Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Do your research (Score 2) 10

This sort of attack is inevitable when you have open-access software repositories. If anybody can upload a package, that implies any bad guy can upload a package. So:

  • Ask yourself if you really need a package for this, or is it simple or straightforward enough you can code it yourself and avoid the dependency and the associated supply-chain risks.
  • Do your research. Don't just grab the first package that looks like it fits your needs. Review all of the results, then look at who published them and look them up on the web. Look at their web site. Look at what other packages they've published. Look at how active they are aside from the package you're looking at. Toss any that have red flags like no history aside from this package.
  • Validate your packages. Authors often sign packages. If they do, get their keys and enable validation so you only accept packages signed by the author you know. That way if a package gets hijacked it'll fail the signature check.

Comment Re:Yes, there are good android tablets (Score 3, Informative) 128

My home tablet is an A9+. Got it on a Black Friday sale for $250 last year, and we use it to cast Netflix to our Samsung TV. My son also uses it for games. Works great. Not speedy, but we don't need it to be. (If you need speedy, get the S-series, but it's at least double the price.)

Comment Good luck with that (Score 4, Interesting) 113

Fun anecdote: I visited the Philippines in 2022. I flew Cebu Pacific Air for a few domestic flights, and they had just setup an abundance of these self-check-in kiosks at their airport check-ins. While prior visits to this particular terminal would see six to eight staff working check-in counters, this visit only had two: one assisting with the kiosks, and one checking baggage. Wait times were long, kiosks were confusing, and people were agitated, but we all got through.

I just returned from another trip now in 2025. Flew Cebu Pacific Air again for my domestic flights. This time the terminal had only three self-check-in kiosks, they were shoved up against a wall aside from the check-in counters, and nobody was using them. Everyone was waiting in line to deal with a human. (In the consideration of both sides of this human-vs-machine argument, perhaps the reason why kiosks didn't succeed in the Philippines is because human labor there is very cheap.)

Regardless, the moral of the story is that airline travel is agitating. Companies that try to nickel-and-dime passengers (even budget airlines like RyanAir) by removing mature, reliable, human & paper & analog components from that experience in place of new, untested, anxiety-inducing digital counterparts may discover that the total cost is not worth the savings.

Comment Unlawful detainment (Score 1) 195

If a store does this and they give you any guff at all about being let out you pull out your phone, call 911 and report a kidnapping in progress. Because that's what it is. The store's within it's rights to deny you entrance, but to deny you exit they have to have reason to believe you've broken the law in some way. You haven't. Their policy isn't the law. Let the authorities explain this to them.

Comment It's a global problem (Score 1, Troll) 43

I think the backdoor isn't Chinese in the sense of the government or the country, it's more of a vendor problem globally. Vendors do this to keep control of what they sell, to be able to force customers to buy support subscriptions on pain of having the product stop working if they don't. Vendors from countries other than China do this just as often. We should be worried about what all vendors do, not just Chinese vendors.

Slashdot Top Deals

ASHes to ASHes, DOS to DOS.

Working...