Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror

Comment Re:F-Droid's claim isn't quite accurate (Score 1) 40

This is about control, 100%.

Oh, actually, I missed the most obvious flaw in this argument: The verification doesn't give Google any significant control! It does give them the real-world identities of registered developers, yes, but then what? It doesn't do anything to require registered developer to use the Play store or comply with any Play policies other than one: Don't distribute malware.

The real purpose here is malware rate-limiting. Right now, malware authors can pump out huge numbers of apps with small variations to defeat identification. Google may identify one malicious app and warn all of the user that have it installed, but the malware author has thrown out a hundred variations of that app and Google only twigged to one. What ID verification does is require the developer to tie each app to a unique government-issued ID. In countries where you can't just go get a hundred government IDs, this means teams of malware authors can make approximately one malicious APK per team member. In countries where they can go get a hundred unique government IDs per person (because the government is actively cooperating or because they have a cousin in the ID office) it doesn't help so much, but Google can then start working with the governments to crack down.

I don't know if you noticed in the announcement, but this program is starting in a small number of countries, with the cooperation of and at the request of the governments who are trying to defend their populace against waves of malware. This isn't an accident.

Comment Re:F-Droid's claim isn't quite accurate (Score 1) 40

How many cases of Malware in F-Droid do you know and how many in the Play Store?

How many apps in F-Droid vs how many in the Play store?

Actually, though, your comment and my off-the-cuff response both miss the real difference which is why malware authors would choose to use F-Droid to distribute their apps. They'd have to publish source, which would be a disadvantage in the competitive world of malware authoring, and publishing source code would also make it easy for their malicious code to be identified. It makes a lot more sense for them to publish via downloadable sideloads or -- even better, if they can manage it -- in the Play store.

From a security perspective, it makes sense to treat F-Droid differently from random downloadable sideloads... but how is the Android OS supposed to tell the difference? The Android mechanism for establishing APK trust is signatures. So... F-Droid could arrange with Google to get the platform to trust APKs signed by F-Droid, which would make F-Droid work fine. And, actually, there's no need for Google to go through any complicated process to set that up: F-Droid can simply register as a developer and sign the APKs it distributes. Done. Of course, if F-Droid ever screws up and does distribute malware, it could result in all of their apps being evicted from Android device, but since F-Droid is a zero-malware platform, that's not a problem, right?

Comment Re:Ok Elon (Score 3, Interesting) 100

I'm running FSD v13.2.9 and waiting for v14.x to be released, which is coming hopefully soon-ish. I'm not in major rush though for reasons you'll see below.

I just got the v14 upgrade a few days ago, and it's a mixed bag. On the plus side, it now handles parking, as in I give it a destination, it drives me there, goes into the parking lot, picks out a spot and parks in it, all with zero human input or intervention. On the negative side, I think v14 needs a little more compute horsepower than my 2025 Model S has. I used to have a 2020, with previous-gen computer, and as FSD got more capable it actually degraded a bit, becoming indecisive and occasionally "stuttering". With the new car that went away entirely. I was very impressed. With v14, in the new car, it's began to get indecisive and stutter again. Not often, but it happens. I think this is a result of the model not being able to complete its processing quickly enough, because it doesn't have enough compute.

I'm hopeful that they can refine and optimize v14, though, to fix that problem. Other than that, and the fact that on the country roads where I live it always wants to drive too slow (the roads are small, but the speed limit is 45 and everyone drives 50-55, while the car is clearly not comfortable going over 35-40), it's extremely good.

Comment Re:Consciousness (Score 1) 196

Let me clarify. I mean consciousness as experience.

Experience is just a feedback loop. Stuff happens externally, triggering computation and generation of explanations, then the events are stored in memory -- including the memory of the explanations. Then, later explanatory computation (reflection / introspection) uses those memories and creates additional memories. These layers of reflective/introspective computation constitute the experience of consciousness, but there's really nothing special about it. It's just cycles of self-referential computation.

I'm pretty confident that as our AI models begin to run more continuously as agents rather than episodically as task-focused systems, and as they gain better ability to reason about and generate explanations of their own previous "thoughts", they'll reach a point where we'll have to call them conscious or at least admit that we can't distinguish what they do from what we do.

Comment Re:F-Droid's claim isn't quite accurate (Score 1) 40

This is not for security. This is about control, 100%.

If it's about control, why is Google leaving ADB installation open? That undermines their control. Unverified limited distribution accounts also undermine their control. Why isn't Google just doing what Apple does, and requiring a verified developer account before you can do anything at all?

I'm curious how you interpret these decisions within your "100% about control" theory.

