Forgot your password?
typodupeerror

Comment Re:Checkem (Score 1) 177

The BBC World Service is radio-only. There's a cable channel, BBC America, that's available in the US, but this never aired the programme in question. The BBC's on-demand service, BBC iPlayer, isn't available in the US. So there was no legitimate way for anyone in the US to have seen the programme, and the US court should throw the case out.

Comment Re: Come on, we've been through this... (Score 1) 29

Company policy requires me to assume that there is another vulnerability that allows an attacker to run method A. It might exist elsewhere in my code or another third-party library that I ship, or it might exist in another application installed on the customer's server that I know nothing about. I could summarise the policy as, "The customer probably will get hacked at some point, but if they do, it won't be because we thought it couldn't happen."

Most of my development is in Java, which doesn't have static linking. If you write public methods A, B and C in a public class D, then compile D into a jar file, then the jar will contain A, B and C. The compiler has no way to know which methods will be called at run time. There are third-party tools that claim to be able to remove unused code, but it seems unwise to use them. Java frameworks use a lot of reflection, and with that in play, there's no foolproof way for static analysis to determine that a class or method will never be used at run time. So you have to monitor the application as it runs, and hope that your integration tests are good enough to make sure that all the code that's really needed runs at least once.

Or just upgrade the vulnerable library, and go back to doing work that customers are happy to pay for.

Comment Re: Come on, we've been through this... (Score 1) 29

If the vulnerability is patched in a later version of the library, it's usually easier to upgrade than try to convince the PHBs that it's not exploitable. (Unless the patched version is incompatible with something that we can't upgrade. Been there, done that.) Just because I can't think of a way to exploit it doesn't mean there isn't one. A black hat hacker is usually more motivated to find an exploit than I am.

As well as that, some of our customers run their own security scans, and will ask awkward questions if they find that we've given them something that had known vulnerabilities when we built the release. They don't like having to take our word for it that they're not exploitable.

Comment Re: Come on, we've been through this... (Score 2) 29

...vulnerable libraries which have bugs which do not affect the codebase they're used in.

Where I work, we're not allowed to ship third-party libraries with known vulnerabilities. We used to be able to get away with saying that we never called the vulnerable function, but now, we have to assume that an attacker can find a way to run it by automatically chaining exploits together. Of course, having been allowed to not upgrade libraries for so long, we find that having to upgrade them to meet some artificial security deadline means rewriting a lot of ancient code and (possibly) introducing a lot of bugs. Sigh...

Comment Band-aids for burn victims. (Score 1) 117

So, we could use the renewable/carbon neutral (or negative) path .... OR .... not, but with lots of extra steps and no guarantee of success?

  "And then there's the problem of trying to stop. Because an abrupt end to geoengineering, with all the carbon still in the atmosphere, would cause the temperature to soar suddenly upward with unknown, but likely disastrous, effects... "

Just have an end to fossil-fuel use, you fucking idiots! That's a tractable challenge. That's something we have decades of experience with. Play to your strengths, humanity. Don't listen to fucking morons!!!

Comment Planning to fail. (Score 1) 92

This seems to have been an investment scheme. Who hired an architect who is this insane?

"One recalled warning Tarek Qaddumi, The Line's executive director, of the difficulty of suspending a 30-story building upside down from a bridge hundreds of metres in the air. 'You do realize the earth is spinning? And that tall towers sway?' he said. The chandelier, the architect explained, could 'start to move like a pendulum,' then 'pick up speed,' and eventually 'break off,' crashing into the marina below."

That level of nonsense is usually restricted to a flat-Earth message board. But these folks were hired? They had no intention of delivering this project. If they wanted to deliver it, they wouldn't have hired people from the local psyche-ward.

Comment Re: I wouldn't care if my taxes hadn't paid for it (Score 1) 92

Anyone who voted this up is disgusting.

OP is also disgusting.

Since when do people who read "news for nerds, stuff that matters" advocate for racism? Good, old-fashioned racism? The kind that started in the 16th century, and should have died there?

https://en.wikipedia.org/wiki/...

That this is a post and was moderated up is disgusting. What the hell is wrong with you?

Comment Re: Trump Mania (Score 1) 297

"1) Canada has already lost its status. Its hard to see how that is Trump's fault."

It is the fault of people who cause other people to hesitate or not vaccinate. We call them anti-vaxxers.

"2) Trump has only been in office for less than a year. Its unlikely the measles outbreak is a result of any of his policies."

Trump appointed an anti-vaxxer to head the CDC. This is his policy. His actions drive this as much as RFK and other anti-vaxxers. No one seems to disagree that the folks who vote for silly policies view his silly policies as legit, and legit policies as silly. That means they are the same problem -- ignorance masquerading as a relevant choice due to people's fear, uncertainty, and doubt. The same things any flim-flam con-artist would brag about.

