Slashdot Mirror

theodp writes: K–12 computer science and information technology teachers head to Grapevine, TX this week for the 2015 CSTA Conference. A glance at the draft agenda shows a remarkable number of presenters employed by or tied to two-year-old Code.org, the tech-bankrolled nonprofit that coincidentally sprung up together with Mark Zuckerberg's FWD.us PAC just months after Microsoft called for the creation of a national K-12 CS and tech immigration crisis to advance its agenda. Code.org's shaping of the nation's CS K-12 education began with the release of its tech-billionaire and celebrity-studded, slickly-produced What Most Schools Don't Teach video, which went viral on YouTube after being promoted by politicians, Facebook, Google, and a Microsoft-sponsored theatrical release, sparking a groundswell of interest in expanding K-12 CS education, succeeding where a similarly-themed-and-messaged but decidedly-amateurish National Science Foundation video of real-but-little-known computer scientists failed just months earlier (YouTube Doubler comparison). (More, below.) "The time is ripe to seize that opportunity," declared the ACM's and Code.org's Cameron Wilson, describing how Code.org was forming a coalition with Microsoft, Google, NSF, NCWIT, ACM, CSTA, and others with the goal of changing policy to support CS education. Computer science educators literally applauded Code.org's efforts, which have led to funding of a number of new K-12 CS projects, and may soon make No Child Left Behind Act funding available for K-12 CS education. Despite promises of transparency, details of the relationship of the National Science Foundation, now-NSF partner Code.org, the White House, ACM, NCWIT, College Board, and Code.org's corporate and billionaire backers — including Microsoft, Google, and Facebook — have never really been explained.

theodp writes: K–12 computer science and information technology teachers head to Grapevine, TX this week for the 2015 CSTA Conference. A glance at the draft agenda shows a remarkable number of presenters employed by or tied to two-year-old Code.org, the tech-bankrolled nonprofit that coincidentally sprung up together with Mark Zuckerberg's FWD.us PAC just months after Microsoft called for the creation of a national K-12 CS and tech immigration crisis to advance its agenda. Code.org's shaping of the nation's CS K-12 education began with the release of its tech-billionaire and celebrity-studded, slickly-produced What Most Schools Don't Teach video, which went viral on YouTube after being promoted by politicians, Facebook, Google, and a Microsoft-sponsored theatrical release, sparking a groundswell of interest in expanding K-12 CS education, succeeding where a similarly-themed-and-messaged but decidedly-amateurish National Science Foundation video of real-but-little-known computer scientists failed just months earlier (YouTube Doubler comparison). (More, below.) "The time is ripe to seize that opportunity," declared the ACM's and Code.org's Cameron Wilson, describing how Code.org was forming a coalition with Microsoft, Google, NSF, NCWIT, ACM, CSTA, and others with the goal of changing policy to support CS education. Computer science educators literally applauded Code.org's efforts, which have led to funding of a number of new K-12 CS projects, and may soon make No Child Left Behind Act funding available for K-12 CS education. Despite promises of transparency, details of the relationship of the National Science Foundation, now-NSF partner Code.org, the White House, ACM, NCWIT, College Board, and Code.org's corporate and billionaire backers — including Microsoft, Google, and Facebook — have never really been explained.

theodp writes: K–12 computer science and information technology teachers head to Grapevine, TX this week for the 2015 CSTA Conference. A glance at the draft agenda shows a remarkable number of presenters employed by or tied to two-year-old Code.org, the tech-bankrolled nonprofit that coincidentally sprung up together with Mark Zuckerberg's FWD.us PAC just months after Microsoft called for the creation of a national K-12 CS and tech immigration crisis to advance its agenda. Code.org's shaping of the nation's CS K-12 education began with the release of its tech-billionaire and celebrity-studded, slickly-produced What Most Schools Don't Teach video, which went viral on YouTube after being promoted by politicians, Facebook, Google, and a Microsoft-sponsored theatrical release, sparking a groundswell of interest in expanding K-12 CS education, succeeding where a similarly-themed-and-messaged but decidedly-amateurish National Science Foundation video of real-but-little-known computer scientists failed just months earlier (YouTube Doubler comparison). (More, below.) "The time is ripe to seize that opportunity," declared the ACM's and Code.org's Cameron Wilson, describing how Code.org was forming a coalition with Microsoft, Google, NSF, NCWIT, ACM, CSTA, and others with the goal of changing policy to support CS education. Computer science educators literally applauded Code.org's efforts, which have led to funding of a number of new K-12 CS projects, and may soon make No Child Left Behind Act funding available for K-12 CS education. Despite promises of transparency, details of the relationship of the National Science Foundation, now-NSF partner Code.org, the White House, ACM, NCWIT, College Board, and Code.org's corporate and billionaire backers — including Microsoft, Google, and Facebook — have never really been explained.

theodp writes: K–12 computer science and information technology teachers head to Grapevine, TX this week for the 2015 CSTA Conference. A glance at the draft agenda shows a remarkable number of presenters employed by or tied to two-year-old Code.org, the tech-bankrolled nonprofit that coincidentally sprung up together with Mark Zuckerberg's FWD.us PAC just months after Microsoft called for the creation of a national K-12 CS and tech immigration crisis to advance its agenda. Code.org's shaping of the nation's CS K-12 education began with the release of its tech-billionaire and celebrity-studded, slickly-produced What Most Schools Don't Teach video, which went viral on YouTube after being promoted by politicians, Facebook, Google, and a Microsoft-sponsored theatrical release, sparking a groundswell of interest in expanding K-12 CS education, succeeding where a similarly-themed-and-messaged but decidedly-amateurish National Science Foundation video of real-but-little-known computer scientists failed just months earlier (YouTube Doubler comparison). (More, below.) "The time is ripe to seize that opportunity," declared the ACM's and Code.org's Cameron Wilson, describing how Code.org was forming a coalition with Microsoft, Google, NSF, NCWIT, ACM, CSTA, and others with the goal of changing policy to support CS education. Computer science educators literally applauded Code.org's efforts, which have led to funding of a number of new K-12 CS projects, and may soon make No Child Left Behind Act funding available for K-12 CS education. Despite promises of transparency, details of the relationship of the National Science Foundation, now-NSF partner Code.org, the White House, ACM, NCWIT, College Board, and Code.org's corporate and billionaire backers — including Microsoft, Google, and Facebook — have never really been explained.

Deathspawner writes: To say that it's been a tumultuous month for reddit is an understatement. While multiple events have occurred in recent months that have caused an uproar, such as the banning of popular "hate" subreddits, nothing impacted the site quite like the out-of-nowhere firing of "Ask Me Anything" admin Victoria Taylor last week. Following that, other minor revelations surfaced, and finally, this past Monday, reddit CEO Ellen Pao came out from hiding to issue an apology. While her message instilled a bit more confidence in the future of the site, it wasn't enough. Today, it's been announced that Ellen Pao has left the company she joined last fall, and will be superseded by someone who knows what he's getting into: founder Steve Huffman.

An anonymous reader writes: The recent OpenSSL vulnerability got the internet all hyped up for a security issue that, in the end, turned out to have a very limited impact. This is good news of course, we don't need another Heartbleed. But it raises the question: should security advisories be more clear on the impact and possible ramifications of such a vulnerability, to avoid unnecessary panic? Developer Mattias Geniar says, "The Heartbleed vulnerability got the same severity as the one from last night. Heartbleed was a disaster, CVE-2015-1793 will probably go by unnoticed. ... Why? Because CVE-2015-1793, no matter how dangerous it was in theory, concerned code that only a very small portion of the OpenSSL users were using. But pretty much every major technology site jumped on the OpenSSL advisory. ... The OpenSSL team is in a particularly tricky situation, though. On the one hand, their advisories are meant to warn people without giving away the real vulnerability. It's a warning sign, so everyone can keep resources at hand for quick patching, should it be needed. At the same time, they need to warn their users of the actual severity.

