Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror

Comment Re:WTF? (Score 1) 64

Why the hell would someone go open a terminal window and paste random shit in from a web page?

Because it leads them to what they want?

You can advertise "free pr0n!" and have people copy and paste random text into a terminal window if they believe it'll get them to what they want. Your random script can even pop open a website to make it look legit.

It's the whole Dancing Pigs means of security. If you offer a user a video of dancing pigs, they'll do anything to see it.

Comment Re:90 days, huh? (Score 4, Interesting) 104

It used to be 30 days. Apple and Microsoft complained because it didn't give enough time to analyze the problem, fix it, test it, and then do a proper rollout to ensure there weren't unexpected side effects in 30 days.

I think what happened was a kernel flaw, meaning a fix could severely impact other subsystems in the OS and thus a fix would need to be carefully done and a properly staged rollout.

The problem isn't the AI tools - Project Zero has real researchers doing real analysis and making sure those AI issues are real. It's likely they're filing issues FFMPEG feels aren't really issues at all.

You might think a bug in a codec used in a 1996 console isn't relevant for security, but if someone can code up an exploit using it, it's suddenly a big deal. I don't have to play back 1996 console video game to hit the bug, I just need to trick someone into getting FFMPEG to see the file as that format and exploit the security hole. (Think sites like YouTube and such that ingest video, for example)

The problem is, there is no right solution. Is it a real security issue? I don't care if it's only for a platform that only only one game released and no one's ever going to practically use it. If it's a way to break into the software and escape my software stack, it's a security issue because all you need is to have someone pretend to be that file. If not, then let the issue be published - even if you don't want to fix it, people who use it might simply be able to disable ingesting that format at all and eliminate the security hole by not having the feature available.

Comment Re:32 bits 64 bits big-endian little-endian (Score 1) 26

Why don't you move your application to a normal 64 bit server?

Linux may be getting rid of 32-bit support, but that's only a 32-bit kernel on 32-bit CPU support which outside of the Vortex86 SoC no one makes hardware for.

Linux is NOT getting rid of 32-bit on amd64 userspace support, so your program will run just fine in 32-bit mode. Several distributions have tried to get rid of 32-bit usermode support but that was generally met with resistance.

You don't have to port the code to 64 bit - but it also doesn't need to be stuck on a 32-bit machine either. Linux can run 32-bit usermode binaries just fine.

Indeed, you want fun you try WSL1 - the Windows kernel does NOT support 32-bit Linux binaries and that results in it being basically useless. It works for maybe 70-90% of the things but you'll run into odd errors when you hit a 32-bit program. It's why WSL2 exists and it's running Linux in a VM so you can run 32 bit Linux binaries.

Still tons of 32-bit user space code out there. Even Windows 11 dropped support for 32-bit CPUs, but not for running 32-bit applications because I don't think it'll be possible to drop that ever. Even the OSes that did - iOS and Android - it wasn't completely painless and lots of apps just stopped working. On the desktop where there are far more legacy applications, probably not at all likely.

Comment Re:Unrealized... hardly. (Score 1) 54

If you want a more flexible tablet, Apple doesn't make them, but they exist.

Android has tablets, and if you wanted a tablet laptop, they exist as well.

The problem is, they just don't work as well, which is why Android tablets are limited to either Samsung or Temu specials nowadays. And convertibles exist but always seemed awkward to use - probably Windows' fault but goes to show perhaps the demand isn't there.

The iPad is 15 years old now, if some tablet concept was the hot thing, the last 10 years of the iPad wouldn't havve been so stagnant. There isn't much new about the iPad now over a few generations past.

It's just a big screen device that does stuff your phone does in a less portable format. People seem to like that - they're at home and want to play games, watch content and social media except on a bigger screen. The fact you can do "creative" things with it is really just to satisfy the fact those people may want to create now and again, and whole social media networks (like TikTok) exist just for mobile and tablet created content.

Comment Re:Checked the date (Score 1) 75

Slashdot is basically old techy people and this is a fashion label's product not Apple's.

My wife and me just now:

Me: Look at this iPhone sock thing.
My wife's words after I showed her: Is it available in pink
Me: Yes
Wife: Sugoi! Interesting.

She then proceeded to buy one.

Fashion is whatever you make of it.

And just because you don't care about clothes, shoes or small things to hold stuff like purses, doesn't mean others don't. I'm sure there's probably something you care very much for, like a "Red Swingline Stapler" that has to be Swingline.

