thewayne: (Default)
The PSF isn't a huge organization, but they do a lot of work. They have an annual budget of about $5 million and applied, and were close to receiving, a grant for $1.5 mil from the National Science Foundation to “address structural vulnerabilities in Python and PyPI.". PyPI is a library used by TONS of Python projects and has been subject to what's known as supply-chain attacks.

So what's a supply-chain attack? In brief, you take a library that's commonly used. Let's say it let's you send output to a PDF within your Python program, a fairly common task, and something that most programmers don't want to reinvent and won't bother inspecting the library for vulnerabilities. The attack happens when a bad guy changes the code for that PDF library then uploads changes to the master, and now, in addition to generating the PDF, it sniffs around your computer and does... stuff. Infects it with malware, perhaps. Gains admin access and strolls around the network. Looks for crypto wallets and steals them. It can do all sorts of stuff. That, in very simplified form, is a supply-chain attack. And if the program you are writing is released as open source and lots of people download it, THEY all are capable of being subverted!

The PSF was going to use the money to implement some automatic code inspection systems so any changes uploaded into the PyPl library would automatically be inspected, etc., to reduce the threat of supply-chain attacks. Lots of good stuff.

But there was a problem...

The grant application was close to being approved when the board that reviews such applications noticed that the "...foundation’s mission statement includes a goal “to support and facilitate the growth of a diverse and international community of Python programmers,” which conflicted with the grant requirements."

And there was another problem. The grant application, if you agreed to accept it, you also accepted that the NSF could claw-back funds if they wanted to! Basically, you take the $1.5 mil, spend it, and a few years later they decide you're too woke and take it all back, directly out of your bank account. And if your cash flow was a little tight at that time, well, sorry! Your foundation just went negative and is no longer solvent!

The board of the FSF decided to withdraw their grant application with the NSF and pursue other avenues to complete their missions.

https://arstechnica.com/tech-policy/2025/10/python-foundation-rejects-1-5-million-grant-over-trump-admins-anti-dei-rules/
thewayne: (Default)
Ignoring the fiasco of Friday's Oval Office meeting between the weird old felon, Mascara Lad, and the Honorable President of Ukraine, the Secretary of Trying To Claim He's SoberDefense just gave Putin a lap dance and the cyber keys to the USA.

He ordered the U.S. military Cyber Command to ignore attacks and incursions from Russia. Allegedly the order states that they are to “stand down from all planning against Russia, including offensive digital actions.”

So that's it. With the exception of the NSA, the nation has no cyber defense against Russian attack.

If we ever needed any proof that there are traitors to the nation in the highest echelons of government, you don't have to look any further.

Benedict Arnold, we've got three new names to join you in infamy.

https://gizmodo.com/trumps-defense-secretary-hegseth-orders-cyber-command-to-stand-down-on-all-russia-operations-2000570343
thewayne: (Default)
This is a first. And since the Bloomberg article is potentially behind a paywall, I'll quote the Slashdot summary:

Todd Shields and Loren Grush reporting via Bloomberg:
Dish Network Corp. was fined $150,000 by US regulators for leaving a retired satellite parked in the wrong place in space, reflecting official concern over the growing amount of debris orbiting Earth and the potential for mishaps. The Federal Communications Commission called the action its first to enforce safeguards against orbital debris. "This is a breakthrough settlement, making very clear the FCC has strong enforcement authority and capability to enforce its vitally important space debris rules," Loyaan A. Egal, the agency's enforcement bureau chief, said in a statement.

Dish's EchoStar-7 satellite, which relayed pay-TV signals, ran short of fuel, and the company retired it at an altitude roughly 76 miles (122 kilometers) above its operational orbit. It was supposed to have been parked 186 miles above its operational orbit, the FCC said in an order (PDF). The company admitted it failed to park EchoStar-7 as authorized. It agreed to implement a compliance plan and pay a $150,000 civil penalty, the FCC said.


Now, this is fine and dandy for the FCC fining an American corporation, and I'm for it: we DO NOT need more space junk! But they don't have regulatory power over foreign corps. Will this encourage satellite corps to register companies in, say, the Bahamas to handle certain operations to avoid fines like this? I guess we'll see.

https://www.bloomberg.com/news/articles/2023-10-02/dish-dealt-first-ever-space-debris-fine-for-misparking-satellite

https://tech.slashdot.org/story/23/10/03/000254/dish-dealt-first-ever-space-debris-fine-for-misparking-satellite
thewayne: (Default)
There's a lot going on here.

