Forgot your password?
typodupeerror

Comment Re:Does it matter though? (Score 1) 70

You can bet the UK is making sure that they can't get on the public net now. I'm fairly sure whether the pings got through or not would be a state secret.

Now there are a lot of ways to implement a ping of sorts.
- Advanced ones use an API to send back some telemetry. This could literally be anything in the payload. This is by far the most dangerous.
    - A subset would be some sort of REST API on a web service. This has a lot of advantages as you can do geo location tricks to place listeners all over the planet. This is basic http infra type stuff. So China could have receivers outside of the great wall.
- And actual dedicated service with a proprietary interface. Highly unlikely as this poses no advantage over the first and would be handcuffed with missing features that http protocols/implementations offer.
- Using some sort of exfil technique. Such as a structure DNS request to a specific DNS server. ( This is a common exfil technique of nation states. ) This can often work. I would hope however that a DoD environment blocks this. There are a lot of other ways to exfil data through normal basic services. But the article did not mention anything that would imply obfuscated exfil for a ping.
- A simple TCP open socket request. A fairly primitive. This is old school not really used by IoT devices much.
- ICMP ping. An actual ping. But this would likely not be the case as it is a component that was calling home so the odds are that the mac address would not match the component in the end. And ICMP is generally locked down these days.

So I lean to a rest API call. Pure guess but it's by far the easiest to implement. and like you said I would hope this is blocked by the UK DoD. That said drones are evolving very rapidly. So it's highly unlikely they are as security tested as the DoD would like before hitting operational status.

As usual these little "announcements" have a lot more that isn't said than said. The threat board is growing in length for a lot of orgs with this sort of announcement.

Comment Re:Does it matter though? (Score 5, Insightful) 70

It actually does.

It does a few things. ( If the heart beats actually make it back to China. ) They would likely make it back since the devices would likely have redundant connection mechanisms. A lot of drones use starlink now and this is effectively public. The US has an early starshield capability. Not sure if this is shared with friendlies yet.
1. The device is alive. Meaning turned on and active. Meaning it is in use for an operation or training.
2. It's ping or latency time can be used to build a heat map of likely world wide locations. This used to be tricky not so much any more.
3. It's giving away at least part of the network path to the device.

So basically it can tells China with this data what the theatre of operations likely is. Which destroys the element of surprise. If a bunch of English drones all of a sudden start showing up around Taiwan for example it's tells China a lot. This could and would compromise operational security and potentially lives. It would also raise tension levels between nations.

If enough drones are doing the same thing then the data quality will improve.

And at no time does the drone have to be hacked. No attempt to communicate with the drone needed. The simple fact that a phone home command is sent is enough to compromise safety.

So it does matter.

Comment MacOS doesn't have touch ? (Score 1) 80

I don't use Mac. I've always had issues with the pay to be cool thing.

In this day and age there is now touch? OK this little factoid caught me by complete surprise.

I'm Linux/Unix dude with the occasional Windows use. So I'm completely out of touch with MacOS.

Again I'm completely shocked this isn't in the OS yet.

Comment Re:Lithium isn't rare, and it is important (Score 1) 52

Yes rare earths are actually far from rare.

Whats actually rare is the willingness to process the ores with highly toxic processes. Canada and Australia are sitting on gigantic reserves of rare earths in general. However they have a strong unwillingeness to face the consequences of processing the ores.

So its welcome to see less poluting processes.

Comment Re:Drones? (Score 1) 83

Drone just means autonomous. Drones we use today all we are doing is giving them commands. Flying drones for example automatically compensate for level, drift, speed so that their behaviour matches the operators inputs.

It would be near impossible for a single person to control each of 4 rotors on a common drone. Onboard electronics take care of that for us.

This is the "autonomous" part.

On the moon it would be a rocket propelled or wheel based device that would to give commands. From as simple as travel this fast this direction to go fly here and pick up that rock and bring it back.

Comment Re:Lithium isn't rare, and it is important (Score 4, Interesting) 52

It's accepted that Lithium is not rare.

