Slashdot Mirror


User: tlhIngan

tlhIngan's activity in the archive.

Stories
0
Comments
10,065
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 10,065

  1. Re:Curious, how did they do that? on New Rules From the FCC Open Up New Access To Wi-Fi · · Score: 1

    FCC laws prohibit TVs from transmitting ... but the laws of nature still seem to overrule the FCC.

    Actually, they prohibit TVs from emitting a signal stronger than some limit. They don't prevent a TV from transmitting (other than from transmitting INTENTIONALLY), they prevent the RF leakage from exceeding some value.

    It's why your tuner is encased in a metal shield - it keeps interference out, but also keeps internal oscillator noise in.

    In fact, it's more likely the other oscillators in the system (like the one in the processors) will emit more RF than the tuner module.

  2. Re:Both devices value form over function on Hands On Samsung's New Galaxy S6 Edge+ and Galaxy Note 5 At Unpacked New York · · Score: 1

    It's not true that the battery suffers the same kind of "charge cycle" whether you're charging it from 0% to 96%. For lithium ion batteries, there is no "memory" effect, but there is a "depth of discharge" effect. A deeper discharge will reduce the battery's maximum capacity more severely than a minor discharge.

    It's not the act of plugging the battery into the charger that reduces its usable life; it's the process of actual charging. If you're doing less charging, your battery lasts longer. If you regularly drain your battery because you're under the misconception that all charge cycles affect the battery in the same way regardless of depth of discharge, you're actually making the problem much, much worse by discharging the battery completely.

    In actual testing, the best results have been to charge the battery once it reaches 70 to 80% of its maximum charge level (as in, the max it can actually hold before the charging circuit cuts off, not the theoretical max that's advertised by the manufacturer). This depth of discharge doesn't really put much stress on the battery, and it doesn't generate as much heat as having it constantly plugged in, so it's a happy medium.

    Age of battery matters too - "charge cycles" is rarely reached before the battery ages too much to hold a useful charge. And that's the problem with replacement batteries - if you're getting NOS, the capacity is only marginally better than what you currently have.

    Maybe you're lucky and bought a popular phone so 3rd party suppliers still make new cells, but if not, having a replaceable battery just means you're choosing between dead and deader.

    Shallow cycling is best, though Android devices seem to consume a lot more power than iOS, so perhaps that leads to more premature aging of the battery?

    As for heating - remember LiIon batteries hate to be trickle charged - you start with a CC charge, which then switches to CV. Then you turn the charger off and let the battery self-discharge. Which either happens naturally (powering the protection circuit), or because the device needs a surge of power so it draws it from the battery.

    The typical level is "full" is between 90 to 100% of capacity - once you stop CV charge, you wait for the battery to go below 90%, then restart CV charge.

  3. Re:MST is a dud technology on Samsung Pay Launches In Korea In August, US In September · · Score: 2

    Emulating a magnetic card swipe with a magnetic field is a dud.
    If doesn't work with chip and pin cards where the terminal has a chip reader, since the mag swipe will be responded with "Please Insert Card".

    LoopPay, the company Samsung bought to acquire the technology, says "they're working on it" which is only going to be "we're trying to convince card issuers and terminal providers to removed their fraud protections"

    Not to mention, it'll be obsoleted Oct 1, 2015 in the US. That's when the implementation of EMV starts, and more importantly than that - the insecure link will be liable.

    So if you have a a Chip+PIN card, and the store has a magstripe reader, even though their bank supports EMV, any fraud goes to the merchant. If instead the bank doesn't support EMV, then the bank pays out.

    With this, if the customer is issued an EMV card and uses the stripe, guess who foots the bill? The customer.

    Even Square is coming out with a new chip reader - and if you're pre-ordering it (which you should), they'll pay for the fraud while you use the magstripe reader until you get the chip reader.

    There's nothing special in your account that says to use chip - I've used the magstripe even when the store has chip readers - it's just that the terminal I was using didn't have a working chip reader. In this case, if you swipe, it goes through. In a chip reader equipped terminal, if you swipe, a bit in the magstripe tells the reader to re-try using the chip instead. (The reader isn't always communicating with the bank, so it doesn't know if the card presented has a chip. The bit in the magstripe lets compatible readers know there is a more secure way to do the transaction).