(And yes, you probably have your reasons, but they're likely going to fall on other's ears like the iPhone sock does on you).

If you think it's a useless accessory, visit a cell phone accessotry store sometime. They sell cases, and they're not all one design - you'll find cases with lots of designs and patterns and other stuff. It's why Apple has a whole lineup of relatively boring cases. It wasn't too long ago when a cellphone case was just a cheap polyurethane sleeve or pleather condom on it coming in black.

Or you see people with laptops that are covered in all sorts of stickers (also common in the tech crowd, too).

Phones are basically flat rectangular prisms. They contain tremendous opportunity for customization and a huge industry has sprung up trying to make your flat rectangle more interesting.

I like my stuff plain and unadorned, but I get others who see it as an opportunity to get a little creative and make their person device a bit more them.

Lots of people spend hundreds (or thousands) of dollars to see someone stand in front of them to do something for a few hours too. Or they buy fancy metal boxes to move around in over more basic metal boxes that do the same thing.

Comment Re:Poor design, not impossible (Score 1) 88

The problem with a linear layout is it's linear. You're going to eventually run into a situation where you have no choice but to have to travel the entire length of it and back just to do anything So you will be traversing the entire city just to get anything done. Anyone who's lived or worked in a skyscraper knows what it's like because those are relatively linear and you have to have multiple tier of elevators where you go from one local to one that serves only certain floors, etc.

It's why towns developed cross streets and eventually into a grid.

And circular cities exist - except we usually call the circles "ring roads", but that's really just a non-Euclidean grid in the end.

Unless everything is planned out properly, your commute and errands will literally involve driving down the city one way until you reach the end, then travelling back to the other end of the city and driving back to your starting point requiring two full traversals of the city. In an era where you want to promote "local" so people can walk to what they need most, this is the antithesis to that, requiring some form of long distance transportation to do anything.

Even the enclosed circle with a central courtyard is a common design to minimize travel time. And it doesn't have to be enclosed - the "quad" having been around for centuries on college campuses and universities was to allow students to traverse multiple buildings in minimal time.

A line is just a tourist attraction. It's not practical because people don't have the patience for it as they'd want shortcuts as the reality of having to cross the city multiple times gets real old real fast.

Comment Re:Bad name, they're not actually microsoft (Score 1) 38

Or rather, unnamed unions:

struct my_struct {
        int a;
        union {
                int b;
                double c;
                void* d;
        };
        int e;
} foo, *bar;

You can then reference t as foo,a, foo.b, foo.c, foo.d, and foo.e.

Without it the union must be named:

struct my_struct {
        int a;
        union {
                int b;
                double c;
                void* d;
        } u;
        int e;
} foo, *bar;

and referenced as foo.a, foo.u.b, foo.u.c, foo.u.d, and foo.e. Or the less useful bar->a, bar->u.b, bar->u.c, bar->u.d, and bar->e. (And who has NOT gotten confused in a complex structure of structures with pointers and such?)

Using bar->a, bar->b, bar->c, bar->d, and bar->e can make code far more legible.

Often a data structure will have a header that tells you what type it is, followed by a union of available types - so you might have a "type" field that specifies if the following data is an int, for a float, or a double, or a string and then followed by a union of all them.

Or because it's a Microsoft extension, Windows makes use of "size" parameters in structs to be binary compatible. So you might declare a struct, then the first parameter is sizeof(struct), which is used so if the API internally adds more elements, it can switch back to older behavior when given a shorter struct so old programs using the old struct still work with APIs that could take either version.

Comment Re:oh it's worse and worse (Score 1) 18

Javascript is still part of PDF. So are freaking 3d CAD models. They just added HTML to the spec so you can't even rely on PDF being a high-fidelity representation of a printed page anymore. (You might ask, why not just use an actual HTML file instead of embedding it into a PDF file? GOOD FUCKING QUESTION.) ActiveX was never part of PDF though. Flash kindof-sortof was, it was part of Adobe's version but was left out of the ISO standard, and then Adobe removed it from its version.

Because you can't send HTML files around without including their dependencies, and doing so might require manually editing all the links because the dependencies require going through multiple CDNs.

Every browser has its own independent format for saving an HTML page with dependencies making life fun if you want to send HTML around. Like maybe mock up a page or something.

