Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Comment Re:Real vulnerabilities? (Score 2) 16

and each one was validated by either a member of Anthropic's team or an outside security researcher

1. What's the breakdown between the two - how many validated by each?
2. What was the previous relationship between the "outside security researcher" and Anthropic, if any?

If you read the linked blog post in TFA, it's pretty clear that it was merely a matter of manpower and shouldn't be viewed as suspicious.

To ensure that Claude hadn’t hallucinated bugs (i.e., invented problems that don’t exist, a problem that increasingly is placing an undue burden on open source developers), we validated every bug extensively before reporting it. We focused on searching for memory corruption vulnerabilities, because they can be validated with relative ease. Unlike logic errors where the program remains functional, memory corruption vulnerabilities are easy to identify by monitoring the program for crashes and running tools like address sanitizers to catch non-crashing memory errors. But because not all inputs that cause a program to crash are high severity vulnerabilities, we then had Claude critique, de-duplicate, and re-prioritize the crashes that remain. Finally, for our initial round of findings, our own security researchers validated each vulnerability and wrote patches by hand. As the volume of findings grew, we brought in external (human) security researchers to help with validation and patch development. Our intent here was to meaningfully assist human maintainers in handling our reports, so the process optimized for reducing false positives. In parallel, we are accelerating our efforts to automate patch development to reliably remediate bugs as we find them.

Comment Good approach. (Score 2) 17

industry’s transition toward a dual-chemistry ecosystem, where sodium-ion and lithium-ion batteries complement each other to meet diverse customer needs,

While you normally get less range from sodium-ion, it balances out the low-temperature discharge problem. As such, while you sacrifice peak range, you get a more stable stable year-round range in environments prone to very cold weather. If integrated correctly, it could also act as a bulkhead against thermal runaway destroying the entire battery pack. However, solid state lithium-ion batteries are on the horizon (2030-ish) so that's not a huge issue.

Regardless, sodium-ion battery technology needs to be developed further because we need all the battery chemistries we can get. Relying on any single battery chemistry is a way of creating an economic single point of failure which is ripe for exploitation.

Comment Good approach. (Score 1) 1

industry’s transition toward a dual-chemistry ecosystem, where sodium-ion and lithium-ion batteries complement each other to meet diverse customer needs,

While you normally get less range from sodium-ion, it balances out the low-temperature discharge problem. As such, while you sacrifice peak range, you get a more stable stable year-round range in environments prone to very cold weather. If integrated correctly, it could also act as a bulkhead against thermal runaway destroying the entire battery pack. However, solid state lithium-ion batteries are on the horizon so that's not a huge issue.

Regardless, sodium-ion battery technology needs to be developed further because we need all the battery chemistries we can get.

Submission + - First Sodium-ion Batteries in Commercial EVs (insideevs.com) 1

Geoffrey.landis writes: While lithium-ion chemistry is currently ubiquitous in commercial batteries, an alternative chemistry, the sodium-ion battery, has projected advantages by using a lower-cost, more abundant material, with potentially a lower fire hazard. Chinese battery manufacturer CATL and automaker Changan Automobile are preparing to put the world’s first passenger car powered by sodium-ion batteries on public roads by mid-2026. The CATL Naxtra sodium-ion battery will debut in the Changan Nevo A06 sedan, delivering an estimated range of around 400 kilometers (249 miles) on the China Light-Duty Test Cycle. “The launch represents a major step in the industry’s transition toward a dual-chemistry ecosystem, where sodium-ion and lithium-ion batteries complement each other to meet diverse customer needs,” CATL said in a press release. Studies show that sodium-ion batteries carry no risk of thermal runaway and are far less sensitive to extreme temperatures. From an energy density standpoint, the Naxtra battery is competitive but not revolutionary, at 175 watt-hours per kilogram, lower than nickel-rich Lithium-ion chemistries but roughly on par with LFP. That makes it more suitable for low-cost and low-range EVs as well as stationary energy storage. It reportedly operates well at cold temperatures, retaining more than 90% of its range at -40 degrees C (-40 degrees F).

Comment It's part of their business plan. (Score 1) 183

Streaming services optimize their profits by accounting for the amount of copyright infringement that is a result of their higher prices. Therefore, the fact that "everyone" is not paying for their content is an acceptable part of their business plan. If they have miscalculated then that's on them, not me.

Comment Re:Shooting the messenger (Score 1) 55

There are those of you who think that every breach is preventable and that the companies that got breached should be punished.

Not exactly. I'm of the mind that if you willfully retain information on individuals then you should be legally responsible for properly controlling it. If you lose control of the information then you are liable. This is not a punishment it is a safeguard against chronic under-investment in security. If a company know that losing control of personal information they gathered could ruin them then one of three things will occur:

1. They will no longer retain more information then absolutely necessary.
2. They will do absolutely everything in their power to ensure that information is kept secure.
3. They will eventually go out of business for taking insufficient care of personal information.

The net result of this is that the pipeline of private information being pumped into the black market will be drastically reduced.

There are those of you who think that every business deal that turns out to be a bad deal, could have been foreseen if proper due diligence was followed.

No, I fully understand that it can happen to many businesses and that is a risk. However, when your business is personal information, then that changes things radically. The number of safeguards that are in place need to be radically increased and mandatory security audits should be part of the process.

Maybe one day you'll actually be in a position to be in the wrong end of such a deal, and you'll find out that it's a lot harder than it looks.

It's not harder than it looks, it's more expensive than the alternative which is why it's not done. This is turn is why holding personal information should come with a financial risk.

Right now, security isn't even a high priority to companies and that is why companies are regularly breached.

Submission + - Truth hurts: Prosocial liars perceived as more moral, study finds (phys.org) 1

alternative_right writes: It turned out that people who resorted to prosocial lies (those intended to spare someone distress) were evaluated as more moral than those who told the truth directly. "Prosocial liars" who provided overly optimistic feedback, were perceived positively, likely because they demonstrated sensitivity to the needs of the other party.

Comment Re:Finally. (Score 1) 28

I have no idea how the idiots decided to focus on consumer cars that go everywhere.

That's actually a very simple question: there is far less risk involved. The bigger problem with driving is pedestrians. It may seem easy to not hit people but that's not the case. Having an autonomous car hit someone at low speed is a serious problem for a company. Have an loaded truck/bus hit someone at low speed is typically fatal and a surefire way to get your vehicles banned.

In sum, the problem is not navigating the route, it's doing it without killing people and trucks/busses are far more likely to kill people.

Slashdot Top Deals

Tomorrow's computers some time next month. -- DEC

Working...