Teslas have never had AM radio in their cars. Recently, Ford announced that they were eliminating AM from their 2024 Mustang and probably from future models. WELL, Congresscritters can't have that! So they've stepped in and eleven of them have co-sponsored a bill to REQUIRE car manufacturers to include AM radio at no cost to the buyers!

There's a few issues at play here.

The bill's originators say the government needs a medium that ensures emergency broadcasts can be received by everyone.

Contrary point: for a broadcast to be received, the radio must be turned on and tuned to the correct frequency. And an awful lot of people carry portable radios in their pockets most of the time these days that can receive emergency broadcast messages. This was demonstrated with people receiving government broadcast messages during the pandemic.

Additional point: AM radio - and FM - are rapidly declining markets due to streaming. Is this an effort to prop up a buggy whip market?

For the car makers, there is a very, verymajor technical issue here: EMI. Electro-magnetic interference. You might have noticed EMI first-hand if you've ever listened to Bluetooth headphones while making microwave popcorn: it's not uncommon for there to be a little bit of EMI leakage from the microwave, and Bluetooth is a very weak signal, so your headphones are frequently a little staticky while making your popcorn.

Guess what?

Electric cars - I'm not sure whether hybrids also have this problem - generate HUGE amounts of EMI! It is extremely hard to get a clean AM radio signal inside an electric car.

THIS is probably the biggest reason why car makers don't want to bother with AM radios in future cars - they know it's going to be one giant humongoid PITA! They don't want to have to repeatedly try to explain to the average customer why the AM signal, which is never of that great of quality, is even worse in their brand-new car.

I'm not going to get into the details of what the differences are between AM and FM radio types. But if you've spent any significant time listening to AM during the summer, you've probably heard the *pop* with nearby lightning strikes and such. AM is very sensitive to EMI. FM is not. AM has the advantage of the signal carrying a lot further than FM, but with much poorer signal quality. each mode has its trade-offs, but each is also losing market share to the internet and streaming. For me, the only time I listen to the radio is when I'm in Phoenix and I'm frequently listening to NPR or the local classical station. Otherwise, I'm streaming music or podcasts from my iPhone. And I've been doing that for 20+ years now.

https://arstechnica.com/cars/2023/05/ev-advocates-join-tech-groups-and-automakers-to-oppose-am-radio-mandate/
thewayne: (Default)
This is absolute insanity and stands little hope of winning in court, or appeal. From the article:

Four cities in Indiana are suing Netflix and other video companies, claiming that online video providers and satellite-TV operators should have to pay the same franchise fees that cable companies pay for using local rights of way.

The lawsuit was filed against Netflix, Disney, Hulu, DirecTV, and Dish Network on August 4 in Indiana Commercial Court in Marion County. The cities of Indianapolis, Evansville, Valparaiso, and Fishers want the companies to pay the cable-franchise fees established in Indiana's Video Service Franchises (VSF) Act, which requires payments of 5 percent of gross revenue in each city.


Ignoring DirecTV, whose parent, AT&T, is hemorrhaging money on that purchase, they're stupid enough to sue DISNEY?! And note one name conspicuously absent: Amazon. Their Prime TV service uses the same cables. Again, Amazon has huge amounts of money - as do all of these defendants - to represent themselves in court. Probably more than the cities do. This is also extremely bad precedent because if they somehow win, then they've just destroyed the internet because every municipality can charge franchise fees: no more YouTube, taxes on everything at every level.

Internet services already pay connection fees to be carried over ISP services. Those fees are already paid in to city coffers. They do not add to infrastructure load. The cities are trying to double-dip. I understand and appreciate that cities are under tremendous financial burden, especially under these plague times: I've worked in city/state government almost my entire working life. But this is a monumentally stupid idea that is going to go down in flames.

https://arstechnica.com/tech-policy/2020/08/cities-sue-netflix-hulu-disney-claim-they-owe-cable-franchise-fees/
thewayne: (Default)
Thank you, non-big government that can be drowned in a bathtub! They've made $77,000,000 doing this, I do not know over what timespan. It was exposed when two sisters moved to FL from Idaho. One has been disabled her entire life, the other is her caregiver. Because of her disabilities, she has a digital footprint of zero. They went to DMV to get her an ID for Medicare, and within days she started getting junk mail, phone calls, and even had salesmen turning up at her door!

