Slashdot Mirror


User: Master+Of+Ninja

Master+Of+Ninja's activity in the archive.

Stories
0
Comments
150
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 150

  1. Language used is interesting... on Google's Project Zero Team Discovered Critical CPU Flaw Last Year (techcrunch.com) · · Score: 4, Interesting
    There's a lot of interesting language being used here, and if everyone is so coy it just strikes me that this is a serious thing. Couple of observations:

    (1) There seems to be two separate exploits which you need to dig into the reporting to work. The Register's coverage is quite good and explains it all. "MELTDOWN" seems to be the more problematic one, and affects Intel and ARM chips. "SPECTRE" seems less problematic and affects AMD chips as well.

    (2) AMD affected or not? Google says yeah, AMD says nay. However the wording from the LKML list is that "AMD processors are not subject to the types of attacks that the kernel page table isolation feature protects against". I think this references that the kernel patch is targeted against MELTDOWN, which does not affect AMD chips (see point 1)

    (3) Although everyone's kicking Intel down, the main problem is that no-one can really trust each other now. I know there is a claim of "defective by design", but a lot of things can be described that way if they aren't used in their intended manner. In a "sane" world there would be no malicious actors trying to exploit what seems like quite a clever trick relying on timings (not a chip designer/expert). I read a lot of issues with the web came about, due to the fact that when it was designed everyone on the internet trusted each other, so security against bad apples wasn't designed in. As things have been commercialised you can see the effects, to the point that the only sane way to browse is using ad blockers and no script.

    My thoughts on people suing Intel are a bit conflicted. Probably based on US law they would lose, but my analogy is like blaming (insert car manufacturer here) for selling you a car which crashes only when someone throws stones at it. We need stronger laws and protections against the rise in hostile actors.

    (4) It's interesting that the Google blog post couldn't wait for the embargo-ed deadline of 9th January. They and their customers must have been getting really spooked. I suspect that this was being worked on and known by multiple parties, and a bit of coordination would have been good rather than panic.

    (5) It'll be interesting to see what happens with regards to performance - from my understanding the SPECTRE variants just needs code recompilation. Most home workloads should not be affected by the two exploits, however I think if you are I/O heavy then it may be an issues.

    Interesting time indeed.

  2. The current problem with the degree factory on Scientists Propose To Raise the Standards For Statistical Significance In Research Studies (sciencemag.org) · · Score: 4, Insightful

    After viewing it first hand, there are a lot of people going through "degree factories", getting degrees that are getting only the basics of statistical knowledge. And a little knowledge is very dangerous. The p-value is a useful measure, but it's been simplified to (p less than 0.05 = good) in biomedical circles. And if you read the other upvoted threads, or read some of the linked articles, you'll understand why this is a big problem.

    There are a few tensions here that I think may be causing this: (a) publish or perish - if it looks reasonable enough, publish because that's where your next job comes from, (b) poor statistical training - can be from both the authors and reviewers side, (c) unwillingness to fund or publish work that is reproducing previous results - there is a publisher created publication bias, (d) the general high cost of patient centred biomedical research, so meaning your have low sample numbers generally, (e) the unwillingness in some disciplines to get formal statistical input.

    What are the potential solutions? If there was an unrestricted money pool you can recruit adequately (n>10000) to each study, but the money is not there, and there are some very rare diseases around. Better statistical training would be ideal, and there has been a push towards Bayesian analysis: I would think that as in most statistical tools someone will eventually find a way to inappropriately use them. Self-publish as an option - could be possible: I've seen some horrifically bad peer reviewed articles (& predatory journals!) but there is an ethical tension between publishing without review which could just flood the literature with absolute garbage which is difficult to sort through, and actual proper peer review. Maybe something like Arxiv for biomedical science, although there would be a lot of resistance to it I suspect.

    I don't hold too many hopes for a quick solution to this as there are a lot of vested interests, and people using the best new fangled statistical methods they've learned. I've even reviewed a paper recently, with multiple authors from a big university, where I just shook my head at the amount of statistical fudging that took place: the authors had imputed about 80% of their primary predictor variable for an outcome, and then came up with a conclusion based on the imputed data. I just shook my head that this was actually allowed nowadays. While this article is good, some of the authors have been banging on about it for some time without much change.

  3. Seems like a consolidation in citation apps on Mendeley Acquired By Elsevier · · Score: 2

    This is quite interesting seeing that my citing app of choice Papers was recently taken over by Springer another big research publisher. I wonder if all these big publishers are wanting to take over the low cost and mass marker reference/citation managers, especially as some of them have social features. Nothing beats having loyal customers who you can data mine nowadays - even Google is in the game with Google Scholar. The older style reference managers are fairly expensive, and by having a low end product which is free, I think Elsevier will go someway to restore some of their reputation, especially as their ScienceDirect resource is actually quite good.