    And to be honest, we've had EMV so long in Canada, I forget about signing the slip on those exceedingly rare times they only have a magstripe reader.

    I've only had problems at one store where their terminals had crappy firmware and would often lock up the chip reader - no amount of inserting or swiping would work. One day, on a lark, I used the tap thing (which they didn't support, but the reader was capable), which rejected the attempt. Surprisingly, that rejection reset the chip reader because it started working again.

    But yeah, Oct 1, 2015, the US comes into the modern age. If you run a store and haven't upgraded your readers yet, better hurry up. (Though, even before EMV was rolled out in Canada, most terminals started sprouting (non-functional) chip readers way ahead of time, So hopefully it's just a firmware update to activate the chip part.

  4. Re:LG G4 on Ask Slashdot: Best Big Battery Phone? · · Score: 1

    Replaceable battery has 0 to do with requiring more than a single charge. My 18 month old phone's battery is starting to show its age and won't hold a charge for much more than 2/3 what it did when I bought it. Over the course of a few hundred cycles, lithium ion batteries do not maintain a charge.

    So what are you going to do then? Buy a replacement?

    A used battery is in the same boat. A NOS (new old stock) battery is in the same boat. Both have substantially diminished capacity. Yes, lithium batteries lose capacity even sitting on the shelf.

    So if you were wise and bought a spare with your phone, that spare would also be significantly diminished in capacity. What you need to do is find someone willing to sell you a new compatible battery that's freshly manufactured.

    Though chances are, the cost of a new battery would probably be expensive and make you question why you're bothering with your old phone.

    Apple didn't get rid of removable batteries because it was just easy to make stuff smaller - they realized that the vast majority of people did not buy spare batteries for laptops, phones and many other devices. The few that did, you can generally disregard as not being in your target market. And of those, they are typically completely capable of replacing the battery on their own.

    And there's always the maintenance thing - most phones do not have a way of charging spare batteries other than inside the phone itself. Which means charging the spare is a complete PITA for most people as it requires discipline in charging the primary battery, then swapping out the battery with the spare and charging that. Forget and you have two dead batteries and you're screwed.

    Some phones do have a dock you can buy to separately charge a spare battery, but again, that's only a small subset of phones (I only know of 1 phone model, out of the roughly quarter-million different android phones out there).

  5. Re:Sounds scary, but it makes sense. on "Chaotic Architecture" At NASA's Jet Propulsion Laboratory · · Score: 1

    'chaotic architecture' could just as easily be the state where users are given control and IT has to support whatever nonsense users want. We've all seen it. Company goes "BYOD" and "chaotic architecture" follows... every piece of crap random consumer grade device gets brought in... half of it doesn't run the business critical apps properly, centrally managed A/V isn't possible, virus infections run rampant and IT finds itself working on some twits $300 Sony Vaio with 1GB RAM and Vista Home Basic... torrent software consumes all bandwidth. Some nimrod installs an inkjet color printer that's only compatible with XP, then buys a Windows 8 laptop and wants IT to make it work...

    IT needs to facilitate users getting the tools they need, WITHOUT letting it get TOO chaotic. :)

    Easy, you let users dictate what they need. Perhaps they need a Linux box. Or a Windows box. Or a Mac. Instead of IT dictating what users use and users adapting to whatever (oh, the visualization program is only on Linux and I have Windows? Well, let's expense a new PC out of IT's purview...), users dictate their needs ("I need a Linux PC for this software").

    It doesn't have to be total chaos like BYOD - it just means IT has to be a bit more responsive to user requirements - if a user needs a machine running RHEL or something, they can go through IT to acquire it without all sorts of "Sorry, but we only support Ubuntu" BS. This is critical because a LOT of commercial software depends on things being as close as possible to the supported configuration (e.g., EDA tools). If the vendor only says they test on RHEL, you install RHEL to give least issues (sure, you probably CAN get it working on Ubuntu, but do you really want to risk the possibility of things not working without vendor support?).

    At the same time, IT can lock down the machine as necessary (did I mention EDA tools? Sometimes you can't update the machine). All the stuff is obtained through IT and nothing funny appears on the network.

    So true, it can't be too chaotic, but IT can and has to change to suit user's needs. At the same time, IT can easily say "No, I will not let you connect your personal phone to the network. If you need an iOS or Android device, we can supply you with one".

