Slashdot Mirror


User: hraponssi

hraponssi's activity in the archive.

Stories
0
Comments
128
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 128

  1. why does browser need api to read my files? on Google: Chrome Zero-Day Was Used Together With a Windows 7 Zero-Day (zdnet.com) · · Score: 1

    what is the use case to have a browser expose some API for random websites to read files on user computer? or what is this API if not that?

  2. It is spotting people talk about known vulns on Machine Learning Can Use Tweets To Spot Critical Security Flaws (wired.com) · · Score: 1

    So they trained a classifier to recognize when people discuss about new vulnerabilities that have been reported. Oh wow, when will this hype about machine learning come to sense?

    This is no different from N other recent machine learning applications. You label some tweets as discussing a topic, feed them to a supervised learner and ooh it can classify text. It is not finding unknown new vulnerabilities in tweets. Unless some dumbass cybercriminal masterminds discuss their zero-days public on twitter.

  3. Re:Stick to 3G and 4G... on President Trump Wants US To Win 5G Through Real Competition (bbc.com) · · Score: 1

    It makes sense to deploy 5G in very densely populated areas. Big city centers etc. Much like it makes sense to deploy high quality 4G/LTE where there is sufficient customer base etc.

  4. no hack but attacks maybe more likely on Once Hailed As Unhackable, Blockchains Are Now Getting Hacked (technologyreview.com) · · Score: 1

    So no hack, but the fundamentals still hold. These types of attacks have been going over the years so nothing much new.

    Of course, there have been many years to develop ASIC's and FPGA algorithms for many coin algos. And since miners started dumping their GPU's, maybe cheaper to get a big, more generic hash power. Especially these smaller coins can then be vulnerable, and there can only be so many reasonable hash variants or resources for constant changes.

    PoS is an interesting alternative but many still value their privacy and for that I guess it is not so good at this time.

  5. Re:XRP is not vulnerable to this attack on Once Hailed As Unhackable, Blockchains Are Now Getting Hacked (technologyreview.com) · · Score: 2

    You are comparing something centralized (XRP) to decentralized (most other blockchains). Naturally the pros and cons differ.

  6. Re:Sounds like an interesting place to work. on Inside Elizabeth Holmes's Chilling Final Months at Theranos (vanityfair.com) · · Score: 1

    Well at least one would have some real stories to tell. About crazy spending, peeing dogs, nice things, boss stereotypes, scams, gullible people, etc. Don't know what it was like for the common worker there. Maybe they still had Bob in the basement cubicle grunting about Jenkins to everyone who happens to come too close. But sounds interesting.

  7. I wrote some simple games few years back, added the game development platforms libraries in it for ads. Because no-one wants to pay for anything anyway. Some year(s) later, got a message from Google they removed some of the app(s) due to some advertisement id violations. I did not care much since the games were not that great and had few downloads, so I let them take them down rather than start investigating and rewriting. I still have no idea what that was, just used the platform for what I though it was.. I can imagine many more are in similar situation.

  8. ok, they are idiots in the first place to throw boiling water next to people. let alone 3 year olds. but what does the trick need to work? i can imagine it must be quite a difference to throw it at -30C vs -1C. how was it in these cases? the linked article does not say much..

  9. Re:If they don't want to vax their kids... on Hundreds Rally For Their Right To Not Vaccinate Their Children (msn.com) · · Score: 1

    I see. Then by the same token, those who smoke or drink alcohol should be paying for public health costs of their associated problems, right?

    If you tax tobacco and alcohol to suitable amount, that is what they do. Not sure how to tax the non-vaccinated.

  10. I try to use Firefox as much as possible, but the browser is often a resource hog, heating up the laptop with fans screaming. It's a bit like me. Old and bloated, unable to change to meet the requirements of the modern and Agile world. Plus hooked to Google, wanting to be Chrome and all that.

    The rest of the browsers seem niche products and are based on Chromium, so is that really a good way forward? Opera, Brave, .. Not that I know much about those details. Anyway, dear fellow nerds, could someone who knows, educate the rest ..

  11. so sometimes 24h a day, other times 0?

  12. The way Finnish government has been spending over the years with tech sector funding, I suppose this is just as good as the rest of it. The public sector decision makers seem to have little real understanding or competence. I suppose with the ecosystem and the people already in it, anyone not fitting that description wants to go elsewhere.