  4. Facebook - the worst big offender with privacy on New Facebook-Branded Android Coming? · · Score: 2

    While I think a lot of people would want this and buy this (the facebook addicts who are constantly posting that is), Facebookstrikes me as the web company with the worst outlook to privacy out of the lot. They seem to change their T&Cs to suit them and only apologise when they are caught in something nefarious.

    The problem is that (I cannot see) a useful alternative. Facebook and Google have integrated themselves so into the general internet that even Slashdot seems to have Google and Facebook login options. Google seems to be slightly better with regards to privacy, but their recent actions have made me actually switch from Chrome back to Firefox. I've even started investigating moving some of my 'services' to smaller brands, running services on my Synology NAS, or even thinking of hosting my own virtual server for privacy.

    I even found an extension called Ghostery which disables advert tracking in Firefox and it is quite astounding how much tracking gets done on the internet. Whilst I appreciate you can't get something for nothing, we (as a society) seem to now throw our privacy more and more out the window without realising the implications. Facebook's alledged phone is just another nail in the coffin of our privacy.

  5. More petitions on Google Reader Being Retired · · Score: 1

    I like everyone else is upset at this. One of the best Google services shut down - obviously their target audience is not me. There just isn't a good replacement for a web-based service such as this (see all the points previously stated) making an Android/iOS app a poor fit, and even standalone desktop applications poor (especially the go away for a few days and all the feeds are picked up part).

    I am at the point that I will happily close my Google Plus account (don't really use it) as a protest vote if someone is organising something like this (Occupy Google Plus anyone?)

    I hope everyone can sign one of the 3 petitions:
    * Whitehouse - https://petitions.whitehouse.gov/petition/officially-request-behalf-citizens-united-states-google-reverse-its-decision-shut-down-reader/VRZTd72L
    * Change.org #1 - https://www.change.org/petitions/google-keep-google-reader-running
    * Change.org #2 - http://www.change.org/petitions/google-please-don-t-kill-google-reader

    :-(

  6. Another great step for freedom on Wikimedia Foundation Launches Wikivoyage · · Score: 4, Insightful

    As people before have noted Wikivoyage is a fork of the Wikitravel, and I thing this is a great thing for Internet freedom and collaborative work. For all the critcism Wikipedia has had, there is the goal to make knowledge free. Whilst Internet Brands abused the old wikitravel website, hopefully we can get a reformed great collaborative travel guide, and something to balance Tripadvisor

  7. Overhyped Slashdot summary yet again on A Blood Test That Screens For Cancer · · Score: 1

    Medical screening is a tricky subject - see the wikipedia article for a better overview of it all. However tests aren't 100% foolproof, and if you look up terms such as sensitivity, specificity, positive predictive value, false positive etc. on wikipedia it will give you a general indication of how these tests really work. I do not believe that you can have a test that screens for all cancer that is useful. Or if I put it this way when will it pick up cancer? Can it pick up ALL cancers early enough that you can do something about it? Will there then be false positives (worrying patients, giving them unnecessary treatment with the associated side effects), or false negatives (i.e. people not picked up)? Or are they making a test that picks up all cancers when they have metastasised (i.e. spread to the other parts of the body) when people cannot be treated? The last example is not the useful one. It is useful to see the principles of screening on the first section of the wikipedia article. It will give people a general background on tests and why they may or may not pick up things. Medicine (and the human body) is somewhat of an inexact science so some cancers may not be picked up until they are untreatable, and patients may not understand why they personally have fallen through the net. The article seems to acknowledge that this is still a research idea - the important bits are that they screened 'advanced' cancers, some of the statistics, and the cost. I do support researchers as I know that advances can take a long time to prove and filter through from research into something that is useful.

  8. Misleading story, Apple complies by making adaptor on iPhone 5 Scorns Standards Promise To European Commission · · Score: 4, Informative

    This is just another misleading story - Apple actually has complied by providing an adaptor for charging. They specification that they are adhering to is the Common External Power Supply and allows the use of adaptors. They already have on for older type of dock connector. I suspect Apple has valid reasons as they want data transfer to be as fast as possible with their proprietary adaptors, but still allow micro-usb charging if people want it.