"3) The outbreak is all along the southwest border with large populations of people who lack access to regular health care."

Yes, it is truly sad to see how terrible healthcare is in the United States. Why do you view that as a reason to not try anything new, and give up what little is being done? We seem to agree that what exists is not satisfactory.

"Blaming anti-vaxxers is attributing way too much power to a fringe group."

Wrong. That's like saying the person who drove the car off the cliff isn't responsible, because the other people in the car could/should have wrestled the wheel away from the driver. The driver is responsible. It is ridiculous to claim otherwise (you sound brainwashed).

"Perhaps we should look at years of neglect of public health in those states instead. With millions of people lacking access to basic health care what did you expect?"

Yeah, normal people have decried the terrible state of public US health policy. The only improvement in the last 2 decades was Obama Care. What's with the Republicans taking that away? How far into the dark ages do they want us to go?

""Trump did it" has become the standard excuse for the widespread failure of our political class. You can just point the finger at Trump and pretend the problems will be solved when he goes away. So his rival politicians will spend the next three years talking about Trump instead of addressing how to make our lives better."

Like you are doing? This "point" seems weirdly self-antithetical. Trump is one part; there's also Justice/SCOTUS, Senate, Congress. All aspects of government are in government, otherwise it's not government. Seems tautological.

"Its not that there isn't a lot to criticize about Trump. Its that most of the criticism is directed at minor sideshows like this one. And I say that as a former community health worker who spent a couple years knocking on parent's doors to increase the level of MMR vaccinations in local schools. I may have run into one parent who opposed vaccination. The rest just lacked the personal resources to get their kids immunized. They had a hard time making sure their kids had breakfast and got to school."

You know, programs that provide food to those in need + vaccine resources were cut by Trump and his cabinet of doom? This "point" also illustrates that this problem is big and has many factors at play, like problems that humans have traditionally banded together to face. That's why most developed countries (just the USA abstaining) use socialized healthcare policies.

Frankly, your confused post just shows why the problem seems intractable to the occupants of the country most victimized by their own medical policies -- the current USA medical policy is rake-stepping! You have people who make more money than god from medical care profits which are in the bleeding-from-your-eyes-numbers of over ,000 markup, because no-one shops around for things like bullet extractions. It's not a service that does well in unregulated capitalism (unless you own the company selling heroin, in which case you're billionaires and don't care).

Trump is also a promoter of that. It's valid to mention the toxic effect his cabinet and policies have had during *BOTH* of his terms, because that is literally what's happening now. These are the issues we agree on, and these are things driving those issues. The learned helplessness and unwillingness to challenge ignorance you seem to suggest isn't helpful, in my opinion.

Comment Re: It's in the effort. (Score 4, Insightful) 89

Hahaha, what?

You say the pilot in control should have intentionally sheered off the wings (FULL OF JET FUEL) off during a dual-engine failure? You obviously have no idea about planes.

There is nothing that could have been done. They were past V1. There was no arrester pit at the end of the runway (which wouldn't have done much). We're talking about a vehicle loaded with 10,000s of lbs of fuel. Sheering the wings off would have spread chaos and destruction.

There is nothing that could have been done.

Comment As someone who writes English, not American... (Score 1) 30

...I can see this could be useful for preventing reviews that claim I can't spell or do grammar.

It needs to be opt-in, not opt-out - not only for fear of butchering an author's beautiful sentences, but also because some authors who self-publish in English are successful enough that publishers of books in other languages sometimes pay for the right to publish a translation. Those contracts are usually exclusive, meaning that the author agrees not to let anyone else publish a translation of that book in that language. If Amazon's AI generates one without the author's knowledge, the author could get hit with a breach of contract lawsuit.

Comment Re: Will make things less secure (Score 1) 84

Ok, except: that doesn't address vulnerabilities in C/C++ apps which are stopped in Rust. This also ignores the fact that there already exist functional tests of these core utilities.

If I can swap a 2mm hex nut from company A for a 2mm hex nut from company B -- and the nuts pass acceptance tests -- that's what you want. It's *ELIMINATING* sources of error within the existing framework of tests.

Comment No, it's a statistical inference model. (Score 1) 126

This does not have free will. It reflects the biases of information. That it displays oppositional defiance disorder means the creators of the model failed to curate the input data correctly. Garbage in, garbage out.

Does NO ONE understand how LLMs are implemented? It's only a statistical model! Learn statistical experiment design and analysis. Always have HITL safety rails. Always have cross-check software safety rails. These concepts are new to people who don't study information science. These concepts are decades old to people who study information science.

Slashdot Top Deals

Innovation is hard to schedule. -- Dan Fylstra

Working...