Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×

Comment Re: Scanning (Score 1) 88

This is nice, except for docs that have parts redacted. They could sign chunks of the doc, but what chunk size? And if too small, it could be possible to determine the contents of the chunk based on other sigs (maybe).
Regardless, that's not a bad idea, even if it's just used for pulling out the originals and verifying before redacting, and it'd still be good for docs that don't have anything redacted.

Comment Re:Not really a big deal. (Score 5, Insightful) 280

Agreed, and I'd take it several steps further...

Sure, not all people leading these positions are experts at those fields. I'd argue they should be, but if they're competent enough at leading people that are experts, that'd probably do as well.

I'd also concede that Giuliani almost certainly didn't set up this server himself, so he's not directly to blame for that.

However, when those two are combined, it's an utter failure. He is not qualified to do the actual work, and when he has had others do the work (for an "infosec consultancy firm", no less), they utterly failed - thus his leadership of them is also an utter failure. To fill the cyber security advisor role, one should be able to either do the work directly, or be smart enough to interface with those that can do the work. As Trump would say, so sad!

Comment Re:sure I believe you (Score 1) 145

Where have you been? The courts have determined an IP doesn't prove an identity, therefore it's just more anonymous information.

Look up what PII is (personally identifiable information). Your full name is PII, as is your address, but neither prove an identify. The IP does not have to prove it was you to be PII. I believe it would fall under non-sensitive, as opposed to sensitive PII such as biometric info, medical info, SSN, drivers license number, etc, but it's still PII (at least IMO, since each country/court/etc could define it however they see fit).

Comment Re:The only way to make AIs safe.. (Score 1) 74

We already have semi-autonomous killing machines. It's not a big stretch to get to fully autonomous killing machines (tech wise, if we can have a self driving car, then we're there - though it'd be scary as hell and a bad idea to use it just yet).

If we get to autonomous ones, we can fight them back if they go haywire so long as they don't have a desire for continued existence and/or the ability to self replicate. I may be reading into it some, but I think that was GP's point. Not to get to 100% safe, because we already have killing machines, so we're already less than 100% safe, but just to get to avoid a situation where they would wipe us out.

Comment Re:Russia is not the only company to require this. (Score 4, Informative) 110

The EU laws are similar, but different. They apply to companies with a presence in the EU, and protect the personal information of their citizens (data may not leave the country without dealing with more red tape). The RU law requires that the data be written to a server in Russia first, but the data may then leave the country - it protects their ability to access that data, rather than protecting the data. The impact is similar, but the differences are quite important.
https://slashdot.org/comments....

Comment Re:Lessons re-learned (Score 1) 110

LinkedIn could make their app still closed source and with a simple ifRussian config, tell it to pull information from a different set of servers.

(bold by me)
This is the point. How are you stating it so clearly and yet still missing it?
With proprietary software, the proprietor is the only one that can make that decision, and you are subject to their choices so long as you wish to use said software/service. If it were free/open/libre, anyone could decide it was worth the effort to setup and configure a Russian version that complies with their laws.

LinkedIn has decided not to comply with the Russian law at this time, so they are being blocked and everyone loses** (Russians can't use the service anymore, and no one else will see new/updated Russian data anymore).

** or wins, if you happen to dislike LinkedIn

Comment Re:Why not? Ask Lenovo (Score 1) 161

I have 2 24" monitors, so it's not like any reasonable panel would supersede *those*

Really? If you think a 30" 2160x1600 screen is (or could be) superior to two 17" panels, then why wouldn't a 40 - 50" 4k screen be better than your 2x 24"? More square inches, (probably) way more pixels, and cheaper than the aforementioned Dell U3014

Comment Re:Oh yeah, just what I need. (Score 1) 229

Exactly what would your non-internet-connected echo-like device that does all processing locally be capable of doing?

FWIW, I'd ideally prefer the arrangement to be a bit different, and I think my ideal setup would probably suit most of those complaining about some cloud connected always on mic. I'd prefer a local voice to text thing, a separate array mic piece, and a separate thing to process the commands and send results and keep state, and I'd want it all open source and no requirement for any external accounts. The end result would almost certainly have far more room for vulnerabilities and exploits. I'd still want it to have an internet connection so it would work with all the wonderful things on the internet. I'd still want it to be able to tie into IFTTT (if you don't know what that is, look it up - it's pretty awesome). I'd definitely want to be able to customize the action word (ie. use something other than "Alexa", "Amazon", "Echo", "Siri", "OK Google", "Cortana", etc)... which means that part couldn't use a low power hardcoded hardware bit to pick up the keyword, so it would have to listen and process all text instead. With all that stuff done locally, there's also a lot more that can break, and it'll need a lot more resources (CPU, memory, ram, and storage). I'd also want it to train based on what's been said before, which is also built into the Alexa service (you can review every clip it sent, and what it thought you said, and correct them as needed).

I don't think everyone in the world should have one, but if you're avoiding them because, "there's no way I'm putting an internet-connected microphone in my living room", that just seems silly. You'd be doing it anyway if you had anything with similar features, and your probably carrying around an internet connected mic right now, and your laptop, PC, xbox, ps4, and whatever kit you have connected to your TV probably all have one as well. If you have none of those and you're that paranoid (maybe even justifiably so), that's fine, but obviously this isn't for you then.

