Slashdot Mirror

RockDoctor writes with news as reported by the BBC that parts of a Falcon 9 launcher have washed ashore on the Isles of Scilly off the SW coast of Britain. Early impressions are that the pieces are from the failed Falcon 9 ISS launch which exploded after take-off in June. That's not the only possibility, though; according to the article, However Jonathan McDowell, an astronomer at the Harvard-Smithsonian Center for Astrophysics, said many experts believed, due to the size and markings which have now been revealed, it was from a different mission. "All the geeks have been getting together and looking at fine details, and we're pretty sure it's a launch from September 2014 that successfully sent a cargo mission to the space station. "It didn't look like an exploded rocket to me, it looked like a fairly normal piece of space junk when the lower stage of a rocket falls from a hundred miles up and hits the ocean. Large sections can remain in tact and it's really quite normal," he said.

New submitter AppleHoshi writes: The BBC is reporting that a large chunk of the SpaceX Falcon-9 rocket, which exploded shortly after take-off from Cape Canaveral earlier this year, has been found 4,000 miles away, in the sea off the Isles of Scilly. The recovered section is approximately 10m (32ft) by 4m (13ft). It was discovered by a local coastguard patrol, though they didn't recognize it until they scraped off a layer of goose barnacles.

MarkWhittington writes: Back in October, findings from the Kepler Space Telescope suggested that something strange was going on around a star called KIC 8462852. Kepler was built to detect exoplanets by measuring the cycles of dimming light from other stars, indicating that a large object was passing between them and Earth. But the dimming light cycle from KIC 8462852 seemed to suggest a lot of smaller objects swarming around it. Scientists narrowed down the explanations to either a swarm of comets or alien megastructures. NASA announced evidence garnered by two other telescopes that pointed to the comet explanation.

An anonymous reader writes: Following a public consultation that compared the service unfavorably with Uber, London's 21,000 black cabs will finally accept card payment from October of 2016, with a possible option to pay via PayPal. London Mayor Boris Johnson continues to support and defend the legendarily expensive and iconic taxi service, saying 'This move will boost business for cabbies and bring the trade into the 21st century by enabling quicker and more convenient journeys for customers'. Most Londoners feel that the move should have been made in the 1980s, and the consultation report indicates that Uber's increasing share of London fares has forced the innovation.

An anonymous reader writes: AMD Windows customers were greeted this week to the new "Crimson" Radeon Software that brought many bug fixes, performance improvements, and brand new control panel. While AMD also released this Crimson driver for Linux, it really doesn't change much. The control panel is unchanged except for replacing "Catalyst" strings with "Radeon" and there's been no performance changes but just some isolated slowdowns. The Crimson Linux release notes only mention two changes: a fix for glxgears stuttering and mouse cursor corruption.

An anonymous reader writes: The Raspberry Pi Foundation unveiled the Pi Zero, a new $5 mini-computer, Thursday morning. The board is the smallest Raspberry Pi yet, containing the first-gen Raspberry Pi's BCM2835 chip (safely overclocked to 1GHz) and 512MB RAM. The latest issue of The Magpi will include a free Raspberry Pi Zero and hits U.K. newsstands Thursday. The announcement came just a few days before the highly anticipated C.H.I.P. $9 mini-computer goes on sale to the public. puddingebola writes: How can they achieve this price, you may ask? "Its 40-pin GPIO header has identical pinouts, although the pads on the circuit board are "unpopulated," meaning you'll have to solder on your own connector. The same goes for the composite video output: The connection is available, but if you need a socket, you must solder it yourself." Dude, go to Radio Shack. Some relevant specs besides those mentioned above, from the blog post linked:

• Micro-SD card slot
• mini-HDMI socket for 1080p60 video output
• Micro-USB sockets for data and power
• Identical pinout to Model A+/B+/2B
• An unpopulated composite video header
• "Our smallest ever form factor, at 65mm x 30mm x 5mm"

New submitter graffitiwriter adds a note that the newest Pi has "already been turned into a retro gaming console. It turns out the Pi Zero is more than capable of running Retro Pie and other emulators, and even has a video output that lets you play games on an old CRT TV."

An anonymous reader writes with news that Cox Communications' insurer, Lloyds Of London underwriter Beazley, is refusing to cover legal costs and any liabilities from the case brought against it by BMG and Round Hill Music. TorrentFreak reports: "Trouble continues for one of the largest Internet providers in the United States, with a Lloyds underwriter now suing Cox Communications over an insurance dispute. The insurer is refusing to cover legal fees and potential piracy damages in Cox's case against BMG Rights Management and Round Hill Music. Following a ruling from a Virginia federal court that Cox is not protected by the safe-harbor provisions of the DMCA, the Internet provider must now deal with another setback. Following a ruling from a Virginia federal court that Cox is not protected by the safe-harbor provisions of the DMCA, the Internet provider must now deal with another setback."

msm1267 writes: A second root certificate and private key, similar to eDellRoot [mentioned here yesterday], along with an expired Atheros Authenticode cert and private key used to sign Bluetooth drivers has been found on a Dell Inspiron laptop. The impact of these two certs is limited compared to the original eDellRoot cert. The related eDellRoot cert is also self-signed but has a different fingerprint than the first one. It has been found only on two dozen machines according to the results of a scan conducted by researchers at Duo Security. Dell, meanwhile, late on Monday said that it was going to remove the eDellroot certificate from all Dell systems moving forward, and for existing affected customers, it has provided permanent removal instructions (.DOCX download), and starting today will push a software update that checks for the eDellroot cert and removes it. The second certificate / key pair was found by researchers at Duo Security.