  6. Re:Details missing... on Lenovo Installed Software On Laptops That Persisted After Complete Wipes · · Score: 2

    When does the bios install the files, at boot time, or when the OS is running?

    If at boot, this should require bios drivers for read+write ntfs filesystem support in order to know where in the primary drive the bios needs to install the files, which means the bios can hold a much larger amount of storage then expected.

    If when the OS is running, this opens up the potential for many new scarier exploits and backdoors, even for a more secure OS with different file systems, such as Linux or *BSD, beyond just storage, such as memory and network access.

    Does this still work with FDE (Full Disk Encryption), such as bitlocker, truecrypt, bestcrypt, pgpdisk, etc.?

    Well, it depends.

    There are BIOS modules that will inject themselves into a Windows hard drive - e.g., CompuTrace LoJack for Laptops. In this, if the module is enabled, it will scan the disk on startup for the Windows partition and inject two binaries to download and install CompuTrace when Windows starts up. (This is for the tracking to survive an OS wipe). Of course, it doesn't work if you install say, Ubuntu, but the general expectation is someone will probably want to reinstall Windows or something on it.

    And yes, the BIOS does have a lot of space on it - modern BIOS chips are at least 1MB in size, probably larger, halve that if you want a "safety BIOS" capability, but 8 or 16MB of flash isn't unheard of. With EFI, it's a fair bit larger, but it's just the runtime and whatever it wants to be built in (the set up program, for instance). Things like the Windows loader exist in the EFI partition on the hard drive.

    Obviously FDE will negate this check as well.

    The second method is more modern and built into Windows. Which only requires memory so it can pass through any FDE.

  7. Re:none cipher? on OpenSSH 7.0 Released · · Score: 1

    Does running rsync on an Android phone or a low-end NAS qualify? I prefer to keep my backups local rather than in the cloud. I've said it before: The weaknesses in RC4/arcfour are all about leaking key information in the first 256 or maybe 512 bytes of cipher stream, because that's how long it takes to scramble the internal state. SSH always discards the first 1.5 kiB, so it's not vulnerable to this kind of attack. Why deprecate it?

    Android phones have their own encryption accelerators, so using AES would work juts fine.

    A low end NAS with rsync? Can't rsync work without ssh on a local network? That would seem fastest. Or if NFS/SMB/CIFS is faster, use rsync locally through a remote mount so rsync just copies files locally and the kernel takes care of transferring over the network.

  8. Re:We are rapidly getting to a point where it's... on Hackers Remotely Cut a Corvette's Brakes · · Score: 2

    It doesn't matter that the argument is that "Without exposure, car companies won't fix it!"... At the moment, no one is actively *doing* this or using this exploit. Simply being told that it's possible should be the limits of what an ethical hacker should release.

    This exploit is unlike the Chevy exploit - in that to remotely use it, you had to get into the car in the first place. Well, if you're already in the car, then all bets are off.

    It's like saying Linux is vulnerable because you can install a keylogger ... by first getting access to the PC. Well, if you have access to the PC already, then installing a keylogger is just one of the many things you can do. Nevermind that software security is bunk once you have physical access.

    Or perhaps houses are vulnerable because you can install all sorts of surveillance equipment in them... once you get inside. You can even install remote controlled lighting to freak out the homeowner.

    Now, maybe the OBD-II dongle is defective, which is a fair point, but it goes less against the car manufacturer and more against the dongle manufacturer for making it so easy to break into.

  9. Re:Self-respecting drunks on Breathalyzer Bike Lock Stops Drunken Cyclists In Their Tracks · · Score: 1

    Any crime that does not involve anybody else is bullshit. Drunk driving is stupid but should not be a crime until you damage something that is not yours or somehow impact another.

    The problem is choice. You chose to drink, you chose to drive. Society is the one who pays for your choices. Driving is one of the few activities you can do where the damage is borne disproportionately on those around you, and not on the person performing the activity.

    Sure, you crash into a tree and die, no big deal. But more often than not, vehicular accidents typically involve people who had no choice in the matter. I can be the world's safest driver, but that means diddly squat if some drunken idiot T-bones me.