An anonymous reader writes: On June 28th, a SpaceX Falcon 9 rocket exploded just over two minutes into its attempt to reach the International Space Station. It was a contracted mission from NASA to resupply the astronauts living there. Today, NASA associate administrator William Gerstenmaier said the price tag to taxpayers for that failed launch is $110 million. SpaceX is leading the investigation into the cause of the failure, and NASA officials faced tough questions about whether private companies should be allowed to direct investigations into their own failed launches. A similar inquiry is underway at Orbital ATK. NASA inspector general Paul Martin said his office is looking into the matter. Gerstenmaier added that NASA is thinking about making these companies take out insurance policies that would cover the cost to taxpayers in the event of another failure.

An anonymous reader writes: I've carried a smart phone for several years, but for much of that time it's been (and I suspect this is true for anyone for whom money is an object) kept pretty dumb — at least for anything more data-intensive than Twitter and the occasional map checking. I've been using more of the smart features lately (Google Drive and Keep are seductive.) Since the data package can be expensive, though, and even though data is cheaper than it used to be, that means I don't check Facebook often, or upload pictures to friends by email, unless I'm in Wi-Fi zone (like home, or a coffee shop, etc). Even so, it seems I'm using more data than I realized, and I'd like to keep it under the 2GB allotment I'm paying for. I used to think half a gig was generous, but now I'm getting close to that 2GB I've paid for, most months.

This makes me a little paranoid, which leads to my first question: How accurate are carriers' own internal tools for measuring use, and do you recommend any third-party apps for keeping track of data use? Ideally, I'd like a detailed breakdown by app, over time: I don't think I'm at risk for data-stealing malware on my phone (the apps I use are either built-in, or plain-vanilla ones from Google's store, like Instagram, Twitter's official client, etc.), but of course really well-crafted malware would be tough to guard against or to spot. And even if they can be defeated, more and more sites (Facebook, for one) now play video just because I've rolled over a thumbnail. Read on for second part of the question. Second, what tools or tips can you offer for doling out my data more carefully? Can you name some apps that actually do a good job of minimizing data transfer, or managing apps' data use to at least to look harder for a Wi-Fi connection? I know Opera Mobile uses compression to minimize data transfer, and I'm sure it's possible to turn off many of the annoying sound-bearing ads of the world.

In short, what are some ways to get the most use from my limited data allotment, and be mindful about the ways I *do* spend it? This will be even more important if, as I hope, my next laptop has built-in data service. Web sites are I suspect only going to want to use more of my bandwidth in the future, even if it does get slightly cheaper. Nowadays, browsers have made it a chore even to do things like turn off images, never mind dancing, animated ads. Turning off images used to save my 56k dialup bandwidth, and the concept here is the same. (Google doesn't exactly make turning off images in Chrome friendly enough for my mom.)

(I'm using an Android phone, but I'm sure there are iPhone users who'd like to know the answers to parallel question for Apple gear. I can't be the only one who finds cavalier bandwidth sucking by web pages to be a blood-pressure-raising offense, when I'm paying for each expensive byte. There are lots of places where even wired connections are expensive, but at least with a wired network connection things like Squid can be deployed.)

Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

An anonymous reader writes: I've carried a smart phone for several years, but for much of that time it's been (and I suspect this is true for anyone for whom money is an object) kept pretty dumb — at least for anything more data-intensive than Twitter and the occasional map checking. I've been using more of the smart features lately (Google Drive and Keep are seductive.) Since the data package can be expensive, though, and even though data is cheaper than it used to be, that means I don't check Facebook often, or upload pictures to friends by email, unless I'm in Wi-Fi zone (like home, or a coffee shop, etc). Even so, it seems I'm using more data than I realized, and I'd like to keep it under the 2GB allotment I'm paying for. I used to think half a gig was generous, but now I'm getting close to that 2GB I've paid for, most months.

This makes me a little paranoid, which leads to my first question: How accurate are carriers' own internal tools for measuring use, and do you recommend any third-party apps for keeping track of data use? Ideally, I'd like a detailed breakdown by app, over time: I don't think I'm at risk for data-stealing malware on my phone (the apps I use are either built-in, or plain-vanilla ones from Google's store, like Instagram, Twitter's official client, etc.), but of course really well-crafted malware would be tough to guard against or to spot. And even if they can be defeated, more and more sites (Facebook, for one) now play video just because I've rolled over a thumbnail. Read on for second part of the question. Second, what tools or tips can you offer for doling out my data more carefully? Can you name some apps that actually do a good job of minimizing data transfer, or managing apps' data use to at least to look harder for a Wi-Fi connection? I know Opera Mobile uses compression to minimize data transfer, and I'm sure it's possible to turn off many of the annoying sound-bearing ads of the world.

In short, what are some ways to get the most use from my limited data allotment, and be mindful about the ways I *do* spend it? This will be even more important if, as I hope, my next laptop has built-in data service. Web sites are I suspect only going to want to use more of my bandwidth in the future, even if it does get slightly cheaper. Nowadays, browsers have made it a chore even to do things like turn off images, never mind dancing, animated ads. Turning off images used to save my 56k dialup bandwidth, and the concept here is the same. (Google doesn't exactly make turning off images in Chrome friendly enough for my mom.)

(I'm using an Android phone, but I'm sure there are iPhone users who'd like to know the answers to parallel question for Apple gear. I can't be the only one who finds cavalier bandwidth sucking by web pages to be a blood-pressure-raising offense, when I'm paying for each expensive byte. There are lots of places where even wired connections are expensive, but at least with a wired network connection things like Squid can be deployed.)

Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

An anonymous reader writes: A Belgian court has acquitted Pirate Bay co-founders Peter Sunde, Gottfrid Svartholm, Fredrik Neij, and Carl Lundström of criminal copyright infringement charges. They created the site in 2003, and were found guilty of similar charges in Sweden in 2009. The men have had continued legal problems since then, and one such case arose in Belgium for alleged copyright crimes committed between September, 2011 and November, 2013. However, since the founders have had nothing to do with the site since 2006, the prosecution couldn't make its case.

An anonymous reader writes: Less than two weeks after one group of MIT researchers unveiled a system capable of repairing software bugs automatically, a different group has demonstrated another system called Helium, which "revamps and fine-tunes code without ever needing the original source, in a matter of hours or even minutes." The process works like this: "The team started with a simple building block of programming that's nevertheless extremely difficult to analyze: binary code that has been stripped of debug symbols, which represents the only piece of code that is available for proprietary software such as Photoshop. ... With Helium, the researchers are able to lift these kernels from a stripped binary and restructure them as high-level representations that are readable in Halide, a CSAIL-designed programming language geared towards image-processing. ... From there, the Helium system then replaces the original bit-rotted components with the re-optimized ones. The net result: Helium can improve the performance of certain Photoshop filters by 75 percent, and the performance of less optimized programs such as Microsoft Windows' IrfanView by 400 to 500 percent." Their full academic paper (PDF) is available online.