JustAnotherOldGuy writes: At least 23 former Disney IT workers have filed complaints with the federal Equal Employment Opportunity Commission (EEOC) over the loss of their jobs to foreign replacements. This federal filing is a first step to filing a lawsuit alleging discrimination. These employees are arguing that they are victims of national origin discrimination, a complaint increasingly raised by U.S. workers who have lost their jobs to foreign workers on H-1B and other temporary visas. Disney's layoff last January followed agreements with IT services contractors that use foreign labor, mostly from India. Some former Disney workers have begun to go public (video) over the displacement process

An anonymous reader writes: Germany's Axel Springer, owner of newspapers like Bild and Die Welt, is pursuing legal action against the developers of Blockr, an ad blocker for iOS 9. Techcrunch reports: "In October, Axel Springer forced visitors to Bild to turn off their ad blockers or pay a monthly fee to continue using the site. Earlier this month, the publisher reported the success of this measure, saying that the proportion of readers using ad blockers dropped from 23% to the single digits when faced with the choice to turn off the software or pay. 'The results are beyond our expectations,' said Springer chief exec Mathias Döpfner at the time. 'Over two-thirds of the users concerned switched off their adblocker.' He also noted that the Bild.de website received an additional 3 million visits from users who could now see the ads in the first two weeks of the experiment going live."

szczys writes: We attribute great thinking to ancient Greece. This is exemplified by the Antikythera Mechanism. Fragments of the mechanism were found in a shipwreck first discovered in 1900 and visited by researchers several times over the next century. It is believed to be a method of tracking the calendar and is the first known example of what are now common-yet-complicated engineering mechanisms like the differential gear. A few working reproductions have been produced and make it clear that whomever designed this had an advanced understanding of complex gear ratios and their ability to track the passage of time and celestial bodies. Last year research by two scientists suggested that the device might be much older than previously thought.

HughPickens.com writes: Murtaza Hussain writes at The Intercept that although it remains in use at sensitive security areas throughout the world, the ADE 651 is a complete fraud and the ADE-651's manufacturer sold it with the full knowledge that it was useless at detecting explosives. There are no batteries in the unit and it consists of a swivelling aerial mounted to a hinge on a hand-grip. The device contains nothing but the type of anti-theft tag used to prevent stealing in high street stores and critics have likened it to a glorified dowsing rod.

The story of how the ADE 651 came into use involves the 2003 U.S. invasion of Iraq. At the height of the conflict, as the new Iraqi government battled a wave of deadly car bombings, it purchased more than 7,000 ADE 651 units worth tens of millions of dollars in a desperate effort to stop the attacks. Not only did the units not help, the device actually heightened the bloodshed by creating "a false sense of security" that contributed to the deaths of hundreds of Iraqi civilians. A BBC investigation led to a subsequent export ban on the devices.

The device is once again back in the news as it was reportedly used for security screening at hotels in the Egyptian resort city of Sharm el-Sheikh where a Russian airliner that took off from that city's airport was recently destroyed in a likely bombing attack by the militant Islamic State group. Speaking to The Independent about the hotel screening, the U.K. Foreign Office stated it would "continue to raise concerns" over the use of the ADE 651. James McCormick, the man responsible for the manufacture and sale of the ADE 651, received a 10-year prison sentence for his part in manufacture of the devices, sold to Iraq for $40,000 each. An employee of McCormick who later became a whistleblower said that after becoming concerned and questioning McCormick about the device, McCormick told him the ADE 651 "does exactly what it's designed to. It makes money."

Mickeycaskill writes: Dell has been accused of pre-installing rogue self-signing root certificate authentications on its laptops. A number of users discovered the 'eDellRoot' certificate on their machines and say it leaves their machines, and any others with the certificate, open to attack. "Anyone possessing the private key which is on my computer is capable of minting certificates for any site, for any purpose and the computer will programmatically and falsely conclude the issued certificate to be valid," said Joe Nord, a Citrix product manager who found the certificate on his laptop. It is unclear whether it is Dell or a third party installing the certificate, but the episode is similar to the 'Superfish' incident in which Lenovo was found to have installed malware to inject ads onto users' computers.

phrackthat writes: The family of Ahmed Mohamed, the boy who was arrested in Irving, Texas has threatened to sue the school and the city of Irving if they do not pay him $15 million as compensation for his arrest. To refresh the memories of everyone, Ahmed's clock was a clock he disassembled then put into a pencil case that looked like a miniature briefcase. He was briefly detained by the Irving city police to interview him and determine if he intended for his clock to be perceived as a fake bomb. He was released to his parents later on that day and they publicized the matter and claimed Ahmed was arrested because of "Islamophobia".

theodp writes: Computerworld reports that the comments are in on the Department of Homeland Security's new proposed rule to extend OPT for international STEM students from 29 months to at least 36 months. The majority of the comments received by DHS support extending the program, CW notes, which is probably not surprising. Rather than choosing to "avoid the appearance of improper influence" by declining to respond to a "We the People" petition protesting a pending U.S. Federal judge's ruling that threatens to eliminate OPT STEM extensions altogether in February, the White House informed the 100k petition signers that they had the President's support, and pointed to the comment site for the proposed DHS OPT STEM rule workaround. Like the "We the People" petitioners, it's unclear whether the DHS commenters might represent corporate, university, and/or student interests, although a word cloud of the top 100 names of commenters (which accounted for 17,000+ comments) hints that international students are well-represented. By the way, in rejecting the 'emergency changes' that were enacted by DHS in 2008 to extend OPT for STEM students without public comment, Judge Ellen Huvelle said, "the 17-month duration of the STEM extension appears to have been adopted directly from the unanimous suggestions by Microsoft and similar industry groups."

theodp writes: Computerworld reports that the comments are in on the Department of Homeland Security's new proposed rule to extend OPT for international STEM students from 29 months to at least 36 months. The majority of the comments received by DHS support extending the program, CW notes, which is probably not surprising. Rather than choosing to "avoid the appearance of improper influence" by declining to respond to a "We the People" petition protesting a pending U.S. Federal judge's ruling that threatens to eliminate OPT STEM extensions altogether in February, the White House informed the 100k petition signers that they had the President's support, and pointed to the comment site for the proposed DHS OPT STEM rule workaround. Like the "We the People" petitioners, it's unclear whether the DHS commenters might represent corporate, university, and/or student interests, although a word cloud of the top 100 names of commenters (which accounted for 17,000+ comments) hints that international students are well-represented. By the way, in rejecting the 'emergency changes' that were enacted by DHS in 2008 to extend OPT for STEM students without public comment, Judge Ellen Huvelle said, "the 17-month duration of the STEM extension appears to have been adopted directly from the unanimous suggestions by Microsoft and similar industry groups."

