>Building a whole new car may be difficult, but you end up with a new car. There are pluses and minuses.
This.
Case in point - My 2015 Nissan Leaf is a traditional car by a traditional manufacturer, but with electric innards. This is a compromise. There's a lead-acid battery to drive all the standard 12V stuff in the car. That battery died last week because it never supplies cranking amps, which isn't good for lead acid batteries. A soup to nuts electric car (like current gen Teslas) wouldn't have this problem. The downside for now is cost.
Detroit companies need to reinvent their cars for the new reality. Bolt ons (Volt ons?) are always a compromise.
Having driven both, I like electric cars. The technology is finally right up there equal to, and in many ways superior to, internal combustion cars.
The solution is relatively obvious; manufacture electric cars using energy from solar arrays or other renewable sources. The cost of solar arrays has dropped so much in the last decade that this is practical now; it does mean you'll want to site car manufacturing plants (and more notably, battery manufacturing plants) in locations with abundant solar energy, but that seems doable-- stay out of Seattle, go for Las Vegas. Wait, that's where Tesla's battery plant is sited.
Actually, at my large corporate workplace, the solar panels in Oregon return more energy than the ones in Arizona because the rain cleans them often. In AZ, the dust is a factor. Perhaps solar panels should come with automated wipers.
>Well, Jury duty isn't truly mandatory.... >If you don't register to vote, then you are not put into the pool of possible jurors.
Bullshit. I'm not a US citizen and I certainly haven't registered to vote (since it would be a crime) but I've been selected for jury duty 4 times. Each time I get to fill in a post card and tick the "I'm not a citizen" excuse box.
The nutritional content of a gram of beef is far, far higher than the nutritional content of a gram of grass that cows eat.
This is because cows live off fat. The plenitude of stomachs allows the bugs to consume the fiber and turn it into short chain fatty acids, which the cow absorbs.
A unit area of grassland supporting one cow, with the cow being eaten or milked yields more human nutrition per unit time than planting grains and eating them.
Then there's the issue of killing all the wildlife to turn grassland into cropland that requires carbon-heavy fertilizing - you aren't going to fertilize with shit if you aren't eating cows.
An ethernet port has a MAC, PHY, transceiver and connector. The connector, transceiver and MAC+PHY are usually separate chips because of the different silicon needs for analog signalling and digital processing. The claim is that they stuffed all this into the connector. Maybe, but this is all to get at a config interface that you typically can get to through serial or usb wires that are comparatively trivial to latch onto.
All they had to do was show us the electronics so we could see for ourselves. But they didn't. Why not?
Because it's a different set of hardware supply hacks.
Yes. And a less technically logical one. Could you fit a 10G transceiver, phy, mac and stack inside the connector? Why would you? Consider equivalence to plugging your trojan into the back panel - you could pick the ethernet, or the USB. The USB gives you keyboard access and a low effort way to subvert the machine before it's provisioned.
I read it. It is still a real thing. To get certified to be eligible to bid for and get certain government contracts, a certified secure supply chain is needed. This is not new.
This being true doesn't tell you whether or not that's the cause of recent actions - but it tells you that it's going to happen anyway and you can't tell the difference from the outside.
It's worth looking to see it Apple and Amazon were bidding for some large government business around the same time.
>Really wish they would give us more to go on than just that. Not sure about other Slashdotters, but I have Tyan/Supermicro/Insert-Taiwanese-Motherboard-Manufacturer boards in production, and would really appreciate more information on what to look for.
It doesn't add up.
Why would you put your trojan chip in the ethernet connector? It's away from the signals you want to get to - serial and/or usb wires to get at UEFI. Trying to cram and ethernet stack, phy and the drivers into a tiny package to get at a much harder but to crack is not how you would do it. It's also inconsistent with the first story.
Well it's a pretty straight line linking the four things. The end result being poor security options in Linux. Catch me in a bar and I'll explain and name names.
Depends for what. Python is slow, and if research involves tree searches or monte-carlo... algorithms, even PHP is faster. I'd go for Java or, faster, C++.
I hit upon compute bottlenecks all the time doing numerical analysis. However the parts that need writing in C to speed things up mount up to a tiny fraction of the code I write in python that does the data handling and general information plumbing.
Slashdot Mirror
Far more secure : No
More security margin against specific attacks : Yes.
We miss your marvelous shorts.
>Building a whole new car may be difficult, but you end up with a new car. There are pluses and minuses.
This.
Case in point - My 2015 Nissan Leaf is a traditional car by a traditional manufacturer, but with electric innards. This is a compromise. There's a lead-acid battery to drive all the standard 12V stuff in the car. That battery died last week because it never supplies cranking amps, which isn't good for lead acid batteries. A soup to nuts electric car (like current gen Teslas) wouldn't have this problem. The downside for now is cost.
Detroit companies need to reinvent their cars for the new reality. Bolt ons (Volt ons?) are always a compromise.
The CBP and Apple are wrong.
They are not counterfeit. They are what they say they are.
LR needs to lawyer up and sue.
Wasn't there a recent case in Europe with exactly the same situation?
