Forgot your password?
typodupeerror

Comment Re: Actually, congrats to the cURL team (Score 0) 62

They actually said other tools are regularly used and have been known to find hundreds of issues. So, no, their awesome code is not the reason. Mythos just sucks at finding vulnerabilities.

Or maybe Mythos works and eliminated the the vulnerabilities that aren't. Just because a tool reports 100 errors and another tool reports 5 doesn't mean the latter tool sucks. It could be the latter tool filtered out the pointless issues and returned just the ones that were interesting.

Even cURL had the problem where they kept getting the same hundreds of AI slop bugs over and over again. I'm sure if they got 5 that could be followed up with it would help.

Comment Re:I get it. (Score 1) 29

If I had known it wasn't checked, I absolutely would have lied.

Yes, it's something of a really bad secret in Canada. In the US, they did check - usually just making sure you used a .edu address and sending them a copy of your student ID.

In Canada, they couldn't do any of that (privacy laws prevent the school from disclosing your student status, and there's no .edu in Canada, so many schools just use a regular .ca ccTLD or a regular TLD).

So you literally can lie - I've done it a few times after I graduated to get cheaper Apple products - they "asked" your school and student ID number, but you could enter in anything as it wasn't checked (like I said, they couldn't verify).

Oh well, it was fun while it lasted.

Comment Re:Stop purchasing Bambu products (Score 1) 103

I like their products. I just want printing without fuss and without having to learn every detail about leveling, etc. Their product works for me and I do not care about its openness, it is about as important for what I need it as my headphones being open sourced (not at all). So this product is for my use case, not for people who want to control every aspect of their printer and every software feature.

IF they decide to make it prohibitively expensive to operate their hardware, then I will go back to a less capable hardware kit.

The openness isn't the thing, though it's important. The thing is you're reliant on Bambu Labs to keep your printer working. They could easily decide tomorrow that their cloud slicer will no longer support your printer. And now you're left with a worthless hunk of junk - the software still works, but the cloud software stops supporting your hardware.

Or perhaps your internet goes out - and now you can't print. Again, you're dependent on cloud services.

The whole point was that it works locally without needing an internet connection which is how it did with OrcaSlicer-bambu.

Because right now your 3D printer is basically like all the other app-driven pieces of hardware out there you can get - vulnerable to the app breaking or the vendor no longer wanting to support your printer and wanting to encourage you to buy their newest latest and greatest generation of printers.

They could also close up shop tomorrow, and boom, all printers disabled. Go buy a new printer from someone else.

None of that has anything to do with open-source or freedom. That part comes later, where maybe the slicer can work in a different way to produce better prints, but you're stuck with their software that doesn't do that. Maybe they'll offer a subscription that lets you enable new functionality.

Comment Re:Further Proof, Plants Are Sentient Beings (Score 1) 14

This is further proof that plants are sentient beings with feeling. You vegetarians ought to be ashamed of yourselves!

Time to start eating trees. Most of a tree is dead - it's just the stuff under the bark and the leaves that are still actually living. The rest of the tree is dead cells.

Comment Re:reflects the real world (Score 2) 88

Insider information or insider power. Both work just as well.

Insider information is when you exploit information that isn't public. Insider power is when you influence the outcome to your favor.

Many early sports bets used insider power - the player would get a cut of the profits if they tilted the game like faking an injury.

Anyways, news like this is good. If people know these markets are rigged against them, they'd likely avoid using these platforms. It's why regulations exist - the SEC doesn't go after insider trading because it wants a fair market, it does it because a fair market means more people will participate.

Businesses

Challenging UPS and FedEx, Amazon Opens Its Shipping Network to All Businesses (geekwire.com) 79

This week Amazon opened up its parcel shipping, fulfillment, and distribution "to businesses of all types and sizes." Any business can now ship, store, and deliver "using the same supply chain that supports Amazon," according to Monday's announcement of "Amazon Supply Chain Services."

