Slashdot Mirror

theodp writes: Over at the Bill Gates and Mark Zuckerberg-bankrolled Code.org, they're using the number of open computing jobs in each state to convince parents of the need to expand K-12 CS offerings so their kids can fill those jobs. Sounds good, right? But at the same time, the Gates and Zuckerberg-bankrolled FWD.org PAC has taken to Twitter, using the number of open "STEM" jobs in each state to convince politicians of the need to expand the number of H-1B visas so foreign workers can fill those jobs. While the goal of Microsoft's 'two-pronged' National Talent Strategy is to kill two birds [K-12 CS education and H-1B visas] with one crisis, is it fair for organizations backed by many of the same wealthy individuals to essentially promise the same jobs to U.S. kids and foreign H-1B workers?

lemur3 writes: Hot on the heels of the recent implementation of Canvas Ads (allowing advertisers to use the full page) Martin Bryant, the Editor-in-Chief of The Next Web, wrote a piece that, ostensibly, calls out mobile carriers in Europe for offering ad blocking as a service. He writes: "Display ads are still an important bread-and-butter income stream. Taking delight in denying publishers that revenue shows either sociopathic tendencies or ignorance of economic realities." While referring to those using ad blocking as sociopathic is likely not to win many fans, this mindset seems to be prevalent in certain circles, as discussed previously on Slashdot. Martin closes his piece with a warning: "For all their sins, ads fuel much of the Web. Cut them out and you're strangling the diversity of online voices and publishers – and I don't think consumers really want that."

lemur3 writes: Hot on the heels of the recent implementation of Canvas Ads (allowing advertisers to use the full page) Martin Bryant, the Editor-in-Chief of The Next Web, wrote a piece that, ostensibly, calls out mobile carriers in Europe for offering ad blocking as a service. He writes: "Display ads are still an important bread-and-butter income stream. Taking delight in denying publishers that revenue shows either sociopathic tendencies or ignorance of economic realities." While referring to those using ad blocking as sociopathic is likely not to win many fans, this mindset seems to be prevalent in certain circles, as discussed previously on Slashdot. Martin closes his piece with a warning: "For all their sins, ads fuel much of the Web. Cut them out and you're strangling the diversity of online voices and publishers – and I don't think consumers really want that."

lemur3 writes: Hot on the heels of the recent implementation of Canvas Ads (allowing advertisers to use the full page) Martin Bryant, the Editor-in-Chief of The Next Web, wrote a piece that, ostensibly, calls out mobile carriers in Europe for offering ad blocking as a service. He writes: "Display ads are still an important bread-and-butter income stream. Taking delight in denying publishers that revenue shows either sociopathic tendencies or ignorance of economic realities." While referring to those using ad blocking as sociopathic is likely not to win many fans, this mindset seems to be prevalent in certain circles, as discussed previously on Slashdot. Martin closes his piece with a warning: "For all their sins, ads fuel much of the Web. Cut them out and you're strangling the diversity of online voices and publishers – and I don't think consumers really want that."

Salo2112 writes with a followup to a story from April in which a security researcher was pulled off a plane by FBI agents seemingly over a tweet referencing a security weakness in one of the plane's systems. At the time, the FBI insisted he had actually tampered with core systems on an earlier flight, and now we have details. The FBI's search warrant application (PDF) alleges that the researcher, Chris Roberts, not only hacked the in-flight entertainment system, but also accessed the Thrust Management Computer and issued a climb command. "He stated that he thereby caused one of the airplane engines to climb resulting in a lateral or sideways movement of the plane during one of these flights. He also stated that he used Vortex software after comprising/exploiting or ‘hacking’ the airplane’s networks. He used the software to monitor traffic from the cockpit system." Roberts says the FBI has presented his statements out of their proper context.

theodp writes: Wondering what kind of things Microsoft might do with its purchase of Revolution Analytics? Over at the Revolutions blog, David Smith announces that in-database R is coming to SQL Server 2016. "With this update," Smith writes, "data scientists will no longer need to extract data from SQL server via ODBC to analyze it with R. Instead, you will be able to take your R code to the data, where it will be run inside a sandbox process within SQL Server itself. This eliminates the time and storage required to move the data, and gives you all the power of R and CRAN packages to apply to your database." It'll no doubt intrigue Data Scientist types, but the devil's in the final details, which Microsoft was still cagey about when it talked-the-not-exactly-glitch-free-talk (starts @57:00) earlier this month at Ignite. So, brush up your R, kids, and you can see how Microsoft walks the in-database-walk when SQL Server 2016 public preview rolls out this summer.

An anonymous reader writes: Last week we learned that self-driving big-rig trucks were finally being deployed on public roads in Nevada for testing purposes. Experts consider trucking to be ripe for replacement with AI because of the sheer volume of trucks on the road, and the relative simplicity of their routes. But the eventual replacement of truck drivers with autonomous driving systems will have a huge impact on the U.S. economy: there are 3.5 million professional truck drivers, and millions more are employed to support and coordinate them. Yet more people rely on truckers to stay in business — gas stations, motels, and restaurants along trucking routes, to name a few.

Now, that's not to say moving forward with autonomous driving is a bad idea — in 2012, roughly 4,000 people died in accidents with large trucks, and almost all of the accidents were caused by driver error. Saving most of those lives (and countless injuries) is important. But we need to start thinking about how to handle the 10 million people looking for work when the (human) trucking industry falls off a cliff. It's likely we'll see another wave of ghost towns spread across the poor parts of the country, as happened when the interstate highway system changed how long-range transportation worked in the U.S.