theodp writes: Computerworld reports that the comments are in on the Department of Homeland Security's new proposed rule to extend OPT for international STEM students from 29 months to at least 36 months. The majority of the comments received by DHS support extending the program, CW notes, which is probably not surprising. Rather than choosing to "avoid the appearance of improper influence" by declining to respond to a "We the People" petition protesting a pending U.S. Federal judge's ruling that threatens to eliminate OPT STEM extensions altogether in February, the White House informed the 100k petition signers that they had the President's support, and pointed to the comment site for the proposed DHS OPT STEM rule workaround. Like the "We the People" petitioners, it's unclear whether the DHS commenters might represent corporate, university, and/or student interests, although a word cloud of the top 100 names of commenters (which accounted for 17,000+ comments) hints that international students are well-represented. By the way, in rejecting the 'emergency changes' that were enacted by DHS in 2008 to extend OPT for STEM students without public comment, Judge Ellen Huvelle said, "the 17-month duration of the STEM extension appears to have been adopted directly from the unanimous suggestions by Microsoft and similar industry groups."

retroworks writes: According to a recent tweet from the #OpParis account, Anonymous are delivering on their threat to hack Isis, and are now flooding all pro-Isis hastags with the grandfather of all 2007 memes — Rick Astley's "Never Gonna Give You Up" music video. Whenever a targeted Isis account tries to spread a message, the topic will instead be flooded with countless videos of Rick Astley circa 1987. Not all are praising Anonymous methods, however. While Metro UK reports that the attacks have been successful, finding and shutting down 5,500 Twitter accounts, the article also indicates that professional security agencies have seen sources they monitor shut down. Rick Astley drowns out intelligence as well as recruitment.

Taco Cowboy writes: Washington and Beijing have established an emergency 'space hotline' to reduce the risk of accidental conflict. Several international initiatives are already in train to seal a space treaty to avoid a further build-up of weapons beyond the atmosphere. However, security experts say the initiatives have little chance of success. A joint Russia-China proposal wending its way through the UN was not acceptable to the US. An EU proposal, for a "code of conduct" in space, was having diplomatic "difficulties" but was closer to Washington's position.

theodp writes: TechCrunch reports that Facebook CEO Mark Zuckerberg will take two months off from Facebook for paternity leave. Why? "Studies show that when working parents take time to be with their newborns, outcomes are better for the children and families," Zuckerberg explained in a FB post on Friday. "At Facebook we offer our U.S. employees up to 4 months of paid maternity or paternity leave which they can take throughout the year." No word on why the child will only get 50% of that time — maybe that's what the gains chart suggested as a good tradeoff — or if expectant parents who apply to send their children to Zuckerberg's new Primary School, which aims to "help children from underserved communities reach their full potential," will be expected to make a similar commitment.

An anonymous reader writes: Apple and Google have been vocal in their opposition to any kind of government regulation of cell phone encryption. BlackBerry, however, is taking a different stance, saying it specifically supports "lawful interception capabilities" for government surveillance. BlackBerry COO Marty Beard as much at a recent IT summit. He declined to explain how the interception works, but he denied the phones would contain "backdoors" and said governments would have no direct access to BlackBerry servers. The company may see this as a way to differentiate themselves from the competition.

An anonymous reader writes: Back in September, members of Google's Project Zero team found a pair of flaws in the TrueCrypt disk encryption software that could lead to a system compromise. Their discovery raised concerns that TrueCrypt was unsuitable for use in securing sensitive data. However, the Fraunhofer Institute went ahead with a full audit of TrueCrypt's code, and they found it to be more secure than most people think. They correctly point out that for an attacker to exploit the earlier vulnerabilities (and a couple more vulnerabilities they found themselves), the attacker would already need to have "far-reaching access to the system," with which they could do far worse things than exploit an obscure vulnerability.

The auditors say, "It does not seem apparent to many people that TrueCrypt is inherently not suitable to protect encrypted data against attackers who can repeatedly access the running system. This is because when a TrueCrypt volume is mounted its data is generally accessible through the file system, and with repeated access one can install key loggers etc. to get hold of the key material in many situations. Only when unmounted, and no key is kept in memory, can a TrueCrypt volume really be secure." For other uses, the software "does what it's designed for," despite its code flaws. Their detailed, 77-page report (PDF) goes into further detail.

sciencehabit writes: With 20,000 journal websites producing millions of articles — and billions of dollars — it was probably inevitable that online criminals would take notice. An investigation by Science magazine finds that an old exploit is being used on academic publishers: domain snatching and website spoofing. The trick is to find the tiny number of journals whose domain registration has lapsed at any given time. But how do they track their prey? Science correspondent and grey-hat hacker John Bohannon (the same reporter who submitted hundreds of computer-generated fake scientific papers in a journal sting) proposes a method: Scrape the journal data from Web of Science (curated by Thomson Reuters) and run WHOIS queries on their URLs to generate an automatic hijack schedule.

