Slashdot Mirror


User: klingens

klingens's activity in the archive.

Stories
0
Comments
398
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 398

  1. Re:Stupid fucking commies. on Venezuela Will Force Bitcoin Miners To Register With the Government (themerkle.com) · · Score: 1

    Of course they have a way. Where does the miner get his electricity?
    When in the US potgrowers can be found by their electricity usage, why not in Venezuela?
    Unless someone dams a river in the jungle and imports generators from GE or Siemens (both are massively laying of people since no one buys big generators anymore) there is always a way to find miners. At least miners above hobbyists.

  2. Re:Doesn't sound like they got their money's worth on Uber Paid 20-year-old Florida Man To Keep Data Breach Secret (reuters.com) · · Score: 1

    In a bug bounty you show the company the bug and they pay you. Done.
    You do not download millions of customer datasets first. At most you download one or a few as a PoC, preferably your own actually. Not Millions! Somewhere between 1 and 57 million, it goes from PoC to outright criminal theft.

  3. Re:Doesn't sound like they got their money's worth on Uber Paid 20-year-old Florida Man To Keep Data Breach Secret (reuters.com) · · Score: 5, Insightful

    No it was simple extortion in a way the parties involved can claim it isn't extortion.

    Uber has a bug bounty program.
    Guy hacks Uber and steals customer's data.
    Uber then pays the guy to destroy data instead of selling it on some black market.
    So that Uber isn't seen as paying ransom, they pay a bug bounty instead. Also the money being declared "bug bounty" clears the guy of being an extortionist or hacker, so the guy is in the clear regarding the CFAA (Computer Fraud and Abuse Act) and the unlawful hacking is retroactively legitimized.

  4. More of this please! MORE! MORE! on Google Is Pulling YouTube Off the Fire TV and Echo Show as Feud With Amazon Grows (theverge.com) · · Score: 1

    Anything that helps making their privacy destroying big brother products, which can't work without network connections on purpose when there is no real tech reason for it (like all the broken by design NEST products for example), sell less, less desirable etc. then this is a big win for all the consumers world-wide.
    Hooray for Google and Amazon killing each their own shitty products!

  5. Paywalls don't help those big expensive scoops on Prepare for the New Paywall Era (theatlantic.com) · · Score: 2

    You still neeed only a young, cheap journalist to write the recap, but now he also needs a single cheap subscription for the paywall. Can you finance those expensive investigative journalistic scoops on those few subscriptions from other journalists?

    DRM already tried this model and they lost: there only one cracker for the DRM was needed and the war was lost: the media is on bittorrent and OCHs. Good crackers are actually much much rarer than these cheap young journalists. It took almost around year for Denuvo to be cracked, BluRay longer I think, etc.
    All the scoops: less than 5 minutes for a recap to appear on all the other big sites. News works 24/7.

    And in less than 5 years it will probably be a deep learning algorithm by google or amazon that writes the recaps, like they can do sports news today already. It will be marketed as "awesome AI", which of course it isn't. So not even cheap young journalists will be needed anymore

  6. nvidia already tried to establish a CPU line, and they failed just as hard as Intel did with discrete graphics, twice.
    ARM can maybe surplant Intel x86, but nvidia will not, imho. nvidia moved on to other pastures, like self driving car computing where their shaders matter and their CPU tech is not really relevant.

  7. This is no tech company problem. on Tech Companies Have a History of Giving Low-Level Employees High-Level Access (theoutline.com) · · Score: 2

    All, really all, big organizations have this problem. Just ask Manning and Snowden; classic cases of too much access to too much information.
    So governments, corporations, every organization needs to give power over information and access to the lowly peons or those peons can't do the lowly jobs they are supposed to do.
    You can put in controls, access walls and shit, but if you do it, your administrative overhead will go through the roof. Someone like Google might sorta be able to pay for all of this, but it will hurt the bottom line to have a inhouse police. Someone like Twitter which is already leaking money like a faulty bucket leaks water: yeah right...
    Even when you do this, all the security clearances, background checks and mandatory lie detector tests, etc. didn't prevent the whistleblowers.