An anonymous reader writes: A Russian Proton-M rocket carrying a Mexican satellite broke down shortly after launch and crashed in Siberia. Russian space agency Roscosmos is investigating the incident, but the cause is not yet known. In the video, the rocket appeared to sputter and stop providing thrust when the third-stage engine unexpectedly switched off. Communications were lost with the rocket before that happened. This comes just a couple weeks after Russia experienced another high profile rocket failure when its cargo ship bound for the International Space Station failed to reach a high enough orbit and began spinning out of control. Russia's Proton family of rockets has been in use since the 1960s, though the current Proton-M incarnation was first flown in 2001.

jan_jes writes to note that The Planetary Society is attempting to crowdfund its own version of the light-powered space-craft popularized by Carl Sagan as a "solar sailer." (YouTube video, with the Society's CEO Bill Nye.) The current model is a CubeSat no bigger than a breadbox with four sails. If the team manages to raise enough money, LightSail will be sent to orbit aboard a SpaceX Falcon Heavy rocket in 2016. LightSail will be released into an orbit with an altitude of 720 kilometers (450 miles), high enough to escape most of the planet's atmospheric drag. Their crowdfunding goal has been far surpassed (more than $476,000 at this writing), but more can't hurt; maybe NASA could use some of the surplus.

theodp writes: "The College Board," reports GeekWire, "is endorsing Code.org as a coursework and teacher training provider for its upcoming AP Computer Science Principles course and will help Code.org fund the teacher training work required to establish new computer science classes." So what's the catch? "Schools that commit to using the [new] PSAT [8/9 assessment] to identify middle school students who have potential for success in computer science will be eligible to receive curriculum, training, and funding for programming classes." The organization is bankrolled by some of tech's wealthiest leaders and their corporations. Code.org board member Brad Smith, Microsoft's General Counsel, proposed the idea of "producing a crisis" to advance Microsoft's "two-pronged" National Talent Strategy to increase K-12 CS education and the number of H-1B visas. Just months thereafter, nonprofit organizations Code.org and Mark Zuckerberg's FWD.us, which is lobbying for H-1B reform, were born.

theodp writes: "The College Board," reports GeekWire, "is endorsing Code.org as a coursework and teacher training provider for its upcoming AP Computer Science Principles course and will help Code.org fund the teacher training work required to establish new computer science classes." So what's the catch? "Schools that commit to using the [new] PSAT [8/9 assessment] to identify middle school students who have potential for success in computer science will be eligible to receive curriculum, training, and funding for programming classes." The organization is bankrolled by some of tech's wealthiest leaders and their corporations. Code.org board member Brad Smith, Microsoft's General Counsel, proposed the idea of "producing a crisis" to advance Microsoft's "two-pronged" National Talent Strategy to increase K-12 CS education and the number of H-1B visas. Just months thereafter, nonprofit organizations Code.org and Mark Zuckerberg's FWD.us, which is lobbying for H-1B reform, were born.

An anonymous reader writes: Following a recent spike of interest regarding the potential to hack planes, United Airlines has created the first rewards-for-exploits scheme in the aviation industry. The 'Bug-Bounty' program offers up to a million air miles for submitters who find a specific range of exploits in the company's websites and digital infrastructure. The scheme not only bans participants from probing on-board flight systems but threatens criminal prosecution for any such attempt.

Yesterday, in the intro to video number one of this two part extravaganza we wrote, "The effects of light and dark on adults' Circadian rythym has been studied over and over, but there hasn't been much research done on how light at night affects young children's sleep patterns."

Then we said, "This is the topic of Lameese Akacem's doctoral dissertation, and is a study being carried out under the aegis of the Sleep and Development Laboratory at the University of Colorado, Boulder," and we mentioned that this research is (at least in part) crowdfunded, and that the deadline for donating to this project is early next week, so if you feel this project is worth supporting you need to act within the next few days.

eldavojohn writes: Youtube now offers Black Angel, a short film shown in UK theaters before ESB. What was once thought lost is now found; enjoy. This may be the best half-hour you spend today, even if you must "set your clocks back 34 years," as writer and director Roger Christian advises. (Christian is also known for directing 2000's Battlefield Earth .)

For quite a while, we've been following the case of Douglas Gene Williams, accused of and indicted for teaching people to pass polygraph tests that they might otherwise have been unable to, and for the claims he made in advertising this training -- and specifically for showing his techniques to some undercover Federal agents. Now, reports Ars Technica, Williams has pleaded guilty to five charges of obstruction of justice and mail fraud. From the article: Williams isn't the first person prosecuted for these type of allegations. An Indiana man was accused of offering similar services and was sentenced in 2013 to eight months in prison. The judge presiding over the case said the case blended a "gray area" of First Amendment speech and the unlawful act of instructing people to lie on polygraph tests issued by the federal government. Williams' site, Polygraph.com, is now defunct.

For quite a while, we've been following the case of Douglas Gene Williams, accused of and indicted for teaching people to pass polygraph tests that they might otherwise have been unable to, and for the claims he made in advertising this training -- and specifically for showing his techniques to some undercover Federal agents. Now, reports Ars Technica, Williams has pleaded guilty to five charges of obstruction of justice and mail fraud. From the article: Williams isn't the first person prosecuted for these type of allegations. An Indiana man was accused of offering similar services and was sentenced in 2013 to eight months in prison. The judge presiding over the case said the case blended a "gray area" of First Amendment speech and the unlawful act of instructing people to lie on polygraph tests issued by the federal government. Williams' site, Polygraph.com, is now defunct.

kramer2718 writes: I am working on a project that requires uploading and storing of documents. Although the application will need to allow uploading of .docx, doc, .pdf, etc, I'd like to store the documents in a standard open format that will allow easy search, compression, rendering, etc. Which open document format is the best? Since "best" can be highly driven by circumstances, please explain your reasoning, too. Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

kramer2718 writes: I am working on a project that requires uploading and storing of documents. Although the application will need to allow uploading of .docx, doc, .pdf, etc, I'd like to store the documents in a standard open format that will allow easy search, compression, rendering, etc. Which open document format is the best? Since "best" can be highly driven by circumstances, please explain your reasoning, too. Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

walterbyrd writes: The Agriculture Department released its annual honeybee survey Wednesday and it doesn't look good. More than 40% of U.S. honeybee colonies died in a 12-month period ending in April. While the precise cause of the honeybee crisis is unknown, scientists generally blame a combination of factors, including poor diets and stress. Some bees die from infestations of the Varroa mite, a bloodsucking parasite that weakens bees and introduces diseases to the hive. Environmental groups also point to a class of pesticides known as neonicotinoids. In April, the Environmental Protection Agency said it would stop approving new outdoor uses for those types of chemicals until more studies on bee health are conducted.

