Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re:Why does anyone want this (Score 3, Insightful) 22

Do you really want to hand over your phone to a pig during a stop or a TSA goon at the airport? Get stopped for a traffic stop, you only have your ID in your phone so you have to hand over your phone to the pig so they can go write the ticket and in the 10-15min they are back in their car with your phone they are going though your messages and pictures.

The mobile driving license standard does not require you to hand your phone over, and indeed it wouldn't help the cop if you did because he'd have to hand it right back so you could unlock before it would send any data. It delivers the data to the copy wirelessly, via NFC, BLE or Wifi, depending on the context. What's on the screen (either a QR code or nothing) does not identify you or prove your driving privileges, so it's useless to the cop, intentionally so.

I was involved in the development and standardization of the mobile driving license standard and in the process spent some time talking to cops from a few jurisdictions. Interestingly to me, the response from the cops was universal: They would strongly object to anything that would require them to touch your phone. Of course, I was talking to the higher-ups and their concern was the liability that would be incurred if a lot of their officers broke peoples' thousand-dollar phones. Individual cops might have different perspectives, but their commanders thought it was way too risky.

As for passports, IMO any useful mobile passport should work the same: No handing over of the device, indeed the protocol should ensure that the device must be in the user's hand to present the passport.

Comment Note: TSA only, not valid at border checkpoints (Score 3, Interesting) 22

Someday we'll probably get an international standard for mobile passports, but it's not happening any time soon.

Until recently I worked for Google, on Android, and participated in the International Standards Organization (ISO) committee that would be tasked with defining the technical standard for mobile passports. To be clear, the ISO committee can't actually issue such a standard, passports are standardized through ICAO. But the relevant ICAO committee delegates the technical work to an ISO committee.

The current situation in those committees is that the companies who make passport booklets and passport acceptance infrastructure are successfully fending off attempts to define a standard to enable mobile passports. They have gotten a new standard (called the "Digital Travel Credential - Physical Component", DTC-PC) approved that allegedly facilitates mobile devices with passports but isn't actually usable. Apple has refused to implement it and Google isn't making any moves to support it (though someone could write an Android app that does; all of the necessary APIs are available).

One of the main sticking points is that the ICAO committee is currently specifying that any digital travel credential should not support data minimization, meaning the ability to present just a subset of the data. More precisely, they specify that data minimization is a non-goal, but since a protocol that supports retrieving and authenticating a subset of the data without leaking any of the un-presented data is always going to be a lot more complex than a protocol that sends the entire data set in a single signed blob, any technical proposal that supports data minimization will be shot down as needlessly complex.

The ICAO's position on data minimization is that the only use of travel credentials is presentation at border checkpoints, and at border checkpoints you always have to present all of the data, so data minimization support is unnecessary. The counterargument from many people is that passports are used in many contexts other than border checkpoints, and many of those other contexts don't need and therefore shouldn't get all of the data in the passport. Since both Google and Apple insist on data minimization as an essential feature, there's not much movement happening.

My guess is that it will take 2-3 years to break the current logjam on even beginning work on a real, usable standard, then another few years to define it and put it into effect, then a few years more for most border checkpoints to accept it, and perhaps a few years beyond that for people to become sufficiently confident in their mobile devices' reliability that they will travel without a paper passport booklet. So... 20 years or so.

The work with the TSA is on derived credentials that are based on your passport (and securely authenticated), using a protocol derived from the ISO 18013-5 mobile driving license standard. It does support data minimization and looks a lot like what an eventual passport protocol should look like (IMNSHO -- note that I designed big chunks of the 18013-5 standard), but will not be accepted at any border checkpoints.

Comment Re:If I was anything short (Score 1) 22

We really are at the point where you need to start thinking about whether or not you might need to flee the country. And if that happens you want a paper passport because that increases your odds of getting out.

A paper passport doesn't increase your odds of getting out. All passports are verified electronically by the airlines and TSA. If there's a flag on your passport it doesn't matter whether it's in your phone wallet or in your hand.

Comment Re: Reality (Score 1) 226

Jesus Christ. Did Congress empower that committee? And, more particularly, did that committee actually do anything anyway? No on both counts. At best, they merely discussed it- the chairman "noting" something isn't the same. What's super entertaining here is the notion that you, a known expert on federal administrative law, have been patiently waiting to advise us all on these particulars for days now, just to heighten the suspense I guess. Do you have yet something more to pull out of your ass that continues to fail to show any semblance of the regular exercise of Congressionally-granted power?

Comment Re:My last corvette (Score 1) 202

Google. We're talking about GM switching to Android Automotive, so GM only updates car-specific drivers. The OS and apps are all Android and updated by Google.

Sort of. System updates originate from Google but flow through the OEM, which is contractually obligated to validate them and then push them out. Apps and some system services (Play services, a collection of security-related system components, etc.) are updated directly by Google.