There are however 3 big issues.
1. Cost and Toxic waste associated with extraction. ( This article shows progress in this regard. )
2. Stability, Lithium batteries have an issue with nasty fires.
3. Density of viable lithium related ores. EG in the west most lithium ore is from 2 areas. Canada and Australia. Both locations are actually rather remote in each country.

Lithium is not a good battery base. Why? It's not stable. Energy density is pretty good. But as we know when you push the limits you can get issues. Samsung did this with a series of phone batteries. They ended up with a lot of fires and a very expensive recall. So something that is energy dense but has a significant risk the health and life. It no longer is a good option for batteries.

For reasons like this lithium will ultimately be deposed as the king of batteries.

That said this process is welcome. As it has a dramatic reduction in toxic residuals from processing. So this is a major plus.

Comment But will this process get investment? (Score 0) 52

If this was discovered even 2 years ago my personal belief is the investment in the process would be huge.

However,

With recent industrial progress on Sodium batteries investors are going to have to weigh the pros and cons. With many big investors actually holding money back from both until they see real results from both systems.

I want to invest but I'm definitely holding back myself.

Comment Re:Lithium isn't rare, and it is important (Score 1, Interesting) 52

Have a look at the recent developments around Sodium batteries.

If the momentum holds for sodium they will replace lithium in a very short period of time. BYD in China is already using them in cars.

They have many significant advantages over lithium. One of them being the ignition problem.

Comment Identity & identity attribute management (Score 1) 124

The biggest issue is trusting the collector of this personal information with the information.

Most do not trust big tech. How will this information be used to exploit me in the future.
Few trust the government with my personal information and app / internet usage.

The general thought that drove the bill is that if the os holds the personal information the informatikn can then be seperated from big tech/gov from the appli ation owners. This should i theory protect the leakage of personal information.

This falls apart quickly however. As big tech owns the os in most cases. There are no standards or compliance requirements that govern what can be collected and how it is managed. So over reach in data collection is likely and expected.

In addition not all users are interactive.

Lastly any data collection method will certainly be defeated in moments.

More effort needs to be put into standards around identity and identity attribute management. So that laws can be based on accepted standards rather than vague wishful thinking ideas.

Comment Re:Time (Score 1) 75

ISP Routers are typically locked such that the end user update the firware. And if they could the process is often extremely difficult for even technically minded people.

In some cases the ISP installs very specific software to do other things.

Example: In Australia Telstra issues routers that create and entire second network on the router. Which allows them to setup roaming wifi connections that the ISP subscriber can use. So a subscriber can walk around town and never lose their wifi. As the simply are hoping between routers stashed in homes/business/public access points.

Other companies put software on the routers to implement tracking networks that constantly scan for wifi and bluetooth broadcast identifiers etc. Then they send this data to the mother ship to create air tag like functionality.

So the problem is now bigger. Not only can't you just simple as a user update to OpenWRT, The ISP is often now stuck with the problem of migrating functionality to a complete new device / OS with little time to implement it.

Note ISP's do not retain the Intelectual property any more for these addon services. They claim they do but generally these things are implemented by contractors or vendors and the knowledge of how to actually put it all together is generally lost. So this makes it even harder to migrate to a "US" made router.

And on top of that internent subscribers do not upgrade their routers often. They are used untill they break or are bricked or the subscriber changes provider. This time line is usually well over 5 year time frames.

So moving to OpenWRT is very unlikely on mass. ( I actually run OpenWRT on multiple devices and I'll likely never go back to a vendor supply router software stack again. )

Comment Supply chain disruption leads to sticky inflation (Score 1) 46

Apple is like many other companies right now especially tech.

The obvious hits like:
oil (base ingredient in a lot of tech.)
mem and storage chips being reserved for AI buildouts. ( Chip runs years in advance are being purchased already. )
Supplier chains also jacking up prices.
Supplly chains having induced delays. Restricting product volumes.
Tarifs in USA and now around the world.

The problem is that all of these actual hits will be converted into margin once these pressures subside. This is when price godging will really kick in.