An anonymous reader writes: I graduated in late 2003 during the tech bubble burst with a below 2.5 GPA. I am 35 with an interest in getting a security job. What are the chances that I would be just wasting my time and money? I am pursuing business interests with a patent used in a service that will be a prime target for hackers. I have been writing client/server software in an OpenBSD virtual machine for the security and the kqueue functionality; not to mention the rest of the virtual clients crash that I have tried. I figure that trying to sell the service idea, even if I can't get a job, when they ask what qualifies me to have such ideas, I can say I have the credentials. I just got issued the patent this year. What would you do in this situation to be a viable candidate for employment? Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

An anonymous reader writes: I graduated in late 2003 during the tech bubble burst with a below 2.5 GPA. I am 35 with an interest in getting a security job. What are the chances that I would be just wasting my time and money? I am pursuing business interests with a patent used in a service that will be a prime target for hackers. I have been writing client/server software in an OpenBSD virtual machine for the security and the kqueue functionality; not to mention the rest of the virtual clients crash that I have tried. I figure that trying to sell the service idea, even if I can't get a job, when they ask what qualifies me to have such ideas, I can say I have the credentials. I just got issued the patent this year. What would you do in this situation to be a viable candidate for employment? Have a question for Slashdot's readers? Take a look at other recent questions first to see if someone else has had a similar question. And if not, ask away! The more details and context you include, the more likely your question will be selected.

itwbennett writes: Slashdot readers will remember that back in February, electric car battery maker A123 Systems sued Apple for allegedly "raiding" the Waltham, Massachusetts, company and hiring five employees, including two top-level engineers. The loss of these workers essentially forced A123 to shut down some of its main projects, the suit alleged. Now, according to court documents filed Monday, A123 and Apple "have reached an agreement, signed a term sheet, and are in the process of drafting a final settlement agreement."

Nerval's Lobster writes: Despite years of layoffs and tumbling net worth, AOL seemed to get a new lease on life this week when Verizon bought it for $4.4 billion. But even if AOL's still alive, using an AOL email address has long been seen as a way of signaling that you're stuck in the 1990s. A recent analysis of Dice data found that a mere 1.8 percent of those registering for the site used an AOL address, versus 55 percent for Gmail. For the past several years, Websites from Gizmodo to Lifehacker have all declared that still using an AOL email address is counterproductive, to put it mildly. But is that actually true? Do the people in your life and work actually care whether you use AOL, Hotmail, Gmail, or a custom address, or is the idea of 'email bias' an overblown myth?

When the original Silk Road was shut down in 2013, it provided definitive evidence that federal law enforcement was targeting online black markets. Later, after the fall of Silk Road 2.0 and the Evolution Market's admins running off with their customers' money, you might have expected people to become more wary of dark net markets — but that doesn't seem to be the case. The number of products being bought and sold is up significantly since last year, and it's quadrupled since the original Silk Road fell. "The most enduring institution on the Dark Net is Agora. Founded in December 2014, amid the rubble of Silk Road's fall, Agora now accounts for 37 percent of all Dark Net product listings. It's a drug-heavy market with substantial supplies in marijuana, ecstasy, prescription drugs, and stimulants—and nearly any other drug you can imagine."

When the original Silk Road was shut down in 2013, it provided definitive evidence that federal law enforcement was targeting online black markets. Later, after the fall of Silk Road 2.0 and the Evolution Market's admins running off with their customers' money, you might have expected people to become more wary of dark net markets — but that doesn't seem to be the case. The number of products being bought and sold is up significantly since last year, and it's quadrupled since the original Silk Road fell. "The most enduring institution on the Dark Net is Agora. Founded in December 2014, amid the rubble of Silk Road's fall, Agora now accounts for 37 percent of all Dark Net product listings. It's a drug-heavy market with substantial supplies in marijuana, ecstasy, prescription drugs, and stimulants—and nearly any other drug you can imagine."

Emmett Plant (former Slashdot editor as well as video interviewee) writes: Legend of the Red Dragon was written by Seth Robinson in 1989, and it remains one of the most popular games of the DOS BBS era. Chris England has been doing his part to keep the game alive for the past twelve years, adapting an installation that runs on Linux. I was only able to play for two days before I was overcome with curiosity -- I wrote to Chris, politely inquiring as to how it all came together. Read on below for a look into Chris's motivations, the state of the project, and just how deeply nested it can all get, when bringing games from early BBS days into the modern era. Emmett Plant: What was your first encounter with LORD?

Despite it's PG-13 nature, I discovered the game at age 12 when I was running a local dial-up BBS [The Slaughter House, Langley BC] and echo-mail network. I had never heard of the game, but users kept asking for it. I ignored the first few requests, but eventually caved to my loyal regulars and installed it. My first time "playing" it was actually just to test to see if it worked. Had I have been more inquisitive and known it was an interactive text based RPG about slaying dragons, I would have installed--and played it--much earlier.

EP: You've had this game running for well over a decade now. Has it gotten easier to manage as time has gone by, or has it become more difficult?

With many years of fine tuning and automation, it has become very easy to manage. Between work and my addiction to the remote British Columbia wilderness, either my time was saturated or I was simply not around to keep up with issues like investigating players suspected of using multiple accounts or dealing with players taking advantage of known bugs. This led to a level of frustration among users in early years. For example, in our environment there is no carrier detection. If a player disconnected in an IGM [In-Game Module], they were essentially protected from being battled by other users. Fast forward to today where if a player attempted this, within a short period of time the system would detect it and leave them vulnerable, "sleeping in the fields.”

EP: You've created a custom BBS to manage these games -- How does it work?