  8. "incredible" quarter-billion profit? on Bill Gates Is No Longer The World's Richest Person After Amazon Stock Surge (cnn.com) · · Score: 2

    Somebody please help me, but a quarter-billion of dollars in profit is 250 million dollars, right? How is that incredible? I guess for Amazon who posted losses for decades (cause they reinvested every penny into the company) any kind of profit is a good thing, but I wouldn't call 250 million a lot of profit for a company of this size.

    This mainly tells me, Bezos can't think of anything more to grow the company, not that Amazon had a good quarter.
    Or is this one of those slashdot editor gaffes?

  9. Re:How to make any antivirus software safer? on Dodging Russian Spies, Customers Are Ripping Out Kaspersky (thedailybeast.com) · · Score: 1

    No.
    You can use it for SPAM, but that is not malware detection. Thats simple text parsing but has nothing to do at all with AV.
    You cannot scan an filter arbitrary data packets in your router or elsewhere in transit: all proper traffic is at least transport encrypted.
    Then there is the problem of scanning multigigabyte sized datatransfers of e.g. a game for malware. you cannot do that. Not possible, not at all. In former times 30 years ago it was a malformed zip-file that expanded forever creating a DOS, last month there was a different variation of the same in form of a gitbomb https://kate.io/blog/git-bomb/
    And there are installshield files, other installers, binary packers, and a gazillion other things which you can never ever scan.
    a base64 encoded file in your mail you can scan. a base64 encoded zip file? an ecoded zip file with a pdf inside? This pdf with Javascript and flash inside etc. You need a system at least as complicated as your end point system to scan such things, and then you are much worse of security wise.

    Not to mention you usually totally break all your TLS transport security and encryption with a MITM attack if you scan on the routers.

  10. Re:How to make any antivirus software safer? on Dodging Russian Spies, Customers Are Ripping Out Kaspersky (thedailybeast.com) · · Score: 5, Insightful

    You simply can not. Not Possible.

    AV software needs to have full kernel level access to be able to protect you. As soon as you make a "safe space" for yourself, it's another place where malware can and will hide. Either you give full access to the hardware, not just the OS, or there is no way to actually protect the system. That's what makes things like the Intel management engine which has full control of your hardware, but no oversight by the OS or the user is so dangerous. It's why the NSA made intel to implement switches so they can disable Intel ME on NSA computers.

    AV software need to phone home: to get virus definition updates and nowadays more importantly react fast to new networked threats by uploading possibly dangerous files. They have honeypots which do this all over the internet for years of course. However crowdsourcing new threats is much much more effective, since the really dangerous Malware, e.g. Stuxnet which was found by kaspersky, is targeted, not just spammed anymore.
    The actually new and "best" high end products from Silicon Valley make the uploading of files from customers their main selling point: they claim only this way they can protect their enterprise clients. Kaspersky comparatively is low end consumer AV for the unwashed masses. The most expensive products like carbon black simply don't work if you're not uploading all your private files to a US company which is in deep with the US government agencies. All of the other AV companies in the US are too: google Project CAMBERDADA which shows what AV companies need to be attacked to subvert by the NSA. All the US/UK AV companies are suspiciously absent since they don't need to be reverse engineered: like any other US/UK based company they are working hand in hand with the intelligence services.

    As a normal user in the West, I far more fear my own government's agencies, be it FBI, CIA, NSA, GCHQ, DGSE, BND, whatever, than a foreign agency far away: the domestic agency can actually directly harm me, fine me, incarcerate me, etc. than some agency in a country on another continent. And they have actually far more reason to do all that to me.

    The end result:
    AV software is a fundamentally flawed product due to all of this and simply shouldn't be used on any computer where you want to have a marginal expectation of privacy since you cannot protect yourself and use such a software.

  11. Re:I pray the power never goes out PERIOD on In a Cashless World, You'd Better Pray the Power Never Goes Out (mises.org) · · Score: 1

    The power plants, usually, have backup diesel generators, so do hospitals and the tap water cleaning plants. Your supermarket or corner store however do not.
    So there, hopefully, is no problem with the puerto rican hospitals, and they don't have any nuclear power plants in the first place afaik

    tl;dr: you are wrong.