If you really would, "love to have something like this in my house", then using a low powered net connected device like the Echo is the smart way to go... there's no way I could justify a more-or-less fully fledged PC at every point I wanted to do that stuff. The mic alone pretty much justifies the cost, let alone the "wife factor", so to speak (and sorry to sound sexist). But hey.. if you're worried about recording devices, ignore this whole segment of tech forever. If it's voice activated, something has to be listening.

Comment Re: Oh yeah, just what I need. (Score 1) 229

If you don't want one, that's fine, but the excessive paranoia around the Echo is just stupid.
The Echo has been torn apart many times, and it barely has anything in it. It can't record excessive amounts of anything to queue up. It doesn't have the guts to do full voice to text locally. It has a small chip that is pre-programmed for specific key words (2 of them... my older Echo can use either "Alexa" or "Amazon", while my friends is either "Alexa" or "Echo").

It's pretty plain and clear what it does. It has a fifo that records a small buffer of audio, and a chip that detects the keywords. When a keyword is detected, it starts streaming the audio out (starting with that fifo, so it can catch the first utterances of your request). It gets back a textual response and speaks it, optionally asking for a follow up question.

That may be more than enough for some people to rule it out as an option in their home. That's fine and even somewhat understandable. There's no need to exaggerate the situation further.

If someone wants to record all you say, you're probably carrying around a far more advanced and more powerful computer with TONS more sensors with multiple audio and video sources, accelerometer, GPS, beromiter, finger print reader, etc... all in your pocket, or next to you on the desk/table/etc. Where's the hard off switch for those sensors? The Echo is the least of your worries.

Comment Re:Unit test those edge cases (Score 1) 119

So if in the code I say "if ( seconds assumes that the value ...

Kinda amusing that your post is an example of unexpected (though well known) data causing an incorrect outcome. IE. slashdot ate part of your comment (I'm hoping that assumption is correct. Otherwise, your brain ate part of it). Sadly, we have to manually escape < (ie: &lt;) and friends here (and I have no idea what all must be escaped).

Comment Re:Unit test those edge cases (Score 4, Interesting) 119

Read the article then. It shows it pretty plainly: https://blog.cloudflare.com/ho...
I was going to try to guess what they were doing, but they have some actual code snippets.

AFAICT, a unit test wouldn't have caught this either (unless they planned for this sort of error, in which case the code wouldn't have been broken either). From TFA:

RRDNS doesn’t just keep a single measurement for each resolver, it takes many measurements and smoothes them. So, the single measurement wouldn’t cause RRDNS to think the resolver was working in negative time, but after a few measurements the smoothed value would eventually become negative.

So, a unit test with one negative example (which may have been difficult to mimic anyway, due to the direct usage of Time.Now()) probably wouldn't have triggered the issue on its own.

IMHO, blaming a misconception of time always going forward is just convenient here. The fix was changing this bit:
if rttMax == 0 {
      rttMax = DefaultTimeout
}

They just changed "==" to "<=". There was no reason not to have it as "<=" to begin with, even if one ignores where rttMax comes from. Any time I check if something is == to something else, and I don't have else conditions covering the other cases, I ask myself what should happen in those other else cases and ensure I'm covered. That may still have caused it to break, but it could have done:
if rttMax == 0 {
      rttMax = DefaultTimeout
} else if rttMax < 0 {
      panic("What the fuck happened to rttMax to make it negative!?!")
}
...though it probably would have been better to just log that somewhere and set it to the DefaultTimeout.

Anyway, I think it's a great example of a one character bug that only triggers on very obscure events under significant load.

Comment Re:Welcome (Score 2) 161

That's a terrible analogy. When you go to a restaurant you only "own" the food on your plate and your body gets rid of it a few hours later.

I think you're on to a better analogy.
For TV, you "own" the show content until you're done processing it (ie. you rent it, or have a temporary license to it). So, where's the TV/software/restaurant fall in there?
* food = content/shows/etc
* salt/pepper = ff/pause/rewind/mute
* restaurant = network (abc/nbc/etc)
* chef/waiters/staff = content producers (director/actor/etc)
* tv = plate/fork/knife/etc
* tv OS = Miss Manners rules for using your utensils and how to properly consume your food

If you eat at a restaurant, it's then like going out to the movie theater.
If you order delivery (and thus supply your own dishes and your own house rules for the handling thereof), it's like watching the content on your TV.
As such, they have no business enforcing Judith Martin's rules while in the privacy of your own home.

Comment Re:Continuing via fork under new name 'LineageOS' (Score 2) 113

This is a double blessing then. I could never wrap my brain around the name cyanogenmod, could never remember it, had few friends that ever even heard of it, etc. People would just say (incorrectly), "root your phone", rather than something like, "install cyanogenmod or another alternative OS". LineageOS sounds like a great name.

Comment Re:so is there a good theory? (Score 1) 470

The one thing that bothers me with this drive is that it requires a somewhat large amount of energy to work, ... plus they add a lot of weight to the probes, which would nullify the EM drive's point to some extent.

I don't see the connection to those points from TFS. This drive seems plenty interesting, but from a power to weight ratio, it sucks. Loads of energy in, and micronewtons of thrust out? It's still very interesting, but I don't see how this looks viable for small satellites. Hopefully I'm overlooking something obvious.

Slashdot Top Deals

You see but you do not observe. Sir Arthur Conan Doyle, in "The Memoirs of Sherlock Holmes"

Working...