Do you really have to compromise a hundred thousand of them? Looking at how close our elections are I'd wager that targeted attacks against 1-2% of those could swing a POTUS election.
I don't see it as a point of failure; I see it as another attack surface.
The one thing distributed voting systems had going for them was you had to hack a bunch of separate disparate systems. Now you've got one tidy gateway into them.:/
With some exceptions like extended attributes and other non-standardized features, which an application like Dropbox doesn't need.
Dropbox does some slightly different functions than a normal file system application. It needs to know when a file has been modified so it can sync it, what was modified in the file so it can delta sync, and keep track of file locks for open files so it can track versioning accurately. They may very well have a legitimate use for extended attributes; it is not a safe assumption that they don't need them.
The checksums used for file change tracking specifically would be an excellent candidate for extended attributes. This is, coincidentally, one of the specific use cases cited in the getfattr man page.
The $64,000 question is "Most filesystems support these. What's special about ext4? Are you seeing bugs in the other filesystem implementations?"...
It's important to understand the limitations of this protection. It will keep your/home safe if you lose your laptop, but it doesn't protect you from active attacks e.g. a malicious user that swaps out your copy of (insert binary you are likely to run here) for their copy that contains a rootkit. The next time you log in and decrypt your home directory, run the aforementioned binary, and all your base are belong to them.
'Why Liberal Arts and the Humanities Are as Important as Engineering'
Because a good Barista is damn hard to find.
- -
__
The problem isn't that LA and Humanities are unimportant. The problem is that supply massively outstrips demand. ~4 million degrees are issued per year in the US. That's an ocean of candidates you can get lost in. Graduating into that ocean with $40,000 of non-dischargeable debt and no actionable career plan is not a reliable recipe for success.
With the exception of a tiny amount we've shot into space, orders of magnitude less than rounding error, every resource we've used on Earth is still here. We may have to mine our landfills and get a lot better at recycling, but the resources still exist.
The gap to is energy. We need energy alternatives to dead dinosaurs. Wind and solar are steps in the right direction, and we need to keep doing them. IMHO, It probably makes sense to invest in space based solar power too. Looping back to TFS, if you subtract the resources we consume for energy then our resource day moves down the calendar where it should be.
The average age of a congressman is 57 years; Senators average 61 years. Do you genuinely expect them to understand bittorrent and distributed trackers? One of these boffins was on CNN this morning talking about Facebook "securing our wires". That's not promising at all.
Just wait until some clever fish publishes something our legislators don't like into the Ethereum and Bitcoin blockchains where "pulling the files" would kill a multi-billion dollar industry.
TFS fails to mention that we've spent a giant pile of money on next generation EVA suits already, and what's missing is... A mission to build the suits for.
NASA has no manned Mars mission scheduled, no manned Moon mission scheduled, and no capability to put men in orbit. Through that lens saying spacesuits are going to delay our moon trip is 9% dumb.
Our next major manned spaceflight objective beyond ISS is an orbit around the moon and the "Deep space gateway", another space station that will hoover up the majority of NASA's budget for a generation.
Data point: In 'Capitalism, A love story' Michael Moore purports to speak with a regional airline pilot that makes little enough to qualify for food stamps.
Whether or not you trust Mr. Moore to tell the whole, complete, and unfettered truth is a personal matter. I, in general, do not; though I do respect him very much.
This slack time is a serious consideration as you get toward the tail of a production line. A mile-long production line is a hugely complex dependency chain. Each of the hundreds of individual steps might have 99% uptime, but since each depends on the next the real uptime is 50%.
Case in point: my father worked in the packaging/shipping area of an auto glass manufacturer. When the line had a problem he could go an entire shift or even two (with overtime!) with nothing to do. When things were running right, he could barely keep up.
Imagine that 10 years from now there are 3D printers that print really strong metal parts which can be assembled into a machine gun or similar.
This technology exists today, it's the Iro3d. For what it's worth, it's cheaper to buy chunks of aluminum and machine them into lower receivers instead. That's the only AR part you can't buy off the shelf without a background check.
