• 0 Posts
  • 124 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle


  • Medical devices are required to comply with 21 CFR 820 in the United States, which establishes quality management standards. This includes minimum standards for the software development lifecycle, including software verification and validation testing.

    In the EU, broadly equivalent standards include ISO 13485 and IEC 62304.

    If an OEM wants to do a software update, they at minimum need to perform and document a change impact analysis, verification testing, and regression testing. Bigger changes can involve a new FDA submission process.

    If you go around hacking new software features into your medical device, you are almost certainly not doing all of that stuff. That doesn’t mean that your software changes are low quality–maybe, maybe not. But it would be completely unfair to hold your device to the standard that the FDA holds them to–that medical devices in the United States are safe and effective treatments for diseases.

    This may be okay if you want to hack your own CPAP (usually a class II device) and never sell it to someone else. But I think we all need to acknowledge that there are some serious risks here.


  • The Linux software you can get as a regular user from your typical Linux distributions is absolutely not any more secure on average than your typical Windows software.

    I say this as someone who writes application programs on both systems.

    I think it’s really debatable whether the Linux kernel is really any more secure than the Windows NT kernel. Linux advocates have pushed the “many eyes, shallow bugs” line for a long time, but high profile lapses seem to really have put the lie to that.




  • Israel has already been fighting a war with Hezbollah that Hezbollah declared. These attacks were fairly specifically targeted at Hezbollah’s military equipment. They have been arguably successful at disrupting Hezbollah’s communications, and likely command and control systems. That by itself is a valid military objective.

    To the extent that these attacks directly hurt Hezbollah personnel, and to the extent that they damaged Hezbollah’s morale: those too are valid military objectives.

    So “war crime” gets thrown around here quite a bit just because there are high civilian casualties. The facts are twofold: Civilian casualties have always been a part of warfare; and there is no specific number or proportion that makes some act into a war crime. That’s just not how these kinds of laws are written.

    I have not yet seen a strong argument for a specific war crime rooted in a specific basis in international law. A lot of people bring up protocols 1 and 2 to the Geneva conventions, but Israel and the US have not ratified those.

    There are other conventions that regulate weapons of war, but I’m pretty sure none of them are going to address pager bombs directly. An argument there would have to be at least somewhat creative.






  • The Geneva conventions do not contain the level of protection for civilians that you think.

    In particular, Israel has ratified and is a party to the conventions of 1949. After much debate in 1949, those conventions ultimately allowed things like indiscriminate carpet bombing of cities (which the US practiced extensively in the previous war).

    Later protocols from 1977 added more civilian protections more along the lines you propose. These protocols banned carpet bombing and introduced the concept of proportionate response into the conventions.

    Israel and the United States have not ratified the 1977 protocols 1 and 2 concerning additional civilian protections. According to the text itself, they are not bound by the provisions if they do not agree.



  • None of the current ICBM platforms were designed for missile defense. Missile defense simply did not exist at the time.

    Sentinel is busting its budget because it’s renovating and rebuilding all of the ground segments: all of those decrepit silos and computer systems. It’s still money well spent in my opinion.

    Missile guidance is not a computationally hard problem, and it hasn’t changed much since the 50s. Terminal missile defense is a fantastically hard problem, and wasn’t mastered until the last decade or two. And the current generation missile defense capabilities still haven’t all been demonstrated in combat.

    Having said that, I would generally expect NATO’s missiles to work as advertised in a hot war. And I would plan for Russia’s missiles to be somewhat less effective than they advertise, but still a credible threat.




  • Question, when you move to a new place in Spain, do you need to register residency with the police?

    I don’t know if Spain does that or not, but I think Italy does some version.

    The United States doesn’t have that, and doesn’t have a national id card. Although most people effectively register themselves to get a driver license, that is only required if you drive. So voter registration nominally provides some way for the government to get the information on residency, which is important for figuring out which local elections you need to vote in.

    Now recently, in the last couple of decades, some states started requiring photo id verification to vote. This defeats the purpose of having a separate voter registration system, because you still have to go to the driver registration system to get either a driver license, or a non-driving photo ID. Nevertheless, the separate voter registration system has hung around in every single one of these states, because the real goal is to prevent people from voting.