Bismillah writes: Although they've denied it in the past, Australia's federal and state police are very interested in Hacking Team's law enforcement spyware. There has also been recent interest from the Victoria state anti-corruption agency IBAC, leaked HT emails show. ITNews reports: "Emails leaked by attackers who infiltrated the systems of spyware provider Hacking Team this week reveal the Australian Federal Police was not the only local agency interested in the firm's suite of surveillance tools. Analysis of the leaked emails by iTnews reveals a number of agencies - including ASIO, IBAC and two local police forces - were also interested in the company's spyware."

itwbennett writes: The hacker group, which security researchers from Kaspersky Lab and Symantec call Wild Neutron or Morpho, has broken into the networks of over 45 large companies since 2012. After the 2013 attacks against Twitter, Facebook, Apple and Microsoft were highly publicized, the group went underground and temporarily halted its activity. However, its attacks resumed in 2014 and have since intensified, according to separate reports released Wednesday by Kaspersky Lab and Symantec.

McGruber writes: On Wednesday, authorities in the south Fulton County, Georgia town of Hapeville shut down a street for hours and used their bomb squad to search a home. According to the suspect's father, the bomb scare started after his 18-year-old son was arrested for trespassing, entering an abandoned warehouse and salvaging mercury switches, which can be used to detonate explosives. When police searched the teen's home on Virginia Avenue at Rainey Avenue in Hapeville, they said they found chemicals inside. "He's not building bombs. He does do a lot of experiments. A lot of them I don't fully understand, but I'm certain he's not making bombs," said the suspect's father, Allen Mason. Mason says chemistry is his son's hobby and he wants to be a chemical engineer. Mason also said police told him what they found is not illegal to own. One neighbor, who couldn't return home for hours, said he didn't feel the teen was a threat. "I don't see a problem with this, but you have to trust the authorities in they're doing what they think is best," said Curtis Ray. In February 2015, Hapeville authorities evacuated businesses and called out the bomb squad to investigate a pinhole camera that was part of a Georgia University Art Project.

OutOnARock writes with news that the Office of Personnel Management data breach reported earlier this month was actually far worse than earlier estimates had it; in all, it seems that more than 22 million people (not all of them government employees) had personal information compromised by the breach. From Yahoo News's coverage: That number is more than five times larger than what the Office of Personnel Management announced a month ago when first acknowledging a major breach had occurred. At the time, OPM only disclosed that the personnel records of 4.2 million current and former federal employees had been compromised.

njnnja writes: My wife receives periodic emails (about once every other month) from a cable company that is not in our service area that purport to confirm that she has made changes to her account, such as re-setting her password. Her email address is not a common one so we do not believe that it is someone accidentally using it; rather, we believe that an identity thief is subscribing to cable services intentionally using her name and email address.

Whenever we have gotten an email we have called the cable company, been forwarded to their security department, and we are assured that her social security number is not being used and that they will clear her name and email address out of their system. Yet a few weeks later we get another email. Our concern is that when the cable company goes after my wife for the unpaid balance on the account I am sure that neither they nor a collection agency will care much that it's not her social security number — it's her name and they will demand she pays.

We have a very strong password (long, completely random string of chars, nums, and symbols) and 2-factor authentication on the email account so we are fairly certain that no one is currently hacking into her email (at least, it's not worth it for however many thousands of dollars they can actually steal off this scam), But we think that the cable company should be doing more to not be complicit in an attempted identity theft. We have made it clear that we don't live in the area they cover so we should not have an account, but the fact that they keep setting up an account in her name means that they just don't care. Which is fine; I don't expect a cable company to care that they inconvenience us, but I would like to know if there is any way that we can make them care about it (liability, regulations, etc). I know YANAL but does anyone have any ideas about how to handle this? Thanks. Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

njnnja writes: My wife receives periodic emails (about once every other month) from a cable company that is not in our service area that purport to confirm that she has made changes to her account, such as re-setting her password. Her email address is not a common one so we do not believe that it is someone accidentally using it; rather, we believe that an identity thief is subscribing to cable services intentionally using her name and email address.

Whenever we have gotten an email we have called the cable company, been forwarded to their security department, and we are assured that her social security number is not being used and that they will clear her name and email address out of their system. Yet a few weeks later we get another email. Our concern is that when the cable company goes after my wife for the unpaid balance on the account I am sure that neither they nor a collection agency will care much that it's not her social security number — it's her name and they will demand she pays.

We have a very strong password (long, completely random string of chars, nums, and symbols) and 2-factor authentication on the email account so we are fairly certain that no one is currently hacking into her email (at least, it's not worth it for however many thousands of dollars they can actually steal off this scam), But we think that the cable company should be doing more to not be complicit in an attempted identity theft. We have made it clear that we don't live in the area they cover so we should not have an account, but the fact that they keep setting up an account in her name means that they just don't care. Which is fine; I don't expect a cable company to care that they inconvenience us, but I would like to know if there is any way that we can make them care about it (liability, regulations, etc). I know YANAL but does anyone have any ideas about how to handle this? Thanks. Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

samzenpus writes: Shaun Moss is a computer scientist with a 15-year passion for Mars. While reading Red Mars by Kim Stanley Robinson in 1999 Shaun realized that people would go to Mars in his lifetime, and he decided he wanted to be part of that. Since then he has been an active member of a variety of space enthusiast groups, including the Mars Society and Mars Society Australia. Shaun is also the founder of the Mars Settlement Research Organization. His research has included how to make air and steel on Mars, Martian timekeeping systems, terraforming and more, and he has given numerous presentations at conferences in Australia and the United States. For the past 1.5 years he has been developing a robust and affordable humans-to-Mars mission architecture and a plan to establish an International Mars Research Station, which is now available as a book. Shaun has agreed to answer any questions you may have. As usual, ask as many as you'd like, but please, one per post.

reifman writes: The Washington State Legislature and its budget is a complete mess this year but there's been an unusual bright spot which may quiet the protesters Slashdot reported earlier: Microsoft has volunteered for an exclusive $28 million annual tax — as long as the state funds a number of computer science degree programs. Visions of these faded after the 2008 recession when the legislature cut $4 billion from K-12 and higher education spending in part to cover the coming legalization and amnesty for Microsoft's Nevada tax dodge (students' tuitions only increased 58.6 percent.) With Microsoft's voluntary tax, the company will have fully repaid its $8.75 billion tax dodge by 2327, just 312 years from now.

An anonymous reader writes: US District Judge Rodney Gilstrap has thrown out a $532.9 million damages award against Apple after a jury found that its iTunes software infringed three patents owned by a Texas company. Gilstrap ruled (pdf) that the damages verdict must be thrown out because of faulty jury instructions and has ordered a new trial to be held solely on the issue of damages.

Patrick O'Neill writes: In the days following a massive hack that confirmed Hacking Team's dealings with repressive regimes around the world, experts are wondering once again how to stop Western technology companies from equipping certain governments with weapons meant to attack journalists, human rights activists, and ordinary civilians. Regulation's backers say that "this is an industry that has failed to police itself," ACLU's Christopher Soghoian argued, but many including the EFF warn that overly broad legislation would harm more than help. In addition, wiredmikey points out that a number of exploits have been released in the wake of the hacking: Several exploits have been discovered, including ones for zero-day vulnerabilities, in the hundreds of gigabytes of data stolen by a hacker from the systems of surveillance software maker Hacking Team. Researchers at Trend Micro analyzed the leaked data and uncovered several exploits, including two zero-days for Adobe Flash Player. A readme document found alongside proof-of-concept (PoC) code for one of the Flash Player zero-days describes the vulnerability as "the most beautiful Flash bug for the last four years since CVE-2010-2161." In addition to the Flash Player exploits, researchers spotted an exploit for a Windows kernel vulnerability, a flaw that fortunately has already been patched. Adobe told SecurityWeek that it's aware of the reports and expects to release a patch on Wednesday.