It doesn't need to be that difficult though. My crappy garage sale SoliDoodle printer is good enough to print an ABS lower receiver that will work for several hundred rounds, and it can't print a decent benchy. With a printer that doesn't suck, e.g. MakerBot or FormLabs you can easily up that to thousands of rounds.
If you are worried about that you should take a moment to ask if that fear is based in reality. Long guns, i.e. rifles and shotguns, are used in less than 10% of gun homicides. Machine guns, aka automatic rifles, and 3D printed guns combined are used so infrequently that they aren't even a rounding error.
Anti-gun groups could spread this knowledge so people could ask legislators for change that could have an impact. They don't do that though, and I genuinely don't understand why.
Bias warning: Gun owner, CCW permit holder, 3d print addict, CNC Mill owner, metal gun maker.
Also one that ships with no useful CLI or development tools, doesn't work with the rest of the world.
Out of the box windows includes the PowerShell and DOS CLI. For development, there are C and C++ compilers in the free Win10 SDK. There is also the free edition of Visual Studio too, but that's a step beyond what I'd consider the OS.
A reasonable response would be "but those things didn't used to be free." They weren't free on Macs for a long time either.
Microsoft is changing. To ignore that and assume it's Balmer's business as usual is ignoring a major change in our industry.
Full disclosure: I work for Microsoft, therefore my opinion is invalid.
In the US, I have a bunch of 120v plugs connected to a 10 or 15 amp breakers for my normal household loads including in the garage.
In the UK, my understanding is (and remember I'm on the left side of the Atlantic) you have a 240V ring circuit with a 20-30 amp breaker for your household loads. Then connected to that you have individual fuses and switches at each plug. That's why your power strips look like a baseball bat.
My question is "Is it hard to put in a EV charger when you have a 240v/20-30A plug in every room?" That is several times more power than I can pull out of my wall socket.
China might be able to, actually. They have a fair amount of experience with weather modification. If they could drop the rain the air reached the area...
Getting stuck is only part of the problem, and basic diving skills are just the start. When cave diving the real problem is sediment. During training you learn to kick even with or above your horizontal torso. Kicking too low can stir up the sediment and cause a "silt-out". This reduces the visibility to zero and is scary even for a trained diver.
According to the news story I heard they are ~3 miles in. For the distance, they'll probably bring them out on rebreathers. That complicates things because they are almost certainly deeper than 6 meters, so they'll need to manage decompression stops. If they are deeper than 30 meters, they'll have to manage gas mix changes too.
It's a seriously non-trivial problem, and squeezes in the cave that separate the rescue diver and the rescue-ee only make it worse.
>What is the point of waste storage being "decentralized"?
It makes the logistics of transporting waste much easier, and is an easier sell to the public.
Like this: "This waste is already here, stored on the surface where tornadoes and floods and terrorists can get to it. If we get a leak in this pool it will be an environmental disaster. We want to put it miles underground, miles deeper than the deepest water wells into rock that hasn't changed in a million years."
I see serious issues with this technology, and it's not a subtle one.
Trump jokes aside, today I do not live under an authoritative regime. I don't exactly trust my government, but I do feel free to speak out against their abuses without fearing prison or worse.
The problem is that governments change, and data is forever. Thirty years from now I could be a geriatric freedom fighter or my children could be fighting the war against the machines. If that happens, that DNA data will still exist and be used against us. I won't be a single wrinkly face among billions, I'll be in a tiny well-documented pool of possibly a dozen individuals.
In this case "think of the children" is entirely appropriate. Contributing to these databases today takes away privacy options for future generations permanently.
This is a terrible idea. Abort. Terminate. Halt. Cease.
Slashdot Mirror
Do you really have to compromise a hundred thousand of them? Looking at how close our elections are I'd wager that targeted attacks against 1-2% of those could swing a POTUS election.
I don't see it as a point of failure; I see it as another attack surface.
The one thing distributed voting systems had going for them was you had to hack a bunch of separate disparate systems. Now you've got one tidy gateway into them. :/
Dropbox does some slightly different functions than a normal file system application. It needs to know when a file has been modified so it can sync it, what was modified in the file so it can delta sync, and keep track of file locks for open files so it can track versioning accurately. They may very well have a legitimate use for extended attributes; it is not a safe assumption that they don't need them.