According to the article: "A state spokesperson said there's no way for drivers to opt-out if they don't want their personal information sold.

"The Florida Department of Highway Safety and Motor Vehicles provides public records as legally required, in accordance with federal and state law, and as a necessary function in order for customers to efficiently conduct everyday business. The department has successfully instituted proactive security measures to ensure customer information is protected and any misuse of customer information will be pursued to the fullest extent of the law."


There's a HUGE EFFING DIFFERENCE between providing public records as required AND SELLING EVERYONE OUT TO MARKETING SLIME! That IS NOT providing public records AS LEGALLY REQUIRED! That spokesman and the head of MVD and probably most of the executives in that division should be strung up by their thumbs. Then again, so should Rick Scott and most of his cronies.

NEVER give the government your phone number unless you absolutely have to! This is especially true for voter registration, though with as much data being bought and sold, I don't know that it makes any difference. And if you have a PO Box, use that for any official correspondence.

As an example of voter registration data, last election cycle we started getting calls on our home line for ME for political surveys. I'm registered independent, and they were making big efforts to sway NM independents. We didn't have a home line when I registered to vote 14 years ago! So some data aggregator put my voter ID street address together with another record that had that phone number tied to this address, and *POOF* I start getting phone calls. We've since unplugged that phone because of the number of calls we've been getting.

https://www.wxyz.com/news/national/florida-is-selling-drivers-personal-information-to-private-companies-and-marketing-firms
thewayne: (Default)
I think they have a good plan and have an excellent chance of success. Several years ago Munich tried to switch to Linux, and last year they switched back to Windows. They tried an everything in one shot approach, which I think is doomed from the get go. Barcelona is starting with replacing their Exchange servers with Open-XChange, Internet Explorer with Firefox, and Office with LibreOffice. Then they'll continue from there, eventually replacing the underlying Windows OS with Ubuntu after all of the apps are open source. I'm not sure when they'll be replacing their data center servers with Linux, it's not mentioned in the Europa.eu article.

Apparently this is part of a new European campaign called Public Money, Public Code, of which Barcelona is the first country to attempt such a conversion. It certainly won't be easy being the first, but they'll be able to provide LOTS of information to other municipalities who go down this path later.

https://joinup.ec.europa.eu/news/public-money-public-code

https://linux.slashdot.org/story/18/01/15/0415219/city-of-barcelona-dumps-windows-for-linux-and-open-source-software

https://publiccode.eu/

There's a good comment on the Slashdot story:

"Most IT shops do not know the answer to three questions
1) How much (all up, everything) do we pay microsoft in licence fees per year
2) How much do we pay other vendors for licence fees
3) Over 3 years how much have we paid for software- all up, including lawyers, audits, and licence management packages, and administrators who add nothing to the bottom line ensuring 'compliance'"


This can be a compelling reason to go open source like this.
thewayne: (Cyranose)
He's right, the United States was not founded as, and never really was, a true democracy. We were founded as a Republic, governed by laws passed by elected legislators, and as a Federation, a collection of states. So maybe describing ourselves as a Democratic Republic would be a better practice. Adams points out that the Founding Fathers thought that wealthy land owners would be the ones appointed/elected to govern as they were the best educated. Now that education is roughly democratized, that equation has changed a bit, but still mostly holds true.

http://dilbert.com/blog/entry/oh_my_god_i_live_in_an_oligarchy/
thewayne: (Cyranose)
"I want to punish these people. Sorry to say that, but that's what I want to do."
—Fox Business host Stuart Varney, on federal employees seeking back pay for time furloughed

I can't imagine how many federal employees that live paycheck to paycheck who took a big hit. When I was working full-time, I usually had enough of a reserve that my bills were paid a month in advance, but it would definitely be a disruption if I were out of work for two weeks.

The worst part about this last-minute deal is that even though technically the debt ceiling was raised before the deadline, it probably will still mean a hit on the USA's credit rating. The same thing happened in 1979, in that case they resolved the shutdown with a couple of days to spare, but they still took a hit on the interest paid on the securities the government issued. Over time it amounted to over $12 billion. This time that number will start with a T.

It will also take some to get government functions spun up again. Not everyone has access to the internet, and a lot of email systems were taken offline. It's a lot of people to notify and mobilize. And a lot of people are going to have to restart child care arrangements, etc. It's not flipping a light switch off and on.

