Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Comment Re:The best place to hide a lie (Score 1) 42

Compressed elliptic curve points is not some crazy secret or complex thing to be making up conspiracy theories about. The nature of elliptic curve cryptography is that knowing the curve and the x coordinate, there are literally only two possible y coordinates, and a single bit signals which of the two possible y coordinates to use, allowing you to reduce, say, 512 bits of key coordinate down to 257 (256 for the x, 1 for the y), at a trivial cost to compute y from x before doing the rest of the math.

The only reason this wasn't done automatically in every implementation of elliptic curve cryptography from the beginning is because some idiot at the patent office issued a patent for point compression (that is, one specific case of selecting one of two options with a single bit), and so for a couple of decades free projects didn't want to risk implementing it for fear of patent trolls. The patents have now expired, so people are doing the sensible thing.

Comment Re:Darwin calling (Score 1) 317

The problem is that the people most harmed by this aren't the morons themselves, but their kids, who have no say in the matter. Sure, in an evolutionary sense, eliminating the children does curtail their influence on the gene pool (depending on how much of their idiocy is heritable), but I'd really prefer it if they took themselves out of the gene pool and let their kids learn from that example.

Comment Re:Interesting (Score 3, Insightful) 24

checks current RAM usage Almost precisely 1 GB from all Firefox tabs put together (seven loaded and an embarrassingly large number of unloaded tabs I'll probably ignore for a few years before cleaning them up by the thousand). uBlock Origin and uMatrix probably reducing the load a bit by blocking all the ads. Chrome is no better at this (and worse at the ad blocking), I really don't get why people are so down on Firefox memory usage.
Python

Python Foundation Rejects Government Grant Over DEI Restrictions (theregister.com) 265

The Python Software Foundation rejected a $1.5 million U.S. government grant because it required them to renounce all diversity, equity, and inclusion initiatives. "The non-profit would've used the funding to help prevent supply chain attacks; create a new automated, proactive review process for new PyPI packages; and make the project's work easily transferable to other open-source package managers," reports The Register. From the report: The programming non-profit's deputy executive director Loren Crary said in a blog post today that the National Science Founation (NSF) had offered $1.5 million to address structural vulnerabilities in Python and the Python Package Index (PyPI), but the Foundation quickly became dispirited with the terms (PDF) of the grant it would have to follow. "These terms included affirming the statement that we 'do not, and will not during the term of this financial assistance award, operate any programs that advance or promote DEI [diversity, equity, and inclusion], or discriminatory equity ideology in violation of Federal anti-discrimination laws,'" Crary noted. "This restriction would apply not only to the security work directly funded by the grant, but to any and all activity of the PSF as a whole."

To make matters worse, the terms included a provision that if the PSF was found to have voilated that anti-DEI diktat, the NSF reserved the right to claw back any previously disbursed funds, Crary explained. "This would create a situation where money we'd already spent could be taken back, which would be an enormous, open-ended financial risk," the PSF director added. The PSF's mission statement enshrines a commitment to supporting and growing "a diverse and international community of Python programmers," and the Foundation ultimately decided it wasn't willing to compromise on that position, even for what would have been a solid financial boost for the organization. "The PSF is a relatively small organization, operating with an annual budget of around $5 million per year, with a staff of just 14," Crary added, noting that the $1.5 million would have been the largest grant the Foundation had ever received - but it wasn't worth it if the conditions were undermining the PSF's mission. The PSF board voted unanimously to withdraw its grant application.

Comment But it does damage health... (Score 3, Informative) 40

Umm, carbon dioxide does in fact damage health directly. No, it's not doing anything to us right now outdoors, but indoor levels of CO2, especially with large numbers of people in a poorly ventilated area are substantially higher than outdoor levels. A higher baseline outdoor CO2 makes those indoor levels rise even higher. Health effects begin at around 1000 ppm, which we regularly hit already indoors, and which we could hit outdoors in urban areas by the end of the century. It begins with reduced higher-level cognitive function while exposed to the higher levels (read: we get dumber and dumber as levels rise), and chronic exposure weakens bones, forms kidney stones, and damages the circulatory system (more cardiac arrest, more strokes, etc.). It's why solar radiation management isn't sufficient to solve the problem; if we cool the planet without reducing CO2 levels themselves, we'll all get dumber and sicker no matter how much we do to restore pre-industrial temperatures.

Comment Re:just stop (Score 1) 192

That's only true since 2017. Prior to then, lots of folks itemized. Post-2017, with itemized deductions for regular people limited to the charitable deduction, the (capped) mortgage interest deduction, and the (heavily capped, to punish blue states, and not adjusted for inflation so it's less useful each year) SALT deduction, yeah, basically only singles with new mortgages or those who earn and donate a lot of money get anything from itemizing, but that isn't a permanent and automatic state of affairs. It could happen next year if the One Big Beautiful Bill fails, because all the changes to deductions and the standard deduction were officially temporary, and failing to extend them means the old deduction regime returns.

Comment Re:Donald Trump (Score 1) 192

At the same time he was talking about "undoing some mistakes", he was also talking about gutting the regulations, and regulatory agencies, that fixed those mistakes of the past. A phrase that rings true is "Every regulation is written in blood." No, it's not 100% true, but it's the case for many, many regs. The regulations on food safety, water quality, removing lead from the environment, etc., are all there because people died. When you say "I want to cut regulations (in general)" as opposed to "I oppose these specific regulations as being poorly targeted and in need of improvement", you're saying "It's okay if we kill some people if it saves money." And that's exactly what we're getting.