An anonymous reader notes that ICANN is closing the comment period for its plan to prevent owners of commercial websites from keeping their personal details out of a site's public-facing registration information. Digital rights groups are taking the opportunity to explain how real harm can result from this decision. The Online Abuse Prevention Initiative posted an open letter to ICANN pointing out the rise of doxing and swatting: "Our concern about doxing is not hypothetical. Randi Harper, a technologist, anti-harassment activist, and founder of the Online Abuse Prevention Initiative, was swatted based on information obtained from the Whois record for her domain. The only reason law enforcement did not draw their weapons and break down Harper’s door was that she had previously warned her local police department about swatting."

Cathy Gellis at Popehat refers to the situation surrounding Charles Carreon, the man who antagonized The Oatmeal (Matthew Inman's webcomic) and issued legal threats to those who called him out. "In that case the critic had selected a domain incorporating Carreon's name in order to best get his point about Carreon's thuggery across, which the First Amendment and federal trademark law allowed him to do. ... Unfortunately, the registrar immediately caved to Carreon's pressure and disclosed the critic's identifying information, thereby eviscerating the privacy protection the critic expected to have, and depended on, for his commentary."

jones_supa writes: Fans of The Simpsons will find this turn of events nothing short of excellent: seven weeks after saying he was done with Fox's endless animated comedy, Harry Shearer has agreed to rejoin the show. Shearer has now signed the same four-season contract as the other five primary voice actors. He previously tweeted, "I wanted what we've always had: the freedom to do other work." Executive producer Al Jean found that tweet confusing, saying, "Everybody on the show does lots of outside projects. He actually gets to record on the phone and do the [table] reads on the phone. So we've never kept him from doing that stuff."

An anonymous reader writes: Who hacked Hacking Team, the Milan-based company selling intrusion and surveillance software to governments, law enforcement agencies and (as it turns out) companies? A hacker who goes by "Phineas Fisher" claims it was him (her? them?). In the meantime, Hacking Team is scrambling to minimize the damage this hack and data leak is doing to the company. They sent out emails to all its customers, requesting them to shut down all deployments of its Remote Control System software ("Galileo") — even though it seems they could do that themselves, as the customer software apparently has secret backdoors. Perhaps they chose the first route because they hoped to keep that fact hidden from the customers? And because every copy of Hacking Team's Galileo software is secretly watermarked, the leaked information could allow researchers to link a certain backdoor to a specific customer.

itwbennett writes: Back in May, former Goldman Sachs programmer Sergey Aleynikov was convicted by a jury for stealing 32MB of code for Goldman's high-frequency trading system, code that Aleynikov maintained he copied for intellectual pursuits and was, in fact, open-source. On Monday, Judge Daniel P. Conviser of New York's State Supreme Court dismissed the conviction, saying that Aleynikov acted wrongfully by taking the code, but his actions did not meet the standard under the law in which he was charged. "The evidence did not prove he intended to appropriate all or a major portion of the code's economic value," Conviser wrote.

theodp writes: "A few months ago," writes Steph Rhee, "I was at a dinner with a dozen students and a 60-year-old entrepreneur who made himself a fortune on Wall Street. At the time, I was a junior at Yale and the only person at the table studying a computer-related major. We went around saying what our big dreams were. When I said that I'm studying computer science because I want to be a software engineer and hope to start my own company one day, he said, 'Why waste so many years learning how to code? Why not just pay someone else to build your idea?'" But Rhee isn't buying into the idea of the look-Ma-no-tech-skills "idea person." "We must not neglect the merits of technical skills in the conception of the 'idea person,'" she argues. "What the 60-year old entrepreneur and others of his generation — the people in control of the education we receive — don't realize is this: for college students dreaming of becoming unicorns in Silicon Valley, being an 'idea person' is not liberating at all. Being able to design and develop is liberating because that lets you make stuff. This should be a part of what we see in the 'idea person' today and what it means to be 'right' when designing an undergraduate curriculum."

theodp writes: "A few months ago," writes Steph Rhee, "I was at a dinner with a dozen students and a 60-year-old entrepreneur who made himself a fortune on Wall Street. At the time, I was a junior at Yale and the only person at the table studying a computer-related major. We went around saying what our big dreams were. When I said that I'm studying computer science because I want to be a software engineer and hope to start my own company one day, he said, 'Why waste so many years learning how to code? Why not just pay someone else to build your idea?'" But Rhee isn't buying into the idea of the look-Ma-no-tech-skills "idea person." "We must not neglect the merits of technical skills in the conception of the 'idea person,'" she argues. "What the 60-year old entrepreneur and others of his generation — the people in control of the education we receive — don't realize is this: for college students dreaming of becoming unicorns in Silicon Valley, being an 'idea person' is not liberating at all. Being able to design and develop is liberating because that lets you make stuff. This should be a part of what we see in the 'idea person' today and what it means to be 'right' when designing an undergraduate curriculum."

An anonymous reader writes: After moderators locked up some of Reddit's most popular pages in protest against the dismissal of Victoria Taylor, and an online petition asking the company to fire CEO Ellen Pao reached more than 175,000 signatures over the weekend, Pao has issued an apology. The statement reads in part: "We screwed up. Not just on July 2, but also over the past several years. We haven't communicated well, and we have surprised moderators and the community with big changes. We have apologized and made promises to you, the moderators and the community, over many years, but time and again, we haven't delivered on them. When you've had feedback or requests, we haven't always been responsive. The mods and the community have lost trust in me and in us, the administrators of reddit. Today, we acknowledge this long history of mistakes. We are grateful for all you do for reddit, and the buck stops with me."

malachiorion writes: The DARPA Robotics Challenge, the biggest and most well-funded international robotics competition in years, was a failure. After years of grueling work on the part of brilliant roboticists around the world, and millions in funding from the Pentagon, the finals came and went with little to no coverage from the mainstream media. The only takeaway, for those who aren't extremely dialed into robotics, is that a ton of robots fell down in funny ways. There were winners, but considering how downgraded the tasks were, compared to the ones initially announced in 2012, it was closer to the first DARPA Grand Challenge, where none of the robot cars finished, than the Urban Challenge, which kicked off the race to build deployable driverless cars. So just as DARPA regrouped after that first fizzle of a race, here's my argument for Popular Science: It's time to do it again, and make falling, and getting up, mandatory.

An anonymous reader writes: Evidence is piling up that sitting down all day is really bad for you. I work primarily from home, and as I grow older, I'm starting to worry about long term consequences to riding a desk full-time. We talked about this a few years ago, but the science has come a long way since then, and so have the options for standing desks. My questions: do you use a standing desk? What kind of setup do you have? There are a lot of options, and a lot of manufacturers. Further studies have questioned the wisdom of standing all day, so I've been thinking about a standing/sitting combo, and just switching every so often. If you do this, do you have time limits or a particular frequency with which you change from sitting to standing?

I'm also curious about under-desk treadmills — I could manage slowly walking during parts of my work, and the health benefits are easy to measure. Also, any ergonomic tips? A lot of places seem to recommend: forearms parallel to the ground, top of monitor at eye level, and a pad for under your feet. Has your experience been the same? Those of you who have gone all-out on a motorized setup, was it worth the cost? The desks are dropping in price, but I can still see myself dropping upward of $1k on this, easily.

An anonymous reader writes: Evidence is piling up that sitting down all day is really bad for you. I work primarily from home, and as I grow older, I'm starting to worry about long term consequences to riding a desk full-time. We talked about this a few years ago, but the science has come a long way since then, and so have the options for standing desks. My questions: do you use a standing desk? What kind of setup do you have? There are a lot of options, and a lot of manufacturers. Further studies have questioned the wisdom of standing all day, so I've been thinking about a standing/sitting combo, and just switching every so often. If you do this, do you have time limits or a particular frequency with which you change from sitting to standing?