The BBS part is a fairly basic sign-up, authentication and menu system made in perl. Much like a regular BBS, when a user selects the menu option to enter a game, a dropfile is generated and passed to the game. After that, things get a little different. It dynamically creates an autoexec.bat to invoke the games start.bat file with the appropriate node parameter and then fires up dosemu. The BBS itself listens locally on a non-standard port through xinetd/in.telnetd, as I needed to create a proxy script to reside in front listening for the incoming telnet connections. This was necessary in order to sanitize some undesirable input with a script that could make decisions and manipulate the packet contents in some cases. Aside from that, there are a number of automation scripts running in the background which range from compensating for lack of carrier detection and analyzing logs to converting LORD color ASCII to HTML and of course sending me a text message when it's time to announce a winner and reset a game.

EP: LORD was written in the dial-up era. What challenges have you faced in making it available for the modern age?

There are so many pieces that need to work together. I tried a number of combinations of operating systems, dosemu/dos versions, netfossil drivers, ANSI drivers, BBS software, LORD versions, IGM's, etc. It was difficult to find a combination where all components would play nice for the long haul. Having a stable environment was a top priority, so I decided to make my own BBS, forget about the fossil routines and just run the game as if it's running locally. This resulted in stability, but presented a number of other challenges from a security standpoint. IGM's with special sysop functions like "drop to DOS" were out of the question and I needed to prevent every possible method that could be used to break out of a batch file.

EP: There's a Facebook group and a Twitter account for the games -- How are these social media tools used?

Prior to Facebook and Twitter, we used a forum on the website so players could communicate outside the game and I could announce upcoming rounds. Though I had moderators, it was still something I needed to babysit and keep secure. I was very happy to outsource the forum to Facebook as it was less work for me while at the same time, it gave the game a little more mainstream/modern exposure. Twitter seemed like a good platform to announce the start of new rounds, but I think most rely on the Facebook notification.

EP: How do you deal with problematic players?

If someone gets completely out of hand and or won't adhere to warnings, disabling the account and iptables seems to solve the issue efficiently. It takes a lot more effort for someone to change their IP address, and sign up again from a new email address than it does for me deal with it. And for what motive? To write something rude or annoying in the daily news or flowers? Most people just don't get that bored, so it has only come to that a couple of times.

EP: What do you do for a dayjob?

You probably guessed, but I will go ahead and confirm that I’m a System Administrator.

EP: Why do you do this?

Though I shut down the dialup BBS after a few years of service--in pursuit of figuring out how Internet web servers, mail servers and database servers worked--those sysop/sysadmin instincts didn't go away. I felt rather guilty about letting BBS users down, but the reality is that I needed to selfishly tie up the phone line and replace DOS with Slackware. Making this system was my way of making up for it and then some.

--

Editorial Note: The author of this piece made a $10 donation to the site before inquiring to write this article. He’s a level 8 warrior in Game 1, and he’s been killed at least three times already. He does not regret the donation.

theodp writes: "Bill Gates famously spent hundreds of millions of dollars to develop, implement and promote the now controversial Common Core State Standards," reports the Washington Post's Valerie Strauss. "He hasn't stopped giving." In the last seven months, the Bill & Melinda Gates Foundation has poured more than $10 million into implementation and parent support for the Core. Strauss adds: "Gates is the leader of education philanthropy in the United States, spending a few billion dollars over more than a decade to promote school reforms that he championed, including the Common Core, a small-schools initiative in New York City that he abandoned after deciding it wasn't working, and efforts to create new teacher evaluation systems that in part use a controversial method of assessment that uses student standardized test scores to determine the 'effectiveness' of educators. Such philanthropy has sparked a debate about whether American democracy is well-served by wealthy people who pour part of their fortunes into their pet projects — regardless of whether they are grounded in research — to such a degree that public policy and funding follow." If you're still on the fence about Common Core after viewing it, the Onion just came out with a nice list of the pros and cons of standardized testing that may help you decide.

theodp writes: "Bill Gates famously spent hundreds of millions of dollars to develop, implement and promote the now controversial Common Core State Standards," reports the Washington Post's Valerie Strauss. "He hasn't stopped giving." In the last seven months, the Bill & Melinda Gates Foundation has poured more than $10 million into implementation and parent support for the Core. Strauss adds: "Gates is the leader of education philanthropy in the United States, spending a few billion dollars over more than a decade to promote school reforms that he championed, including the Common Core, a small-schools initiative in New York City that he abandoned after deciding it wasn't working, and efforts to create new teacher evaluation systems that in part use a controversial method of assessment that uses student standardized test scores to determine the 'effectiveness' of educators. Such philanthropy has sparked a debate about whether American democracy is well-served by wealthy people who pour part of their fortunes into their pet projects — regardless of whether they are grounded in research — to such a degree that public policy and funding follow." If you're still on the fence about Common Core after viewing it, the Onion just came out with a nice list of the pros and cons of standardized testing that may help you decide.

theodp writes: "Bill Gates famously spent hundreds of millions of dollars to develop, implement and promote the now controversial Common Core State Standards," reports the Washington Post's Valerie Strauss. "He hasn't stopped giving." In the last seven months, the Bill & Melinda Gates Foundation has poured more than $10 million into implementation and parent support for the Core. Strauss adds: "Gates is the leader of education philanthropy in the United States, spending a few billion dollars over more than a decade to promote school reforms that he championed, including the Common Core, a small-schools initiative in New York City that he abandoned after deciding it wasn't working, and efforts to create new teacher evaluation systems that in part use a controversial method of assessment that uses student standardized test scores to determine the 'effectiveness' of educators. Such philanthropy has sparked a debate about whether American democracy is well-served by wealthy people who pour part of their fortunes into their pet projects — regardless of whether they are grounded in research — to such a degree that public policy and funding follow." If you're still on the fence about Common Core after viewing it, the Onion just came out with a nice list of the pros and cons of standardized testing that may help you decide.