    And that's why we prosecute it - because your choices affect other people, even if a crime did not happen directly. In fact, in a lot of places, it makes sense that drinking and driving is considered a criminal offense - if you kill someone, it's no longer just a minor accident - it's manslaughter. (It's not murder because that requires malice aforethought to kill someone specific, though in some jurisdictions, it can be upgraded from manslaughter to murder).

    And yes, a cyclist can do a lot of harm to pedestrians as well - because they go fast. It's not mass now, it's velocity.

    The only really good thing is that drunk driving is rapidly falling as the #1 cause of accidents on the road. Unfortunately, it's distracted driving that's becoming the #1 cause. At least in general cyclists haven't taken up the need to ride and text - probably because there's enough hazards without creating more for themselves (if you're riding besides a bunch of parked cars, you prepare yourself for a dooring and thus ride in a way to minimize harm to yourself. Not so much if you're distracted by texting.)

  10. Re:Try focusing on keeping subscribers on Continued Cord Cutting Hits the Pay TV Business Hard · · Score: 2, Insightful

    The cost is the elephant in the room. Cable has gotten very expensive and the alternatives are so much cheaper. Plus far too many cable channels have dropped their interesting programming for cheap reality programming. How many historical documentaries does the History Channel show now? How much Sci-Fi can you find on SyFy? Animal planet now advertises how "human" they are. How many cooking channels do we really need? The worst part is some of the best new shows are coming out on streaming services like Netflix. The industry still has not realized that their shortsighted greed has doomed them in the long run.

    Well, the cost is increasing, because the Internet has actually cut into cable cash cow - paid pornography. It used to consist of basically all the revenue in the cable system - it was popular and raked it in. So naturally, cable companies are trying to recoup that revenue since well, with the Internet, who pays for porn?

    As for the reality programming - you can blame the a la carte threat for that. With cable bundling channels, you could have History and Discovery getting money in and having those speciality channels "that no one watches" concentrate on programming.

    But with a la carte being threatened and unbundling the rule, guess what? Those channels now have to compete for eyeballs. And when you're competing for eyeballs, you go with what those eyeballs wand to see - i.e., dramatic reality. It goes for all of History, Discovery, even SyFy who realized that SciFi doesn't bring in eyeballs.

    Netflix can bring in "good" programming because the programming brings in subscribers. Netflix doesn't need eyeballs. They need subscribers because subscribers mean revenue.

    So Netflix does a whole bunch of market research as to who are the people Netflix needs to attract - more attract new subscribers, and see what the general subscribers want to keep them.

    You, Netflix subscriber, are in that "Netflix audiences want to watch" category, which is why all the new Netflix programming interests you. Netflix is catering to you in order to keep you paying them money.

    If Netflix decides next year that a big group of subscribers will be angry teenagers who hate everything, well, next year's programming will concentrate on programming that interests them.

    This is not likely to change anytime soon - Netflix knows the average cable subscriber will not likely subscribe to their service, so there's no need to commission dramatic reality shows, so they won't waste money trying to attract a group of people that won't subscribe anyways.

    Also, Netflix is in the binging phase - you can bet if they know subscribers watch just the new shows then leave, they'll move to the one-episode-per-week style of programming so they can stretch a subscription across several months.

  11. Re:And yet... on Coca-Cola To Fund Research That Shifts Blame For Obesity Away From Bad Diets · · Score: 2

    When I wanted to lose weight, I reduced the number of calories I was consuming, and I lost weight! Weird, it must be that I changed my "energy balance". Except I didn't change *what* I ate, just how much. I'm not saying it's easy, but if you eat fewer calories than you burn, as a general rule, you'll lose weight.

    True, however, a poor diet of fast food, highly processed snacks and soda is harder to reduce than a good well balanced diet.

    First, the fast food and snacks are engineered to make you crave them - they go after the pleasure center of the brain. So yes, you feel very good after eating them, and you crave more of it. They're designed to do that on purpose.

    Second, those foods are generally very calorie dense - which means you don't eat much to get the calories you need. Unfortunately, our ability to feel "full" is dependent on volume as well, so a bag of chips can easily be your snack, but make up 50+% of your caloric intake.

    Third, sugars and such mess with your hunger balance and your blood sugar level (glycemic index), thus after eating poorly, you often feel hungrier quicker, and thus end up consuming more calories in the end.

    If you have the self-control, great, eat whatever you want. The problem is, most people don't have any self-control. Doesn't just apply just to diet, either - same thing happens to highly indebted people who just spend and spend and spend.