Maybe PDF could be the universal format where instead of simply printing a web page to PDF and dealing with limitations, it could contain the webpage and dependencies and then be reflowable and scalable. (PDF did allow for reflowing of pages so you could choose to be pixel=perfect or reflowed to suit your screen). It could also allow you to previous your web page on multiple devices without needing a staging server.

Javascript on PDF has a use - for fillable forms it does a verification or provides a helpful way to do things. Like it could verify your phone number is in the form-accepted format, or let you use a date picker instead of manually entering a date.

It's sort of a universal viewing format - where you could print it out, or you can view the content in an enhanced way. Perhaps your 3D CAD drawing is an example where having someone be able to zoom in and out, or rotate the part around or even pick off dimensions. Without having to have a copy of the CAD program

Comment Re:Rejecting my card... (Score 1) 155

I'm trying to look for a high cost card with lots of rewards, actually. I plan on using them at those establishments that refuse to take cash - either ones that are deliberately cashless, or ones that limit cash transactions.

Several times I go to buy something, I present a 20 and they refuse it asking if I have a card. A super-high-fee card would work well in this instance. You want me to use my card and not cash? Then you'll have to make it worth my while.

(I have more "normal" credit cards for regular transactions, I just don't want to be forced to use a credit card - it should be my decision).

Comment Re: Make it stop quickly (Score 2) 134

There is no excuse for submitting AI slop. When you file a court brief, you sign it indicating that you read it and it is as accurate as you can verify. You may quibble over details but you indicate everything you put in the file is factual.

Putting in fake case citations means you didn't read what you filed which means you violated your duty as a lawyer when you filed it.

Also - checking citations isn't hard. There's this tool called "Google" that you can spend 5 minutes with looking up citations. It doesn't need a law library - since all the case information is online. Takes maybe 5 minutes and something you can have your intern do.

Maybe an hour if you want to do a cursory glance at the case and make sure it's actually saying what you think it's saying. After all, nothing's worse than citing a case to say one thing when the case actually went the opposite way.

And honestly, I think the punishment could be simpler - you lose the case. Whatever it is. If a prosecutor did it and now causes a criminal to go free, well, lucky day for the criminal and the public will have their say at the voting booth for letting criminals go free. If it's a civil case, too bad, so sad, but now you have grounds for suing for inadequate representation.

Lawyers who lose their cases this way build a reputation and it's one where the free market and voters can easily resolve.

Comment Re:Missing Rust Language Specification (Score 2) 70

For an important API, yeah, it is probably a good idea if that API is something that you're told you can rely on, but I don't think this is still the case with the Linux kernel, where rust is more of a playground.

Except there are real drivers being written in Rust. It's being done because it eliminates a class of memory bugs that were tricky and difficult in C, and when you're dealing with complex devices, likely an overhead you don't want to deal with (e.g., GPU drivers).

Sure, if you're a hard core kernel developer, then you probably know the intricacies of the memory management. But if you're a slightly weaker developer trying to get hardware to work, well, you probably want some help so you can work more on driver bits and less on memory management bits.

Asahi Linux, for example relies on Rust on Linux code that's not in mainline yet - they're something like 600 patches that they have but cannot submit because the base dependencies are not in.

Comment Re:who needs this (Score 1) 67

There was a brief spot between IE and Chome where Firefox had the market, but Google put that damn button on their search page that took everyone to a Chrome download and "wow"d people with the URL bar search.

I personally love Firefox, and for any minor problem it might have, I think the ability to have a reliable ad blocker without much hassle is well worth it.

Sure, let's ignore all the times during that heyday where Mozilla decided to alienate Firefox users. Sure, maybe they had a good reason to break the UI multiple times going away from XUL - first they get a new UI and then you needed an extension to fix it. Then they break it again and obsolete all the extensions you used. Users gave up and switched because it was a support nightmare where one day you start up Firefox and nothing works the way it used to because the update rolled out. Like what I needed to do that day was fix Firefox again because half my favorite extensions no longer work, or exist.

Firefox was on top and Chrome was the newcomer. Chrome did a lot of things better, but Firefox was still the king until they alienated users with this stuff that caused people to give up and switch. I mean, if I'm going to be burned by Firefox who decided one day I was going to lose basically everything, then I might as well check out the competition.

And now Firefox is where it is because they've refused to do things that users want - instead forcing Pocket and adware down our throats in the shadiest way possible. Like, do we NEED reasons to not use Firefox?

Earlier the entire Japanese localization team decided to quit. And likely taking the whole Japanese userbase with it because of the culture and the nature of the insult. In an era where Firefox should be able to pick up users easily it's still doing its best to shed them.