The checksums used for file change tracking specifically would be an excellent candidate for extended attributes. This is, coincidentally, one of the specific use cases cited in the getfattr man page.
The $64,000 question is "Most filesystems support these. What's special about ext4? Are you seeing bugs in the other filesystem implementations?" ...
It's important to understand the limitations of this protection. It will keep your /home safe if you lose your laptop, but it doesn't protect you from active attacks e.g. a malicious user that swaps out your copy of (insert binary you are likely to run here) for their copy that contains a rootkit. The next time you log in and decrypt your home directory, run the aforementioned binary, and all your base are belong to them.
The limited liquidity in privately owned countries makes it significantly harder to short the stock on margin.
Qualified investors can still do it, but it is significantly harder for joe day trader.
Despite what you'd expect, some of the articles in Playboy are top notch. It's stuff you'd expect to see in the New Yorker, not a skin magazine.
Because a good Barista is damn hard to find.
- -
__
The problem isn't that LA and Humanities are unimportant. The problem is that supply massively outstrips demand. ~4 million degrees are issued per year in the US. That's an ocean of candidates you can get lost in. Graduating into that ocean with $40,000 of non-dischargeable debt and no actionable career plan is not a reliable recipe for success.
With the exception of a tiny amount we've shot into space, orders of magnitude less than rounding error, every resource we've used on Earth is still here. We may have to mine our landfills and get a lot better at recycling, but the resources still exist.
The gap to is energy. We need energy alternatives to dead dinosaurs. Wind and solar are steps in the right direction, and we need to keep doing them. IMHO, It probably makes sense to invest in space based solar power too. Looping back to TFS, if you subtract the resources we consume for energy then our resource day moves down the calendar where it should be.
The average age of a congressman is 57 years; Senators average 61 years. Do you genuinely expect them to understand bittorrent and distributed trackers? One of these boffins was on CNN this morning talking about Facebook "securing our wires". That's not promising at all.
Just wait until some clever fish publishes something our legislators don't like into the Ethereum and Bitcoin blockchains where "pulling the files" would kill a multi-billion dollar industry.
Also, please seed.
TFS fails to mention that we've spent a giant pile of money on next generation EVA suits already, and what's missing is... A mission to build the suits for.
NASA has no manned Mars mission scheduled, no manned Moon mission scheduled, and no capability to put men in orbit. Through that lens saying spacesuits are going to delay our moon trip is 9% dumb.
Our next major manned spaceflight objective beyond ISS is an orbit around the moon and the "Deep space gateway", another space station that will hoover up the majority of NASA's budget for a generation.
I left a job I loved working with awesome people and a not-terrible commute in exchange for a nearly 50% increase in take-home pay.
(That was a ~%30 increase in actual pay, plus decreased cost of insurance and increased employer contributions to retirement.)
I love my new gig, but I miss the camaraderie of the old one. It's a little lonely.
Data point: In 'Capitalism, A love story' Michael Moore purports to speak with a regional airline pilot that makes little enough to qualify for food stamps.
Whether or not you trust Mr. Moore to tell the whole, complete, and unfettered truth is a personal matter. I, in general, do not; though I do respect him very much.
This slack time is a serious consideration as you get toward the tail of a production line. A mile-long production line is a hugely complex dependency chain. Each of the hundreds of individual steps might have 99% uptime, but since each depends on the next the real uptime is 50%.
Case in point: my father worked in the packaging/shipping area of an auto glass manufacturer. When the line had a problem he could go an entire shift or even two (with overtime!) with nothing to do. When things were running right, he could barely keep up.
The former was much more common than the latter.
Can we please call these something other than Spectre and Meltdown? We're well on our way to Baskin Robin's 31 flavors of S&M.
Glass blanks are *cough* expensive, but making glass telescope mirrors isn't hard. Is there a reason not to make them from glass?
You can learn how from the man himself.
https://www.youtube.com/watch?...