    A healthy well balanced diet doesn't suffer as much from those issues - the food is generally less calorie dense, and harder to digest so it takes longer. It also helps those with less self-control.

    Of course, portion control is a big thing - and if you eat out, it's amazing how big the plates are. They've actually increased in size by around 50% since the 80s or so, and if you serve up an 80's style plate today, people will cause you stingy.

  12. Re:Wait, what? on Scotland To Ban GM Crops · · Score: 4, Interesting

    anytime a company holds a patent on our craps and can one day charge $1000 per seed or hold everyone hostage by not producing the seeds unless political or financial agreements is made is a BAD thing.

    Why would you think that this could happen? There are tons of companies that produce seed. The only reason a farmer would pay a ton of money for their particular seed was if it was a really profitable seed that they couldn't get anywhere else. And farmers have been buying seeds anually forever for lots of crops. Agreements not to replant specialty varietals long predate the modern transgenic era. A lot of the time, they're just buying a particularly useful hybrid that doesn't breed true (or doesn't produce seeds at all), so it makes sense to buy seeds year after year anyway.

    That's because it's already happened. If you notice a bunch of crops growing on your land with special properties, and you dare replant those next year, you could inadvertently be running afoul of a license agreement you never saw, never agreed to and be sued for patent infringement.

    So it doesn't matter that you can buy seed from a competitor - if some of the "viral" seed ends up on your land, your only option is to burn it. Or be sued.

    Terminator seeds don't work, period. And unless the legal system changes to the point where if your patented seeds end up on someone else's farmland, then it's SOL for you - it's your responsibility to prevent that, then it's a serious problem.

    Hell, the problem's compounded if your neighbour starts using the seeds and you want to go for organic certification.

    All Scotland really needs to do is change the laws a little bit and say legal agreements are not conveyed by living things. So you can impose license agreements on farmers that agree to buy your product, but if they spill your product elsewhere, then not only is all legal protection void on the spilled product, any other IP protection carried on that product cannot be enforced. So your neighbour's seed ending up on your crop is yours free and clear.

  13. Re:Good! on Study: Ad Blocker Use Jumps 41 Percent · · Score: 2

    1. Go with a major, reputable ad service like Google and be easily and effortlessly blocked.

    2. Go with a less reputable ad service and maybe get past some of the blockers, but at the risk of them serving malware.

    Google Ads is disappearing because Google realized their ads are blocked, so they're pushing their other ad networks like DoubleClick and such. And those ad networks have been serving up malware for ages.

    Go to any reputable site and the ad will be hosted by Google. Either directly, or through one of the many ad networks Google owns (remember, Google owns like 95% of all online advertising).

    About the only ad networks Google doesn't own are for less reputable sites that most normal advertisers won't touch, like ones on torrent sites and such.

  14. Re:Don't use this stuff ... on HTC Doesn't Protect Fingerprint Data · · Score: 2

    For example, in iOS Devices, even the Device itself can't retrieve the biometric data. It is locked inside a "secure enclave" chip, that has ZERO exposure to the rest of the system.

      Neither Apple, nor anyone else, including the Gummint, can access that information without physically taking apart the Secure Enclave chip and using God-Knows-What to read the memory in the chip directly.

    Even harder, in iOS, the fingerprint reader traffic is encrypted, and the reader and secure enclave do a public-private key thing to keep the fingerprint secure.

    So not only is the information in the secure enclave, but it's traffic is secured by the hardware. Two reasons - one, to prevent sniffing, and the other, to prevent malware from commandeering the fingerprint reader.

  15. Re:My big hope on Windows 10, From a Linux User's Perspective · · Score: 1

    You're kidding, right?

    Hit the Windows key, type the first couple letters of "environment" (on my machine "env" is enough) and hit down arrow a few times to select "Edit the system environment variables" (or "for your account", whichever tickles your fancy). Hit Enter.

    This has worked reliably ever since the search feature got built into the Start menu in Windows 7.

    Or just realize that it's been in the same dialog since Windows NT and maybe since Windows 95. Advanced System Settings. Just go to the System control panel (Win-Pause, Right-Click Start->Control Panel (Windows 8+), etc), then click "Advanced System Settings" on the left. From there you have options to adjust environment variables, startup options, page file settings, and remote login.