I'm also curious about under-desk treadmills — I could manage slowly walking during parts of my work, and the health benefits are easy to measure. Also, any ergonomic tips? A lot of places seem to recommend: forearms parallel to the ground, top of monitor at eye level, and a pad for under your feet. Has your experience been the same? Those of you who have gone all-out on a motorized setup, was it worth the cost? The desks are dropping in price, but I can still see myself dropping upward of $1k on this, easily.

SonicSpike sends a report on a proposed update to the International Traffic in Arms (ITAR) regulations which could shut down the sharing of files for 3D printed gun parts over the internet. "Hidden within the proposal, which restricts what gear, technology, and info can and cannot be exported out of the U.S., is a ban on posting schematics for 3D printed gun parts online." This follows a lawsuit from Cody Wilson and Defense Distributed back in May fighting the federal government's command to remove blueprints for the "Liberator" 3D-printed gun from their website. A senior official at the U.S. State Department said, "By putting up a digital file, that constitutes an export of the data. If it's an executable digital file, any foreign interests can get a hold of it."

Last year's spectacular but unauthorized you-are-there video from the inside of a fireworks display has probably inspired quite a few people to try getting their own bird's-eye view this year. Wired cautions photographers, though, that many municipalities have specifically banned (and some will be looking for) unauthorized airborne visitors, and that the FAA's guidelines for legal flight are tricky to comply with during a fireworks show. This is both because it's hard to maintain visual contact with a drone amid the dark and smoke of a show, and because of the altitude at which many commercial firework shells burst. In addition, even if a drone photo mission goes under the radar vis-a-vis local authorities, if resulting footage appears on an ad-supported site, like YouTube, the FAA may be a bit more interested than the pilot would like.

Last year's spectacular but unauthorized you-are-there video from the inside of a fireworks display has probably inspired quite a few people to try getting their own bird's-eye view this year. Wired cautions photographers, though, that many municipalities have specifically banned (and some will be looking for) unauthorized airborne visitors, and that the FAA's guidelines for legal flight are tricky to comply with during a fireworks show. This is both because it's hard to maintain visual contact with a drone amid the dark and smoke of a show, and because of the altitude at which many commercial firework shells burst. In addition, even if a drone photo mission goes under the radar vis-a-vis local authorities, if resulting footage appears on an ad-supported site, like YouTube, the FAA may be a bit more interested than the pilot would like.

An anonymous reader writes: Another Slashdotter recently asked what kind of things someone can power with an external USB battery. I have a followup along those lines: what kind of modifications have you made to your gadgets to do things that they were never meant to do? Consider old routers, cell phones, monitors, etc. that have absolutely no use or value anymore in their intended form. What can you do with them? Have you ever done something stupid and damaged your electronics?

_xeno_ writes: Just over a week after Warner Bros. pulled the PC version of Batman: Arkham Knight due to bugs, Square Enix is now being forced to do the same thing with the Mac OS X version of Final Fantasy XIV (which was released at the same time as Batman: Arkham Knight). The rather long note explaining the decision apologizes for releasing the port before it was ready and blames OS X and OpenGL for the discrepancy between the game's performance on identical Mac hardware running Windows. It's unclear when (or even if) Square Enix will resume selling an OS X version — the note indicates that the development team is hopeful that "[w]ith the adoption of DirectX 11 for Mac, and the replacement of OpenGL with a new graphics API in Apple's next OS, the fundamental gap in current performance issues may soon be eliminated." (I'm not sure what "the adoption of DirectX 11 for Mac" refers to. OS X gaining DirectX 11 support is news to me — and, I suspect, Microsoft.) Given that the game supports the aging PS3 console, you'd think the developers would be able to find a way to get the same graphics as the PS3 version on more powerful Mac OS X hardware.

ptorrone writes: Adafruit is now shipping the USA-made open-source Arduinos. In celebration Ladyada the engineer posted an Arduino rotating in front of an American flag with the public domain "America the Beautiful" by the United States Navy Band as background music. Adafruit immediately received notice from from YouTube stating that the song is owned by Rumblefish. Rumblefish previously claimed to own copyright to ambient birdsongs, too.

An anonymous reader writes: Today Mozilla announced the release of Firefox 39.0, which brings an number of minor improvements to the open source browser. (Full release notes.) They've integrated Firefox Share with Firefox Hello, which means that users will be able to open video calls through links sent over social media. Internally, the browser dropped support for the insecure SSLv3 and disabled use of RC4 except where explicitly whitelisted. The SafeBrowsing malware detection now works for downloads on OS X and Linux. (Full list of security changes.) The Mac OS X version of Firefox is now running Project Silk, which makes animations and scrolling noticeably smoother. Developers now have access to the powerful Fetch API, which should provide a better interface for grabbing things over a network.

An anonymous reader writes: Today Mozilla announced the release of Firefox 39.0, which brings an number of minor improvements to the open source browser. (Full release notes.) They've integrated Firefox Share with Firefox Hello, which means that users will be able to open video calls through links sent over social media. Internally, the browser dropped support for the insecure SSLv3 and disabled use of RC4 except where explicitly whitelisted. The SafeBrowsing malware detection now works for downloads on OS X and Linux. (Full list of security changes.) The Mac OS X version of Firefox is now running Project Silk, which makes animations and scrolling noticeably smoother. Developers now have access to the powerful Fetch API, which should provide a better interface for grabbing things over a network.

An anonymous reader writes: Early this morning, a Russian Soyuz rocket successfully launched from the Baikonur Cosmodrome in Kazakhstan. The rocket carried a Progress capsule containing 2,700kg of supplies for the International Space Station. It's a much-needed victory after a series of launch failures that saw ISS resupply missions from Orbital ATK, Russia, and SpaceX end in failure. "The station, a joint project involving 15 nations which is staffed by a crew of six astronauts and cosmonauts, currently has a four-month supply of food and water, NASA said. The arrival of the Russian cargo ship, and the planned launch of a Japanese HTV freighter in August, should replenish the station's pantries through the end of the year, NASA said. Friday's successful launch clears the way for three new crew members to fly to the station later this month."

An anonymous reader writes: Early this morning, a Russian Soyuz rocket successfully launched from the Baikonur Cosmodrome in Kazakhstan. The rocket carried a Progress capsule containing 2,700kg of supplies for the International Space Station. It's a much-needed victory after a series of launch failures that saw ISS resupply missions from Orbital ATK, Russia, and SpaceX end in failure. "The station, a joint project involving 15 nations which is staffed by a crew of six astronauts and cosmonauts, currently has a four-month supply of food and water, NASA said. The arrival of the Russian cargo ship, and the planned launch of a Japanese HTV freighter in August, should replenish the station's pantries through the end of the year, NASA said. Friday's successful launch clears the way for three new crew members to fly to the station later this month."

An anonymous reader writes: Early this morning, a Russian Soyuz rocket successfully launched from the Baikonur Cosmodrome in Kazakhstan. The rocket carried a Progress capsule containing 2,700kg of supplies for the International Space Station. It's a much-needed victory after a series of launch failures that saw ISS resupply missions from Orbital ATK, Russia, and SpaceX end in failure. "The station, a joint project involving 15 nations which is staffed by a crew of six astronauts and cosmonauts, currently has a four-month supply of food and water, NASA said. The arrival of the Russian cargo ship, and the planned launch of a Japanese HTV freighter in August, should replenish the station's pantries through the end of the year, NASA said. Friday's successful launch clears the way for three new crew members to fly to the station later this month."

vivaoporto writes: As reported by CNET and TechCrunch, reddit moderators are locking up the site's most popular pages in protest against the dismissal of Victoria Taylor, a key member of the site's behind-the-scenes team. Taylor, who was the main facilitator for the site's question-and-answer community "Ask Me Anything" (graced by the presence of notables like Barack Obama, Jerry Seinfeld and regular folks like a line cook at Applebee's) was fired yesterday, causing all sorts of problems for Reddit's most mainstream offering.