Nah. I questioned the semantics of TFA. Yes S.A. has a brutal regime - I don't dispute that at all.
Having driven both, I like electric cars. The technology is finally right up there equal to, and in many ways superior to, internal combustion cars.
The solution is relatively obvious; manufacture electric cars using energy from solar arrays or other renewable sources. The cost of solar arrays has dropped so much in the last decade that this is practical now; it does mean you'll want to site car manufacturing plants (and more notably, battery manufacturing plants) in locations with abundant solar energy, but that seems doable-- stay out of Seattle, go for Las Vegas. Wait, that's where Tesla's battery plant is sited.
Actually, at my large corporate workplace, the solar panels in Oregon return more energy than the ones in Arizona because the rain cleans them often. In AZ, the dust is a factor. Perhaps solar panels should come with automated wipers.
I rather like the Topres on my hhkb pro
>A medieval theocracy that still beheads by sword
So the US is a medieval theocracy that murders with volts?
Does the manner of execution determine whether or not you are a medieval theocracy?
>Well, Jury duty isn't truly mandatory....
>If you don't register to vote, then you are not put into the pool of possible jurors.
Bullshit. I'm not a US citizen and I certainly haven't registered to vote (since it would be a crime) but I've been selected for jury duty 4 times. Each time I get to fill in a post card and tick the "I'm not a citizen" excuse box.
So they get fat (with the wrong type of fat) and sick. That's cows in the US.
Grains fatten humans too. Again, the US leads the way.
I expect they may need new underwear.
The nutritional content of a gram of beef is far, far higher than the nutritional content of a gram of grass that cows eat.
This is because cows live off fat. The plenitude of stomachs allows the bugs to consume the fiber and turn it into short chain fatty acids, which the cow absorbs.
A unit area of grassland supporting one cow, with the cow being eaten or milked yields more human nutrition per unit time than planting grains and eating them.
Then there's the issue of killing all the wildlife to turn grassland into cropland that requires carbon-heavy fertilizing - you aren't going to fertilize with shit if you aren't eating cows.
Or you can believe unscientific nonsense.
>Credible journalist
A what? Never heard of such a thing.
I'm talking about the electronics.
An ethernet port has a MAC, PHY, transceiver and connector. The connector, transceiver and MAC+PHY are usually separate chips because of the different silicon needs for analog signalling and digital processing. The claim is that they stuffed all this into the connector. Maybe, but this is all to get at a config interface that you typically can get to through serial or usb wires that are comparatively trivial to latch onto.
All they had to do was show us the electronics so we could see for ourselves. But they didn't. Why not?
Not quite the last. I've worked HW trojan analysis before. That's why I have opinions.
It's also inconsistent with the first story.
Because it's a different set of hardware supply hacks.
Yes. And a less technically logical one. Could you fit a 10G transceiver, phy, mac and stack inside the connector? Why would you? Consider equivalence to plugging your trojan into the back panel - you could pick the ethernet, or the USB. The USB gives you keyboard access and a low effort way to subvert the machine before it's provisioned.
I read it.
It is still a real thing. To get certified to be eligible to bid for and get certain government contracts, a certified secure supply chain is needed. This is not new.
This being true doesn't tell you whether or not that's the cause of recent actions - but it tells you that it's going to happen anyway and you can't tell the difference from the outside.
It's worth looking to see it Apple and Amazon were bidding for some large government business around the same time.
Modded down. The joke cannot have been funny enough. I will try better next time. I will live with the shame forever.
Pics or it didn't happen.
This
Pics and network traces diffed with/without the trojan.
>Really wish they would give us more to go on than just that. Not sure about other Slashdotters, but I have Tyan/Supermicro/Insert-Taiwanese-Motherboard-Manufacturer boards in production, and would really appreciate more information on what to look for.
It doesn't add up.
Why would you put your trojan chip in the ethernet connector? It's away from the signals you want to get to - serial and/or usb wires to get at UEFI. Trying to cram and ethernet stack, phy and the drivers into a tiny package to get at a much harder but to crack is not how you would do it. It's also inconsistent with the first story.
>The US government is going to bury this at all costs
The US government would love a culture of suspicion of foreign built hardware to develop.
That's one plausible source of the story.
So then we're left with an important question: Why did Amazon & Apple dump Supermicro at around the same time?
Government contracts requiring certification that in turn require a secure supply chain which in turn requires systems to be manufactured in the US.
Big, boring makers of overpriced data center equipment play this game well. Supermicro sell less costly stuff, but it's made in China.
Well it's a pretty straight line linking the four things. The end result being poor security options in Linux. Catch me in a bar and I'll explain and name names.
Depends for what. Python is slow, and if research involves tree searches or monte-carlo ... algorithms, even PHP is faster. I'd go for Java or, faster, C++.
I hit upon compute bottlenecks all the time doing numerical analysis. However the parts that need writing in C to speed things up mount up to a tiny fraction of the code I write in python that does the data handling and general information plumbing.
The Earth is flat. You only need 2 gyros to point oneself in 2D space.