Crying over lost users while declaring "It's Google's fault! Monopoly!" when much of the damage was self-inflicted is not how it works. It even came back to bite them when the lawsuit threatened to cut Google's funding of Firefox.

Time to admit the damage was done, and then go about trying to attract users back. Maybe bringing back what was lost - why is changing the look still something I need to edit config files for - something we gave up in the 80s? Lots of Firefox customization is locked away in config files when it was a simple extensions to alter them.

There's a reason the Thunderbird team broke off because they didn't want to deal with the baggage Mozilla was bringing.

Comment Re:Compiling - xckd (Score 1) 160

The 45 minute builds back in the 1990s .....

Obviously someone never tried compiling the Linux kernel back then. An hour to build was considered fast. It also was a good stability test because questionable computers would almost always crash.

These days the Linux kernel takes 5 minutes tops.

Android is also a beast to build - back in the early days, half a day to build it was common. Even on a high end machine you did a clean build in around an hour and a half. If you got a super tricked out Threadripper PC with SSDs you got it down to around 45 minutes. 64 core builds at the time were impressive. Of course these days we have 128 core PCs, but even Android 14 doubled the build time over Android 13.

Windows reportedly took 8 hours to build in the NT days.

In a little over 20 years we went from build times on things like Linux, GCC, Glibc, and other big projects which took the better part of an hour to just a few minutes. Fast enough that OpenEmbedded Linux builds everything from source - you set up a project and build it and it compiles the cross-compilers, the host libraries, and build tools and then spits out an image you can use in about half an hour.

Of course, the real thing is likely more WFH stuff - because if you walked in the door to the office, you were on the clock. At home, I suppose you could go through all that, but most people I know just close their laptops which puts them to sleep, so they just need to log into the VPN the next day. Hell, I'm super lazy, I just lock the PC and leave it running. It's not like the few watts the laptop consumes is going to kill me - I'm saving tons on gas and other things not going to the office so leaving the laptop plugged in and on isn't going to hurt matters.

Comment Re:How stupid are Mozilla? (Score 1) 55

Yep. This is not explainable below "complete incompetence" and "extreme arrogance" and, quite important for Japan, "extreme rudeness".

And knowing the Japanese, this is basically the kiss of death to them using Firefox.

As if Mozilla really needed ANOTHER reason to see their marketshare go down even more.

It's like they're purposely tanking their numbers so they can blame "Google monopoly!" for their dwindling numbers, when in reality it's because they're pushing users to alternative browsers.

Pushing away the Japanese like this certainly isn't a good move. But watch as they blame Google for destroying Firefox instead of themselves for pushing users away from Firefox.

Do they really need to give people reasons to not use Firefox?

Comment Re:Old Skool (Score 1) 52

Call me old skool, but Legos were my favorite "toy" growing up and those sets were far more "generic". You build anything and everything, not just whatever a set was designed for... that kinda came later. Anyway, it is more fun and educational, using your imagination than it is just building a predetermined "model". I spent endless hours making stuff.

The problem was, selling bricks didn't make Lego much money. They fell on hard times because toys went electronic and the 90s were rough as everyone drifted towards computers.

They basically reinvented themselves - no kid is getting a $400 Lego set - but adults do. And adults love to collect. These sets basically brought Lego back. So while they're limited in a way, they also do sell, and licensed sets are one of their bigger revenue streams.

That said, they do make generic sets, and you can buy bulk lots, but they're more oriented towards kids who do take them apart and build more stuff with them. But they also realize there's a growing crowd of builders who want special pieces so you can order them by the brick, and a growing adult segment that wants to do a build with their kids, but have something on display.

The beauty of Lego is it can be all things. You can build this with your kid, you might then buy them a bunch of random sets for them to play with - they can choose to build the desired outcome, or who cares, open all the bags, and build whatever comes to mind. No one's touching my Enterprise, but if I give you a Mona Lisa set and you use it to make a spaceship, more power to you.

And yes, people do buy sets often to collect pieces - there are sites that value the sets on how much you get per dollar.

No one has any qualms if you choose to buy this set and build something else completely different. Or if you buy 10 of these sets to build your collection of pieces and have absolutely no intention on building a USS Millennium Falcon.

Slashdot Top Deals

"To take a significant step forward, you must make a series of finite improvements." -- Donald J. Atwood, General Motors

Working...