Taylor's reported departure, which has been dubbed AMAgeddon, led other moderators of the marquee IAmA subreddit to switch the page's settings to private, rendering the Reddit userbase unable to view the page. Since then, dozens of other subreddits including /r/askreddit, /r/videos, /r/gaming and /r/gadgets — each with several million subscribers — have also been made private, instead re-directing readers to a static landing page.

Reddit's cofounder and executive chairman, Alexis Ohanian, said in a post, "we don't talk about specific employees. (...) We get that losing Victoria has a significant impact on the way you manage your community, (...) I'd really like to understand how we can help solve these problems, because I know r/IAMA thrived before her and will thrive after." He later apologized for how communication was handled. A full recap of the situation is available at the site itself, with insights from redditors about the whole situation.

This comes in the wake of other highly controversial events like the response to what became known as The Fappening, and the more recent ban of the controversial but popular FatPeopleHate subreddit.

vivaoporto writes: As reported by CNET and TechCrunch, reddit moderators are locking up the site's most popular pages in protest against the dismissal of Victoria Taylor, a key member of the site's behind-the-scenes team. Taylor, who was the main facilitator for the site's question-and-answer community "Ask Me Anything" (graced by the presence of notables like Barack Obama, Jerry Seinfeld and regular folks like a line cook at Applebee's) was fired yesterday, causing all sorts of problems for Reddit's most mainstream offering.

Taylor's reported departure, which has been dubbed AMAgeddon, led other moderators of the marquee IAmA subreddit to switch the page's settings to private, rendering the Reddit userbase unable to view the page. Since then, dozens of other subreddits including /r/askreddit, /r/videos, /r/gaming and /r/gadgets — each with several million subscribers — have also been made private, instead re-directing readers to a static landing page.

Reddit's cofounder and executive chairman, Alexis Ohanian, said in a post, "we don't talk about specific employees. (...) We get that losing Victoria has a significant impact on the way you manage your community, (...) I'd really like to understand how we can help solve these problems, because I know r/IAMA thrived before her and will thrive after." He later apologized for how communication was handled. A full recap of the situation is available at the site itself, with insights from redditors about the whole situation.

This comes in the wake of other highly controversial events like the response to what became known as The Fappening, and the more recent ban of the controversial but popular FatPeopleHate subreddit.

itwbennett writes: Faithful Slashdot readers may recall the story of Adam Wulf, who spent two weeks live-streaming himself writing a mobile app. The phenomenon has quickly become thing, by which we mean a business. Twitch.TV, Watch People Code (which is an offshoot of the subreddit by the same name), Ludum Dare, and, of course, YouTube, are bursting with live or archived streams of lots of people writing lots of code for lots of different things. And just this week, Y Combinator-backed startup Livecoding.TV launched. The site has signed up 40,000 users since its beta went live in February, but unlike the other sites in this space what it doesn't have (and doesn't have plans for) is advertising. As co-founder Jamie Green told ITworld: 'We have some different ideas around monetisation in the pipeline, but for now we are just focussed on building a community around live education.'

theodp writes: Didn't like Jobs, the 2013 biopic about the life of Apple co-founder Steve Jobs starring Ashton Kutcher? Maybe you'll prefer Steve Jobs, the 2015 biopic about the life of Apple co-founder Steve Jobs starring Michael Fassbender. "Steve Jobs is a tech visionary, total dick," writes Esquire's Matt Patches in his mini-review of the just-released Steve Jobs trailer. So, is inspiring kids to become the "Next Steve Jobs" a good or bad thing?

HughPickens.com writes: USA Today reports that the FBI is investigating at least 11 physical attacks on high-capacity Internet cables in California's San Francisco Bay Area dating back to at least July 6, 2014, including one early this week. "When it affects multiple companies and cities, it does become disturbing," says Special Agent Greg Wuthrich. "We definitely need the public's assistance." The pattern of attacks raises serious questions about the glaring vulnerability of critical Internet infrastructure, says JJ Thompson. "When it's situations that are scattered all in one geography, that raises the possibility that they are testing out capabilities, response times and impact," says Thompson. "That is a security person's nightmare."

Mark Peterson, a spokesman for Internet provider Wave Broadband, says an unspecified number of Sacramento-area customers were knocked offline by the latest attack. Peterson characterized the Tuesday attack as "coordinated" and said the company was working with Level 3 and Zayo to restore service. It's possible the vandals were dressed as telecommunications workers to avoid arousing suspicion, say FBI officials. Backup systems help cushion consumers from the worst of the attacks, meaning people may notice slower email or videos not playing, but may not have service completely disrupted. But repairs are costly and penalties are not stiff enough to deter would-be vandals. "There are flags and signs indicating to somebody who wants to do damage: This is where it is folks," says Richard Doherty. "It's a terrible social crime that affects thousands and millions of people."

StartsWithABang writes: When we talk about humans existing on worlds other than Earth, the first choice of a planet to do so on is usually Mars, a world that may have been extremely Earth-like for the first billion years of our Solar System or so. Perhaps, with enough ingenuity and resources, we could terraform it to be more like Earth is today. But the most Earth-like conditions in the Solar System don't occur on the surface of Mars, but rather in the high altitudes of Venus' atmosphere, some 50-65 km up. Despite its harsh conditions, this may be the best location for the first human colonies, for a myriad of good, scientific reasons. NASA proposed something similar last year and released a report on the subject.

Last month, in a story headlined 3D Printed Supercar Chassis Unveiled, we promised video interviews with builders Kevin and Brad "in the near future." Here they are. First, we have Kevin Czinger, Founder & CEO of Divergent Microfactories. He says the way we build cars is more important from an environmental standpoint than how we fuel them, and that the way we make cars now is a lot less efficient and a lot more expensive than it needs to be. Divergent's first demo vehicle, the Blade, is a tandem-seating 700 HP supercar its makers say does 0 - 60 in 2.5 seconds. Price? No word yet, but it's safe to assume "plenty" might be an accurate guess.

In the second video, Blade project lead Brad Balzer goes into detail about how, why, and where they use 3-D printing, and explains the modular nature of their car chassis design. He says they don't need to change many parts to go from ultra-sports car to pickup truck. He also says that while Divergent Microfactories is working on cars right now, their manufacturing system can be applied to many different industries. Indeed, their long-range goal is to help people build microfactories making many different kinds of products faster, more flexibly, and for less money than it takes to make similar manufactured items today.

Note: The transcript covers both videos and has a little 'bonus' material in it, too.

Last Thursday you had a chance to ask Linus Torvalds about programming, hardware, and all things Linux. You can read his answers to those questions below. If you'd like to see what he had to say the last time we sat down with him, you can do so here. Productivity
by DoofusOfDeath

You've somehow managed to originate two insanely useful pieces of software: Linux, and Git. Do you think there's anything in your work habits, your approach to choosing projects, etc., that have helped you achieve that level of productivity? Or is it just the traditional combination of talent, effort, and luck?

Linus: I'm sure it's pretty much always that "talent, effort and luck". I'll leave it to others to debate how much of each...

I'd love to point out some magical work habit that makes it all happen, but I doubt there really is any. Especially as the work habits I had wrt the kernel and Git have been so different.

With Git, I think it was a lot about coming at a problem with fresh eyes (not having ever really bought into the traditional SCM mindset), and really trying to think about the issues, and spending a fair amount of time thinking about what the real problems were and what I wanted the design to be. And then the initial self-hosting code took about a day to write (ok, that was "self-hosting" in only the weakest sense, but still).