  9. IANAL but earlier story re: software patents on Patent Troll Sues X-Plane · · Score: 1

    IANAL but here was the story from earlier today Easy Fix For Software Patents Found In US Patent Act. I think will go and email the x-plane guy about it as it could be that "Stanford law professor Mark Lemley" may be willing to do some pro-bono work. Or easily ask the EFF and google to chip in. Can't quite see how this company is getting away with this.

  10. Synology Diskstation (or other NAS) on Ask Slashdot: Syncing Files With Remote Server While On the Road? · · Score: 1

    I'm not sure but you maybe want to make this a challenge for yourself? I would personally go for the easiest route which you just set up and takes care of itself without complex problems. Dropbox (if you have enough storage) is the ideal answer as it will sync away in the background so freeing you to do things for yourself. Certainly the last dropbox update seemed to ask me if I want dropbox when I plug in a camera rather than using iphoto.

    However I suggest getting a good NAS and my suggestion is a Synology Diskstation of some type (no financial interest, just very satisfied customer). You have your own server without the power overheads. Plus you can set it up for remote access and they have even released their "cloudstation" solution which is like having your own personal dropbox syncing, so would satisfy having pictures on your own server. Would go to http://www.synology.com/ and check it out. I'm sure you could set it up to backup things if you accidentally deleted locally. By the by if you're travelling abroad please do not data roam, it will beexpensive and very regrettable. Either switch off data roaming or get a local sim.

  11. Re:RTFA on Depressed People Surf the Web Differently · · Score: 1

    Well done! I haven't laughed this hard at a comment in a long time - I miss the Slashdot mega-trolls of old times...

  12. NAS and Online backup on Ask Slashdot: How Do You Manage Your Personal Data? · · Score: 1

    The question really is how much do you value your data? A little? A lot? My solution is a dual solution (albeit still waiting for the 2nd part to arrive). Online I have a subscription to CrashPlan (although there are other various services available which will do a similar job). You can get the software which will backup your computer (or selected folders) to another computer with the software installed over the internet (e.g. your parents if there is enough free space). If you pay a subscription you can back up your files encrypted to CrashPlans servers (and I think you can even put in your own encryption key), albeit it can take a few days to do this. You can even get family packs for multiple computers.

    The 2nd part for which I am waiting is a networked attached storage - I am getting a Synology product, although again there are other companies making these. The model I am getting will have 2 spare bays for hard disks of your choosing, and then you can run a backup on your computer to these which will keep the discs up to date. You can also use this as a file server, as well as a media server, bittorrent client etc. (see the synology website if you are really interested). You can stuff a couple of 2TB drives in there and even implement some sort of RAID.

    So you can then have an onsite and an offsite backup with a NAS and crashplan. The 3rd part of the solution probably is to trim down what you store as I can vouch I have a lot of crap that really doesn't need to be saved. Then do regular backups of the really important bits (for me this is not my itunes folder) to DVD-R.

    Overall it comes down to how much is your data worth and how much are you willing to spend?

  13. This is why the Raspberry Pi will be the new ZX81 on For Sinclair Fans, The ZX81 Lives On · · Score: 3, Interesting

    The ZX81 was one of the main reasons the UK had a great generation of programmers (and especially games programmers). The computers were cheap, easy to tinker with and allowed endless modifications. I know that a lot of people are very sniffy about Basic, but the BBC Basic taught in schools at the time was the gateway to self taught computer programming. This is why I think the Raspberry Pi will herald a revolution in computer programming - $25 (?£) compared to the £50 in some of the advertisements for the ZX81. With a keyboard and mouse the raspberry pi will be equivalently priced.

    As an aside I never had the ZX81, only the later Spectrum +3. But those were the glory days of British computing...

  14. All the good politicians go to London on Pirate Party UK Looks Forward To 2012 · · Score: 1

    Certainly the devolved parliaments have a different election system than Westminister allowing smaller parties to get in, plus there is a tendency to more local politics there. However it is not helped by the fact that if you are ambitious or want to make a serious change it seems you go to Westminister, whereas there seems to be a lot of ineffectiveness in the devolved governments. The UK wide political parties inability to do well in the Scottish elections seems to be the fact that the candidates really aren't the cream of the crop and have quite poor policy platforms to stand on.

  15. Re:How could he have been stopped? on Identifying Nuclear Scientists Willing To Sell Their Knowledge · · Score: 2

    Because the Arab ghettos are within the death zone of any nukes on the main population centres?

    That, and everyone would come and fuck you up in retaliation. Nuclear or not.