  12. If it's so important, what kind of programs have you written? How many? In what language?

  13. Any LOVEINT ? on PSA: Microsoft Is Using Cortana To Read Your Private Skype Conversations (betanews.com) · · Score: 3, Interesting

    We all should know what LOVEINT is https://en.wikipedia.org/wiki/...
    And it's not only NSA agents who use the tools of their job to check on all kinds of people they know. Cops to the same, to check if any new girlfriend has prior convictions or only arrests, etc. Data exists, so it will be used.
    Are the employees of (in alphabetical order) Amazon, Apple, Google, Microsoft, Samsung, etc.who have access to Cortana, Siri, GMail, Bixbx,etc. databases doing the same? Are there even any safeguards against it?

  14. Re:I for one welcome German ignorance. on Publishers Take ResearchGate To Court, Seek Removal of Millions of Papers (sciencemag.org) · · Score: 1

    There is no "german ignorance". ResearchGate is a german company.
    Admin Name: Ijad Madisch
    Admin Organization: ResearchGATE GmbH
    Admin Street: Invalidenstr. 115
    Admin City: Berlin

    "GmBH" meaining limited company. Those publishers have to sue to company behind the social network, which happens to be in Germany.

  15. Re:The Law Should Not Allow Equifax To Exist. Peri on Equifax Will Offer Free Credit Locks for Life, New CEO Says (bloomberg.com) · · Score: 5, Informative

    I appreciate that the comments I make here might be more relevant to EU readers than US ones, but I think the principles should be universal.

    When I trade with any company, those transactions are confidential between myself and that company. If I *choose* to perform that transaction with a debit or credit card in order to make the transaction easier or more convenient, that is my choice.

    However, the Data Protection Act and associated EU data protection laws basically prohibit the use of information, which may have been collected for one purpose [i.e. to transact a sale] from being used for another purpose [i.e. to provide credit reference information] without the expressed, written consent of the data subject.
     

    I don't know every one of the >30 countries of Europe but here in Germany it's already too late by decades. It's not called Equifax but Schufa, but what they do is exactly the same. Schufa was created 1927.
    However they are smaller: ~80 million people in Germany and they have datasets for ~66 million people and 5 million businesses. They have 750 employees and have revenues of approx. 150 million euros.
    Every form of credit transaction already has this kind of consent here in Europe too, just like have they have it in the US. Have you read your card legalese?

    The difference between Europe and the US is: very few things are bought on credit. Europeans don't buy groceries, clothes with credit cards, they use cash. Alternatively they use their EC cards (which grew out of eurocheques: europe wide usable cheques). EC cards draw the money directly from your banking account and is therefore usually not a form of credit: if you don't have enough cash there, the transaction won't get through.

  16. It's not a JDK on IBM Open Sources Their Own JVM/JDK As Eclipse OpenJ9 (eclipse.org) · · Score: 5, Informative

    The summary is wrong in several counts.
    It's not a JDK but simply a JVM. A JDK would comprise at least a JVM, a java compiler and the needed class libraries. As the linked FAQ in the first entry says:
    "Is Eclipse OpenJ9 a replacement for OpenJDK?
    No. Eclipse OpenJ9 is a Java virtual machine (JVM), the engine that runs Java applications, whereas OpenJDK is a complete development kit that contains other components, like the Java class libraries, as well as a JVM. By default, OpenJDK builds with a JVM called Hotspot."

    The "unlike OpenJDK also has all the bells and whistles like jit" is also wrong.
    Hotspot almost 20 years ago replaced the JVM of that age which was a JIT compiling virtual machine, as was standard quite some time before. Hotspot however has JIT too but also does adaptive optimization on the fly which was the new cool thing back then. As wikipedia says:
    " It features improved performance via methods such as just-in-time compilation and adaptive optimization." What it does and why it is called Hotspot is, it constantly checks what parts of the code are used the most often and it then optimizes those parts over time further if possible.
    However it always uses JIT compilation like almost every other VM software does. Maybe IBM has some secret sauce JIT that Hotspot lacks, but the summary doesn't tell which or gives any other indication why IBM JIT is better than old Sun JIT

  17. Yes on Should British Hacker Lauri Love Be Tried In America? (theguardian.com) · · Score: 4, Insightful

    Of course: he committed the crimes against US computers, the crime happened there, so he should be extradited if the extradition treaty between UK and US provides for this.
    A politician war criminal like for example, german nazis, have committed their crimes basically all over Europe and Asia, never set foot into the countries they attacked, the extermination camps were not in the German Reich either but in occupied areas, etc.. In the Nuremberg trials they still were sentenced to the harshest sentenced possible for these kind of crimes, even when they never set foot at the place where the crime happened. So there really is a lot of legal precedent for this.