    I can already imagine soon having to work with people who will tell me they did "elements of AI" or something similar. Then proceed to think they are experts and happily tell me how everything should be done and is all great. Ask them to do it and they will be like "dude I made this vision and powerpoint, what more do you need". Finally they buy some crappy "AI" system from the old IT houses they always bought crap from and pretend it is all so great, visionary and world-changing. While the system grasps with the simplest things.

    Same shit, different words. Oh well, back to work I guess :P.

  13. what is the definition on night in this proposal?

  14. Re:You know what would be actually useful? on The Top Free Online University Courses of 2018, Ranked by Popularity (freecodecamp.org) · · Score: 1

    That would be both useful and and interesting. I started on the Stanford ML course a few times but never found the motivation to finish it, with the focus on all the details I would rather have the tools and libraries take care of for me, and focus on the applications. I would expect many to be similarly interested and have a look, especially in case of free courses..

  15. pics or it didn't happen on Researchers Show Parachutes Don't Work, But There's A Catch (npr.org) · · Score: 1

    and here you go:

    https://www.bmj.com/content/36...

    and finally, the most pressing question answered from the article itself:

    "Funding: There was no funding source for this study."

    So, some fun was had by many, discussion was sparked, but no (direct) taxpayer money wasted. Might even make a useful point, if anyone remembers it where relevant:

    "Conclusions Parachute use did not reduce death or major traumatic injury when jumping from aircraft in the first randomized evaluation of this intervention. However, the trial was only able to enroll participants on small stationary aircraft on the ground, suggesting cautious extrapolation to high altitude jumps. When beliefs regarding the effectiveness of an intervention exist in the community, randomized trials might selectively enroll individuals with a lower perceived likelihood of benefit, thus diminishing the applicability of the results to clinical practice."
    .

  16. Re:Alt Headline: on Oracle Plans To Switch Businesses to Subscriptions for Java SE (infoworld.com) · · Score: 1

    Go is a really nice programming language and environment. If only someday I can manage to figure out all the weird details in structuring the project/code.. Just a bit weird in places, but I guess just requires some use. Generally, I would say Go is nice for anything bigger or complicated, Python for scripting stuff.

    I know several places where people seem to go with Java only, even starting new projects. They seem to be people totally lost in Javaland, thinking some monstrosities like Spring are the only way anything should be done. And should be the only thing you should know and do, exactly as they have done last 10+ years, forget even understanding the big picture, the algorithms, etc. This is just my experience, but my guess it happens in many places.

    I used to be all for Java and programmed it extensively for some 15 years. It's not too hard to see where things are going though even with following just some of the developments in the area, so I've been trying to diversify out. Still think it is a great platform for all the reasons already listed here. Including good cross-platform support, extensive features, great VM, etc. Somehow all the monster frameworks, design pattern overuse, rigid people, and similar trends seem to take it to the pits though.

  17. Sounds like you got away, and I like the sound of that.

  18. Re:Also prices are down 25% on GPU Prices Soar as Bitcoin Miners Buy Up Hardware To Build Rigs (computerworld.com) · · Score: 1

    Bitmain, the company behind the ASIC in question, and the dominant player in Bitcoin mining field appears to disagree with you, as they have a working ASIC.

    That's interesting, I had not noticed Bitmain had an Ethereum miner released just a few days ago. In general, ASICs are all over the place now. Monero just got ASICs as well. Publicly that is, I guess these have been running quite a while now in private.

    Monero also just forked to avoid ASIC's but then others continued with the ASIC compatible version and call it with a slightly different name. Ethereum has been planning to switch from proof of work to proof of stake for a long time now, so that will drop any need for CPU/GPU/ASIC when done. I can definitely see the sense for people with bigger GPU farms to sell their equipment now...

  19. Re:They use PHP... on Facebook Blames a 'Bug' For Not Deleting Your Seemingly Deleted Videos (gizmodo.com) · · Score: 1

    6 months by 3 senior devs for non-working product, vs 1 weekend by one dev for same working product. Either your senior Java devs are completely hopeless or there is more to the story.

