Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror

Comment Re:News flash, subtext (Score 2) 34

AI scrapers use these residential proxies. It's not (just) VPNs and Tor routing. Several bottom-feeding companies openly advertise such scraping services, for pretty much any country you may want. I administer a wiki that's been on the receiving end of such scraping, and the majority of these scraping requests are in fact coming from residential IP-addresses rather than data centers.

I don't know whether these are hacked accounts, people getting tricked or paid to run these scraping apps on their devices, but it's impossible to block them all. Even if you let fail2ban block entire /24s for every detected hit (even disregarding the collateral damage and the fact that these blocks don't solve the issue, the fail2ban and iptables overhead starts to outweigh the apache load at some point).

Anubis seems to be taking care of it for now, but it's obviously only a matter of time before they can deal with that one too. Although its delay does enable fail2ban rules to block the IP-addresses before they get to stress the mediawiki php scripts, attempting to diff 2 revisions of a random page from 10 years ago.

Comment Re: The AI voices are awful (Score 1) 51

For the Irish language course the recordings of native speakers were taken offline in 2023. The AI replacements are nonsensical.

This story is about AI generated courses, not voices, but my post was still (accidentally) on-topic: when they previously used AI to increase volume of content, they were ok with quality being thrown out the window.

The AI generated courses might be low quality, and the original (English) courses might also go downhill because the type of exercises they produce may now be restricted to the type of things that their AI is able to reorganise for other languages. E.g. it might go further in the direction of vocabulary memorisation.

Comment They have a presentation at Fosdem on 2 Feb (Score 4, Informative) 35

FSF's Zoe Kooyman and Krzysztof Siewicz will give a presentation on Sunday 2nd of Feb:

"FSF's criteria for free machine learning applications"

https://fosdem.org/2025/schedu...

It'll be streamed. Well worth tuning in for. A recording should be online soon after.

Submission + - Samba gets funding from the German Sovereign Tech Fund.

Jeremy Allison - Sam writes: The Samba project has secured significant funding (€688,800.00) from the German
Sovereign Tech Fund (STF) to advance the project. The investment was
successfully applied for by SerNet. Over the next 18 months, Samba developers
from SerNet will tackle 17 key development subprojects aimed at enhancing
Samba’s security, scalability, and functionality.

The Sovereign Tech Fund is a German federal government funding program that
supports the development, improvement, and maintenance of open digital
infrastructure. Their goal is to sustainably strengthen the open source
ecosystem.

The project's focus is on areas like SMB3 Transparent Failover, SMB3 UNIX
extensions, SMB-Direct, Performance and modern security protocols such as SMB
over QUIC. These improvements are designed to ensure that Samba remains a
robust and secure solution for organizations that rely on a sovereign IT
infrastructure. Development work began as early as September the 1st and is
expected to be completed by the end of February 2026 for all sub-projects.

All development will be done in the open following the existing Samba
development process. First gitlab CI pipelines have already been running [4]
and gitlab MRs will appear soon!

https://samba.plus/blog/detail...

https://www.sovereigntechfund....

Comment Re:Not surprising (Score 5, Informative) 226

"Made in China" and then transported to and consumed everywhere else in the world isn't powered by fairy dust and unicorn smiles. It's easy to have low emissions when you externalise production. Let's see how it goes once (if) the process of bringing manufacturing back gets under steam.

Comment Re:Maybe (Score 1) 104

The upstream Linux kernel doesn't differentiate between security bugs and "normal" bug fixes. So the new kernel.org CNA just assigns CVE's to all fixes. They don't score them.

Look at the numbers from the whitepaper:

"In March 2024 there were 270 new CVEs created for the stable Linux kernel. So far in April 2024 there are 342 new CVEs:"

Comment Re:Yeah (Score 1) 104

Yes ! That's exactly the point. Trying to curate and select patches for a "frozen" kernel fails due to the firehose of fixes going in upstream.

And in the kernel many of these could be security bugs. No one is doing evaluation on that, there are simply too many fixes in such a complex code base to check.

Slashdot Top Deals

Any circuit design must contain at least one part which is obsolete, two parts which are unobtainable, and three parts which are still under development.

Working...