    The dialog hasn't changed in decades.

  16. Re:Please enlighten me on Dual GPU Battle: GTX 980 Ti SLI vs. Radeon R9 Fury X Crossfire · · Score: 1

    Having used a 55" 4K 60Hz panel (Sony 55X9005A) as my gaming display since 2013, I can say that high resolution gaming is pretty much the same thing as high refresh rate gaming or VR gaming: you won't "get it" until you try it.

    Furthermore, in my time I've observed three primary types of gamers:
    "graphics & performance don't matter" gamers
    "resolution & fidelity is everything" gamers
    "fps & low latency is everything" gamers

    If you're not in category 2 then I'm afraid you'll never "get" these very expensive high end products/builds nor do you need to.

    Hate to break it to you, but you're lacking fidelity, because the X900 Sonys do not support HDMI 2.0a (18gbps), required for true RGB at 60fps. And the X900 does not have DisplayPort.

    Instead, you're using YUV422 format, which is a way to cheat and get 60fps 4K using standard HDMI 1.4a signalling and speeds.

    Even the flagship of 2014, the X950 series does not support 4K at 60 at RGB or YUV444.

    True HDMI 2.0 sets and equipment are coming out this year (HDMI 2.0 was ratified last year), these support 18gbps signalling and thus will get you your 4k @ 60 at full bit-depth.

  17. Re:Android update weakness on Certifi-gate: Another Huge Android Vulnerability · · Score: 1

    Looks like it's going to be monthly for Android

    For what phones?

    I mean, remember, Samsung released 2-3 phones a week (and a tablet a week) - around 120-odd phones and 54 different tablets in 2014 alone.

    Are you telling me that every month Samsung is going to issue the better part of 200 software updates? Or more likely, they're just going to update maybe 5 of those phones monthly and the rest are screwed?

    LG isn't quite so bad, but they're still a large number of their phones out there.

  18. Re:The entire friggin' internet is compromised on The Internet of Compromised Things · · Score: 1

    What many dreamed would be an empowering tool for the masses became the ultimate instrument of power and control for the Ruling Elite.

    In what way has it ever been about empowering the masses?

    Remember, freedom of the press belongs to those who own the presses. LIkewise, freedom on the internet belongs to those who own the internet - in this case, corporations who sponsor the backbones and who connect our homes with it.

    Always been the case. As long as someone big and power owns a part of it, they control it.

    The closest anyone's come to "freedom" would be the old BBS networks - where all it took was a phone line and a computer. And at night, those computers would exchange information wi th each other. In fact, in places where the internet is heavily censored, FidoNet remains a bastion of freedom because the governments don't monitor the phone lines as strongly as they monitor the internet. Plus, those links constantly change at a furious pace, so what was two nodes transferring data can be a half dozen between borders. And because your email may be randomly routed, you have to monitor all the links.

  19. Re:Full Price Smartphones on Verizon Ends Smartphone Subsidies · · Score: 1

    I predict this will drive down the average price of smartphones, as consumers are going to aim for lower cost options more aggressively. Average meaning that there will still be $700+ smartphones, but there should be growth in the $199 smartphone market.

    It somewhat relates to the Apple versus Android divide, a lot of iPhone owners are using subsidized phones on contract, especially those using the latest model. When I was shopping around for pay as you go plans and a new phone, meaning I pay full price for my phone, I saw good options in my price range for Android and older iPhone models. I don't know how well Apple will fair if people are buying the previous model instead of the latest.

    Actually, the cheap smartphones ARE where all the Android growth has been - your $199 price point is right now subsidized to the "free with contract" or "two free" and so on. Android's explosive growth has almost been exclusively in this area - few are buying the flagships by comparison.

    On the iOS arena, subsidies do help - but that's because no one wants a last-gen iPhone - even the free with contract iPhones don't really sell.

    I don't think it would hurt Apple all that much - remember the iPhone originally was sold without contract and at full price, and they had healthy sales.

    It might hurt Verizon though - if other carriers still subsidize, then there's no reason to buy a Verizon iPhone and they might switch., And even if you're on Verizon, it'll be better to buy from Apple direct as it will be unlocked if you're paying full price - Apple sells full price iPhones unlocked.