Comment Re:F-Droid's claim isn't quite accurate (Score 1) 40

"The point of the system is to make it hard for malware authors to distribute malware" Gonna stop you right there. Google can't even keep malware out of its own curated Play Store.

So... your argument is that if Google isn't 100% successful at keeping malware out of the Play Store, they aren't doing the job at all? You think identifying malware at scale is easy? I used to work on Android security and know a lot of people on the anti-malware team. It's incredibly difficult, especially since it's a continual cat-and-mouse game with malware developers who do all sorts of things to obfuscate what their code does. Google has hundreds of talented engineers focused on this problem, but there are tens of thousands of people producing malware; it's big business and there's a lot of money in it.

As the announcement said, Google finds that 50X as many malware installations on Android devices are from sideloading. You really don't think it makes sense for Google to try to reduce that?

Comment Re:PR (Score 4, Interesting) 100

Not true. The radiation levels on the surface of Mars are around 230mSv/yr. The radiation levels in Ramsar, Iran, are 260mSv/yr. That's not because Iran has been doing all kinds of weird dirty things with nuclear material, that's just the natural background radiation level there. Want to know what issues they have living in such a high radiation area? Absolutely nothing. It actually has a *lower* cancer rate than the average. Our preferred model for determining how much radiation is safe for nuclear workers assumes that there's a linear relationship between how much radiation you receive, and how likely you are to have negative effects. It assumes that that's true no matter how spread out the dose is. The model says

- If one person receives a dose of 1kSv, 50 people will get cancer.
- If 1,000 people receive a dose of 1 Sv each in one second, 50 people will get cancer.
- If 1,000 people receive a dose of 1 Sv each spread out evenly over the course of 100 years, 50 people will get cancer.
- If 1,000,000 people receive a dose of 1mSv, 50 people will get cancer.
- If 1,000,000,000 people receive a dose of 1Sv, 50 people will get cancer.

It's a clearly, ridiculous model that doesn't in any way represent reality. In reality, you need to tie an individual's dose rate, and total dose to their risk of health issues. When you do that, you discover that below about 60mSv of radiation exposure health outcomes are actually better than baseline. The amount of radiation that we have actual solid evidence causes problems is 100mSv in a single exposure. That's. far far higher dose rate than anyone on Mars would experience

All that is to say, the radiation levels on Mars certainly are elevated, but they're not elevated to the point where our body can't handle it. The dose rates are low enough that it's likely people will have absolutely no ill effects, and may even have some small health benefits. If there are issues, there's a really easy way to deal with it - build your shelter underground.

There are some problems potentially with the trip *to* mars where radiation levels are around 1Sv/yr. Of course, we do have solutions for that. The steel sheet on the outside of the ship alone will attenuate radiation levels by about 10%. Wrapping the water storage around the outside of the ship, assuming a 20cm thick layer of water, around the ship, you're going to get attenuation of around 87.5%. With just those two, we've reduced the dose rate to around 100mSv per year, which... guess what... Perfectly fine.

Comment Re: PR (Score 3, Insightful) 100

Your estimatations are honestly way off. It takes NASA aproximately 3-4 years to build a single SLS, which is the only ship they have that can reach the moon with humans. They'd need 2 to send a rescue mission, due to the limitations of Orion's reentry, and that's assuming the Starship only has 3 people on board, which it has capacity for many many more.

So... chance of NASA sending a rescue mission to the moon? 0%. Literally 0%. There's no way they can do it. The only ship able to rescue a stranded Starship crew on short notice would be another Starship.

As far as xplodeship... Yeh, they've had a couple of failed launches recently. They've also solved the problems with them. They've got even more fixes coming in Block 3. Specifically, the problem was caused by a leak in the plumbing in the "attic" - area above the engines, but below the tanks, that you can think of essentially as a giant manifold. They've figured out the vibration issues that caused the leak, and changed the flight profile so that those vibrations don't occur. They've increased the capacity of the purge system that forces any leaked gasses out of the area. They've redesigned the plumbing that had the issue to not resonate in the same way. Version 3 eliminates the attic entirely, and mounts the engines directly to the bottom of the tanks. They've now had two consecutive successful launches, and reentries. I see no reason to think that next year they won't be able to get a pair of ships fully into orbit, and test docking, and fuel transfer between ships. Once they've done that, the only thing left to get to the moon is to nail the landing, which, frankly, if SpaceX can't nail landings... I have no idea what's going on.

