Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Comment Re:All bets are off if you have physical access (Score 2) 25

You don't need physical access to install a bootkit, just root access, and full disk encryption would only protect against bootkit infection via an evil maid attack. The bootkits being discussed here get install by just running on top of the full OS with root privileges.

But on the other hand, bootkits are an extremely rare form of malware, likely the rarest type, and I think creating Secure Boot in response to it was a case of whipping a curious little problem into a crisis and then never letting a crisis go to waste.

Comment Re:Age verification should be on California. (Score 1) 46

No. I assume nothing. I'm telling you that the bill doesn't purport to solve the problem you're accusing it of not solving.

Here's your firearm analogy: The state requires gun locks to reduce the risk of unintentional discharges-- particularly in the hands of children. That doesn't prevent the firearm from being stolen and used in a crime, but it's not supposed it. It's to REDUCE THE LIKELIHOOD that a kid will harm himself.

Comment Re:Age verification should be on California. (Score 1) 46

This law does not solve that problem nor has it intended to. This law intends to help parents semi-lock down (in tiers) their kids digital devices and reduce risk. Not eliminate all possible risk... reduce it. And to do it without introduce more risk from other realms (like the UK did).

Comment Re:dumb question (Score 1) 187

Either put up or shut up. If it's so toxic, leave & start your employee's utopia. I'm sure you'll have workers breaking down your door to work for you at your much-higher-than-market wages, with 'work when you want, vacation when you want' hours, work freely from home policies, and (somehow) the most expensive glorious health coverage available.*
If it's not enough to leave, stay and STFU. Complaining AND staying is just cowardice and carping.

The reason they can't (even if they have the resources) is that the market rewards brutal worker exploitation, or at least fails to punish it in any way while allowing businesses to reap the benefits. Labor laws that enforce decent working conditions would be a good start towards a solution, and those start falling into place after similar union-negotiated working conditions become common enough that they're a de-facto market standard. Unions make the progress and government just locks it down.

Comment Re:Age verification should be on California. (Score 1) 46

To clarify, AB 1043 (https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB1043) isn't age verification (even though it uses the term). It's age *setting*.

The bill requires operating system providers to **allow** account owners (parents) to enter the birth date, age, or both, of the **user** of that device (kids) for the purpose of providing a signal regarding the user’s **age bracket** to applications available in a covered application store. No stored ID photos. No PII sent to apps.

The bill also requires developers to confirm the appropriateness of their app per the user's age bracket.

This is a reasonable step forward from doing nothing and not nearly as far as mandating things like photos of driver's licenses and school IDs being stored on random servers.

Comment Re:dumb question (Score 1) 187

Not being snarky, it's a genuine question. If they're that unhappy, there is absolutely nothing stopping them starting a business themselves and running it with all the principles of kindness and generosity and compassion that (they assert) is missing in the workplace they're in.

Because they don't have the money to start a business lying around (a $1k emergency expense would be a big ask for the average American, average startup cost is around $20k), they likely have health coverage tied to their employment, and they probably don't like the odds of competing in a market riddled with oligopolies that benefit from massive economies of scale and labor arrangements that can treat workers as consumables and work them to their limits.

HTH

Comment Re:this has happened before (Score 1) 37

Yes, and IIRC in the '90s/early 2000s they recommended a lower grade of AES for civilian vs. military use. And more recently, there was the TrustCor debacle.

If the NSA can get the non-hybrid PQ algorithm to be the standard for future versions of TLS that would be the NSA's biggest ever win in cryptography standards sabotage. The level of danger they're willing to heap on all non-military communications again raises the question of whether they think their foreign adversaries are massively inept compared to themselves, or if they just think that creating this widespread danger is worth making their jobs easier.

Comment Re: That tracks (Score 1) 45

Unfortunately you generally can't make electricity cheaper for consumers with cheaper grid power due to how the idiotic regulatory-captured electricity market works (in the UK most notably, electricity prices can't fall until natural gas is eliminated from the grid completely), but until that's fixed, you can shift the money from your local job-intensive renewable producer to authoritarian petrostates with fossil fuels.

So with Queensland having local coal production and politicians on the take from the fossil fuel industry now in place, what they're doing makes sense for people who give zero fucks about the environment.

Comment Re: That tracks (Score 1, Troll) 45

The cost of adding storage to renewables is minor enough that it doesn't come close to shifting the price in favor of fossil fuels, so either demand is growing faster than supply where you are, or you're getting ripped off.

Here's data on the effect of renewable power on consumer electricity prices: https://www.theclimatebrink.co...

Slashdot Top Deals

Within a computer, natural language is unnatural.

Working...