    Surely Java has plenty of its own overhead, and more from all the overly complicated frameworks with historical baggage. But capable devs should be able to do quick prototypes and working code just as well in short time. If you take 6 months * 20 days * 3 devs = 360 days. Vs the One dev working non-stop over weekend, lets say 3.6 working days worth. So PHP is about 100x more productive and overall just unbelievably better than anything else. OK.

  20. Re:Full stack means webdeveloper on Ask Slashdot: Are 'Full Stack' Developers a Thing? · · Score: 1

    True, full stack seems like a great keyword to avoid jobs with likely little resources to build everything all by yourself. And even if it could apply nicely to embedded, like many in this thread do, I haven't seen it there.

    Personally, I think front-end has grown to be a weird place where people are all about the latest JS frameworks, preferably several at once, and these all change every year or two. It is complex but in a different way from the backend. Backend seems more stable and more focused on business logics and similar.

    I can understand most parts of the "stack" and technology, even if kernel code with all the C/C++ tricks baffles me. I feel I can write decent code, and even talk to the customers and stakeholders. I wouldn't call myself full-stack in any case, don't see that I would even want to be messing with everything possible. If that is what "full stack" is..

  21. can they now crack all messages way back? on Telegram Loses Supreme Court Appeal In Russia, Must Hand Over Encryption Keys (bloomberg.com) · · Score: 3, Interesting

    So assuming the Russians are like the NSA and have recorded much of the traffic for the past few years. How would that go for everyone who discussed Putin and his friends in the past over Telegram "secure" chat? How does Telegram handle the keys, can Putin and friends now just go and get the keys for all the past conversations and send in some accidents to everyone who disagrees with anything?

  22. Re:Our president just congratulated Putin on Telegram Loses Supreme Court Appeal In Russia, Must Hand Over Encryption Keys (bloomberg.com) · · Score: 2

    It genuinely frightens me that we're so quick to support dictatorships....

    Yes #metoo. You guys voted in Trump. And you seem to have given your president the power to kick out everyone in his government that disagrees with him or his views, and replace them with others more to his liking.

    In most western countries, if the prime minister/president/supreme overlord would kick out ministers and other people in the government because he does not like their opinions, or they disagree with him, or whatever, and nominate his pals instead, iterate until happy, well people might say that looks a lot like dictatorship.

  23. You got it. This needs a cryptocurrency to get everyone to pay for it. You could earn some by moderating and getting upvotes for the best comments. Trade it with the others. The blockchain will also make all comments immutable and proven. How could all this buzz not sell.

    The G20 summit with all the crypto regulations is almost on us, after that I am sure we could make a sexy ICO for 100 million USD funding. Blockchains, crypto, internetz, social medias, what else do you need? an exit (scam) plan of course. Lets go.

  24. I think you forgot Internet of Things. You collect data with IoT, store it in the cloud, verify it with a blockchain, analyze it with AI. And of course build a cryptocoin for people to pay each other for their data and analytics. Connect that IoT with 5G and you're covered all the way to 2019 with them buzzwords. Much buzz. Very AI.

  25. the term is defect prediction on Ubisoft is Using AI To Catch Bugs in Games Before Devs Make Them (wired.co.uk) · · Score: 1

    There has been plenty of long-term research on this topic under the name "defect prediction". It is actually one of the best (or few..) suited application areas in the software engineering processes for machine learning. You get an obvious set of training data. Record all the bugs found, issues reported, match them to fixing patches (or whatever you call it, fix locations to code in practice). Label those places/parts of code as "error-prone" before the fix. Maybe take the "after" part as an example of non-issue. Train your machine learning classifier.

    It's been done for a long time. Much like most semi-academic application areas, this is again done with university-company collaboration. Because no company on itself ever wants to get into this type of stuff due to seeing little real benefit beyond your basic, easily available and applicable, analyzers, and writing those (unit) tests that you should write anyway. In similar way to topics such as "regression test optimization". Decades of slapping on it, minor improvements if any, but with creative reporting, always some Uni finding a "partner" to get funded and help them put the academics to little bit of practice, as it otherwise is not so profitable.

    So here they found a better known company (Ubisoft) and decided to call machine learning AI, brilliant hype generated. Now lets have a project meeting and report to our funding agency about how we made world-wide news with our super-AI tech and globally big companies. OMG have many more millions you so good. Because the funding agency will not understand jack about what is going on there, and if they do, they will still be impressed someone made something working in some way. Which sadly is a true achievement in that context. ...