And with Linux, obviously, things were very different - the big designs came from the outside, and it took half a year to host itself, and it hadn't even started out as a kernel to begin with. Clearly not a lot of thinking ahead and planning involved ;). So very different circumstances indeed.

What both the kernel and Git have, and what I think is really important (and I guess that counts as a "work habit"), is a maintainer that stuck to it, and was responsive, responsible and sane. Too many projects falter because they don't have people that stick with them, or have people who have an agenda that doesn't match reality or the user expectations.

But it's very important to point out that for Git, that maintainer was not me. Junio Hamano really should get pretty much all the credit for Git. Credit where credit is due. I'll take credit for the initial implementation and design of Git - it may not be perfect, but ten years on it still is very solid and very clearly the same basic design. But I'll take even _more_ credit for recognizing that Junio had his head screwed on right, and was the person to drive the project. And all the rest of the credit goes to him.

Of course, that kind of segues into something else the kernel and Git do have in common: while I still maintain the kernel, I did end up finding a lot of smart people to maintain all the different parts of it. So while one important work habit is that "stick to it" persistence that you need to really take a project from a not-quite-usable prototype to something bigger and better, another important work-habit is probably to also "let go" and not try to own and control the project too much. Let other people really help you - guide the process but don't get in their way.



init system
by lorinc

There wasn't a decent unix-like kernel, you wrote one which ultimately became the most used. There wasn't a decent version control software, you wrote one which ultimately became the most love. Do you think we already have a decent init system, or do you have plan to write one that will ultimately settle the world on that hot topic?

Linus: You can say the word "systemd", It's not a four-letter word. Seven letters. Count them.

I have to say, I don't really get the hatred of systemd. I think it improves a lot on the state of init, and no, I don't see myself getting into that whole area.

Yeah, it may have a few odd corners here and there, and I'm sure you'll find things to despise. That happens in every project. I'm not a huge fan of the binary logging, for example. But that's just an example. I much prefer systemd's infrastructure for starting services over traditional init, and I think that's a much bigger design decision.

Yeah, I've had some personality issues with some of the maintainers, but that's about how you handle bug reports and accept blame (or not) for when things go wrong. If people thought that meant that I dislike systemd, I will have to disappoint you guys.



Can Valve change the Linux gaming market?
by Anonymous Coward

Do you think Valve is capable of making Linux a primary choice for gamers?

Linus: "Primary"? Probably not where it's even aiming. I think consoles (and all those handheld and various mobile platforms that "real gamers" seem to dismiss as toys) are likely much more primary, and will stay so.

I think Valve wants to make sure they can control their own future, and Linux and ValveOS is probably partly to explore a more "console-like" Valve experience (ie the whole "get a box set up for a single main purpose", as opposed to a more PC-like experience), and partly as a "second source" against Microsoft, who is a competitor in the console area. Keeping your infrastructure suppliers honest by making sure you have alternatives sounds like a good strategy, and particularly so when those suppliers may be competing with you directly elsewhere.

So I don't think the aim is really "primary". "Solid alternative" is I think the aim. Of course, let's see where it goes after that.

But I really have not been involved. People like Greg and the actual graphics driver guys have been in much more direct contact with Valve. I think it's great to see gaming on Linux, but at the same time, I'm personally not really much of a gamer.



The future of RT-Linux?
by nurhussein

According to Thomas Gleixner, the future of the realtime patchset to Linux is in doubt, as it is difficult to secure funding from interested parties on this functionality even though it is both useful and important: What are your thoughts on this, and what do you think we need to do to get more support behind the RT patchset, especially considering Linux's increasing use in embedded systems where realtime functionality is undoubtedly useful.

Linus: So I think this is one of those things where the markets decide how important rtLinux ends up being, and I suspect there are more than enough companies who end up wanting and using rtLinux that the project isn't really going anywhere. The complaints by Thomas were - I think - a wake-up call to the companies who end up wanting the extended hard realtime patches.

So I suspect there are companies and groups like OSADL that end up funding and helping with rtLinux, and that it isn't going away.



Rigor and developments
by hcs_$reboot

The most complex program running on a machine is arguably its OS, especially the kernel. Linux (kernel) reached the top level in terms of performance, reliability and versatility. You have been criticized quite a few times for some virulent mails addressed to developers. Do you think Linux would be where it is without managing the project with an iron fist? To go further, do you think some other main OSS project would benefit from a more rigorous management approach?

Linus: One of the nice things about open source is how it allows people to really concentrate on what they are good at, and it has been a huge advantage for Linux that we've had people who are interested in the marketing side and selling Linux, as well as the legal side etc.

And that is all in addition, of course, to the original "we're motivated by the technology" people like me. And even within that "we're motivated by technology" group, you most certainly don't need to find _everything_ interesting, you can find the area you are passionate about and really care about and want to work on.

That's _fundamentally_ how open source works.

Now, if somebody is passionate about some "good management" thing, go wild, and try to get involved, and try to manage things. It's not what _I_ am interested in, but hey, the proof is in the pudding - anybody who thinks they have a new rigorous management approach that they think will help some part of the process, go wild.

Now, I personally suspect that it wouldn't work - not only are tech people an ornery lot to begin with (that whole "herding cats" thing), just look at all the crazy arguments on the internet. And ask yourself what actually holds an open source project like the kernel together? I think you need to be very oriented towards the purely technical solutions, simply because then you have tangible and real issues you can discuss (and argue about) with fairly clear-cut hard answers. It's the only thing people can really agree on in the big picture.

So the Linux approach to "management" has been to put technology first. That's rigorous enough for me. But as mentioned, it's a free-for-all. Anybody can come in and try to do better. Really.

And btw, it's worth noting that there are obviously specific smaller development teams where other management models work fine. Most of the individual developers are parts of teams inside particular companies, and within the confines of that company, there may well be a very strict rigorous management model. Similarly, within the confines of a particular productization effort there may be particular goals and models for that particular team that transcend that general "technical issues" thing.

Just to give a concrete example, the "development kernel" tree that I maintain works fundamentally differently and with very different rules from the "stable tree" that Greg does, which in turn is maintained very differently from what a distribution team within a Linux company does inside its maintenance kernel team.

So there's certainly room for different approaches to managing those very different groups. But do I think you can "rigorously manage" people on the internet? No.



Functional languages?
by EmeraldBot

While historically you've been a C and Assembly guy (and the odd shell scripting and such), what do you think of functional languages such as Lisp, Closure, Haskell, etc? Do you see any advantages to them, or do you view them as frivolous and impractical? If you decide to do so, thanks for taking the time to answer my question! You're a legend at what you do, and I think it's awesome that the significantly less interesting me can ask you a question like this.

Linus: I may be a fan of C (with a certain fondness for assembly, just because it's so close to the machine), but that's very much about a certain context. I work at a level where those languages make sense. I certainly don't think that tools like Haskell etc are "frivolous and impractical" in general, although on a kernel level (or in a source control management system) I suspect they kind of are.

Many moons ago I worked on sparse (the C parser and analyzer), and one of my coworkers was a Haskell fan, and did incredible example transformations in very simple (well, to him) code - stuff that is just nasty to write in C because it's pretty high-level, there's tons of memory management, and you're really talking about implementing fairly abstract and high-level rules with pattern matching etc.

So I'm definitely not a functional language kind of guy - it's not how I learnt programming, and it really isn't very relevant to what I do, and I wouldn't recognize Haskell code if it bit me in the ass and called me names. But no, I wouldn't call them frivolous.