mpicpp sends news that Verizon has agreed to pay $90 million (PDF), and Sprint another $68 million (PDF), to settle claims that they placed unauthorized charges on their customers's bills. The process, known as "cramming," has already cost T-Mobile and AT&T settlements in the tens of millions as well. Most of the settlement money will go towards setting up refund programs, but Verizon and Sprint will be able to keep 30% and 35% of the fees they collected, respectively. In response to the news, both companies issued vague statements about "putting customers first." They are now banned from charging for premium text message services and must set up systems to ensure informed consent for third-party charges.

mpicpp sends news that Verizon has agreed to pay $90 million (PDF), and Sprint another $68 million (PDF), to settle claims that they placed unauthorized charges on their customers's bills. The process, known as "cramming," has already cost T-Mobile and AT&T settlements in the tens of millions as well. Most of the settlement money will go towards setting up refund programs, but Verizon and Sprint will be able to keep 30% and 35% of the fees they collected, respectively. In response to the news, both companies issued vague statements about "putting customers first." They are now banned from charging for premium text message services and must set up systems to ensure informed consent for third-party charges.

fulldecent writes: Popular photo printing website Artisan State, which specializes in bound photo books mostly for weddings or other events, unintentionally makes all its uploaded user photos available publicly for download. This case study shows how their photos are able to be downloaded and discusses the things vendors should think about when considering security of seemingly private user content. The case study also discusses how this flaw was reported to the vendor, but unfortunately never fixed. This follows other articles on Slashdot discussing security disclosure. How do you report vulnerabilities to vendors? Do you support publishing them if they are not fixed in a reasonable time?

fulldecent writes: Popular photo printing website Artisan State, which specializes in bound photo books mostly for weddings or other events, unintentionally makes all its uploaded user photos available publicly for download. This case study shows how their photos are able to be downloaded and discusses the things vendors should think about when considering security of seemingly private user content. The case study also discusses how this flaw was reported to the vendor, but unfortunately never fixed. This follows other articles on Slashdot discussing security disclosure. How do you report vulnerabilities to vendors? Do you support publishing them if they are not fixed in a reasonable time?

fulldecent writes: Popular photo printing website Artisan State, which specializes in bound photo books mostly for weddings or other events, unintentionally makes all its uploaded user photos available publicly for download. This case study shows how their photos are able to be downloaded and discusses the things vendors should think about when considering security of seemingly private user content. The case study also discusses how this flaw was reported to the vendor, but unfortunately never fixed. This follows other articles on Slashdot discussing security disclosure. How do you report vulnerabilities to vendors? Do you support publishing them if they are not fixed in a reasonable time?

fulldecent writes: Popular photo printing website Artisan State, which specializes in bound photo books mostly for weddings or other events, unintentionally makes all its uploaded user photos available publicly for download. This case study shows how their photos are able to be downloaded and discusses the things vendors should think about when considering security of seemingly private user content. The case study also discusses how this flaw was reported to the vendor, but unfortunately never fixed. This follows other articles on Slashdot discussing security disclosure. How do you report vulnerabilities to vendors? Do you support publishing them if they are not fixed in a reasonable time?

An anonymous reader points out an article about Backyard Brains, a small company notable for turning cockroaches into cyborgs. The article explores how such an odd use of science and technology can actually form the basis of a business. They primarily work with educational organizations to bring their brand of DIY neuroscience to students and other interested parties. School budgets are often small, so a key part of Backyard Brains's goal is to make things inexpensive. "We want to inspire a generation of citizen-scientists. If we can lower the barrier to entry so the only limit is creativity, that might help with finding treatments for neurological disorders." As they find success, they're developing more research kits, and finding more ways to make cyborg insects into a business.

merbs sends an update on MakerBot, one of the most well known names in the 3D-printing industry. After its acquisition by Stratasys in 2013, defective parts plagued the company's printers in 2014. MakerBot co-founder and CEO Bre Pettis stepped down, and the company laid off 20% of its employees. The new CEO, Jonathan Jaglom, is now talking about how they're rebuilding MakerBot, and where we can expect it to go in the future. "The 39-year-old, Swiss-born Jaglom says that his priorities since taking over have been to dedicate more attention to customer support, to address the remaining fallout from the extruder problem, and to reorient the company to target its Replicators to the professional and educational markets."

Jaglom also envisions a sort of "iTunes for 3D printing," where people can easily buy designs online and print them out at home. He says, "I'll be sitting at home. Maybe something broke; maybe my glasses. Maybe I want to reprint it and I'll go to Oakley, Ray Ban, whatever, Philippe Starck in this case, download the file, pay $3.49 for it, and print it at home. And then you will have to go to your Kinko's or your Fab Labs, your local 3D printing, if you want it in metal or plastics you can't have at home."

merbs sends an update on MakerBot, one of the most well known names in the 3D-printing industry. After its acquisition by Stratasys in 2013, defective parts plagued the company's printers in 2014. MakerBot co-founder and CEO Bre Pettis stepped down, and the company laid off 20% of its employees. The new CEO, Jonathan Jaglom, is now talking about how they're rebuilding MakerBot, and where we can expect it to go in the future. "The 39-year-old, Swiss-born Jaglom says that his priorities since taking over have been to dedicate more attention to customer support, to address the remaining fallout from the extruder problem, and to reorient the company to target its Replicators to the professional and educational markets."

Jaglom also envisions a sort of "iTunes for 3D printing," where people can easily buy designs online and print them out at home. He says, "I'll be sitting at home. Maybe something broke; maybe my glasses. Maybe I want to reprint it and I'll go to Oakley, Ray Ban, whatever, Philippe Starck in this case, download the file, pay $3.49 for it, and print it at home. And then you will have to go to your Kinko's or your Fab Labs, your local 3D printing, if you want it in metal or plastics you can't have at home."

astroengine sends word that the astronauts aboard the International Space Station will be staying up there longer than expected while engineers for Russia's space program try to figure out if it's safe to launch more rockets. The recent Russian cargo mission that spun out of control and eventually fell back into the atmosphere sparked worries that a vessel sent to retrieve the astronauts wouldn't make it all the way to the ISS's orbit. Roscosmos and NASA said the next rocket launch will be postponed at least two months. Even though the Russian cargo ship failed to reach the ISS, they have plenty of food, water, and air to last them to the next scheduled supply run — a SpaceX launch in late June.

itwbennett writes: A team of anonymous developers who recently created a Linux rootkit that runs on graphics cards has released a new proof-of-concept malware program that does the same on Windows. A Mac OS X implementation is also in the works. The problem the developers are trying to highlight lies not with the operating systems, such as Windows or Linux, nor with the GPU (graphics processor unit) vendors, but rather with existing security tools, which aren't designed to scan the random access memory used by GPUs for malware code.