He found 24 journals indexed by Thomson Reuters whose domains were snatched over the past year. Most are under construction or for sale, but 2 of them now host fake journals and ask for real money. And to prove his point, Bohannon snatched a journal domain himself and Rickrolled it. (It now hosts an xkcd cartoon and a link to the real journal.) Science is providing the article describing the investigation free of charge, as well as all the data and code. You can hijack a journal yourself, if you're so inclined: An IPython Notebook shows how to scrape Web of Science and automate WHOIS queries to find a victim. Science hopes that you return the domains to the real publishers after you snatch them.

jones_supa writes: Months after the smartphone company Jolla announced its split and intent to focus on Sailfish OS licensing, its financial situation has not improved. Jolla's latest financing round has been delayed and so they have had to file for debt restructuring in Finland. As part of that, the company is temporarily laying off a big part of its personnel (Google translation of Finnish original). Jolla co-founder Antti Saarnio said, "Our operating system Sailfish OS is in great shape currently and it is commercially ready. Unfortunately the development until this point has required quite a lot of time and money (PDF). To get out of this death valley we need to move from a development phase into a growth phase. At the same time we need to adapt our cost levels to the new situation. One of the main actions is to tailor the operating system to fit the needs of different clients. We have several major and smaller potential clients who are interested in using Sailfish OS in their projects."

itwbennett writes: As previously discussed here, the World Radiocommunication Conference (WRC) met "for nearly the entire month of November, and one of the hot-button issues [was] what to do about the leap second." But, as they did at the 2012 conference, the WRC voted to postpone the decision — not just until the next WRC in 2019, but until the one after, in 2023, while the International Telecommunication Union conducts further studies into the impact of tinkering with the definition of Coordinated Universal Time.

Cochonou writes: Analysis of the black boxes of the TGV (Train à Grande Vitesse) which derailed on Saturday revealed that the accident resulted from excessive speed and late braking. The test train entered a 945m-radius curve at a speed of 265 km/h, far over the maximum speed of 176 km/h. The French national railway company ruled out any other cause, such as mechanical failure or track mishap.

During test runs, a number of security features are disabled, in particular parts of the TVM system, which would have prevented any overspeed during normal service. This leaves the train speed under the sole responsibility of the driver.

The accident, which killed 11 people, occurred on the last run of the scheduled trials on the new high-speed line between Paris and Strasbourg. As more details on the accident surface, it becomes evident that this last run was performed in a festive spirit, with relatives (including children) of the employees on board, and seven people present in the train cab instead of train. This casts a shadow on the security procedures of the French national railway company: it appears that the high-speed train technology is considered so safe that the risks inherent to trials runs were somehow neglected. The two drivers and the traction inspector have been suspended pending possible criminal charges. Other changes in the management structure will probably follow.

chicksdaddy writes: There's such a fine line between clever and criminal. That's the unmistakable subtext of the latest FireEye report on a new "APT" style campaign that's using methods and tools that are pretty much indistinguishable from those used by media websites and online advertisers. The difference? This time the information gathered from individuals is being used to soften up specific individuals with links to international diplomacy, the Russian government, and the energy sector.

The company released a report this week that presented evidence of a widespread campaign (PDF) that combines so-called "watering hole" web sites with a tracking script dubbed "WITCHCOVEN" and Samy Kamkar's Evercookie, the super persistent web tracking cookie. The tools are used to assemble detailed profiles on specific users including the kind of computer they use, the applications and web browsers they have installed, and what web sites they visit.

While the aims of those behind the campaign aren't known, FireEye said the use of compromised web sites and surreptitious tracking scripts doesn't bode well. "While many sites engage in profiling and tracking for legitimate purposes, those activities are typically conducted using normal third-party browser-based cookies and commercial ad services and analytics tools," FireEye wrote in its report. "In this case, while the individuals behind the activity used publicly available tools, those tools had very specific purposes....This goes beyond 'normal' web analytics," the company said.

An anonymous reader writes: An exploit vendor published a price list for the zero-day bugs it's willing to buy. The highest paid bugs are for remote jailbreaks for iOS. Second is Android and Windows Phone. Third there are remote code execution bugs for Chrome, Flash, and Adobe's PDF Reader. This is the same company that just paid $1 million to a hacker for the first iOS9 jailbreak.

An anonymous reader writes: Scientists at Georgia Tech are developing silent speech systems that can enable fast and hands-free communication with wearable devices, controlled by the user's tongue and ears. As seen with open source project Eyedrivomatic, the researchers want to apply the technology to provide a device control solution for people who are disabled. They suggest it could also be used by those working in a loud environment in need of a quiet way to communicate with their wearable devices. The prototype involves a combination of tongue control with earphone-like pieces each installed with proximity sensors to map the changing shape of the ear canal. Every word manipulates the canal in a different way, allowing for accurate recognition.

An anonymous reader writes: In a speech to the 6th Annual Financial Crimes and Cybersecurity Symposium, New York County District Attorney for Manhattan Cyrus Vance Jr. has appealed to the tech community — specifically citing Google and Apple — to "do the right thing" and end zero-knowledge encryption in mobile operating systems. Vance Jr. praised FBI director James Comey for his 'outspoken' and 'fearless' advocacy against zero knowledge encryption, and uses the recent attacks on Paris as further justification for returning encryption keys to the cloud, so that communications providers can once again comply with court orders.

New submitter webdesignerdudes writes with news that Carnegie Mellon University now implies it may have been subpoenaed to give up its anonymity-stripping technique, and that it was not paid $1 million by the FBI for doing so. Wired reports: "In a terse statement Wednesday, Carnegie Mellon wrote that its Software Engineering Institute hadn’t received any direct payment for its Tor research from the FBI or any other government funder. But it instead implied that the research may have been accessed by law enforcement through the use of a subpoena. 'In the course of its work, the university from time to time is served with subpoenas requesting information about research it has performed,' the statement reads. 'The university abides by the rule of law, complies with lawfully issued subpoenas and receives no funding for its compliance.'"

An anonymous reader writes: A U.S. court has ruled that Facebook can block any content posted to its site without explanation, after a Sikh group legally challenged the company for taking its page offline. U.S. Northern District of California Judge Lucy Koh ruled that the U.S. based rights group's encouragement of religious discrimination is illegal under the Communications Decency Act, which protects 'interactive computer services' providers by preventing courts from treating them as the publishers of the speech created by their users.

