Forgot your password?
typodupeerror

Comment Re:Integral layer of the Trusted-Computing/DRM sta (Score 1) 34

Every time people hear what it actually involves is outrage and opposition, at least all the way back to when Intel first announced that they wanted to hardcode identity numbers inside CPUs in 1999. But the corporations involved have been relentless, and have sunk countless billions of dollars steadily forcing it forwards, and building front organizations to obfuscate and whitewash it.

With Windows 11, Microsoft was finally able to FORCE Trusted computing hardware into every new computer. Not just every new Windows computer, but every computer.

Every new Intel PC CPU has built in Trusted Computing enforcement hardware. Every new AMD PC CPU has built in Trusted Computing enforcement hardware. Every new ARM PC CPU has built in Trusted Computing enforcement hardware. The only processor lines that DON'T have it are the microcontrollers.

There are some unlocked smartphones available, but as far as I can determine it's literally impossible to buy a smartphone that doesn't have hardware trusted computing built in.

I specified that enforcing Trusted Computing at the internet access level is still a long term goal, they couldn't get away with it today. However they are well on the way to success. Virtually all new hardware supporting trusted computing, all the front groups rolling out standards and systems, and as it gets incorporated into things everyone is going to increasingly running into situations where they get locked out of stuff if they're not Trusted Computing compliant. Streaming already restricts you to the worst quality if you're not compliant, and it's only going to get worse as pre-Win11 computers fade out and as more things require it.

Comment Re: Amateur Hour in IT Security is over (Score 1) 34

I apologize for thinking you are finally starting to get a clue. As usual you continue to make absurd and unsubstantiated claims based on a lack of understanding of the subject matter. AI is much better at *finding* *vulnerabilities*, and that is the issue. How hard it is to code an exploit is a secondary issue, though of course frontier models are more than capable of doing that as well. They also reason and work as a team to achieve goals. You might try watching the OpenAI Black Hat 2026 presentation on the hugging face incident so that you don't perpetuate this bizarre habit you have of making absurd and easily discounted claims.

Comment Re:Amateur Hour in IT Security is over (Score 1) 34

It's good to see you make the transition from "LLMs are just word predictors" to "they present a serious problem that will require software engineers" (Quoted text is paraphrasing.) Unfortunately, just as video killed the radio star, Agile killed the software engineer.

Comment Re: In future AI news ... (Score 1) 34

You have to have literally no idea what is going on in the AI domain in order to make such an absurd statement. The hugging face incident is just one of a plethora of data points that your claim, oft parroted by people like yourself who have no experience with AI and no real knowledge or understanding of it, continue to parrot like a 1st generation LLM, is stupid, ridiculous, and uninformed.

Comment Seriously, what do you guys think of this? (Score 5, Interesting) 231

We all know that politicians like any other human being are often out of their depth when society gets into a critical situation. They have blind spots, ignore trends with the regular people and fumble. And talk trash about people issues without even noticing.

But this Trump thing you USians have going on seems to be an entirely new level of malignant corruption. I mean, like some satire of a corrupt government with some man-child in charge asking for rockets to be more pointy because pointy is more dangerous.

Is anybody taking this seriously anymore over there? Wouldn't impeachment of this President be overdue by now?

An inquisitive European is curious to know, please enlighten me. Seriously.

Comment Re:Dual purpose age-bracket signal :o (Score 1) 128

I'd hardly call exact date of birth "low information content".

And yes this does reveal exact date of birth, regardless of the bullshit obfuscation that it supposedly only reports age range. The server simply tracks the reported result every time the user connects, and on some specific day the result CHANGES to announce their date of birth.

-

Comment Integral layer of the Trusted-Computing/DRM stack (Score 1) 34

This is based on SLSA (Supply-chain Levels for Software Artifacts), brought to you by the same fuckers making Trusted Computing and the TMP (Trusted Platform Module). It's part of the same shitstack to prohibit you from altering your software and to lock you out of your own files, and to send spy reports out over the internet so you can be cut off if you "fail" the Trusted Computing check.

The software can use a TPM's (Trusted Platform Module) Sealing function to encrypt your data such that it's impossible to access your own data if the software is modified. It can then pass control over that data only to software updates that carry a signed security certificate from Broadcom (or any other company using this system).

It is no longer open source, your system no longer works as you can no longer access your Sealed data if you change so much as a single letter of the code. Even recompile unaltered code won't work, unless you magically manage to get your build environment absolutely identical to the company's build environment and get byte-for-byte output. Even that may be impossible with the newer levels of non-deterministic compiler optimizations.

Also, with TMP's Remote Attestation feature can be used to transmit your machine's software configuration over the internet, so that you can be cut off if your system doesn't match Broadcom (or other company's) cryptographically signed certificate.

And then of course there's Network Access Control (NAC) / Trusted Network Connect (TNC). In the long term, the goal is for ISPs to use NAC/TNC to interrogate your computer for Trusted Computing compliance, and deny you any internet access whatsoever if your machine isn't compliant. Software with this sort of "security" certificate would pass inspection, while any attempt to alter the code would be detected as "tampering". You then get "quarantined". What "quarantine" means is that you are denied internet access - with the exception that you do get very restricted access which can only be used to download the approved software to "fix" your computer into Trusted Computing compliance.

Comment Re: I "created" BIGNUM lines of assembly (Score 1) 126

Here's the question. What is the difference in work between review and understanding the code versus writing the code in the first place?

I think the results vary a lot by scenario. In some cases, the business problem, the requirements, and the implementation are clearly separable, and exceptions can be clearly defined and partitioned a prior. These are amenable to automatic code generation and "higher level of abstraction".
In other cases, the business problem and requirements can only be untangled by asserting some sort processing logic, and then working from there. The more granular the logic that has to be specified, the closer you are to saving time by just writing the code yourself.

I suspect that the estimates of massive labor savings put almost all work into the first category. In reality, I believe quite a lot of work lands in the second category, and much of the work in the first has already been automated.

Case in point, TFA mentioned writing a calendar app for her family. There are a bajillion calendar apps for families, and nearly every piece of enterprise software now ships with calendaring and project management features of some sort.
So this was a hobby project, or her family has some extremely unique un-apped needs. Who knows, as an Amazon exec she may need to schedule their personal helicopter, private jet, and security detail and that probably is more complex than everyone else's soccer practices, doctor's appointments, and school forms. But I have a hard time seeing how there's a huge space of unmet demand for calendar apps. The biggest problem with calendar apps is all the stuff that is going on outside of them that people do not want to put in their calendar. AI does not change that.

Slashdot Top Deals

Help fight continental drift.

Working...