A week ago you had the chance to ask Fark Founder Drew Curtis about wasting hours at work reading stories about Florida, and his Kentucky gubernatorial campaign. We'll be checking back with Drew as the race proceeds, but for now you can read his answers to your questions below. Culture Change
by eepok

There was a time when Fark Boobies links were mixed in with news links. Then it became its own tab. Then it was reborn as "Foobies"-- a wholly separate site. More recently, a strict "Anti-Misogyny" standard on Fark discussions was implemented which included the dis-allowance of the use of the word "rape" except in the academic sense, dis-allowing the use of demeaning terms in describing women, and suggesting that a female victim of a crime was somehow asking to be victimized.

Examples of dis-allowed uses include the meme "40 lbs. Box of Rape", references to the Whoopi Goldberg differentiation between "rape" and "rape rape", and Todd Akin's "legitimate rape" gaffe.

To say that the change was met with disdain would be an understatement. The ensuing threads were filled with battles back and forth between those who assert that such references and jocularity is proof a genuine hatred of women (misogyny) while others assert that lumping together edgy attempts at comedy with the genuine hatred of women is prejudicial and incredibly offensive.

Given Fark's historic culture of pushing/punching the boundaries of political correctness (see: "Welcome to Fark" memes) where almost nothing is so sacred that it cannot be joked about (see: "Window seat, please" memes), why was this decision made? Why were so many genuinely non-misogynistic actions/comments/memes lumped in with that term?

My partner and I have discussed the change at length. We're both fans of audacity humor, so we actually "get a kick out of the replies". Together, we came up with the following potential rationales. Which did we get right? Which didn't we?

• 1. I got older and my tastes have changed. I don't want to run a site that goes counter to my own sensibilities.
• 2. I received pressure from external organizations (other sites, special interests, advertisers).
• 3. I want to grow the site to be more inclusive of people who would be offended by such jokes.
• 4. I'm running for public office and Fark.com, if not cleaned up, would destroy my campaign.
• 5. I've received overwhelming negative feedback regarding the state of Fark comments and the numbers supporting a change greatly outnumber those who didn't like the change.
• 6. I actually believe that everyone who jokes about women hates women and they should be stopped.

Drew: It's a mix of several of these:

2. sort of - back in 2005 when we dipped our toes into direct ad sales we were told by media buyers they wouldn't touch us with a 10 ft pole with -links- to nudity. Which I still think is absurd. I argued like crazy that clearly-labeled links to nudity were no different in format than strip club advertisements in the phone book but made no headway whatsoever. So on the links note it was a business decision in 2005.

4. no impact whatsoever - in fact my instructions to the mods and admins were "change nothing". Part of my dislike for professional politicians is that they're manufactured people and we can all tell this is the case. I am a real person, I have flaws, and there is no way I'd be able to disguise my sense of humor from anyone paying attention.

5. this did happen - over the years stories rolled in about women being chased off the site by a very small percentage of men via behavior that we didn't expressly forbid. Our posting rules change was very slight and the vast majority of our community members had no problem adhering to it, probably because they were already in compliance anyhow.

It also fit with my general criteria for what makes taglines funny. I dislike rape jokes the same way I dislike puns - because as styles of humor go they're both too easy. I prefer more nuanced humor - especially slow burns.



Improving photoshop contests
by TWX

Fark used to have some of the best Photoshop contests, both in terms of what people came up with (thinking of the Lukket fake Rand Corporation computer as an example), and in the way that the in-line display and voting for the entries worked. What would you like to do with these going forward to get more involvement for these contests?

Drew: I'm open to suggestions here. P.S. contests evolved out of caption contest pretty early on - I hadn't intended to make them a feature but people really liked it so we kept it (much like caturday). I don't know what makes them tick - the main thing I did was not kill them off. Basically I have no idea what to do but I'd take a look at anything anyone suggested.



Four questions
by sandbagger

• Discussions on Fark don't go to infinity and beyond anymore. Is the attempt to make Fark more PC a response to that or a consequence?
• You're HTML 2.0 compliant, it seems. Ever planning on updating the back end?
• A few times a year there's a post to TFD asking for ideas on how to improve things. Nothing changes: why?
• The ethos of Fark used to be say anything --- smash any idols ---just be funny doing it. Has moving away from that basically made Fark no different from a lot of other discussion/aggregation sites?

Drew: There's no attempt to make Fark more PC. I think what happened is the rest of the Internet moved -far- past us on the anything-goes relative scale.

Backend: We're constantly updating things but we're very slow. I'm fine with that.

Nothing changes: What do you think we should have changed that was suggested?

The ethos of Fark was never say anything. Close though. My perfect Fark tagline is one that makes you initially gasp in horror, then on second reading you discover that the tagline hasn't actually crossed the line but damn it's right on the line and thinking about jumping.



Litigation
by bazmail

Hi Drew, what was the closest you ever came to shutting down FARK, due to litigation, threats from idiots you made famous, boredom, $$$ shortage etc?

Drew: We've almost been wiped out at least three times in the past 16 years. The worst was 2008-2009 when advertising all but dried up. I went without a salary for nearly two years. I was just about to pull the plug when all of the sudden right around xmas 2009 receivables skyrocketed out of nowhere.



