Comment Re:Beware! It is Microsoft! (Score 1) 104
Whenever I read something this insane, I wonder whether the person posting it is a paid asshole or a useful idiot.
Whenever I read something this insane, I wonder whether the person posting it is a paid asshole or a useful idiot.
I did comment on the _kernel_. I did not comment on Weyland (which IMO is a really bad idea and I will avoid it as long as possible). I certainly did not comment on the fuckups behind systemd, that clearly show there are prominent people that do not get KISS or IT security in the Linux space as well.
As to MS, yes they do not care or are fundamentally incompetent regarding security. They push defective patches. They have ridiculous vulnerabilities. They had their cloud hacked several times now, always due to abjectly stupid mistakes. There is a reason that they claimed "security is our highest priority" several times now, always after they screwed up massively. MS cares about security exactly as far as they think they need to in order to stay in business and not one bit more.
Thank you.
As I wrote in 2001, with a plea digital public works -- like self-driving AI software funded by government dollars which I had seen in action at CMU around 1985 -- always stay open and free if funded by government or charitable dollars:
https://pdfernhout.net/on-fund...
"As a software developer and content creator, I find it continually frustrating to visit web sites of projects funded directly or indirectly by government agencies or foundations, only to discover I can't easily improve on those projects because of licensing restrictions both on redistribution and on making derived works of their content and software.
The non-profit collaborative communications ecosystem is polluted with endless anti-collaborative restrictive terms of use for charitably funded materials (both content and software) produced by a wide range of public organizations. These restrictions are in effect acting like "no trespassing -- toxic waste -- keep out -- this means you" signs by prohibiting making new derived works directly from pre-existing digital public works. The justification is usually that tight control of copyright and restricting communications of those materials will produce income for the non-profit, and while this is sometimes true, the cost to society in the internet age in terms of limiting cooperation is high, and in fact, I would argue, too high.
Sad that is still an issue a quarter century later -- especially in the case of AI.
AI could bring so much abundance for all -- or it could be used to enforce artificial scarcity or all (or worse). Making any sort of AI in a for-profit competitive fashion is much more likely to produce the latter than the former, as implied in my sig: "The biggest challenge of the 21st century is the irony of technologies of abundance in the hands of those still thinking in terms of scarcity."
Building AI in an open and socially-responsible as-safe-as-feasible way was essentially the whole original core thesis of the founding of OpenAI (as reflected in the name).
https://en.wikipedia.org/wiki/...
"OpenAI stated that "it's hard to fathom how much human-level AI could benefit society", and that it is equally difficult to comprehend "how much it could damage society if built or used incorrectly"
I would think that China has that access. I know of several large corporations and one smaller state that have this access.
What a dumb statement. If you are trying to defend the indefensible (Microsoft), try at least to sound a bit plausible.
So? The Linux kernel folks patched within hours or days. And these vulnerabilities are unlikely to crop up again. You are comparing apples and oranges. Also note that building a big, bloated KISS violation of a "kernel", as Microsoft does, certainly counts as "not caring about security". The only way to get good security in software, and even more so in kernels, is by simplicity. Microsoft certainly knows that. But raking in the dollars is far more important to them.
So ask yourself: Why are you defending Microsoft with invalid arguments?
There are also other master's degrees besides the clearly negative-value MBA. For example, you can get a STEM one.
This is also the users that tolerate this crap and ask for more, at least some of them. Yes, MS has no honor, integrity, decency or skill, but they are getting away with it because they do not get called out.
And a rather large part of it is user incompetence. Not much of a surprise.
A failure will not appear until a unit has passed final inspection.