A few weeks ago you had the chance to ask Alan Donovan and Brian Kernighan about programming and their upcoming book, The Go Programming Language (available as an eBook Friday the 20th). Below you'll find their answers to your questions.
Donovan/Kernighan: Thanks to all the Slashdot readers who posed such thoughtful and provoking questions; we’re sorry that space limitations prevent us from answering more of them. Neither of us is part of the core Go team, so we can’t give authoritative answers for some of the questions that deal with future plans for the language or tools.



OpenGL and LockOSThread
by Anonymous Coward

Hi, I've stopped using Go when I saw the hacky stuff I need to do to get libraries like OpenGL to behave correctly. Are there any plans to fix this?

Donovan: The crux of the problem is that many C libraries such as OpenGL implicitly use the identity of the calling thread to store context information. In some cases, this is because the API was designed before multithreading was the norm, when global variables could be safely used to store context information. In other cases, this design is merely a matter of convenience, since it saves passing an extra parameter to every call.

The designers of Go rejected thread-local storage (TLS) because of its tendency to cause "action at a distance": it makes programs slightly shorter but much harder to read. (See p.282 of our book.) Since the lack of TLS in Go is considered a feature, there are no plans to "fix" it, but it may be possible to make TLS-heavy C libraries work better with Go. My colleague David Crawshaw just gave a talk at DotGo 2015 in Paris about this very issue as it concerns OpenGL.



Why was package versioning left out?
by genocitizen

Why was package versioning left out? And are you guys still fond of this decision? As I use Go more and more I see this to be the weak spot; software has been around for many decades, and we all know that it is continuous evolution. Go's import system does not allow specifying or hinting a version, nor does the `go get` command (although it supports major VCSes), and that's how hacks like gopkg.in have been conceived. And it's not like package managers for other languages haven't already solved in a more or less elegant way the problem already...

Donovan: Go is designed for large programs, and versioning is notoriously hard in that context. About ten years ago, there was an experiment to introduce versioning into Google's build system (which was designed by Rob Pike and others). It failed because of the "diamond dependency" problem, which I'm sure many of you have heard of---it's the classic problem of version numbering. Consider four packages A, B, C, D, where A depends on B and C, and B and C both depend on D. This is a diamond dependency. If the author of B decides that only version 1 of D will do, and the author of C requires at least version 2 of D, you have an impossible set of constraints. If you're lucky, you might be able to build A with both the old and the new versions of D, but in general this doesn't work. Since that experiment, Google hasn't touched automated versioning again. The way we do versioning is simple but manual: we treat each version of a package as a separate entity with a distinct name (for example, "D1", "D2"), and work hard to limit the number of versions of each package---ideally to one. That’s why versioning hasn’t been a priority for us at Google. However, this August, the prolific Dave Cheney proposed a scheme for Go package version numbering, so perhaps we’ll see development of this idea in the near future.



Error Handling in Go
by JPyObjC Dude

Go language differs from many other languages in how it handles Errors. Can you summarize the benefits and drawbacks to the Go language error handling approach when compared to Java for large scale applications.

Kernighan: In general, Go strongly encourages being explicit about errors. The standard library functions almost all return an error status along with the function value and your code must do something with that error status; you can’t just ignore errors. In this respect, Go is similar to Java, where you have to either catch or throw errors; you can't just do nothing. This is a nuisance in small one-off programs, but it's a life-saver in larger ones. So both languages are doing "the right thing".

Where they differ is primarily in the use of exceptions. Go does not have an exception mechanism, so there's no direct way to handle all the errors in a single block as there is with Java's try/catch, though the defer statement can help to consolidate error handling. This means that Java code might be somewhat more compact (in this respect only!), but perhaps at the price of not providing as much precise information about what went wrong.

Our Go book spends quite a bit of time on the topic of error handling, and in most of the examples we've tried to show how to deal with errors properly rather than ignoring them, even though this can make the example programs a bit longer.

Donovan: I’ve written a fair amount of Java code and, in my experience, good error handling is about equally hard in both languages. However, Go reduces the syntactic cost of augmenting an error message as you propagate it, because you have to write more or less the same code whether or not you augment the error with new information. Java, by contrast, makes it so tempting to avoid writing try/catch/throw blocks that, too often, programmers propagate exceptions without thinking. It’s interesting that you can never divine such subtle pragmatic differences between languages merely from reading their specs.



Usage
by Behrooz Amoozad

For what scenarios and projects do You recommend it and for which you recommend against using Go?

Kernighan: Go is a very good general purpose language, and we would have no hesitation about using it for any new task. It seems especially well-suited for programs that involve networking or other concurrent tasks; goroutines are very convenient and efficient, and there is also good support for more traditional shared-memory approaches. Empirically, people who write new networking code tend to like Go. I personally would use it for anything where in the past I might have used C or Java or C++.

Go has also gotten some traction as a scripting language, a potential replacement for large Python scripts. This may seem a bit surprising, since scripting languages are very convenient for cobbling something together in a hurry. The problems come later, when the cobbled-together code starts to crash with type errors or other faults that could have been detected much earlier with a statically typed language. Go won't replace Awk for one-liners, nor is it likely to replace Python or Perl or Ruby for 10- or even 100-line programs, but after a while, the combination of type safety and efficiency is worth the somewhat higher up-front cost.



Why should I use Go?
by aaaaaaargh!

For someone like me who likes garbage collection, multiple dispatch, and extreme abstraction capabilities in high level languages like Common Lisp, and safety, compile-time error detection, readability, and speed in low level languages like Ada or Haskell, what are the benefits of using Go in comparison to these two different types of languages? What new useful features does Go bring?

Kernighan: Ada and (especially) Haskell don't seem like low-level languages and Haskell is inscrutable to newcomers, but those are quibbles. Go has everything you mention in both of your lists of desirable attributes (depending perhaps on what you mean by "extreme abstraction"), but it also provides concurrency in a convenient and efficient form; that's a big win for some kinds of applications.