    If the US laws are too harsh, then this is a different problem. The defendant can't decide where to get sentenced based on the most lenient laws he can choose from. This is not what "in dubio pro reo" means...

  18. How many people work there? On the browser, programming and the UI? Is there a list, a register, a "phone book" of sorts, to see their names? At least the "managers", the people who decide the way forward for firefox, the "firefox management team" basically.
    Do these people have a name or are they anonymous? Mozilla is a non-profit after all, I think.

  19. The explanation is bullshit. on VR's Tough Demand: Your Undivided Attention (axios.com) · · Score: 5, Insightful

    Apologies for the real reason: the games suck. No one wants to buy them, so no one buys a headset for this one awesome game one can't live without.
    People play games all the time, in fullscreen, no twitter.
    Even if there were a twitter addiction: one could easily integrate it, it's simply a monitor like any other, it doesn't matter if I display twitter on it or a game. Even the input could be managed: every Windows Version has speech recognition for years. A microphone isn't really new tech when you have a VR headset.

  20. Re: it's just another prototype. on Cummins Unveils Electric Semi Truck Before Tesla (autoblog.com) · · Score: 3, Insightful

    But then again, random Slashdotters living in their moms' basements disagree, so clearly major capital funds and their due diligence analysis of the company's financials are wrong.

    Anyone who has lived through the dotcom bubble in 2000 and then the housing bubble up to 2009 knows, not believes, not thinks, but actually knows that all capital funds and their managers have shit for brains and don't even know what due diligence is.
    What is the current capitalization of Uber again? At least Tesla is actually shipping products. That's a unicorn company right there.

  21. Re:Extortion pure and simple on Google To Comply With EU Search Demands To Avoid More Fines (bloomberg.com) · · Score: 5, Insightful

    Unlike, say, MS-Office or Adobe Acrobat, no one is forced to use the Google search engine, for compatibility or any other reason. .

    Nobody was forced to use Microsoft Windows either, never was. There always were competitive products out there. Same for Acrobat. However when Microsoft used their market power in OSes to gain a market in Browsers, the Antitrust lawyers closed in for a kill. Imho for the right reasons, even when it was unsuccessful in the end.

    Same with Google: it doesn't matter how many other competitors there are or not are (and they exist, Bing being the biggest), Google has around 90%+ marketshare in general search engines. So if they use this to gain an advantage in a specialized search engine field, like price search, then they violate the law, just like MSFT did with their browser. All that matters, is Google a monopoly in the eye of the law, and it certainly is. Why or how they are a monopoly is totally irrelevant.

  22. Yay for censorship technology on Google and ProPublica Team Up To Build a National Hate Crime Database (techcrunch.com) · · Score: 5, Insightful

    Wonder how they train this pseudo-AI to recognize what hate crime is. Humans can't really reliably do it, it's always a judgment call very much biased by the individual person's view, especially political views.
    And when this AI then can reliably reproduce the views of the one paying for it, Google, then it's awesome to filter pretty much the whole internet the way they want.

    The future is a brave new world and I'm very happy to be a part of it!

  23. DMCA notice inbound... on Google Researchers Made An Algorithm To Delete Watermarks From Photos (venturebeat.com) · · Score: 1

    ...in 3, 2, 1.
    After all, DRM was circumvented and made public how to circumvent it. Or will Google be treated better than a normal Joe Random who happens to find a vulnerability in a commercial product?
    Bovi et Iovi, like always.

  24. Reminds me of Itanium on We're Not Walking Away From Continuum, Says HP (theregister.co.uk) · · Score: 1

    With Itanium, HP also was the last OEM committed to it.

  25. Mass market does no such thing on Mass Market Hopes For Battery-free Cell Phone Technology (reuters.com) · · Score: 1

    While people don't like to charge their Smartphones, they don't want to give up their Whatsapp and their big screens either.

    What this might revolutionize, maybe, is the Internet of Shi^WThings. Tiny sensors with attached cell phone modem that phones home the sensor data to a central location. if one can power this from ambient RF noise, that would be awesome and really a billion dollar market.