Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror

Comment Google normally hides details for about 90 days (Score 4, Informative) 28

"Access to bug details and links may be kept restricted" just means that the April 26 post is no different from almost every other "Stable Channel Update for Desktop" post over the past several years. When the post first appears, readers don't have permission to view the linked crbug.com pages. Then, about 90 days later, most or all of the crbug.com pages become readable. You can look at https://chromereleases.googleb... as an example. If you click on the 1263457 crbug.com link, it now reaches a readable page on bugs.chromium.org - namely, the https://bugs.chromium.org/p/ch... page. Near the bottom, it says "This bug has been closed for more than 14 weeks. Removing security view restrictions." In other words, details were hidden from mid-December until mid-March. The April 26 bug content would normally be scheduled to become fully public around late July / early August.

Comment Re:easiest first step: let jurors work from home (Score 1) 43

Ultimately there's not much difference from physically present jurors,
i.e., 1. Even if a juror is facing counsel or facing the juror's own
camera, the juror might be daydreaming. 2/3. In most U.S. states,
jurors are rarely sequestered, and there is the same opportunity to
research or communicate when the court is in recess. Instructions to
jurors could state that their video stream must show enough of their
local environment to demonstrate that they are not touching a phone or
keyboard, or watching news coverage of the case, while court is in
session. There may even be opportunities to use technology to add
further assurance that jurors are behaving as expected. For example,
the Zoom Polling feature could be used to present simple
multiple-choice questions about what witnesses had spoken or what they
spoke about.

Comment easiest first step: let jurors work from home (Score 1) 43

In many U.S. states, citizens are selected at random to become jurors
involuntarily. Historically, this has raised questions about whether
it's the right balance between fairness to these citizens versus
fairness to the parties of a case. A pandemic changes the game. For
at least the next year, it could mean forcing a citizen (who, at best,
has imperfect information about his own COVID-19 immunity) to spend a
long time in a small room with strangers (who may be carrying COVID-19
at any time - they can't be tested continuously). Risks to jurors are
probably much higher than they've ever been in the past. There's now a
much stronger argument for letting jurors work from home. (Certainly
there are open questions about technology. Also, a decision to let
jurors work from home is probably easier than a decision to let
anyone else, such as witnesses, work from home.)

Comment it'll be like visiting Graceland or Alcatraz (Score 1) 104

Within the next few years, we'll see the first attempts to maintain
commercial real estate as part of historic preservation and add it to
the list of UNESCO World Heritage sites. My kids or grandkids will see
it only on a tour, loudly exclaiming "An office building! How quaint!"

Comment Voatz FAQ says a fingerprint reader is required (Score 1) 89

The Voatz FAQ says "only recently-manufactured smartphone models from Apple, Samsung and Google are supported with Voatz." Are the demographics of owners of those phones different from the demographics of all eligible voters?

"touches the fingerprint reader on the smartphone": what if the voter has a religious objection to fingerprinting (Kaite v. Altoona Student Transportation, 3:17-cv-5, U.S. District Court for the Western District of Pennsylvania, 2017)?

Or fingerprints are unreadable because of a recent combat injury?

Comment why is it ethical to analyze this server's data? (Score 1) 13

The article says "included a lot of sensitive information, such as real names, home addresses ... it is unclear ... if anyone outside the security researcher accessed the leaky server." Suppose my information had been stored on that server. Should I feel less violated if the person accessing it self-identifies as a "security researcher" rather than a "PII tourist"? Might a reasonable process start with: as soon as you notice the initial bits of non-public data, contact the hosting provider or applicable CSIRT, wait, and IMMEDIATELY STOP READING THE DATA?

Comment apps: same rules as for Open Source release notes (Score 1) 70

https://github.com/coreinfrast... covers this, e.g., "human-readable summary of major changes in that release to help users determine if they should upgrade and what the upgrade impact will be" and "MUST identify every publicly known vulnerability." The main difference is that, for apps, the interests of the developer are less often aligned with the interests of the user. The essence of a new release can be "more features but also more ads."

Comment device with no UI for post-install timezone change (Score 1) 366

http://www.eileendonoghue.org/... has no mention of IT costs - it apparently assumes there's always a simple supported process like "Control Panel > Date and Time > Change time zone" that the government could announce to all citizens. The reality may be bleak. For example, I own several IoT devices that required me to choose a timezone at initial setup, and I suspect a huge fraction of device owners would never successfully reconfigure them for a different timezone. Two apparently have no UI at all for that (the easiest way is to root it and make a manual /etc/localtime change). In other cases, the device owner needs to remember the admin password and/or find the documentation to learn where that UI feature is hidden. People will simply give up, either discarding the device or living with a wrong time display for months. Also, it can be much worse than just a wrong display, such as devices configured to open up physical security controls between 9 AM and 5 PM local time.

It's no longer 2007 (the last time the government mucked with DST). IoT is here. Changing DST now will litter the northeast U.S. with literally millions of insecure or otherwise broken devices.

Comment will be Open Source with Red Hat Patent Promise? (Score 1) 85

https://www.redhat.com/en/abou... says "Red Hat plans to open source Permabit's technology." This may mean that Red Hat's https://www.redhat.com/en/abou... Patent Promise will apply. Possibly Red Hat will announce whether they will hold all of the patents on the Permabit technology, or whether any third-party patents remain relevant.

Slashdot Top Deals

"Being against torture ought to be sort of a multipartisan thing." -- Karl Lehenbauer, as amended by Jeff Daiell, a Libertarian

Working...