Donovan: Go seems very plain when compared with languages like Common Lisp, C++, Java, or Python. It has no macros, no templates, no classloaders, no metaclasses. Features such as these are often the first things I, being a PL geek, rush to play with when writing toy programs in a new language, but they are not usually the things that matter the most when programming in the large. I can recall without fondness many days spent debugging overly clever uses of the C++ STL or non-hygienic Lisp macros or the Python __call__ method. The design of Go recognizes that simplicity, homogeneity, and familiarity of a large code base are more valuable to the team as a whole than the benefits to each individual of using their favorite (obscure) language features for each task.



Go’s potential
by Qbertino

What serious long-term real-world potential do you see for Go? How do you see the potential of Go replacing existing open source webstacks such as Apache and PHP, Python or Ruby? Was Go built with a technology update of existing approaches in mind? How feasible is it in your opinion to try and replace the existing complex stacks with pure Go runtimes?

Kernighan: The reason it took God only six days to create the universe is that he didn't have to deal with the embedded base. Realistically, no programming language is likely to completely replace major existing code bases; it's just too much work. Go is often a good choice for new projects or where one is planning to rewrite an existing system anyway, and it can provide a good interface to existing code through foreign function interfaces, particularly to C libraries. But wholesale replacements seem unlikely.

Donovan: I agree with Brian that Go isn’t likely to eliminate any other language or library, but that is not its goal. Go provides an attractive alternative. A good part of Go’s popularity comes from the ease with which you can build useful web servers and other distributed systems using little more than the components of the standard library. The library was produced recently, and thus with the benefit of hindsight, by systems experts, and it often makes third-party servers like Apache or frameworks like Rails unnecessary for the first steps---although of course similar frameworks do exist for Go too.



Official Go IDE?
by Qbertino

Is there an official cross-platform Go IDE in the works? Experience shows that adoption is accelerated by offering a solid toolkit that is easy to pick up and get started with - such as the formidable Android Studio IDE Google offers to developers. Are there any plans similar to this for Go? I would like to see it take the place of C++ in the development of performant end-user applications with GUIs - are there any officially sanctioned projects that aim to provide a serious GUI toolkit and stack based on Go?

Donovan: We agree that good IDE support is important for attracting new users to Go, though my colleagues and I came to this realization rather slowly as, perhaps unsurprisingly, most of us use very traditional editors like Vim, Emacs, SublimeText, and even Acme, which are not what most people think of as IDEs. This year, JetBrains have created a team to develop a Go plugin for IntelliJ so that IntelliJ IDEA users can build, test, debug, and refactor programs written in Go as easily as in any other language.

As for cross-platform GUI toolkits, there’s no canonical solution yet, though there have been some interesting experiments such as GXUI and Shiny.



Should Go replace Java?
by Martinjnh

Should Go replace Java as development platform/language for android?

Donovan: The Go team at Google is working hard to make it possible to use Go to write mobile applications on Android and iOS; see Hana Kim's GopherCon 2015 talk, for example. But for now this is just an experiment and, as Brian wrote above, it's not Go's goal to replace major existing code bases.



Safe Performance
by snadrus

Reimplementing the Gnu+Linux toolchain in GoLang could provide safety that decades of eyes on C could not (thinking about the recent BASH bugs & OpenSSL overruns). Even a small portion would add security to Android. Performance is close & 1.5's library loading should keep executables light. Is there interest in rebuilding Linux's base userland?

Donovan: Go is a good fit for these kinds of tools because the language has good runtime safety and a straightforward system call interface, and it compiles to static executables that start quickly and run efficiently. Portability might be a concern: while Go programs themselves are highly portable, Go's runtime currently targets only a handful of major architectures, far fewer than gcc and glibc support. I'm not aware of any rebuilding projects.



tEoPS
by M. D. Nahas

There many books on "how to program" but few on "how to program well". Brian, your book "The Elements of Programming Style" is a wonderful and a classic, but my students have a hard time reading the examples (Fortran 66 and PL/I). Is there any hope for an update? Is there any similar modern-language book that you recommend?
Michael Nahas (son of Joe Nahas)

P.S. I totally stole as much as I could from you when writing my tutorial for the language Coq. Sorry/Thanks!

Kernighan: The languages that Bill Plauger and I used in "The Elements of Programming Style" are either long gone (PL/1) or very much evolved (Fortran), so the code is indeed hard to read today, though most of the rules of good style are still valid. Bill and I once started a version in C but didn't get very far. One problem was that the original book relied almost exclusively on code fragments from textbooks. Modern textbooks are far better than they were 40 years ago; most code is syntactically correct and mostly works. So it was hard for us to find textbook examples to illustrate our rules. Another problem is that real programs are a lot bigger and more complicated than they were, and it's hard to find excerpts that would work in a book. So an update of EOPS isn't likely, much as it would be nice to have one.

As to other books, Josh Bloch and Scott Meyers have written excellent books on how to write good Java and C++ respectively. More broadly, I have always liked Steve McConnell's "Code Complete", and I take a fresh look at Fred Brooks's classic "The Mythical Man Month" every few years. There are plenty of other books about how to program well in various languages and environments; it's well worth reading some of them to see how other authors approach the topic.



C's current place in the world
by MountainLogic

As the legend has it, C was created to support operating system development. As time has gone by C++ has slipped into OS development on larger platforms. It seems that much of the current core use of mother C is centering on embedded processors (all the way down to 8 bit micros with 256 bytes of RAM) and drivers in larger systems. For current use what design choices in C do you see as wise and what would you change given the current usage of C. (P.S. Thank you for co-authoring the most wonderful, perfect, clear and concise technology document ever.)

Kernighan: Bear in mind that C is Dennis Ritchie's work; I can only claim to have written a book with him. Dennis was a great writer as well as a great programmer and language designer, and the book was very much a joint effort.

That said, C is indeed still popular for embedded systems and drivers, where efficiency and the ability to get right down to the hardware matters. I think that changing C today would be counter-productive; one of C's strengths is that it is quite stable. Indeed, I suspect (though without having data to prove it) that except for minor features like // comments most programmers use C as it was after the 1988 ISO standard; the C99 and C11 standards did not change much of programming practice.