Net impact is yet another massive hit to inflation globally. It'll take another decade at least for wages to catch up if they ever do.

The upside is that the price of housing will finally flatline or even retreat across the globe. As people are constantly pushed lower on the property / prosperty ladders.

Comment The devil is moving parts. (Score 3) 44

Moving parts is the curse on durability.

Todays phones have 0 moving parts. If you exclude the external buttons for volume and power etc.

Moving parts are point of failure. Moving parts almost always point to a point of dust/liguid intrusion. Moving parts are extensive to build assemble and maintain.

Rollables as designed currently are a mess of moving parts. And in this LG phone case. Motorised moving parts. Which is even worse.

I don't really think you will see a rollable until almost all moving parts are gone. The only way I see them working is if you get a screen that literally rolls up all by itself. No extra casing, mechanisms etc. Just the screen that rolls up into tube around a solid core body. To do this the durability of the screen needs to improve vastly. The structural regidity needs to be a core attribute of the screen not the thing holding the screen.

And to top it all off it has to be cheap. Lets face if a rollable is going to wear out much faster than a modern gorilla glass phone. So replacement cycles are going to be much quicker. People will not shell out $3000 every 6-12 months for a phone. ( I acknowledge the apple cult does have a subset of people that do this. )

Comment Old man HPUX user (Score 1) 152

When I first started in IT at the Enterprise level many many years ago I use HPUX for developing telephony software. At the time we used HPUX as a Command and control of our systems. It was also used to develop software for the Motorola 68020 switching systems.

HPUX was not actually a multithreaded OS then. It had fake threads implemented with interrupts. This caused us no end of grief at the time. All of these low level hacks to ensure that things didn't lock up. We needed something that could handle real time systems. HPUX was not it. But we made it work.

( Side bar, We did code reviews on paper from dot matrix printers. The printers were always inside sound proofed boxes they were so loud. )

On top of that we had to make our interface work in the god awful CDE UI environment. Meta-Meta hell.

Solaris/SunOS at the time was light years ahead.

Then in the early 2000's the move to RHEL was on. Finally we could make clustered environments with fault tolerance. RHEL may not have been the most stable at the time. But we finally had the tools to build clusters that would blink an eye when a node went down. In the HPUX days, this was a pipe dream. The OS and the tools just didn't exist.

Now things have moved on to the next level of with containers and very light weight Linux based containers. Which is a good thing.

Rewinding the clock. back to those early days. What we were really trying to implement was what we know as containers today. We wanted systems that we could maintain deploying small updates frequently and having zero interruptions. This contained cloud style environments is what we really wanted back then. Of course we didn't know all what was needed to make that happen.

Long story short. I hated HPUX. It was horrible to code for. And the code was simply not portable unless we put in 5x the work.

Comment AI fails the detail problem. (Score 1) 139

When using AI to quickly mock up small chunks of code I find it an accelerator. And I do mean small.

But when code scales up simple systems or API's it falls apart pretty quickly. As the scale of the system grows the requirements grow even faster. GDPR, PII, FIRB, NIST, all start to pile up on as code bases grow. AI lacks the understand of the "business" need. So you get this blob of code out and then you have to spend large amounts of time understanding it so you can re-factor it because the AI engine missed the mark by even a small amount.

In addition I find AI code generation lacks the ability to plan for the future. What potential use cases will come up next week, month, year. And this in flexibility means the code base has to be essentially tossed in the bin. It's even worse when you think about the impacts on you dataset. You effectively can't adapt over time. The code effectively is locked because your data set is your business.

Then there is the problem with conforming to standards. AI code simple sucks at this. You'll have 95% conformance and basic testing often comes out totally successful but those 5% edge cases fall apart.

So I find AI useful for doing the drudge work. Even some of the simple logic work. But I rarely let AI work outside of the context of a single function/method. It can be a decent time saver when I keep it simple.

Slashdot Top Deals

The brain is a wonderful organ; it starts working the moment you get up in the morning, and does not stop until you get to work.

Working...