    Are you sure? If the world politics/UN is anything to go by there would be some countries siding with Iran, some abstaining, some being in the retaliation camp, and then a veto or two against the whole plan by a country that's playing realpolitik. It would be a mess. But the power of having a nuke is that people start taking you more seriously on the world stage

  16. Not quite true... All PowerPC based on Sony Won't Invest As Heavily In PlayStation 4 · · Score: 2

    The WSJ is a bit misleading - there is no definite information that the whole cell chip itself was used to create the Wii and 360 CPUs. However all three chips are derivatives of IBM's pre-existing PowerPC architecture (itself a subset of their POWER processors), with the Wii having by all reports a faster version of the PowerPC that was in the GameCube. The way that machines are created there's no way that research that went into one chip didn't go to improving all of IBM's other chips (and as the article suggests), but not to the extent that they would use the whole Cell architecture and give it to SCEA's direct gaming competitors (and I would have thought there would be an explicit exemption to that in the Sony-IBM contract). The wikipedia article (see below for links) is quite informative. It will tell you that the XBox used the PPE part of the Cell chip - from what I can tell the PPE is a PowerPC derivative - I previously heard that it was a custom built version of the PowerPC 970 that was the last Mac PowerPC chip. The special thing about cell is the parallel architecture, with the PPE and SPE tags causing some confusion. You can claim that some help might have been indirectly provided by Sony, but IBM has the expertise (and pre-existing relationship with Nintendo) to make the chips without Sony's funding. In summary it seems all chips have a basis in IBM's longstanding PowerPC series, with the Cell being a bit more specialised. As the specs of the chips are secret is difficult to say what exact differences there are without examining the chips in detail. Have a look at these links: http://en.wikipedia.org/wiki/Cell_(microprocessor)#Power_Processor_Element_.28PPE.29 http://en.wikipedia.org/wiki/PowerPC

  17. Combination of GTD/ScanSnap/DevonThink Pro on Ask Slashdot: How Do You File Paper Documents At Home? · · Score: 1

    I heartily recommend a setup based on a ScanSnap and some sort of organisational filing software. The ScanSnap is a home-office grade document scanner - the main difference to your cheapo scanners is it's focus on documents and it's ability to scan both sides of A4 paper in one pass, achieving at least 20ppm scanning. The software that comes with it should be able to do OCR. I combine this with DevonThink on the Mac which allows me to organise the documents efficiently and search through them - it will allow you to 'tag' documents so that actually finding things is very easy. I have years of documents with me this way, and the documents come with me on the road.

    The paper documents I file in a filing cabinet at home. Get a 4 drawer filing cabinet. Get a label maker. File everything in alphabetical order. Use one drawer for 'months' - this will hold documents that you can shred at the appropriate time of year.

    GTD is a great method of planning and organisation however people never keep to the strict philosophy and work variations. I would read it. That should get you sorted.

  18. Boycott Sony! (and more download links) on Police Raid PS3 Hacker's House, Hacker Releases PS3 'Hypervisor Bible' · · Score: 0

    Seriously this is too much. If they positioned themselves as not allowing you to have PSN services if you modded your console, then fine. Going against people who pirate games, fine. But targetting legitimate modding (including what can be 'dual use' which is another philosophical question in itself) when people have purchased the console themselves is a new low - it's now infringing on the rights of consumers to do what they want to with machines they purchase. If they are allowed to get away with this as others have mentioned it will set a whole new (lower) standard in how companies can restrict our inalienable rights. The whole concept of them promising the 'other os' option and then taking it away is poor.

    I have to say Microsoft has behaved (from a console/gamer point of view) in a much more respectful manner in the past few years. I don't even think Sony has a natural advantage why you would want to buy their equipment, especially as others make better phones/tvs etc.

    I'm calling for people to boycott Sony, not just games, but in TVs, cameras, and phones. Maybe they'll get a message that their anticonsumer tactics are not in anybody's interests. As a public service aside I noted the linked article has broken download links for the 'hypervisor bible'. So I provide the following link for the Slashdot audience: http://www.ps3iso.com/showthread.php?t=51100

  19. Re:As they should be. on Pentagon Seeking Out Wikileaks Founder Julian Assange · · Score: 1

    And Hitler was elected in democratic elections as well.

    No, he wasn't, stop spreading that BS please. Hitler was appointed by Hindenburg, then engineered the Reichstag fire, then enacted draconian laws on grounds of security, used that to rig the next election, which still didn't bring him majority. He then forced Hindenburg out, forced the new Reichstag into giving him legislative powers, effectively suspended the constitution, and then proceeded on to murder his opposition in and outside of his party, and, finally, using the "emergency" legislative powers to declare himself a Furher. Or somesuch. But he was never elected at any point of his national political career by a majority.

