Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Submission + - 97% Of Buildings On Earth 3D Mapped (nature.com)

Gilmoure writes: Imagine a video game with the world's buildings already mapped in basic spatial dimensions!

"Scientists have produced the most detailed 3D map of almost all buildings in the world . The map, called GlobalBuildingAtlas, combines satellite imagery and machine learning to generate 3D models for 97% of buildings on Earth.

The data set, published in the open-access journal Earth System Science Data on 1 December1, covers 2.75 billion buildings, each mapped with footprints and heights at a spatial resolution of 3 metres by 3 metres.

The 3D map opens new possibilities for disaster risk assessment, climate modelling and urban planning, according to study co-author Xiaoxiang Zhu, an Earth observation data scientist at the Technical University of Munich in Germany."

– nature.com

Submission + - Over 10,000 Docker Hub images found leaking credentials, auth keys (bleepingcomputer.com)

joshuark writes: More than 10,000 Docker Hub container images expose data that should be protected, including live credentials to production systems, CI/CD databases, or LLM model keys. After scanning container images uploaded to Docker Hub in November, security researchers at threat intelligence company Flare found that 10,456 of them exposed one or more keys.The most frequent secrets were access tokens for various AI models (OpenAI, HuggingFace, Anthropic, Gemini, Groq). In total, the researchers found 4,000 such keys.

"These multi-secret exposures represent critical risks, as they often provide full access to cloud environments, Git repositories, CI/CD systems, payment integrations, and other core infrastructure components," Flare notes

Additionally, they found hardcoded API tokens for AI services being hardcoded in Python application files, config.json files, YAML configs, GitHub tokens, and credentials for multiple internal environments.

Some of the sensitive data was present in the manifest of Docker images, a file that provides details about the image.Flare notes that roughly 25% of developers who accidentally exposed secrets on Docker Hub realized the mistake and removed the leaked secret from the container or manifest file within 48 hours.

However, in 75% of these cases, the leaked key was not revoked, meaning that anyone who stole it during the exposure period could still use it later to mount attacks.

Flare suggests that developers avoid storing secrets in container images, stop using static, long-lived credentials, and centralize their secrets management using a dedicated vault or secrets manager.

Organizations should implement active scanning across the entire software development life cycle and revoke exposed secrets and invalidate old sessions immediately.

Comment Re: He's not wrong. (Score 1) 239

Advances still need to prove themselves safer. Deep investigation of each incident has vastly improved air & sea travel, for example. So while blame is the catalyst, the money is actually moving to pay for the deep statistics to be gathered. Lawyers want details, and the advance needs to die by debt if it's the wrong direction.

Comment Re: Not Cool (Score 2) 239

You would not be upset, or anything else, dead. And dying from self-driving car vs a speeding distracted driver really doesn't matter. If the general numbers go down, even if nonzero and have complications, then society will absorb it. Every single advance in civilization follows this path. Electricty, Petroleum, Pasturization, Power tools, Skyscapers, etc. In fact, defly navigating the new dangers of a technological advance are considered a sign of ability by the young generation. Over time, accepting the management of those dangers can cause a plateau, but luddites eventually die down to a few when tech of their youth is replaced. Still spinning your own textiles? Still firing those clay pots? Still jiggling that old carburator? This is exactly how society moves to a new technology. Obstacle-avoiding moving machines are no different. Get in and be dazzled like any World's Fair attendee of the last 120 years.

Comment Re:Enlighten me (Score -1) 10

I own, but do not operate, a few IT companies that manage corporations in the $600MM-$1B receivables range.

Based on our own help desk ticket software, our clients have opened 40% fewer tickets since ChatGPT was rolled out to every desk and phone. 40%. I expect another 40% drop (total 80%) by next year as end users just manage things themselves.

I won't downsize as the tickets aren't really generating revenue as much as headaches. One of my engineers had a broken PDF file that took her 6 hours to fix, and the end user spent 6 days trying to fix it themselves with Ai.

But -- the basic stuff? Reboot your computer stuff? Email rejected because you mistyped a domain name stuff?

You don't need a human, and we would probably have outsource that stuff to India anyway next year if not for ChatGPT etc.

Comment Re: \o/ (Score 1) 171

These effects could be real and irrefutable, and yet time and again we see that bright sunlight has equal or greater effects to these levels. Indeed, many environmental exposures, natural or not (perfumes, dyes, exhaust, smoke, nearly every volatile compound) can disrupt cellular behavior. Plastics and plasticizers can disrupt hormonal reactions, especially in a fetus. These new correlations in the article do not include cellular microwaves because they don't rise to a level that exceeds other influences. One must read the details. But hey if you think TV EMF, Cellular Microwaves, appliances or even transformer coils and other electromagnetic sources are the largest culprit, publish some quantified measurements and you'll have your day in debate. I dont need to refute anything because there's no quantifiable claim you make.

Comment Re:for profit healthcare needs to go and the docto (Score -1) 51

This is retarded.

1. It isn't for profit healthcare that is the problem, it's THIRD PARTY PAY.
2. I don't use third party pay, ever, for healthcare. I've been insured nonstop for over 30 years, and NEVER ONCE has my insurer paid my doctor.
3. Even when I've had emergencies, I still called around, negotiated a fair cash up front rate, paid cash up front, and billed it to my insurer. My cash up front rate was sometimes below any co-pay negotiated with my insurer, lol.

I just recently had some elective surgery that would have cost me about $2000 on my annual deductible, but I was able to cash pay a negotiated rate of $400 including a follow-up "free". I submitted the $400 to my insurer and they reimbursed me.

Third party insurance exists because YOU VOTERS demanded the HMO Act of the 1970s, which tied health care to employment, and then employers outsourced it to third parties.

Health care is remarkably cheap in the US (cash pay, negotiated) and I don't have to wait months to see a doctor when I call and say I am cash pay. They bump me up fast.

Comment Re: trump take electricity (Score -1) 238

Nah.

Iâ(TM)m 51. Iâ(TM)ve had health insurance continuously for 35 years and have used it exactly ZERO TIMES.

I am self pay. For everything but true life threatening emergencies, which Iâ(TM)ve had zero.

Even the ER is cheaper when negotiated self pay.

My urologist is stunned that I pay $85 for his visits. Self pay. Including labs. My colleague goes to the same urologist and his insurance pays $550 for the same visit and naturally it comes out of his deductible lol.

Insurance is a scam. All insurance is legal gambling and gamblers never win.

Slashdot Top Deals

Do you guys know what you're doing, or are you just hacking?

Working...