Critical software to the use of Linux
by TWX

Mr. Torvalds, For many uses of Linux such as on the desktop, other software beyond the kernel and the base GNU tools are required. What other projects would you like to see given priority, and what would you like to see implemented or improved? Admittedly I thought most about X-Windows when asking this question; but I don't doubt that other daemons or systems can be just as important to the user experience. Thank you for your efforts all these years.

Linus: Hey, I don't really have any particular project I would want to champion, largely because we all have so different requirements on the desktop. There's just no single thing that stands out as being hugely more important than others to me.

What I do wish particularly desktop developers cared about is "consistency of experience". And by that I don't mean some kind of enforced visual consistency between different applications to make things "look coherent". No, I'm just talking about the pain and uncertainty users go through with upgrades, and understanding that while your project may be the most important project to *you* (because it's what you do), to your users, your project is likely just a fairly small and irrelevant part of their experience, and it's not very central at all, and they've learnt the quirks about that thing they don't even care about, and you really shouldn't break their expectations. Because it turns out that that is how you really make people hate their desktop.

This is not at all Linux-specific, of course - just look at the less than enthusiastic reception that other operating system redesigns have received. But I really wish that we hadn't had *both* of the major Linux desktop environments have to learn this (well, I hope they learnt) the hard way, and both of them ending up blaming their users rather than themselves.



"anykernel"-style portable drivers?
by staalmannen

What do you think about the "anykernel" concept (invented by another Finn btw) used in NetBSD? Basically, they have modularized the code so that a driver can be built either in a monolithic kernel or for user space without source code changes ( rumpkernel.org ). The drivers are highly portable and used in Genode os (L4 type kernels), minix etc... Would this be possible or desirable for Linux? Apparently there is one attempt called "libos"...

Linus: So I have bad experiences with "portable" drivers. Writing drivers to some common environment tends to force some ridiculously nasty impedance matching abstractions that just get in the way and make things really hard to read and modify. It gets particularly nasty when everybody ends up having complicated - and differently so - driver subsystems to handle a lot of commonalities for a certain class of drivers (say a network driver, or a USB driver), and the different operating systems really have very different approaches and locking rules etc.

I haven't seen anykernel drivers, but from past experience my reaction to "portable device drivers" is to run away, screaming like little girl. As they say in Swedish "Bränt barn luktar illa".



Processor Architecture
by swv3752

Several years ago, you were employed by Transmeta designing the Crusoe processor. I understand you are quite knowledgeable about cpu architecture. What are your thoughts on the Current Intel and AMD x86 CPUs particularly in comparison with ARM and IBM's Power8 CPUs? Where do you see the advantages of each one?

Linus: I'm no CPU architect, I just play one on TV.

But yes, I've been close to the CPU both as part of my kernel work, and as part of a processor company, and working at that level for a long time just means that you end up having fairly strong opinions. One of the things that my experiences at Transmeta convinced me of, for example, was that there's definitely very much a limit to what software should care about. I loved working at Transmeta, I loved the whole startup company environment, I loved working with really smart people, but in the end I ended up absolutely *not* loving to work with overly simple hardware (I also didn't love the whole IPO process, and what that did to the company culture, but that's a different thing).

Because there's only so much that software can do to compensate.

Something similar happened with my kernel work on the alpha architecture, which also started out as being an overly simplified implementation in the name of being small and supposedly running really fast. While I really started out liking the alpha architecture for being so clean, I ended up detesting how fragile the architecture implementations were (and by the time that got fixed in the 21264, I had given up on alpha).

So I've come to absolutely detest CPU's that need a lot of compiler smarts or special tuning to go fast. Life is too short to waste on in-order CPU's, or on hardware designers who think software should take care of the pieces that they find to be too complicated to handle themselves, and as a result just left undone. "Weak memory ordering" is just another example.

Thankfully, most of the industry these days seems to agree. Yes, there are still in-order cores, but nobody tries to make excuses for them any more: they are for the truly cheap and low-end market.

I tend to really like the modern Intel cores in particular, which tend to take that "let's not be stupid" really to heart. With the kernel being so threaded, I end up caring a lot about things like memory ordering etc, and the Intel big-core CPU's tend to be in a class of their own there. As a software person who cares about performance and looks at instruction profiles etc, it's just so *nice* to see that the CPU doesn't have some crazy glass jaw where you have to be very careful.



GPU kernels
by maraist

Is there any inspiration that a GPU based kernel / scheduler has for you? How might Linux be improved to better take advantage of GPU-type batch execution models. Given that you worked transmeta and JIT compiled host-targeted runtimes. GPUs 1,000-thread schedulers seem like the next great paradigm for the exact type of machines that Linux does best on.

Linus: I don't think we'll see the kernel ever treat GPU threads the way we treat CPU threads. Not with the current model of GPU's (and that model doesn't really seem to be changing all that much any more).

Yes, GPU's are getting much better, and now generally have virtual memory and the ability to preempt execution, and you could run an OS on them. But the scheduling latencies are pretty high, and the threads are not really "independent" (ie they tend to share a lot of state - like the virtual address space and a large shared register set), so GPU "threads" don't tend to work like CPU threads. You'd schedule them all-or-nothing, so if you were to switch processes, you'd treat the GPU as one entity where you switch all the threads at once.

So it really wouldn't look like a thousand threads to the kernel. The GPU would still be scheduled as one single entity (or maybe a couple of entities depending on how the GPU is partitioned). The fact that that single entity works by doing a lot of things in massive parallelism is kind of immaterial for the kernel that doesn't end up seeing that parallelism as separate threads.



alleged danger of Artificial Intelligence
by peter303

Some computer experts like Marvin Minsky, Larry Page, Ray Kuzweil think A.I. will be a great gift to Mankind. Others like Bill Joy and Elon Musk are fearful of potential danger. Where do you stand, Linus?

Linus: I just don't see the thing to be fearful of.

We'll get AI, and it will almost certainly be through something very much like recurrent neural networks. And the thing is, since that kind of AI will need training, it won't be "reliable" in the traditional computer sense. It's not the old rule-based prolog days, when people thought they'd *understand* what the actual decisions were in an AI.

And that all makes it very interesting, of course, but it also makes it hard to productize. Which will very much limit where you'll actually find those neural networks, and what kinds of network sizes and inputs and outputs they'll have.

So I'd expect just more of (and much fancier) rather targeted AI, rather than anything human-like at all. Language recognition, pattern recognition, things like that. I just don't see the situation where you suddenly have some existential crisis because your dishwasher is starting to discuss Sartre with you.

The whole "Singularity" kind of event? Yeah, it's science fiction, and not very good SciFi at that, in my opinion. Unending exponential growth? What drugs are those people on? I mean, really..

It's like Moore's law - yeah, it's very impressive when something can (almost) be plotted on an exponential curve for a long time. Very impressive indeed when it's over many decades. But it's _still_ just the beginning of the "S curve". Anybody who thinks any different is just deluding themselves. There are no unending exponentials.



Is the kernel basically a finished project?
by NaCh0

Aside from adding drivers and refactoring algorithms when performance limits are discovered, is there anything left for the kernel? Maybe it's a failure of tech journalism but we never hear about the next big thing in kernel land anymore.

Linus: I don't think there's much of a "next big thing" in the kernel.

I wouldn't say that there is nothing but drivers (and architectures are kind of "CPU drivers) and improving scalability left, because I'm constantly amazed by how many new things people figure out are still good ideas. But they tend to still be pretty incremental improvements. An OS kernel doesn't look *that* radically different from what it was 40 years ago, and that's fine. I think radical new ideas are often overrated, and the thing that really matters in the end is that plodding detail work. That's how technology evolves.

And judging by how our kernel releases are going, there's no end in sight for that "plodding detail work". And it's still as interesting as it ever was.