If you want to have (tiny) epic fame forever, create a 3d printable mirror grinding machine.
This technology exists today, it's the Iro3d. For what it's worth, it's cheaper to buy chunks of aluminum and machine them into lower receivers instead. That's the only AR part you can't buy off the shelf without a background check.
It doesn't need to be that difficult though. My crappy garage sale SoliDoodle printer is good enough to print an ABS lower receiver that will work for several hundred rounds, and it can't print a decent benchy. With a printer that doesn't suck, e.g. MakerBot or FormLabs you can easily up that to thousands of rounds.
If you are worried about that you should take a moment to ask if that fear is based in reality. Long guns, i.e. rifles and shotguns, are used in less than 10% of gun homicides. Machine guns, aka automatic rifles, and 3D printed guns combined are used so infrequently that they aren't even a rounding error.
Anti-gun groups could spread this knowledge so people could ask legislators for change that could have an impact. They don't do that though, and I genuinely don't understand why.
Bias warning: Gun owner, CCW permit holder, 3d print addict, CNC Mill owner, metal gun maker.
Out of the box windows includes the PowerShell and DOS CLI. For development, there are C and C++ compilers in the free Win10 SDK. There is also the free edition of Visual Studio too, but that's a step beyond what I'd consider the OS.
A reasonable response would be "but those things didn't used to be free." They weren't free on Macs for a long time either.
Microsoft is changing. To ignore that and assume it's Balmer's business as usual is ignoring a major change in our industry.
Full disclosure: I work for Microsoft, therefore my opinion is invalid.
Let's try that again.
In the US, I have a bunch of 120v plugs connected to a 10 or 15 amp breakers for my normal household loads including in the garage.
In the UK, my understanding is (and remember I'm on the left side of the Atlantic) you have a 240V ring circuit with a 20-30 amp breaker for your household loads. Then connected to that you have individual fuses and switches at each plug. That's why your power strips look like a baseball bat.
My question is "Is it hard to put in a EV charger when you have a 240v/20-30A plug in every room?" That is several times more power than I can pull out of my wall socket.
The UK uses 240V by default, right? That's why they have those massive clublike plugs?
This sword cuts both ways. e.g. Introducing the Office ribbon drove created a significant market opportunity for OpenOffice.
> Can your American heroes stop rainfall?
China might be able to, actually. They have a fair amount of experience with weather modification. If they could drop the rain the air reached the area...
Getting stuck is only part of the problem, and basic diving skills are just the start. When cave diving the real problem is sediment. During training you learn to kick even with or above your horizontal torso. Kicking too low can stir up the sediment and cause a "silt-out". This reduces the visibility to zero and is scary even for a trained diver.
According to the news story I heard they are ~3 miles in. For the distance, they'll probably bring them out on rebreathers. That complicates things because they are almost certainly deeper than 6 meters, so they'll need to manage decompression stops. If they are deeper than 30 meters, they'll have to manage gas mix changes too.
It's a seriously non-trivial problem, and squeezes in the cave that separate the rescue diver and the rescue-ee only make it worse.
DIR or DIE.
>What is the point of waste storage being "decentralized"?
It makes the logistics of transporting waste much easier, and is an easier sell to the public.
Like this:
"This waste is already here, stored on the surface where tornadoes and floods and terrorists can get to it. If we get a leak in this pool it will be an environmental disaster. We want to put it miles underground, miles deeper than the deepest water wells into rock that hasn't changed in a million years."
I see serious issues with this technology, and it's not a subtle one.
Trump jokes aside, today I do not live under an authoritative regime. I don't exactly trust my government, but I do feel free to speak out against their abuses without fearing prison or worse.
The problem is that governments change, and data is forever. Thirty years from now I could be a geriatric freedom fighter or my children could be fighting the war against the machines. If that happens, that DNA data will still exist and be used against us. I won't be a single wrinkly face among billions, I'll be in a tiny well-documented pool of possibly a dozen individuals.
In this case "think of the children" is entirely appropriate. Contributing to these databases today takes away privacy options for future generations permanently.
This is a terrible idea. Abort. Terminate. Halt. Cease.