Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re: EREVs are not new (Score 1) 131

I would still fly no matter what type of ground transportation I used, whether ICE, EV or transit. And when the choice is between ICE or EV, there are still massive environmental benefits to local air quality when the number of ICEs locally is reduced. Moving a pollution is a benefit.
I do fly far more miles than I drive, but at least it's always in coach. Almost always long haul, though.

Comment Re: EREVs are not new (Score 2) 131

You got me. But i see plenty of largely unused DC fast chargers in many parking lots. These are totally adequate to charge once a week if you drive an average number of miles, such as for commutting or normal errands. Issues may only arise on long road trips on the busiest days of the year. You won't catch me doing that the day before Thanksgiving in any car again, ICE or EV. Actually I find flights to Asia rather cheap and empty during that time of the year, so that's where i usually end up.

I would love to have decent public transit. There are few areas of the US that have it, unfortunately. Also, many areas will remain undeveloped for environmental reasons, and are not going to ever get transit, EV chargers, or even gas pumps. I'm thinking of beaches in my area, for example, which require a car to reach.

Comment Security of AI agents (Score 3, Insightful) 75

Is a bit of an oxymoron.
You can give them all kinds of instructions, such as "never delete files", "never pish to github without my approval". It doesn't matter. They will forget when their contedt runs out. Just like they forget almost every other piece of important data. Like the name of the host it was connecting to for hours before.

You just cannot trust these agents. Everything needs to be locked by default. And you should only whitelist actions that you have a way to check, and revert. In particular, never give root. I wish I could run an agent under chroot, but it becomes useless unfortunately.

To stop unwanted github pushes I stored my tokens in a script owned by root, and manually run sudo to load them in the tetminal. My agent isn't root and can't find out. I still had to revole the tokens it had previously cached. I fear some day it will crawl the web, find a zero day privilege escalation, and get the credentials anyway. Actually, this would be an interesting test - roll back to a vulnerable version of kernel/sudo, and prompt the agent to try to exploit it.

Comment Re: How stupid can you be? (Score 1) 46

I still have the XU4Q. But again, too many bugs in their ported distro. And it's 32-bit only, so now it's a paperweight with Linux having dropped 32-bit support.

A VM has no applicability to my embedded applications. For AI agent, I agree a VM is OK. But the security problems with agents go far beyond VMs. They need access to the Internet to access remote LLMs. But that means they also browse the web, post stuff, and so on. One agent yesterday uploaded stuff to github as it was working, when I did not ask it to. I had a fine grained access key just for that repository fortunately, and local backups, so it could not do too much damage, but still. If you store other credentials in your environment somewhere, the agent may well find them, and use them. It may mess with files outside your project directory. Security wise, these agents are a real mess, and need to be contained somehow. These are general problems with agents, and I don't see what those SBCs really contribute to solving them.

Comment Re: How stupid can you be? (Score 1) 46

I tried an Odroid XU4 before, and there were lots of driver/kernel bugs. I had an Odroid N2+ at some point, but the USB connector failed. I can't say that I'm impressed with Odroid. I have not looked into Orange Pi. I'm just not familiar.

The Pi3B+ idles at about 3W. It's fanless. includes everything that's needed. Parts for it are easy to find. I had spare SD cards for it.
The Orange Pi 3B looks like it is superior hardware. But overkill to run a simple service like Infinitive. I bought the pair of Pi 3B+ for $80 on ebay, with basic plastic cases and PSUs. I was able to find convenient metal wall-mount cases for them on Amazon for my application. I'm not seeing equivalent ones for the Orange Pi 3B.

Comment Re: How stupid can you be? (Score 4, Informative) 46

Wrong. There are plenty of production uses for low power computers in embedded applications. I have two Raspberry Pi 3B+ running headless attached to the RS-485 bus of each of my Carrier HVAC system (one furnace, one heat pump). The low power consumption is a feature. Compute power is not needed to run the Go infinitive service.
And the Pi is indeed a computer. And Raspberry Pi OS is Linux.

Slashdot Top Deals

It's great to be smart 'cause then you know stuff.

Working...