Breaking Public Mindset
by Anonymous Coward

First off, thanks for Fark. Has killed many a hour of dull work! On to my question

For those of us techies immersed in the web, and those who have run across Fark on a given day, most of us will presumably know your background and to a point, your ideological leanings. How do you branch the divide with the public not versed on your background, with you being well versed on the tech. side of things, and translate that to Kentucky's highest elected position? And moreso, likely in the face of skeptics who might see you as an obscure 'Internet' site winner, and not someone who is versed in public policy, legalize, and politics in Kentucky?

Drew: It's correct that I'm not versed in public policy. However what's strange to me is that for some reason our elected officials, who should be far more well versed in publicly policy than I am, don't seem particularly intellectually curious about public policy ideas not backed by their own party. Democrats rarely budge from their set of talking points and neither do Republicans, but there's no way either side is 100% correct. campaign contributors impact this to a great degree.

But here's the thing - elected officials who belong to a political party are controlled by that party even while in office. Which means they can't (or won't) entertain the other party's public policy ideas while their own party is selling influence in the opposite direction.

This is ridiculous - if there's anything we all want it's the best solutions. Which have little to do with issues by the way - implementation matters far more than the issues. I haven't seen a candidate yet that can effectively separate the issues from the actual implementation.

For example, I'm all for smaller government but how's that going to work exactly? 20% off the top is a blunt implementation taken straight out of a late 1980s MBA textbook and it's a complete failure as a management strategy. Because meanwhile we still need roads, schools, and police that can function effectively. I'm not saying there isn't waste in government but let's go find it first before we cut blindly.

This is the crux of the problem - we are stuck with elected officials controlled by parties that sell influence to the highest bidder, usually in the form of ham-fisted solutions that have vast unintended (or intended) negative consequences.

So instead of doing the same thing we've always done, which no one thinks is actually working in the first place, how about we elect someone who's capable of investigating policy issues using data-driven analysis. And if the data can't tell us what to do, then let's just wait until we know for sure when more data arrives. Kentucky doesn't have to experiment - we can wait for other states to prove experimental ideas work. I want the legislature to send me exact copies of initiatives that have worked elsewhere.



Your biggest challenge to getting elected?
by gregorino

You and Ms. Curtis deserve tremendous credit for such a worthy effort. Thanks on behalf of US citizens eager for change -- or at least a demonstration that change is possible. Although some ambiguity remains, your site shows transparency, the application of sound business principles, a close examination of successful policies incorporated elsewhere, creativity, and an open ear for discussion from all sides. -- Which of the following is your greatest challenge to getting elected and how do you surmount it: (a) voter apathy, (b) lack of campaign funds, (c) misrepresentation or lack of presence in the media, (d) a self-described lack of political qualifications, (e) a lack of political experience, (f) lack of voter confidence, and (g) lack of voter advocacy?

Drew: Voter apathy. Everyone agrees the system doesn't work but no one thinks they can change it. There are 3.2 million registered voters in KY. Last gubernatorial election, 880k people voted. In a three way race it takes 300k-400k to win. Surely there are that many voters willing to try something different.

It's not apathy per se though - I've come to the conclusion that the parties actively don't want voters involved (other than ones loyal to their cause). It threatens their duopoly on selling influence.

Ask any party supporter in Kentucky and they'll tell you the same thing: that I can't win. What they're actually saying to you is don't vote. Give up. You're powerless to change -our- system.

Here are some interesting numbers however:

Last election, 9% of the electorate voted for an Independent whose positions aren't significantly different from my own.

At least 25% of democrats are voting against the main candidate as a protest vote. I don't believe he'll convince them to vote for him over me. Call that another 12%-15% of all voters (I'm fudging because 25% of Democrats are also undecided and he won't get all of them either).

Whoever wins the GOP will win with barely 30% of the vote if that. And it's been ugly. I don't know what percentage is available here but I'm easily sitting at 21%-24% in a race where I need 34%.

Which is 88,000-100,000 votes.

Those can come from any of the following pools:

• the ~100k undecided democrats who vote. I will get some of these.
• the remaining ~280k republicans who vote. I will get some of these.
• the 800k voters that number voted in the 2012 presidential election and did not vote in the 2011 gubernatorial election. I will get some of these - and the other candidates will not get many. These people were planning on staying home otherwise.
• anyone else who decides to jump in from the remaining 1.6m registered voter pool. I will get some of these - and the other candidates will not.

So we'll see.



Prevent Party Rollup
by Scottingham

Say your political campaign is successful. Do you have a plan in place to stop one of the "two" parties from co-opting your message and claiming to be a part of the same movement? I'm thinking Tea Party -> GOP and 'Occupy' -> Democrats. Both only 'sorta' worked (TheTea Party was much more successfully assimilated IMO), yet ultimately were co-opted.

Drew: This is why I'm running independent - so that doesn't happen. I'm wanting to encourage other independent candidates to run as well. The only thing we should all have in common is that our votes can't be bought and we'll take a look at any solution presented to us. Sharing a common ideology isn't a requirement.

And if they actually did co-opt the message because they implemented it, well good.



closet skeletons
by Anonymous Coward

Drew, what is the worst possible thing that a political opponent could dig up on you - what don't you want people to know?

Drew: Well in Kentucky it's probably the fact that I attended Duke's Talent Identification Program as a teenager for four years. I'm hoping my undying hatred of Duke's basketball team will help people over look that indiscretion.

Nerval's Lobster writes: It's no secret that tech pros with extensive IT security backgrounds are in high demand, especially in the wake of last year's high-profile hacks of major companies such as Sony and Home Depot. Which security-related job pays the most? According to a new analysis of Dice salary data, a lead software security engineer can expect to earn an average of $233,333 in 2015, followed by a director of security, who can expect to earn $200,000. Nor are those outliers: Chief information security officers, directors of information security, and IT security consultants can all expect to earn close to $200,000, if not more. While many subfields of IT security prove quite lucrative, there are also other jobs that earn below the average for tech pros. Security analysts will make an average of $59,880 this year, for instance, while security installation technicians—because somebody needs to install the cameras and sensors—can expect to earn $31,680. Compare that to the average tech-pro salary of $89,450 in 2014, which is only expected to rise this year. According to a 2014 report from Global Knowledge and Penton, those armed with certifications such as CRISC, CISM, and CISA can expect to earn a healthy six figures a year.