    Also, it could actually hurt Samsung, HTC, etc., as those full price Androids will cost as much as an iPhone and if they weren't going to buy some cheap Android phone, but looking at the flagships, then the iPhone pricing might attract buyers - if you're spending $700 on a phone...

  20. Re:Revenue and profit are not the same thing on How To Make Money As an Independent Developer · · Score: 2

    Revenue generated by advertising is almost pure profit, since you've already built the product and only have ongoing maintenance.

    Ongoing maintenance is expensive - remember, advertising works if you can keep the eyeballs looking, and if you have a game, that constantly means adding new content. It's not a sit-back and watch the money roll in deal. Once you release, you have to have new content in mind and develop for it, so when people get bored of the current content, you release an update and keep them addicted, and thus keeping money coming in.

    I have this weird 'problem' that the products that I want and/or need tend to not exist or are extremely hard to get, even though they are technically feasible and shouldn't even be expensive. Kind of odd but I've gotten used to it. Saves me from spending too much money.

    It's not really a problem. It's that you're unprofitable. Yes, someone could build the product you want to your specifications, but marketing probably determined that the market of those who want that particular thing is too small. That makes the product expensive after engineering and profit margin/ROI even if it's really cheap to build, which means it isn't done.

    The GOOD news though is thanks to the likes of Kickstarter and such, when others come up with the same idea, they can be built and often for low runs at that. Some people use Kickstarter as a way to do market research - does the market exist for the product - and how enthusiastic are they about it. Others use it to release all sorts of nifty gadgets that can scratch your particular itch.

    Heck, maybe you want it bad enough that you can do a prototype and then do a kickstarter to see if someone else wants it.

  21. Re:It's a move for isolation on North Korea Is Switching To a New Time Zone · · Score: 4, Interesting

    Now there's an odd half-hour difference with both land neighbours. On the other hand, now DPRK will have an integer-hours difference between its times and those in India, Iran and Afghanistan.

    And Newfoundland. The Labrador part of the province is at UTC-4, while the Newfoundland half is UTC-3.5.

    And you wonder why Canadians always treat Newfies as different.

    Incidentally, yes, that province was the source for both dog breeds, and apparently, the names got switched around - what we know as the Labrador Retriever was originally the Newfoundland, and vice-versa. Then again, easier to say a Lab than Newfie, I suppose.

  22. Re:It's a feature on Researcher Exploits 18-Year-Old Design Flaw To Compromise X86 Chips · · Score: 2

    System Management Mode is a feature. It's meant to render separate processors unnecessary for tasks like temperature management and system specific keyboard shortcuts. These functions need to work even if an unsupported or no operating system is running. Consequently SMM behaves almost like a separate processor. That's not a flaw, that's necessarily so.

    Well, the purpose of SMM mode is way back in ancient history, when PCs used DOS.

    Back then "Power Management" was actually done by the system firmware - it took until 95 or so for Microsoft to reinvent power management and make it an OS responsibility instead of a system firmware responsibility.

    So if you were using DOS or Windows (on top of DOS), and you shut the lid, the BIOS basically needed to do what it needs to do to put the machine to sleep. But you don't know what state the system is in - remember the BIOS is 16-bit code, and the system could very well be in 32-bit mode. SMM mode meant that you didn't care - the processor state was switched to a private state in SMM mode so you can do your thing without worrying about such details and put the laptop to sleep.

    More modern uses include it being used to emulate in software certain hardware - some embedded processors use ti to make the chip more compatible with known hardware (e.g., instead of providing esoteric drivers, you can use SMM mode to emulate say, a SoundBlaster sound card).

  23. Re:Google and Samsung announcing ... on Zimperium Releases Stagefright Detection Tool and Vulnerability Demo Video · · Score: 1

    Yep, a good point. Apple was the only one with the clout to avoid that nonsense. It's too bad it didn't set a precedent that the rest of the industry followed. Honestly, I think I might be willing to overlook a little bit of collusion if the rest of the manufacturers got together and demanded the same autonomy.

    Still, my feeling is that Samsung has probably coordinated with the carriers about more frequent security updates. I don't see any reason they would be resistant to the idea, since it's not all that more troublesome for them.