Comment Re:My last corvette (Score 1) 202

Well, and even an iPhone eventually is out of date and needs to be replaced. I keep vehicles a long time. My current one is a 2017 Chevy Colorado I bought new back in early 2017. I've had it 8 years. My vehicle before that I bought new in 2006 and I kept it for 11 years.

Both have lasted much longer than any standard computing device will. All I want is a dumb screen a la Android Auto to sit there and adapt to whatever phone I happen to be connecting.

The expectation for Android Automotive is that systems will have a 15-20 year support lifespan. I think there are even contractual obligations mandating the lower end of that range. So I don't think you keep your vehicles long enough for it to be an issue.

Comment Re:Wait until (Score 1) 72

The REAL headline and buried lede for the original post should be:

Trump guts nuclear safety regulations

“The president signed a pair of orders on Friday aimed at streamlining the licensing and construction of nuclear power plants — while panning the Nuclear Regulatory Commission for its ‘myopic’ radiation safety standards.”

We now have industry capture of the Nuclear Regulatory Commission.

Who here knows about Admiral Hyman RIckover? All of this is worth reading:

https://en.wikipedia.org/wiki/Hyman_G._Rickover#Safety_record

Comment Re:Wait until (Score 1) 72

Are You Scared Yet?

I would be.

The Department of Energy is selling off more than 40,000 pounds of weapons-grade plutonium from the Cold War arsenal to nuclear reactor startups. All of which I’m sure will be thoroughly vetted and monitored, because this is done under the direction of a former board member. Yikes!

Christopher Allen Wright (born January 15, 1965) "12) is an American government official, engineer, and businessman serving as the 17th United States secretary of energy since February 2025. Before leading the U.S. Department of Energy, Wright served as the CEO of Liberty Energy, North America's second largest hydraulic fracturing company, and served on the boards of Oklo, Inc., a nuclear technology company, and EMX Royalty Corp., a Canadian mineral rights and mining rights royalty payment company.

https://en.wikipedia.org/wiki/Chris_Wright

Who IS Oklo, Inc. the "private nuclear reactor builder/operator"? Oklo is Sam Altman:

Trump Administration Providing Weapons Grade Plutonium to Sam Altman

"If there were adults in the room and I could trust the federal government to impose the right standards, it wouldn't be such a great concern, but it just doesn't seem feasible."

We're in territory where weapons-grade plutonium is being given at fire-sale prices to billionaires who's ethical boundaries include creating their own demand for otherwise unnecessary, high-risk energy projects. Guys like Altman, who get their ideas from Wikipedia articles about Ayn Rand — because they are one rung lower than people who actually READ that garbage.

But I'm sure no inventory of hot nuke metal will ever go missing.

Comment Re: Reality (Score 1) 226

I've read the Board minutes. Care to point to one where they take any action at all with respect to this issue? They don't. That's what makes your points completely irrelevant.

I mean, nice try, that is indeed where you could win this argument, if only they had actually done what they're empowered by Congress to do. You're obviously confusing the Domestic Names Committee meeting minutes for those of the Board. The "policy guidelines that establish presidential directives as taking precedence over BGN principles, policies, and procedures" are simply extraneous- Congress didn't say that, they gave that power to one entity only, the Board itself. Trump can order any fat ladies on the Board to sing, but that doesn't mean that there has been any opera performed.

Again, this is what we love about you here, how you're always right the first time, so when you pull more shit out of your ass, it's just par for the course.

Comment Re:Business model? Yes. (Score 1) 46

If you're giving AI work that you said you would "give to junior engineers ready to move upward in their career," then what are those junior engineers supposed to do?

I think the honest answer to this is "find another career". I'm not sure software engineering is a good choice today. But, really, I'm not sure what is.

But FictionPimp and others refusing to take advantage of the tools that have become available won't stop the transition. Junior engineers are going to have to find something else, they can't rely on their older colleagues to protect their jobs.

Comment Re:Do a study FIRST. (Score 1) 89

The reason for the rules seems like common sense to me. There is a certain distance needed to stop or change lanes when driving at highway distance. If the truck breaks down just over a hill, cars won't see it early enough unless the warning signals are put further back where they can be seen coming up the hill.

I seriously doubt that these rules were just shit someone made up. The NHTSA has so many studies regarding road regulations and guidance. They might be outdated for modern technology, and might be worse than newer alternatives - I don't doubt that hasn't been studied yet - but I would absolutely wager that there were studies done to justify the original numbers.

Furthermore, when congress delegated regulatory power to these agencies they included laws dictating how the rules needed to be determined, specifically so you can't have a bunch of political hacks changing them on a whim. Changes to the regulation need to be justified, and there needs to be comment period to gather any information and concerns that the agency itself might have overlooked, respond to the comments and incorporate any changes as appropriate. I don't want regulators to be able say "this is just some crap" and change rules every four years because they shoot from the hip. That means that changes take 1-3 years depending on how complicated and motivated the agency is, but it is worthwhile to end up with better regulations and avoid being constantly jerked around.

Slashdot Top Deals

"It takes all sorts of in & out-door schooling to get adapted to my kind of fooling" - R. Frost

Working...