Motivation for writing the book
by jameshwang

I was curious out of all the Golang books that currently exists, how does this book, "The Go Programming Language," differ from the rest and fit into the landscape of Golang? I've read some of the other books like "Go Programming Blueprints" and "Go in Action." Specifically with "Go in Action," the table of contents seems similar to your book.

I guess what was your motivation to write this book and how will it be different from all the rest? Brian, are you hoping this book becomes what "The C Programming Language" became but for Golang?

Kernighan: As it says in Ecclesiastes 12:12, "of making many books there is no end", which suggests that your question about whether another book is needed is an old one.

When one writes a book, there is always the belief or at least hope that one can do it "better" than others, not in any negative sense but just that new organization, examples, explanations, and writing will all combine in a way that readers will find helpful. Certainly that has been what Alan and I have tried to achieve with "The Go Programming Language". It would of course be wonderful if the Go book was as helpful to programmers as the C book seems to have been.

I have looked at only a couple of the many Go books that have already been written (and not the ones you mention), and in fact Alan and I quite consciously stopped even looking at titles once we started thinking about our own book, since we didn't want to inadvertently borrow from other authors.

Donovan: For me, one motivation was to write the book I wished I had been able to read when I started learning Go---a comprehensive book that covers not just the language and its library, but one that motivates the design choices, explores advanced features, flags the pitfalls, and conveys the style and aesthetics of the language.

Although comparisons with K&R are inevitable (and flattering), I don't think any technical book can ever be as influential as that one. It was not just a tutorial for the most important language of a (pre-Internet) generation, but also its reference manual and de facto spec. Today, of course, you can browse The Go Tour, Godoc, and The Go Language Specification from your cellphone. Libraries are larger and tooling is more important. A modern book must have a different emphasis. We've tried to show how all the parts fit together.

An anonymous reader writes: Less than two weeks after we heard about the "robotic dragonfly" project failing, the BBC brings news that an even bigger crowd-funded drone project has given up development as well. The ZANO mini-drone raised a whopping £2.3 million on Kickstarter ($3.5 million), after asking for a mere £125,000 to get off the ground. They were supposed to start delivering drones in June, and a few hundred of them slowly trickled out. In October, they posted a long update detailing their plans for shipping the other ~15,000 drones they had been paid for. Their latest update, posted today, says, "Having explored all options known to us, and after seeking professional advice, we have made the difficult decision to pursue a creditors' voluntary liquidation." This will leave thousands of backers without a drone, despite paying £140 or more apiece.

Lucas123 writes: German carmaker Daimler AG is building large battery storage systems for industrial use from the used lithium-ion batteries of its all-electric and hybrid vehicles. The first of Daimler's "2nd use battery storage units" will consist of 1,000 smart electric drive vehicle batteries and have a 13MWh of capacity. It is expected to be connected to the electrical grid in Lünen, Germany early next year. All of Daimler's battery storage units are currently planned to be greater than a megawatt in capacity, meaning they'll only be for commercial, not residential use, but the company said it does expect those batteries to be cost competitive with the ones Tesla announced earlier this year.

An anonymous reader writes: Back in March, Google announced the Chromebit, a small computer crammed into an HDMI stick that runs Chrome OS. The device, built by Asus, has now launched for $85. It weighs 75 grams, runs on a Rockchip ARM processor, and includes a USB port. It has 16GB of storage and 2GB of RAM, and connects via 802.11ac Wi-Fi and Bluetooth 4.0. According to Tech Crunch, the Chromebit is not particularly fast, but it's usable for basic tasks. "As long as the work only involves web apps (or maybe a remote connection to a more fully-featured machine), the Chromebit is up for the job and can turn any screen into a usable desktop."

theodp writes: A year after it paid $2.5 billion to buy Minecraft, Microsoft has announced a partnership with Code.org that makes a Minecraft-themed introduction to programming a signature tutorial of this year's Hour of Code, which hopes to reach 200 million schoolchildren next month in what the Microsoft-funded nonprofit is billing as the largest learning event in history. "A core part of our mission to empower every person on the planet is equipping youth with computational thinking and problem-solving skills to succeed in an increasingly digital world," said Microsoft CEO Satya Nadella in a press release, which also notes that "Microsoft is gifting Windows Store credit to every educator who organizes an Hour of Code event worldwide." Of the Minecraft tutorial, Code.org CEO Hadi Partovi gushed, "Compared to what you would otherwise be doing for school, this is, like, the best thing ever."

MarkWhittington writes: Recently, NASA Administrator Charles Bolden stated that NASA would be "doomed" if the next president were to deviate in any way from the current Journey to Mars program. Space journalist and founder of the America Space website Jim Hillhouse took exception to Bolden's assertion in a letter to the aerospace newspaper Space News. In the process, Hillhouse provides a good summary of how space policy has evolved during the past five years under the Obama administration.

An anonymous reader writes: Less than three days after the attacks in Paris, UK prime minister David Cameron has suggested that the process of review for the controversial Draft Investigatory Powers Bill should be accelerated. The controversial proposal, which would require British ISPs to retain a subset of a user's internet history for a year and in effect outlaw zero-knowledge encryption in the UK, was intended for parliamentary review and ratification by the end of 2016, but at the weekend ex-terrorist watchdog Lord Carlile was in the vanguard of demands to speed the bill into law by the end of this year, implicitly criticizing ex-NSA whistleblower Edward Snowden for having 'shown terrorists ways to hide their electronic footprints'.

An anonymous reader writes: Following last week's announcement of the Jetson TX1 development board, NVIDIA is now allowing independent reports of performance for their $599 USD 64-bit ARM development board. Linux results published by Phoronix show very strong performance for the Jetson TX1 when looking at the Cortex-A57 speed relative to the Tegra K1 and older Tegra SoCs along with other ARM hardware like Calxeda and Raspberry Pi. The Jetson TX1 was generally multiple times faster than ARM hardware a few years old. The graphics performance was twice as fast as the year-old Jetson TK1 thanks to the Maxwell GPU. Compared to x86 hardware, in CPU-bound tasks the performance is comparable to an AMD Sempron/Phenom except when utilizing GPGPU computing where it's then faster than Intel Skylake and Xeon processors. The Jetson TX1 had a peak power consumption of 16 Watts and an average power use of under 10 Watts.