Comment Re:Donald Trump (Score 1) 192

Capital-L Libertarians lately haven't been all that distinct from Republicans. Sure, they tend to be more marijuana friendly. And they claim to want to cut spending or balance the budget, but so does almost every Republican, and 95% of them, given the right environment, e.g. single party control of all branches of gov't, immediately unbalance the budget further, barely cutting spending, if at all, and handing out even more unsustainable tax cuts. And you'd think, given the whole "personal autonomy as guiding principle" thing in little-l libertarianism, they'd be pro-choice, or at least "we may dislike it personally, but the gov't has no business getting involved". But basically every prominent Libertarian politician and thinker either is vocally anti-choice, or, even if they claim to be pro-choice, glaringly avoids criticizing massive steps towards anti-choice policies at both federal and state level.

I'll take the Libertarian party more seriously the moment they clearly decide that bodily autonomy, the single most basic human right, trumps (rather newly invented; within the last 100 years, most churches tended to go by quickening, not conception, as beginning of life) religious beliefs about non-conscious entities. For now, they're basically NRINO (Not Republican In Name Only).

Comment Re:Great, now only if (Score 5, Informative) 22

Have you used it in the last, say, three years? They made massive improvements. I run with uBlock Origin, uMatrix (probably not for most folks, but I'm a paranoid OCD control freak), Greasemonkey with a dozen installed scripts, and Facebook Container, and it's lightning fast. They went through a bad spot 5-10 years ago, but for the last several years it's been as fast as Chrome for me, and unlike Chrome, doesn't constantly try to break ad-blocking extensions.

Comment Re:The house doesn't always win. (Score 2) 113

Except the house still won. The jackpot got this big from many rounds of play with no winner. They were eventually going to pay out, and now that they have, they've locked in the winnings from this round of suckers, perhaps slightly less than they'd have received otherwise, but still profitable for the lottery.

Comment Re:great idea (Score 2) 63

Climate change (mostly the ice age ending) led to the extinction of various forms of megafauna like the wooly mammoth (which Colossal also aims to bring back), which led to the extinction of their species.

That's a weird way to spell "Humans murdered the shit out of megafauna more and more efficiently as they moved to areas where local megafauna didn't have time to evolve even behavioral defenses against human predation." Climate change moved roughly in sync across the globe, human arrival did not, and guess which one is more tightly correlated with mass extinctions selectively targeting megafauna?

Comment Re:Why? (Score 1) 170

Okay, so we have more safety within the Rust driver itself. I mean, maybe that's a good enough reason?

Yeah, that's exactly it. A huge percentage of the kernel level exploits and bluescreens in Windows stemmed from insecure device drivers, because there are far more devices that need drivers than there are programmers capable of writing bulletproof kernel mode C code. The Windows solution was to make it much easier to write user-mode drivers, but they're still in C, so they're still buggy as hell, they just don't bluescreen the box when they go down (and as a bonus, they're easier to debug, which makes it somewhat easier to find and fix bugs when they do go down). I've written code for Windows myself (years ago, for Windows 7/WS2008), and the internal development rules at Microsoft do make it harder to make stupid mistakes with buffer overruns and the like, but it's still C, the moment you start indexing an array all it takes is one mistake to introduce a critical vulnerability.

I think the only reason you see Rust advocated for in this space so often is because, in the systems programming space, there just aren't a lot of options:

  • C: Secure entirely by convention and discipline (read: All it takes is one lousy night's sleep and a less than perfect code review to introduce a serious bug).
  • C++: Offers more options for opt-in safety, but Linus hates it (for more or less valid reasons), and again, it's opt-in safety, the gain is limited.
  • Zig: Even newer than Rust, not stable enough for 1.0 release.
  • Swift: Made by Apple, for Apple, don't want to anchor yourself to a language with a major corporation calling all the shots (sure, there open source contributors, no, Apple won't do a thing that hurts Apple products to improve the language for non-Apple product usage). Not sufficiently memory-safe either.
  • Go: Finally, memory-safety! Except oops, garbage-collected; can't stop the world in the kernel, no sir.

Whatever you think of Rust, it's got the best memory-safety story of any reasonably mature, not-tied-to-a-single-corporate-overlord language here that gets roughly bare-metal performance and doesn't involve non-deterministic garbage collectors. That's really it. It has other nice-to-have features (e.g. decent standard library; built-in, reasonably well-done package management with a lively package ecosystem), but at kernel level, "memory-safe-by-default systems programming language" is the selling point. Adding interfaces to make it easy for multiple Rust-based device drivers to maintain that safety through a common interface rather than each of them individually wrapping the interface with FFI in a more-or-less safe way doesn't seem wildly unreasonable.

Comment Re:Good thing Google is a US company (Score 1) 263

noun. a cardinal number represented in the U.S. by 1 followed by 33 zeros, and in Great Britain by 1 followed by 60 zeros.

All forms of English are primarily short scale at this point, just like the U.S., even if they were historically long scale. The term "thousand million" still survives as an historical curiosity, but it's synonymous with billion in most usage nowadays. It's Continental Europe (excluding Russia/Turkey) that favors the long scale. Like British/American English, Russian favors short scale, luckily for Google (not that they'd pay either version of a decillion, in either dollars or rubles).

Comment Re:Correlation != Causation (Score 1) 207

Only 18%? Around where I live (central MD area), the only reason someone isn't going at least 5 MPH over the speed limit on the highway, usually 7-15 over, is because the traffic has slowed everything to a crawl. And in that case, everyone is going too slow for a fatal accident. I can't imagine fatal accidents occurring around here without someone involved speeding, unless both drivers were high and driving slower as a result.

Slashdot Top Deals

Recursion is the root of computation since it trades description for time.

Working...