The move sent shares of UPS and FedEx "tumbling" Monday writes GeekWire. And though both stocks bounced back as the week went on, GeekWire sees this as the latest example of Amazon "turning its internal capabilities into products and services for sale..."

"Amazon had already surpassed both carriers to become the nation's largest parcel shipper by volume, according to parcel-analytics firm ShipMatrix." Initial customers include Procter & Gamble, which is using Amazon's freight network to transport raw materials; 3M, which is using it to move products to distribution centers; Lands' End, which is fulfilling orders across sales channels from Amazon's warehouses; and American Eagle Outfitters, which is using Amazon's parcel service for last-mile delivery. The service can fulfill orders placed through platforms that compete with Amazon's own marketplace, including Walmart, Shopify, TikTok, and others... Peter Larsen, vice president of Amazon Supply Chain Services, compared the launch to the origins of Amazon's cloud business...

In addition to putting Amazon in competition with existing players in the logistics industry, the move also raises questions about data privacy. Amazon has faced accusations of using nonpublic seller data to compete against merchants on its marketplace, which it has denied. Larsen told the Wall Street Journal that the company prohibits using supply chain customer data for its own marketplace decisions, noting that hundreds of thousands of Amazon sellers already trust the company to fulfill orders placed on rival platforms.

The article notes that in his annual shareholder letter Amazon's CEO "said the company is also exploring selling its custom AI chips and robotics to outside customers."

Comment Re:Kaspersky Sales (Score 1) 106

Kerberos implementations often used MD5 in the early days. It was only earlier this year that Microsoft deprecated using MD5 for password hash storage for various parts of Active Directory because a lot of legacy equipment still used the old protocol.

It's not an easy transition since legacy equipment might only implement MD5, and updating passwords from MD5 requires the user to change their password

Comment Re:And of course pass those onto the customers (Score 1) 103

The problem is, the tariffs weren't always paid by consumers.

About 50% of the tariffs collected were absorbed by suppliers cutting their prices - are you saying those suppliers should be repaid? Or that they should jack up the prices they now charge customers to make up for the losses they incurred?

About 25% were absorbed by the business themselves - they were not passed on.

The remaining 25% were passed on.

Now, it's likely easy if it was a product manufactured in China and sold as is, but if it's a more complex supply chain - say, raw steel from Canada, imported into the US (tariffs), then made into products down the line it gets more complex - the importer paid tariffs, then they need to rebate people down the line and by the time it gets to you, who knows how the price was affected - someone might have absorbed the price increase, someone else jacked it up because "tariffs" to make more profit, etc.

Now take it as a car part - raw steel from Canada, cast in Canada, machined into parts in the US, assembled into an engine in Canada, and put into a vehicle made in the US. It crosses the border multiple times, incurred tariffs and reciprocal tariffs And now things are twisted so tightly a forensic accountant will take years to untangle the effect.

In the end, just like the whole trade disruption, it's a huge mess. Lots of price jumps were due to people simply blaming tariffs as an excuse to raise prices rather than tariffs themselves. Others choose to absorb the increased cost at lowered margins.

Jeff Bezos wanted to show how much tariffs would add to the price. We thought he chickened out due to Trump - but maybe it was also because refunds are going to be much more opaque - if people knew they spent $100 on tariffs in total, that becomes a paper trail where they would want that $100 back.

Comment Re:Fraction inflation? (Score 2) 70

Or maybe that's with projections? They have been in the game for decades, so they know what the expected sales are and they know given the first quarter results, what the second quarter results might be.

Sure there's a chance they're wrong and suddenly a bunch of unexpected orders are going to come in late may or june, but given their current sales funnel it's likely only 5 million for the first half.

Knowing the sales funnel and knowing how the market has behaved in the past helps plan out the supply chain which needs to be prepped months in advance. It's likely the middle of the year will be slow so unless there's a sudden run on motherboards, they're predicting a pretty light summer.

Comment Re:Do the home owners (Score 5, Informative) 162

That consumer connection is going to be a problem.