Nerval's Lobster writes: It's no secret that tech pros with extensive IT security backgrounds are in high demand, especially in the wake of last year's high-profile hacks of major companies such as Sony and Home Depot. Which security-related job pays the most? According to a new analysis of Dice salary data, a lead software security engineer can expect to earn an average of $233,333 in 2015, followed by a director of security, who can expect to earn $200,000. Nor are those outliers: Chief information security officers, directors of information security, and IT security consultants can all expect to earn close to $200,000, if not more. While many subfields of IT security prove quite lucrative, there are also other jobs that earn below the average for tech pros. Security analysts will make an average of $59,880 this year, for instance, while security installation technicians—because somebody needs to install the cameras and sensors—can expect to earn $31,680. Compare that to the average tech-pro salary of $89,450 in 2014, which is only expected to rise this year. According to a 2014 report from Global Knowledge and Penton, those armed with certifications such as CRISC, CISM, and CISA can expect to earn a healthy six figures a year.

hypnosec writes with some positive news for Skynet watchers, in that humans still have at least a slight lead against the AIs who might one day imprison us in energy-harvesting goo tanks, or at least beating us in Las Vegas. The two-day poker showdown involving four of the world's top (human) players and a Carnegie Mellon University AI program called Claudico saw the professionals win, after several days of heads-up no-limit Texas Hold'em. "Despite the win, the poker players' $732,713 collective lead over Claudico wasn't quite large enough to attain statistical significance, experts have said. This means that the results can't be accepted as scientifically reliable thereby indicating that the "Brains Vs. Artificial Intelligence" competition effectively ended in a statistical tie." On the other hand, the computers sure got over what looked like a rout by the humans.

hypnosec writes with some positive news for Skynet watchers, in that humans still have at least a slight lead against the AIs who might one day imprison us in energy-harvesting goo tanks, or at least beating us in Las Vegas. The two-day poker showdown involving four of the world's top (human) players and a Carnegie Mellon University AI program called Claudico saw the professionals win, after several days of heads-up no-limit Texas Hold'em. "Despite the win, the poker players' $732,713 collective lead over Claudico wasn't quite large enough to attain statistical significance, experts have said. This means that the results can't be accepted as scientifically reliable thereby indicating that the "Brains Vs. Artificial Intelligence" competition effectively ended in a statistical tie." On the other hand, the computers sure got over what looked like a rout by the humans.

theodp writes: Speaking at a National Journal LIVE event that was sponsored by Mark Zuckerberg's FWD.us and Laurene Powell Jobs' Emerson Collective, FWD.us "Major Contributor" Lars Dalgaard was asked about the fate of 500 laid-off Southern California Edison IT workers, whose forced training of their H-1B worker replacements from offshore outsourcing companies sparked a bipartisan Senate investigation. "If you want the job, make yourself able to get the job," quipped an unsympathetic Dalgaard (YouTube). "Nobody's going to hold you up and carry you around...If you're not going to work hard enough to be qualified to get the job...well then, you don't deserve the job." "That might be harsh," remarked interviewer Niharika Acharya. Turning to co-interviewee Pierre-Jean Cobut, FWD.us's poster child for increasing the H-1B visa cap, Acharya asked, "Do you agree with him?" "Actually, I do," replied PJ, drawing laughs from the crowd.

The Washington Post reports that after 42 days with no new cases of Ebola infection in Liberia, the World Health Organization has declared over the outbreak which killed more than 4,000 people in that country; 42 days means twice the known maximum incubation period for the disease, though scientists' understanding of the virus's persistence continues to evolve. From the WHO's statement: Health officials have maintained a high level of vigilance for new cases. During April, the country’s 5 dedicated Ebola laboratories tested around 300 samples every week. All test results were negative.

While WHO is confident that Liberia has interrupted transmission, outbreaks persist in neighbouring Guinea and Sierra Leone, creating a high risk that infected people may cross into Liberia over the region’s exceptionally porous borders.

New submitter sundarvenkata writes: I am sure most slashdotters (including the ones who had the I-am-an-indispensable-snowflake stance in the past) have already foreseen the writing on the wall for the future of tech professions (with IT being the worst hit) given some of the ominous news in the past few years: here, here and here. Of course, there are always the counter-arguments put forth by slashdotters that "knowing the business" or "being the best in what you do" would save one's derriere as if the offshore workers will remain permanently impaired of such skills. But I was wondering if some slashdotters could share some constructive real-life experiences of planning a transition to a relatively offshore-proof career. If you have already managed to accomplish such a career change, what was your journey and what would your advice be to other aspirants?

New submitter sundarvenkata writes: I am sure most slashdotters (including the ones who had the I-am-an-indispensable-snowflake stance in the past) have already foreseen the writing on the wall for the future of tech professions (with IT being the worst hit) given some of the ominous news in the past few years: here, here and here. Of course, there are always the counter-arguments put forth by slashdotters that "knowing the business" or "being the best in what you do" would save one's derriere as if the offshore workers will remain permanently impaired of such skills. But I was wondering if some slashdotters could share some constructive real-life experiences of planning a transition to a relatively offshore-proof career. If you have already managed to accomplish such a career change, what was your journey and what would your advice be to other aspirants?

New submitter sundarvenkata writes: I am sure most slashdotters (including the ones who had the I-am-an-indispensable-snowflake stance in the past) have already foreseen the writing on the wall for the future of tech professions (with IT being the worst hit) given some of the ominous news in the past few years: here, here and here. Of course, there are always the counter-arguments put forth by slashdotters that "knowing the business" or "being the best in what you do" would save one's derriere as if the offshore workers will remain permanently impaired of such skills. But I was wondering if some slashdotters could share some constructive real-life experiences of planning a transition to a relatively offshore-proof career. If you have already managed to accomplish such a career change, what was your journey and what would your advice be to other aspirants?