Become a fan of Slashdot on Facebook

typodupeerror

CommentRe:is it bad default settings? bad auto settings w (Score 1)16

Or a site hosting medical information insisting on using Google analytics to begin with. Maybe that's the much more serious error of judgement than some botched settings. People in this damn industry apparently still haven't gotten the message, that the data they hold can mean life or death for some.

CommentRe: Cui bono? (Score 1)38

Openpilot is also level 2. You know what else is level 2 and damn good at driving? Kia/Hyundai. Another is Ford (copilot360) and GM (blue cruise). Yeah this is a conspiracy to only support Tesla./s

As an open pilot developer this is awesome and wonderful news. My autonomous vehicle is already legally compliant in my state, now I am unburdened from federal regulatory red tape when someone crashes into my (safe driving) vehicle

But yeah F Tesla amirite?

CommentRe:Government Sponsored Research (Score 1)263

Mainly because such research leads to patents and other protections that are held not by the public for the public good, but rather commercial for profit corporations.

If you are a student at a decent university, and your research leads to patentable matter, the patent belongs to the university, and that university gives you a small part of the profits this patent generates. Most patents generate none at all, so it's a lottery. The rest of the profits gets back into the research system. It's exactly these researchers, which DT47 is chasing out of the country right now.

IMHO, the best case for solving THIS issue is tax patent holders for their patents they enforce, as a TAX. Make it steep. Stop paying the tax, the patent goes public domain.

That tax you quote are the patent fees. The initial patent is only granted for a few years, and in order to extend patent life span to 17 years, you have to throw money at the government a few times, and AFAIK it's more the longer your patent has been active. You may argue, that this "tax" is too low or whatever, but it exists and it is paid, and if a patent holds no promise of financial success, it will join the large rank of patents abandoned long before their 17 year term. Needless to state that expired patents are public domain.

All you have asked for is already in place, no need to destroy a large country's research culture over this.

CommentRe: Bold strategy (Score 1)108

You are not the target audience that Op is describing. Kudos to you for keeping your technical chops up, but what about the topic of the post - people who don't or can't keep up? Or is it a requirement that at a revenue of 200-400k you should know how to setup ZFS on your NAS? Hot take if that is what you mean..

CommentRe:Not quite accurate (Score 2)290

Economy in Europe has split into two parts, and only one of them has deteriorated a lot. Upper middle class with proper education, language skills and work ethics does very well, it's just the other half which drags down the GDP/capita numbers. This poor half was not going to the USA anyway, and the rich half certainly won't be willing to put up with ICE/CBP shenanigans and a government (cheered on by the general population) openly hostile to Europeans when planning a holiday trip.

CommentRe:Good (Score 3, Insightful)104

>It's one of the few segments in IT where you're not directly at constant risk of being replaced by an H1B.

Truth. One of the reasons why I keep gravitating back to defense work. Only since around 2004 or so; there's now this "government shutdown" nonsense, which is a bit of a vicious circle, because programs get fucked over, then you have to roll off the contract and find work on another. And sometimes, there isn't any. (happened to me at Lockheed), so some people have to cycle back into the private sector for a few years (which isn't a bad thing; because THAT is where you pick up new skills, to be honest). Then when some asshole "businessman" crashes the business and does layoffs (to replace you with H1B's), you're back on the street again, and you end up back in the "safe" sector: defense. Oh, and if your Clearance expires while you're in the private sector, then the contractor just pays the $10k (or whatever it is now) to re-do your investigation. This has happened to me twice now.

CommentRe:Everybody is to blame (Score 4, Insightful)48

You forgot the worst part of this: while this scandal has utterly destroyed the lives of the affected (sub)postmasters (including death, as some killed themselves over this travesty of justice), it has so far not had any adverse consequences for the perpetrators. None of them have been inconvenienced beyond some name calling in the media and maybe a few firings. Reckless car drivers have been convicted for murder in Europe, while these crooks don't even have a criminal record yet.

Corporate and political behavior will not change unless such a series of acts carry decade long prison sentences and salary clawbacks for the perpetrators.

CommentRe:Why the obsession? (Score 1)57

Because things like libqt6 aren't likely to be understood by Microsoft developers.

One thing, which Microsoft has really been successful in the last 30 years was GUIs. Their UIs were typically slick and efficient, and for each and every Microsoft GUI strangeness I can probably show you 10 worse GTK or KDE UX defects. Yes, Microsoft has a footing in boot loaders, they were also engaged in embedded platforms for a while (is WinCE still a thing?), but that's all beside the point.

If you look at typical code produced in Visual Studio, you'd expect a GUI driven DB connected Windows application deeply embedded in the Microsoft ecosystem. The classical "we support Windows 10 and 11 only" type application. One can easily imagine a code quality checker for such an ecosystem, which would fail miserably in a boot loader. I know, how the code checkers we use all barf up on our custom heap manager "oh noes the pointer arithmetic" "oh noes the int to pointer type cast".

If Copilot can debug WinAMP, then good. If you can aim it at uboot, then it can probably also deal with our heap manager. Well, at least once it goes beyond "oh noes, malloc(size+1)" type warnings.

PS: yes, I know from our kernel devs, that fuzzing and AI generated CVEs are a menace right now, and they typically appear right after (not before, when it would be a lot more useful) release, because this gives you higher street cred somewhere. If Copilot could condense these fuzzer and AI bug reports to extract their useful bits, then go Copilot. Haven't seen that yet, but at least I know, that Copilot has been trained on more than MS Word and WinAMP.

CommentRe: Why the obsession? (Score 1)57

Their cloud offerings still don't have a need for uboot, and they analyzed it anyway. I insist, that this is one of Microsoft's clever marketing ploys to gain market share in the embedded market, something e.g. Google or Amazon seem to have ignored for now despite their much higher investment in embedded in general.

Smart move on Microsoft's side, but I sure hope, that their Copilot learns to find more intricate bugs than malloc(size+1).

CommentRe:Why the obsession? (Score 4, Interesting)57

As a linux/g++ developer I can give you an explanation: because it tells me, who has no use for Visual Studio and most other products from Microsoft, that I could put this tool to proper use. If a tool can analyze an open source boot loader, then it can likely analyze my own product, too. Thereby they widen their audience quite a bit. The fact, that they analyzed grub2 and not e.g. libqt6 raises eyebrows not only of GUI application programmers, but also of embedded programmers, which is one of the larger C/C++ programmer crowds in general and specifically for linux. I don't think I would have even read the article, had they reported 5 buffer overflows in MS Word or Libreoffice. Pure genius IMHO.

One thing, which did not at all impress me was the finding actually shown in the bleepingcomputer article: malloc(size+1) can at worst produce an inadvertent malloc(0), which could lead to a heap overflow, but that's an error most decent static code checkers would also flag. It would impress me a lot more, if Copilot would have flagged something a bit more difficult.

Slashdot Top Deals

/usr/news/gotcha

Working...
close