Comment Re:PR (Score 2) 100

NASA really hasn't paid for much of it. The HLS contract was for $4.5bn, of which, NASA has paid out $2.6bn so far. Starship development has so far cost somewhere around $10bn, so NASA's funded maybe a quarter of it. That said, you're right that SpaceX will do it for PR alone. They're trying to get to Mars. The problems you need to solve for that are a superset of the problems you need to solve for the moon, so they're going to be solving all the problems for the moon anyway. They'd be mad not to go to the moon.

Comment Re:F-Droid's claim isn't quite accurate (Score 1) 40

Stop spreading FUD. This verification requirement affects ADB installs too

From Google's FAQ

Will Android Debug Bridge (ADB) install work without registration? As a developer, you are free to install apps without verification with ADB. This is designed to support developers' need to develop, test apps that are not intended or not yet ready to distribute to the wider consumer population.

Obviously, ADB can't distinguish the cases of (a) an app developer who just wrote an app using ADB to install an APK on their device for testing and (b) any random person using ADB to install an APK on their device for whatever reason they like. This means that random people can use ADB to install APKs from unverified developers.

FYI: This system would be worthless if it didn't scan ADB installed apps, because the whole point is to mandate Google's approval for app installs.

Well, if that were the point of the system, you'd be right, but it's not. The point of the system is to make it hard for malware authors to distribute malware to large numbers of users without getting quickly shut down. This system doesn't "scan apps" at all... Android just won't install downloaded APKs that don't have a Google-provided signature on them, but it will install ADB-installed APKs without a Google-provided signature because app developers need to be able to build and test apps without having to send every version off to a Google server for signing.

Comment Re:Consciousness (Score 0) 196

'm eager to hear other theories with more explanatory power.

I don't know about more explanatory power, but here's another theory for you: Consciousness doesn't really exist, at least not as far as we know. What we perceive as our own consciousness is just a result of the effort of one part of our brain to generate explanations for the results of computations by another part of our brain. The process of generating explanations requires a little bit of recursive analysis that looks like introspection and self-awareness, except that nearly all of what it's allegedly introspecting is actually completely opaque to the computation that generates the explanations. Note also that there needn't be any actual correlation between the generated explanations and the computation that is being explained (there's actually pretty good empirical evidence that our explanatory systems are just as good at explaining something we actually disagree with as something we decided, BTW).

Now, why did we evolve such an explanation engine? Because it was adaptive for a communal species, of course, especially when coupled with another ability that co-evolved with it: Rich, detailed communication (speech, and more). We developed the explanation engine so we could use the explanations to convince others in our community that our unexplained computation results (decisions, actions, etc.) are better than theirs. This development was both communally adaptive, because battling explanation engines (people arguing with each other) actually result in the construction of better joint computations, enabling the community to make better collective decisions and thrive, and individually adaptive because the better explainer is able to get their way more often and increase their status within the community.

So, within this theory, your questions are all pretty easily answered: (1) Consciousness is just an illusion that arises from the layered structure of our brains, which are, indeed, purely physical objects, though incredibly sophisticated. (2) This apparent consciousness and the logic circuitry that underpins/enables it closely matches evolutionary adaptiveness because it is actually an evolutionary process: The explanatory engine operates by generating, testing and selecting postulates, just as evolution operates by generating, testing and selection genotypes. (3) Consciousness is illusory so the question of where to draw the line doesn't make sense, but you can also clearly see that rocks don't have anything that might appear to be consciousness because are no computational processes going on in them. Cities might, however, especially when you note that human cities contain institutions that both compute (make decisions) and attempt to explain those computations, but we'd really need a much more precise definition of "consciousness" to attempt to answer this question. Such a definition is impossible, however, because consciousness is just an illusion anyway.

Comment F-Droid's claim isn't quite accurate (Score 2) 40

From the summary:

In its blog post, F-Droid warns about the impact on users and Android app developers. "You, the creator, can no longer develop an app and share it directly with your friends, family, and community without first seeking Google's approval,"

You can still develop an app and share it directly with whoever you want without registering, you just have to convince them to use ADB to install it, rather than clicking a link on a web site or downloading from an app store (like F-Droid). This adds a lot of friction and requires your potential users to trust you quite a bit more, because it feels like they're taking a bigger risk, even though there isn't any actual difference in risk. I expect that we'll start to see apps packaged with ADB for a "single-click install" from a Windows machine, to reduce the friction as far as possible. Users would still have to do the dance to enable developer options, enable USB, then tap "accept" on the ADB key popup, though an installer could (and probably will) walk them though that.

Also, although I don't think details are available yet, Google says there will be an option for "limited distribution accounts" which don't require any fee or ID verification, but can only distribute their apps to a limited number of devices. For people who just want to share with friends and family, this should cover them.

Slashdot Top Deals

The star of riches is shining upon you.

Working...