The whole point of AI datacenters is because you have these massive racks of AI servers and they need the ability to talk to one another really quickly. It's not just a server you can have in a homelab, it's 42U of GPUs as part of Nvidia's next-generation compute rack. And they need to talk to other such units quickly because you're going to be using dozens of racks in the training process.

And home consumer power is there because while the home will rarely use it all at once, they will be peaks. If you have 200A coming in, you add up all your breakers and you'll probably have 600A worth of loads. But some loads aren't used at the same time - your dryer might be 50A and your AC 40A, but they rarely go at the same time. Same with the stove which has a 40A plug. It's only becoming an issue because the next big load people are having are EVs and now people are starting to need some sort of power scheduling - usually in the form of a switch between the dryer and EV charger. (This is an issue because 200A is the practical maximum for the residential infrastructure - it's the highest you can get with a direct-measurement electric meter without having to upgrade to a whole new panel involving CTs to remotely measure current).

But it all works because even though we can draw 200A max, very few are doing it all the time, and with the exception of AC and stoves, most loads are run at random times so it even outs. Though even with AC there are plans on scheduling them so they don't all kick in at once - if you can have compressors going on in sequence or in a controlled manner, you can steady the load a bit.

Comment Re:Huh? (Score 1) 22

Am I the only one that can't imagine any possible value an AI assistant would bring to a game? Unless you could use it as an aimbot...

Well, it would be if you were achievement hunting or trying to find something - you could use the AI as a way to get to that hidden chest or whatever. It could either guide you, or see you're struggling and actually provide an assist.

Could be useful if you're trying to 100% a game, or get something rare and hard to find.

Not that you couldn't Google it yourself on a phone or something, but maybe there's a higher level of integration. The original Xbox One had a side view type thing where you could watch a video on how to locate some hidden treasure, so I guess this was an expansion on that now-removed feature.

Comment Re:Who would have guessed? (Score 1) 184

You know, research has shown that from a political perspective, a large majority of people, liberal or conservative, share the same exact values

That's true. The whole left-vs-right deal was really cooked up by billionaires who know if that the proles are fighting each other, they're not ganging up to go after them.

That's the whole point - if we're fighting each other on silly things, we would be too busy to realize the real enemy which are the elite trying to hog all the money. The energy used to deny a person of different skin color access to school is energy not used to try to extract money from the billionaires.

Comment Re:I always wonder why giant legos never happened. (Score 2) 35

Mostly because of the inflexibility - either you start having a ton of different bricks, or your designs start being rather cookie-cutter. More so because walls are infrastructure and now you need to have provisions for pipes, wires, and other things to go through them.

Then there's the problem of concrete itself - it has poor heat resistance (low R value). Modern homes are built to R-20 minimum, you probably want R-30 or higher to keep your heating and cooling bills reasonable. This means having to lay on layers of insulation and drywall over your bricks.

These days, the biggest cost to housing isn't the building, but the land. The building is a trivial part of the cost.

Lots of things were tried - we had bricks - which worked but were rather laborious to install. We used cinder blocks, which gave us a lot of the brutalist architecture you see. We can even do modular housing - prefab housing, which can look just as good as any custom designed stick-build house with multiple storeys (usually consists of 3-4 modules). Modular homes take a week or two to fabricate at the factory and are trucked onsite where they can be erected in about a day. The foundation work usually starts immediately as it takes a week to dig out and pour the foundation so when it's ready to be set upon the modules can be trucked onsite and assembled.

Comment Re:Ban paying ransoms (Score 1) 22

Luckily that's starting to happen with ransomware that has bugs in the encryption. That is, even if you pay the ransom, the file is trashed because the encryption key is wrong, or it's insufficient (one was caught using 4 nonces and each time it generated a new nonce it overwrote the previous one in memory, so the nonces sent to the server were the last one, rendering the file corrupt.

With ransomware being vibe coded, there's a good chance your data is lost for good, paying up or not paying up.

Heck, with some luck, they exfiltrated the encrypted versions of the files so they're useless as well.

Slashdot Top Deals

If you had better tools, you could more effectively demonstrate your total incompetence.

Working...