And I first heard of paying the employees for their furlough from (R) house members, not from the employees.
thewayne: (Cyranose)
"We're not going to be disrespected. We have to get something out of this. And I don't know what that even is."
—Republican Congressman Marlin Stutzman, on the government shutdown

WHAT DO WE WANT? I DON'T KNOW! WHEN DO WE WANT IT? NOW! Wash, rinse, repeat.

Sorry, but you have totally disrespected the President of the United States and your Democratic Party colleagues and all of the people in this country. And you want respect? If you have to ask for respect rather than doing something that earns respect, you've already lost the game.

My wife read something interesting yesterday, it was written as a dialog with a Congressman: "Can I burn down your house? No. Can I burn down your garage? No. Can I burn down your shed? No."

I learned something interesting the other day, actually, a few interesting things. First, and I hadn't previously heard about this, a lot of Republicans are referring to the Affordable Care Act as a bill, not as a law. As if it hadn't been voted in to law, been challenged at the Supreme Court and survived, and then gone on to survive a presidential election as one of the key points. It's a law, get over it. They're totally oblivious that they're setting a horrible precedent for when the next Republican becomes president and the Democrats control the House. Of course, with the way that districts have been gerrymandered, they're largely invulnerable.

Another is that Fox and other conservative pundits are calling it the 'Government Slimdown', not shutdown. And this includes Fox reporting on news from other sources. Rather than quoting the information accurately, they're reframing it.

We're having a little family reunion this weekend, my dad's sister is turning 90. Saturday we were going to White Sands National Park. But it's closed because of the shutdown. Now the House is proposing little selective "let's fund this program: we need cancer treatments for children" without trying to fund the entire government. A documentary filmmaker went to a Tea Party rally in New Jersey after Sandy hit, asking people "Cut funding of the military? No. Cut funding on education? No. Veteran's benefits? No. Social Security? No. Then what should we cut?" No answer or suggestion was forthcoming.

And yet another new thing to me was when I was looking up Stutzman to see if he was a freshman (he is, but he had previous experience in the Indiana house and senate), and he's definitely linked to the Tea Baggers. But the interesting thing was multiple references to RNC/TP: "nihilism".


What it all boils down to is the House is trying to control legislation, already approved by Congress and signed in to law, through blackmail. They have not offered up a replacement for the Affordable Care Act, they claim it is a job-killer, yet they forced through the sequester which is killing jobs. So they kill jobs while bemoaning a program that has created jobs through the insurance exchanges and is providing health care to the unserved portions of our country.

They must have one heck of a mirror that they look at every morning.
thewayne: (Cyranose)


https://www.foxtrot.com/2013/09/29/american-ish-government/

I've been finding the changes to LJ to be a little odd.  When I first posted this image, all you saw was the HTML.  When I edited it, thinking I'd screwed up the tag, it then appeared.  Did the same thing to me when I posted that video a couple of days ago.
thewayne: (Default)
"The Obama administration has approved guidelines that allow counterterrorism officials to lengthen the period of time they retain information about U.S. residents, even if they have no known connection to terrorism. The changes allow the National Counterterrorism Center, the intelligence community's clearinghouse for terrorism data, to keep information for up to five years. Previously, the center was required to promptly destroy — generally within 180 days — any information about U.S. citizens or residents unless a connection to terrorism was evident."

I'm sure that before the five years are up that it will be extended, and ultimately the data (regardless of accuracy) will be retained indefinitely.

http://yro.slashdot.org/story/12/03/23/1521215/us-govt-to-keep-data-on-non-terrorist-citizens-for-5-years


Meanwhile, the NSA is building an insanely huge data center in Utah. $2 billion, heavily fortified, 60,000 tons of air-conditioning required, power consumption will require a 65 megawatt substation. A man who worked for the NSA for 40 years before he retired due to their going far beyond their mandate and constitutional limits: ...(held his thumb and forefinger close together). “We are, like, that far from a turnkey totalitarian state."

http://www.wired.com/threatlevel/2012/03/ff_nsadatacenter/all/1


And the Japanese have developed a camera that can perform facial recognition at the rate of 36 MILLION faces a second, which means any crowd scenes scanned by the panopticon will never be deleted since they can decide to backtrack someone's life.

