Forgot your password?
typodupeerror

Comment Re:What's the problem? (Score 1) 61

The problem is that you have hundreds of folks now running the exact same checks with the exact same tools and all submitting without a care for what any of the others are doing.

Dupes are nothing new, but the scale of dupes becomes gigantic because now everyone thinks "I can be a kernel security researcher now" and all have the same tools at their disposal that tend to find the same things.

As to the 'genuine bugs', don't know about this current crop, but historically "security researchers" have already been bad for "crying wolf" and reporting non-issues that they didn't understand. The highest profile I can think of was when some "security researcher" started telling everyone in the world that nintendo stores passwords in clear text because he thought the 'OK' button only activated when the password entered matched successfully, but it just lit up as soon as *any* password that passed the rules was entered. AI code review is still pretty inclined to report non-issues in a similar way, so I imagine not just dupes, but lots of nothing coming along too. Those would be *harder* to have a system automatically handle, since a human actually has to understand the report and reconciling with reality. An LLM isn't going to be very good at dismissing bogus LLM complaints.

Comment Re:If AI is the flood (Score 1) 61

Well, it would be nice if the submitter was on the hook for the token budget to find dupes, but practically speaking the project probably runs it.

I would probably not have an LLM automatically merging duplicate tickets. The flow should be 'pass on to human review as no apparent duplicate was detected' or 'pass back to submitter with indication of probable dupe, to let the submitter decide if they have something to add to the original ticket and/or to subscribe to that ticket. I have seen enough problems when *humans* unilaterally merge tickets that end up being unrelated, and that clutters up and confuses an issue. Don't need LLM that may be pretty good, still would be even worse than the humans at messing up 'dupe or not'.

Comment Re:If AI is the flood (Score 1) 61

It's a matter of what the LLM operator is pointing it at.

The LLM operator submitting the bugs aren't paying attention nor feeding their instance of LLM anything about others' submissions. So they are flooding with dupes, and the LLM has no reason to detect duplicate submissions, since it's not fed that data.

An LLM fed the mailing list and new submissions could credibly find dupes. If it fails, oh well, a dupe made it through and was annoying. If it erroneously detects a dupe, oh well, the submitter has to re-assert that it is not a dupe and is somewhat annoyed.

LLM ability to identify roughly duplicate bugs is decent enough. I don't like the hand waving of "AI can write the code, AI can review the code, AI can test the code" to absolute confidence (finding ways to expend more tokens does improve it's success a bit, especially if you can give it a 100% perfect pass/fail test to run and and let it retry), but here it's a pretty straightforward application, just a better fuzzy match at finding duplicate reports.

Comment Re:What's the problem? (Score 1) 48

The problem is that he is an artist and needs to keep making money to get opportunities like this, so when critics pan his work and audiences react negatively, he feels the need to defend his decisions.

It sounds like he ripped off those people who take a podcast, add AI slop images, and upload a video to YouTube.

Comment Re:Rent-seeking (Score 3, Insightful) 362

The problem is Israel. Israel is everything the US claims to oppose Iran for.

- Nuclear armed, with the ability to deliver those warheads to Europe and beyond.

- The world's biggest state sponsor of terrorism.

- An existential threat to every other nation in the region, constantly attacking and invading them.

- Openly genocidal, has the means to actually do it, and is doing it.

- Abuses its own people.

If Israel wasn't based by the US and European nations, if we didn't tolerate Israel violating international law every single day for decades, Iran wouldn't be the problem that it is.

Comment Re:Rent-seeking (Score 1, Troll) 362

If the fees are lower than the cost of mitigating the problems it causes, they will probably just pay.

Trump and Netanyahu have opened a can of worms here. Iran is now looking at what else it can tax, since it's become apparent that the US can't actually win and Iran does in fact have the upper hand.

The most powerful military in the world is of little use if the political will isn't there.

Comment Re:BitLocker isn't the only one, of course (Score 1) 69

If you use BitLocker similarly to how you use VeraCrypt, this vulnerability does not affect you.

The most common mode for Bitlocker is the automatic mode, where the drive is encrypted and Windows loads the key at boot time without any interaction. It's transparent to the user, most people probably don't even know it's enabled. It uses the computer's TPM to store the key, which is only released when Secure Boot confirms that the OS has not been tampered with.

It stops an attacker accessing files by booting Linux or removing the drive, or at least it is supposed to. The idea is that if you don't know the Windows password, you can't log in to access anything, but as this guy discovered you can just go into the recovery environment which doesn't need a user account. The drive is unlocked at boot as normal.

It does seem to be some kind of massive screw up at the very least. Windows 10 made you log in for the recovery environment, but for some reason it changed with 11.

If you set a BitLocker password that needs to be entered at boot, similar to how VeraCrypt works, this bypass doesn't work.

Comment Re:Author seems unclear on music technology. (Score 1) 18

The SNES supported ADPCM, and I don't think it has a wavetable built in. It was up to the game to supply and PCM audio needed. It was definitely one of the better sounding 16 bit consoles though. The PC-Engine with CD-ROM is unmatched, of course, at least for music.

I'm wondering what version of the Doom soundtrack they used. The MIDI files? Some specific sound card's rendition, or all of them? I still have a Roland SC-88, and no 90s sound card ever sounded that good.

Comment Re:No more spyware (Score 1) 47

There was an issue for a couple of days with MG car connectivity in the UK a month or two ago. Simply going to the menu and turning off connectivity fixed it until the servers came back up. So it seams that there at least the connectivity switch does actually work.

Android Auto kept working, of course.

Comment Re:And that's why (Score 1) 40

Screw immoral. They have been pushing for years now to move from media ownership to it being a license (and a non-transferable one at that). So let's treat it like that. If I own a book in whatever form (physical, digitally, or perhaps stored on an e-reader that is broken and no longer supported), that means I have a license which should morally permit me to format-shift, and own that book in whatever other format exists, read it on any device that is capable, and obtain it by any means that does not amount to actual theft, or constitute distribution (like Torrent).

Personally I buy a great many books on my Kobo reader, knowing that most of them will be gone if the service ever ends. Not a big deal. But books I need to reference, lend out, or plan on re-reading at some point, I will either buy them DRM-free, or get a physical copy. I do wish I could get an actual license for them, one that ensures that I can continue reading that book regardless of what happens to the publisher. Right now, that only applies to physical or DRM-free books.

Slashdot Top Deals

"Nature is very un-American. Nature never hurries." -- William George Jordan

Working...