Wine runs in user space. I don't see how Wine could ever run drivers, such as peripheral drivers required by things like the iPhone sync functionality of iTunes or kernel-level anti-cheat required by major online games supporting pickup matches with strangers.

Comment Bootstrapping with stage0 and Mes (Score 1) 17

Start with stage0 (whose binary seed is about 1 KiB) and GNU Mes. Use mescc to build tinycc, then GCC 2.95, then GCC 4.7, then fairly modern GCC, and then use mrustc to build some version of Rust. The time-consuming part is that each version of the Rust toolchain uses fairly new features in the Rust language, so yes, you'll probably have to build the world a couple dozen times starting with the most recent version supported by mrustc.

Comment Kellogg v. Nabisco; Dastar v. TCF (Score 1) 86

So what's the basis of the lawsuit against Disney? There's no damages, so equitable relief? Of what?

You probably guessed correctly: equitable relief in the form of an injunction against Disney bringing a trademark lawsuit. I haven't read the complaint, but I'd be surprised if it didn't cite Kellogg and Dastar.

The Supreme Court of the United States has decided a few cases about the interaction between the Lanham Act, which inclues trademark law, and exclusive rights pursuant to the Copyright Clause. Key cases includes Kellogg Co. v. National Biscuit Co., 305 U.S. 111 (1938), and Dastar Corp. v. Twentieth Century Fox Film Corp., 539 U.S. 23 (2003). In both cases, the Court ruled that the Lanham Act cannot be used to extend the effective term of exclusive rights in an invention whose patent has expired or a work whose copyright has expired. Disney's legal counsel ought to be familiar with the latter case, seeing as it involved a company that is now a subsidiary of Disney.

Comment Trusting trust when bootstrapping a compiler (Score 1) 17

From the article:

The Go project recently arranged for Go itself to be completely reproducible given only the source code, meaning that although a build needs some computer running some operating system and some earlier Go toolchain, none of those choices matters."

[...]

The Multics review is famous for pointing out the possibility of adding a back door to a compiler to insert back doors in critical system programs during compilation [...]. Reading the report inspired Ken Thompson to implement exactly that attack on an early Unix system, probably in early 1975. He later explained the attack in his 1983 Turing Award lecture, published in Communications as "Reflections on Trusting Trust."

David A. Wheeler described a defense against a back door that propagates through the compiler in a 2009 PhD dissertation titled Fully Countering Trusting Trust through Diverse Double-Compiling . Diverse double-compiling (DDC) involves choosing two or more other independently developed compilers A and B for a language, bootstrapping compiler C from source code through each of them (building C with A or B and then building C with itself), and ensuring that the output is byte-identical. This relies on previous effort to make builds reproducible.

However, DDC also relies on having more than one implementation of a particular language. Go and Rust each have only one widely used implementation. This means someone trying to wrangle a supply chain has to do one of three things: trust a particular old version of a compiler not to have a back door, compile every version since the dawn of the language (such as when Rust was prototyped in OCaml), or implement a usable subset of the language in a more widely implemented language. This is why mrustc is so important, as it's a way to skip forward by several years' worth of versions when bootstrapping a Rust compiler.

Comment It always comes back to key distribution (Score 2) 17

From the article: "The only problem left is key distribution: The verifier must know who should have signed the code. [...] To the extent that questions of identity can be solved, having authors sign their software can provide even stronger guarantees." It goes on to describe how Debian and Go package repositories include the expected hash value of a package, so that package downloading tools can reject a package that has been replaced.

However, the approach used by Debian to verify developers' identity, that of new developers physically meeting existing trusted developers at key signing parties to exchange OpenPGP public keys, doesn't scale very well. A lot of contributors are disconnected from the strongly connected set of the web of trust because they cannot travel to key signing parties. This can be because of cost, work or child care scheduling, regulatory restrictions related to geopolitics, or regulatory restrictions related to public health (most recently during 2020-2021). These disconnected contributors must forever rely on the bottleneck of "sponsors" (trusted developers who forward packages from the maintainer to the distribution) to get their work into a distribution.

And sponsors are indeed a bottleneck. From the article: "And then you need to be ready to update to a fixed version of that dependency." When a package's upstream maintainer releases an updated version of a package, the package's sponsor in a particular distribution may be too busy with other tasks to handle it the same day. This can mean that there is no available labor to forward the update to the rolling distribution and backport the fix to the version of the package in a stable distribution.

Comment Re:Growing body of evidence of damage to humans (Score 0) 17

> Isn't capitalism great?

Capitalism doesn't let you buy laws, that's Corporatism, a subset of Fascism, which is in turn a subset of Socialism.

A proper Capitalist systems speaks to economics, not poltiics.

Reconstruction US, Post-Mao China, Post-Soviet Russia all embraced capitalist economics to lift the vast majority of their population out of abject poverty.

Societies which did the opposite mostly killed their middle class ans then half the population starved to death.

Comment Aspects (Score 1) 75

Having lived through the Dot-Bomb it's basically the same.

You're not going to get a valuation bubble without a hype bubble. And nobody is buying companies for that much who have zero infrastructure. And the stock price is what they use to buy the infrastructure.

These are inextricably linked, not separate phenomena.

This is what Austrian Economists call the 'malinvestment' part of the business cycle. It's caused by artificially cheap money (not set by a market) and will unavoidably be cleared.

Our Orwell is so strong the eggheads artificially setting the price of money call themselves "The Open Market Committee". Because an open market in lending rates is de facto prohibited.

Comment Pentagon Papers (Score -1, Troll) 254

They don't have to do this but most "journalists" are hacks that engage in Access Journalism (which is a type of bribery).

They aren't hard-driving gumshoe drunks like the legendary journalists of yore who sought to speak truth to power. They're mostly stenographers for the rich and powerful now (yay, journalism school!)

It will be interesting to see if any leave out of principle. I doubt more than 10% will. You can pretty much distrust any stories from the ones who stay.

Comment Re:For those getting pitchforks ready (Score 1) 153

This requires living in a region with ample sunlight, but yes, that is the way. Only problem is that EVs have a finite commercially viable lifespan because of aging LiPo batteries, but once that is solved - possibly never, but possibly with a standardized semi-replaceable battery cell standards - this can work.

But for the colder and northern climates, fuel that can be stored for months is a neccessity, and it's rather easy with propane / butane, because it doesn't age as fast as gasoline.

Comment Re:We are so screwed (Score 1) 205

Remember - the Federation reserved the Death Penalty for making AI Androids.

Noonian Soong had to exile himself to a remote planet outside Federation control to work on Data and Lore (and his sexbot...).

They needed people to be able to have jobs *that* badly.

Which ... stop sending redshirts outside the ship with magnetic boots in a radiation storm, OK? They could have at least had some astromech droids. Sheesh!

Comment Better Targets (Score 1) 24

I recently got a "plastic" target that changes color and the holes mostly self-heal if you don't use a hollow-point.

Good for plinking but they do wear out eventually.

I didn't even know this material existed before a buddy told me they were on Amazon. Amazing times, for sure.

Heck, I picked up some 100-lb test fishing line the other day that is some sort of braided heavy-chain polyethylene that is 11 times stronger than steel wire at the same size. The company made mechanical spinnerets to mimic spiders' to get it to work.

Again, I had no idea until a buddy told me it was $20 on Amazon.

Wild.

Slashdot Top Deals

1 Dog Pound = 16 oz. of Alpo

Working...