Forgot your password?
typodupeerror

Comment Re:Does this mean Sam Altman's going to prison? (Score 1) 53

But sending this guy to jail as a scammer? Laughable. He gave people what they paid for.

The fraud charge sounds like it was defrauding the university rather than his clients. The CPS press release which all of the media reports seem to be based on doesn't break down the sentencing among the three charges of fraud by false representation, accessing a computer system without authorisation, and money laundering. The case doesn't appear to be available (yet?) at caselaw.nationalarchives.gov.uk.

Comment Reminder of how this works (Score 1) 288

No one can possibly think that a one-time tax like this is a good idea. Even if you want higher taxes on the wealthy surely (a) you want recurring revenue not a one-off (b) you want to actually collect the taxes not just scare the tax base out of state.

But this is the key part:

Although it has gained enough signatures for the ballot, the groups backing the measure have until June 25 to decide whether to move forward or potentially strike a deal with the state.

The way the ballot process in California works is you can propose terrible legislation, pay for signatures, then get what you want in return for withdrawing it (which you can do even after submitting signatures, which is ridiculous).

It's become a very broken system.

Comment Re: Seems defensible. (Score 1) 38

If their published standards indicate that giving the connector that level of admin permissions is excessive, and the access needed to exploit this is as clearly a set of poor security management as the last paragraph of the summary implies, then, "Yes, it should be corrected, and no, it's not bounty worthy" seems a reasonable stance to take. It sits right in the zone of that definition.

You could have the argument, but it's not clear to me that Google has it wrong.

Well I am sure they are not wrong in that they have legal cover to refuse the bounty.

I think they probably are wrong in excluding all config related bugs from their bounty program. Chained exploits are becoming increasing attack vectors so "you need elevated privileges" is not the moat it used to be. And GCP takeover is a big cost to bear. "We can prove it was your fault for not reading our docs carefully enough" will probably not be the salve their customers want in case of exploit. Security is hard and protecting customers from footguns is often worth doing.

But if Google doesn't want to know about these kinds of issues that's up to them. Keep it in mind before purchasing their services, however.

Comment Re:Why Are We (the UK) Helping Ukraine? (Score 4, Interesting) 347

You gave Ukraine security guarantees in exchange for Ukraine not keeping the nuclear weapons that were on its soil after the breakup of the USSR. There's an argument that the real mistake the US (and the UK and France) made was not getting involved in 2014 when Russia decided to unilaterally revoke Stalin's transfer of the Crimea to the Ukraine. The resulting lesson, which is also the lesson that the current war in Iran teaches, is that a state should do all it can to acquire nuclear weapons and then not give them up under any circumstances.

Slashdot Top Deals

Money doesn't talk, it swears. -- Bob Dylan

Working...