    No actually Hitler was elected by democratic elections. What he did was get initially elected to the German parliament and used the electoral system at the time to grant himself more and more powers. This was helped by infighting and political manoeuvring by his opponents which allowed him to set himself up for a "power grab", allowing himself to become Chancellor (essentially what would be the prime minister) and then eventually merge his job with the office of president. The conditions of post World War 1 German politics essentially set up the conditions for his rise. Hindenberg was a check to him initially but he was limited by constitutional role that he needed to perform to enable the proper formation of a government from the people who had been elected to parliament. See the Wikipedia article on Hitler; it's quite interesting.

  20. Re:What? on Russian Invasion of Georgia Might Jeopardize Space Station · · Score: 2, Insightful

    But does logic really matter in international politics? Serbia invaded Kosovo, which was part of Serbia, and got a kick in the teeth for their efforts. Kosovo is the precedent and a very dangerous one now. As they say rights are only guaranteed by power, and in this case might is right.

    From the rough discussions I've seen is that Georgia has been historically very territorially aggressive, only limited by the fact that the Russians directly sit next to them. The region of Ossetia at least is from a different ethnic group (not sure about Abkhazia) and by the standard of Kosovo have the right to self determination. The most cynical view that I've seen is that Georgia wanted to make sure that any referendum on the future of Ossetia goes their way by essentially wiping out anyone who would vote to join Russia.

    The current invasion of Georgia is due to their initial act of aggression, gambling wrongly, and losing it all. They're in for many years of re-building at the moment.

  21. Re:What? on Russian Invasion of Georgia Might Jeopardize Space Station · · Score: 4, Interesting

    I'm not sure that even not renewing the exemption (i admit I have no idea the details of it) will do that much. A lot of countries have broken treaties without blinking an eyelid. I can't see much being done against Russia, except issuing diplomatic statements. The UN will be paralysed by Russia's veto, and I can't see China being in a rush to side against Russia (or side for it). Russia and China (perhaps with Brazil and India - the BRIC countries) could just go it alone - they have a lot of the world's population in them.

    I think the Georgians (or at least the president) were completely foolish to try and invade when Putin was at the Olympics and think that he wouldn't do anything. Compounding it is the fact that they seemed to be carrying out (from what I gather from the BBC) seems like ethnic cleansing by firing on the civilian population, and then killing Russian troops in the process. They burnt their bridges to some of their possible allies, who were also allies who being militarily over-extended aren't really in a position to help.

    What I think will happen is that giving it a few weeks people will forget about this. The whole situation will be framed as Ossetians (sp?) are just like Kosovo - they have a right to be independent, and with Russian influence in the region they will eventually become re-united with Russia. The issue of the ISS is just a distraction - everything will stay the same.

  22. Rip-off Britain - till better than other providers on BPI Defends Anti-File-Sharing Partnership With Virgin Media · · Score: 1

    I do criticise Virgin Media, and their service has gone downhill since they were cabletel/ntl (and at the ntl era their service was already going downhill) but they are still better than any other provider that I can think of. I needed to get a broadband deal, and they offered me 2mb with phone for £15.50, with unlimited downloads. Consider if you go with BT the best you can get is with Talk Talk (40GB download limit) for a similar price, but BT love their £100 connection fee for getting you onto the network. I was not happy, and most of the providers are the same. Rip-off Britain where we get screwed and pay out of the nose for it.

  23. powdered milk on PETA Offers X-Prize for Artificial Meat · · Score: 1

    Why not try powdered milk)? Just add water, cheap to get, lasts for months. Normally use it for coffee/tea/desserts, but I hear more and more people moving to this as it is better in scale.

  24. Re:Trademark info on Cisco Sues Apple Over iPhone Trademark · · Score: 1

    Go here instead http://www.uspto.gov/main/trademarks.htm. It doesn't make things clearer, but apparently apple has the trademark in other countries, and filing 77007808 is the one apparently under Apple. Is the description sufficiently different? Who knows IANAL. However there seem to be a lot of iphones around anyway, and maybe apple legal knows something we don't.

  25. Personal rapid transit - not robocabs on Robocabs Coming to Europe · · Score: 1

    I can't believe that the summary didn't include the above title. Personal rapid transit (PRT) is what people have been calling it for years, and is slightly different from the "robocabs" (think total recall) that it has been described as. The PRT system seems like an excellent solution for urban mobility from reading the articles on wikipedia, but it looks like there might need to be some heavy investment first. It's a good idea to check the wikipedia article (and the links of it) at http://en.wikipedia.org/wiki/Personal_rapid_transi t.