"A new camera technology from Hitachi Hokusai Electric can scan days of camera footage instantly, and find any face which has EVER walked past it. Its makers boast that it can scan 36 million faces per second. The technology raises the spectre of governments – or other organisations – being able to 'find' anyone instantly simply using a passport photo or a Facebook profile. The 'trick' is that the camera 'processes' faces as it records, so that all faces which pass in front of it are recorded and stored instantly. Faces are stored as a searchable 'biometric' record, placing the unique mathematical 'faceprint' of anyone who has ever walked past the camera in a database."

http://yro.slashdot.org/story/12/03/24/1937238/japanese-cctv-camera-can-scan-36-million-facessecond


Saint Orwell thought too small apparently.
thewayne: (Default)
Cars currently have black boxes in them, they're similar to what are required to be in airplanes. They record things like are the seat belts in use, did the airbags deploy, what was the seat position for the driver, were the anti-lock brakes in use, etc. The problem is that they aren't any requirements regarding what data points are logged prior to a collision nor for how long they are logged. They also require a factory expert to analyze the data.

They can be good, they can be bad. Good in that they can help reconstruct crashes and ultimately lead to safer vehicles, they can also theoretically help find you not guilty in an accident, they helped Toyota prove that it was pretty much idiot drivers causing phantom acceleration in the Prius, the notable exception was it confirmed a problem in the death of the police officer and his family in a Lexus in California. But there's a lot of paranoia of "Big Brother" boxes and Nannystate. I think these concerns are largely unfounded, I think it's more of a case of the NHTSA wanting more standardized data. Law enforcement has, in most cases, had the ability to subpoena the data from these boxes when they need it, that probably would not change. I don't know if insurance companies would have the right to this data, they might have to request it from the customer.

Most cars already have these in one form or another, it's usually described on the first page or two of the owner's manual. If your car has an air bag, it probably has a black box.

I think it's a good idea, we'll see what happens. There was a lot of hype about the announcement, I'm sure things will become clearer as the proposed regulation gets developed.

http://www.wired.com/autopia/2011/05/automotive-black-boxes/

http://yro.slashdot.org/story/11/05/24/0159212/Mandatory-Automotive-Black-Boxes-May-Be-On-the-Way
thewayne: (Default)
They have a much more clever plan than simply seizing the domain name, which only works for .com and a couple others. Those crafty pirates simply registered a non-US domain and they were back in business!

No, this time they're going to pass a law with which they can order ISP's to remove DNS resolution for said sites!

W00t! Total win!

I guess the morons have never heard that DNS resolves a name to a number, and that web sites can be accessed by directly entering the IP address. Of course, that becomes somewhat more complicated under IPv6.

And if they try to block the IP address, you can use a foreign proxy service to get at the site.

So how long before a Firefox add-on buffers the IP address?

Morons.

http://www.wired.com/threatlevel/2011/05/protect-act/
thewayne: (Headbanger)
Sort of like the code on Federation ships that let them turn off the shields on Khan. I can't blame the Brits in the least.

http://www.vnunet.com/vnunet/news/2152035/joint-strike-fighter

Britain warns US over jet software codes

£12bn Joint Strike Fighter order could be scrapped
Matt Chapman, vnunet.com 15 Mar 2006

The UK has warned America that it will cancel its £12bn order for the Joint Strike Fighter if the US does not hand over full access to the computer software code that controls the jets.

Lord Drayson, minister for defence procurement, told the The Daily Telegraph that the planes were useless without control of the software as they could effectively be "switched off" by the Americans without warning.

"We do expect this technology transfer to take place. But if it does not take place we will not be able to purchase these aircraft," said Lord Drayson.

The problem stems from strict US guidelines on the transfer of technology to other countries. Under current rules any British requests for the use of US technology can take 20 days to go through, obviously limiting the usefulness of a jet strike force.

Lord Drayson is currently in Washington to speak to members of Congress. His tough talking on the project includes the fact that Britain has a 'Plan B' if the Joint Strike Fighter deal falls through.


And once again, The Slashdot Thread.
thewayne: (Dark Side)
Once again, Department of Homeland Security gets another F in computer security. Incidently, that's the same grade for the third straight year. The government overall is maintaining a D+, sort of like the GPA of a certain Commander in Chief. :-)

I love the irony in the fact that they are passing all these laws on cybercrime, some were proposed that make the entity upon whom the crime was perpetrated liable for not adequately defending themselves, and they get such horrible scores.

The Fine Article.

The Fine Slashdot Thread.

January 2026

S M T W T F S
    1 23
45678910
11121314151617
18192021222324
25262728293031

Syndicate

RSS Atom

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Jan. 4th, 2026 09:58 am
Powered by Dreamwidth Studios