    The problem is, the manufacturers don't want the autonomy. Apple could do it because they basically told AT&T "Our way or the highway". AT&T would love to say "highway" but they saw the crowd of Apple folks who just want to buy the phone.

    it's the reason all the other carriers quickly acquiesced to Apple as well - they saw AT&T's network problems not as a failure, but an opportunity - if there are so many iPhone users that they're collapsing AT&T's network, then they want in. Verizon's first iPhone was very unique - it worked only on Verizon, yet had absolutely no Verizon branding. And Verizon's apps were forced into the App Store process.

    Plus, Apple has a retail distribution network that's pretty effective. Most handset vendors don't have that - and they need to convince Best Buy and other companies like that to carry their product.

    In short, Apple knew they had a fanbase that would literally force a carrier's hand, a retail distribution network that would eagerly carry their phones, and could exploit this to force carriers to take the iPhone.

    As for Samsung - it's only for a few phones. Remember, Samsung released 2-3 new phone models a week in 2014 (and just over 1 new tablet a week) - something around 130 new phones and 54-ish tablets. I'm pretty certain only the high end flagships like the S6/Edge and Note will probably get rolling releases. Everyone else is screwed.

  24. Re:sneakernet on Ask Slashdot: Patch Management For Offline Customer Systems? · · Score: 1

    The price for a USB stick is so low these days that it will cost more to manage the mailing and return than the stick is worth. And why do they have to format the media? Just let them delete the file if they want to, and then use the stick.

    NO, you cannot reuse the stick.

    First off, the network is probably airgapped for a reason. There are many known attacks to airgaps, and using a USB drive is a great way to infiltrate and exfiltrate information.

    Think something like Stuxnet - it infected an airgapped network, and for that to work, the creators probably did tricks to exfiltrate information to get a map of the network layout. If you know someone is going to plug in a USB stick, then stick it into their PC, that's a good way to transfer information out of the airgap - while the USB stick is in, you write all your data to it along with an exploit so the user gets infected when they go format the disk, the information is copied to the user's computer for transmission. And then the exploit is put back on the USB drive in case the PC used can't transmit to the internet.

    The only safe way is after the USB stick is used, is to destroy it.

    Also, always assume that your airgapped network is infected. There are many instances where this has been the case - even the US Air Force got their drone control computers infected through USB sticks (meant to update map data).

  25. Re:It's election time in Canada... on TPP Copyright Chapter Leaks: Website Blocking, New Criminal Rules On the Way · · Score: 1

    We need to get this Sith Lord out of office. The problem is that we really depend on the non-voting 45% and have no Jedis. Hopefully those who voted conservative last time will realise the ugly truth of their choice.

    Fat chance. The Conservatives know they aren't electable. So all they're doing is pandering to their core audience - the people who literally will not vote anyone but Conservative. Almost no one would put a second choice of another party if their first choice is Conservative.

    The other parties generally are quite flexible - voters would both the other parties as their second, or third choice, but almost none of those people will put Conservative.

    So you have two groups of people - die-hard Conservatives who will not vote for anyone else, and everyone else, who will not vote Conservative.

    This coming election is one that I'd love to have voted in. Except I got a letter through the door this week saying that the Ontario Court of Appeals has ruled that expats must wish to return to Canada and must not be gone more than 5 years unless employed by the government.

    These restrictions are fucking idiotic. I fully intend to return, I just don't know when exactly. So what if I've been gone 5 years (and 16 days). I still care a great deal about my country. I was born and raised and will always be Canadian, not even dual citizenship will change that in the slightest. I want to at least have the opportunity to have my say about its future or I might not recognise it when I do eventually return.

    So unless I can prove I work abroad for the government by the 15th of September, my rights as a citizen will be trampled.

    Is there going to be a Supreme Court challenge or have they already declined to consider this?

    Bravo, that was part of the law the Conservatives introduced.

    There will be a Supreme Court of Canada challenge to it, but whether or not they hear it is up in the air. The only thing we DO know is it will NOT be done in time for the election.

    I mean, the courts have already said the new law is not workable at all. But, they also said the law will stay in place for this election because it is too difficult to change the rules.

    Of course, I call BS to that - Elections Canada hasn't printed ballots out - they've already done voter cards, but those aren't sent out (and all you need is someone to black out the line that said "this card may not be used for identification" with a sharpie).

    Hell, the ballots aren't ready yet - because no party has all their candidates lined up yet! (That's right, no party has nominated all their candidates yet).