Mark Wilson writes with an update to an earlier report that the wording of new FCC regulations could mean that it would be illegal to modfiy the software running on wireless routers by installing alternative firmwares. Instead, The commission has now acknowledged that there was more than a little confusion from people who believed that manufacturers would be encouraged to prevent router modifications. The FCC wants to make it clear that most router hacking is fine and will remain fine. With a few exceptions, that is. In a blog post entitled Clearing the Air on Wi-Fi Software Updates, Julius Knapp from the FCC tries to clear up any misunderstandings that may exist.

_Sharp'r_ writes: Want to fly a jetpack? Join the fire department in Dubai. In a skyscraper filled city where cops drive Ferraris and Lamborghinis, it was actually cheaper to buy twenty $150K jetpacks (plus two simulators) for fire rescue rather than find 2700 ft ladders. Slashdot has had stories about these coming for five years. A VR-headset based jetpack flight-simulator for the masses would be fun, too, even better if the object were to put out fires in skyscrapers..

_Sharp'r_ writes: Want to fly a jetpack? Join the fire department in Dubai. In a skyscraper filled city where cops drive Ferraris and Lamborghinis, it was actually cheaper to buy twenty $150K jetpacks (plus two simulators) for fire rescue rather than find 2700 ft ladders. Slashdot has had stories about these coming for five years. A VR-headset based jetpack flight-simulator for the masses would be fun, too, even better if the object were to put out fires in skyscrapers..

_Sharp'r_ writes: Want to fly a jetpack? Join the fire department in Dubai. In a skyscraper filled city where cops drive Ferraris and Lamborghinis, it was actually cheaper to buy twenty $150K jetpacks (plus two simulators) for fire rescue rather than find 2700 ft ladders. Slashdot has had stories about these coming for five years. A VR-headset based jetpack flight-simulator for the masses would be fun, too, even better if the object were to put out fires in skyscrapers..

_Sharp'r_ writes: Want to fly a jetpack? Join the fire department in Dubai. In a skyscraper filled city where cops drive Ferraris and Lamborghinis, it was actually cheaper to buy twenty $150K jetpacks (plus two simulators) for fire rescue rather than find 2700 ft ladders. Slashdot has had stories about these coming for five years. A VR-headset based jetpack flight-simulator for the masses would be fun, too, even better if the object were to put out fires in skyscrapers..

An anonymous reader writes: Microsoft has this week made its Distributed Machine Learning Toolkit (DMTK) openly available to the developer community. Researchers at the Microsoft Asia lab have released the toolkit on GitHub under an MIT (Massachusetts Institute of Technology) license, to encourage the use of multiple computers in parallel to solve complex problems. Its design builds on a parameter server-based programming framework, which allows big data machine learning tasks to be easily scaled, and flexibly and efficiently executed. The toolkit also contains two distributed machine learning algorithms, which can be used to train the world's fastest and largest topic model, as well as the largest word-embedding model.
This is a welcome move, especially after Google did something broadly similar.

An anonymous reader writes: In June, Mozilla integrated Pocket into Firefox, garnering a mixed response from the browser's community. This week, VentureBeat stumbled upon a Bugzilla ticket (bug 1215694) to "move Pocket to a built-in add-on" and immediately reached out to the company. "There are currently no plans to offer a version of Firefox that doesn't include Pocket," said Dave Camp, Firefox's director of engineering.

An anonymous reader writes: Multiple sources are reporting that at least 18 people are dead across three shootings in central Paris. The Associated Press reports as many as 26, as of this writing. Some victims were at a restaurant, while others were at a nearby theater. Early reports indicate there may be a hostage situation with more people at that theater. Police have also confirmed an explosion at a bar near Stade de France stadium, where a football match was underway between France and Germany. There are reports of other explosions heard at the stadium as well, but no details yet. "The attack comes as France has heightened security measures ahead of a major global climate conference that starts in two weeks, out of fear of violent protests and potential terrorist attacks." The attacks occurred not far from where the Charlie Hebdo shooting happened in January. "French news media reported that Kalashnikov rifles had been involved in the shootings — a favored weapon of militants who have attacked targets in France — and that many rounds had been fired."

JoSch1337 writes: The last time Star Trek: Renegades was on Slashdot was in 2013. It's an independent, canon-faithful Trek series with high production values and some of the actors from the TV shows. Since their original campaign, the team has produced an amazing pilot episode 1 and is now gathering support to produce episode 2, and even episode 3 if they reach their stretch goal. From the Kickstarter page: "Star Trek Renegades is an independent, fan-funded and supported Internet television series, executive produced by Sky Conway. Renegades features a combination of familiar Star Trek character and actors, plus a collection of hot, new rising actors. Set a decade after Voyager's return from Delta Quadrant, ST: Renegades focuses on a team of fugitives, who are on the run from the Federation while secretly working for the head of Starfleet intelligence, Admiral Pavel Chekov (Walter Koenig) and Tuvok (Tim Russ, who also directs) to root out internal corruption within the Federation as well as external threats."

Meet Tom Moser. And here's another NASA oral history interview with him. And we interviewed him last week ourselves. Tom has been involved, one way or another, as engineer or manager, with every American manned space flight program since 1963. Now, among other things, he's thinking of ways multiple governments and private companies can share their resources to make future space exploration feasible, which may not be engineering -- but in many cases politics can be more important than designing and building the hardware, which is why it's worth learning about.

And thinking of hardware, do you remember the conspiracy people talking about how the U.S. flag on the moon was faked because there's no way it could wave in the breeze without an atmosphere? Moser gives us the inside scoop on that: it was an engineering screwup, and at least partly his fault. Whoops!