* Posts by Christian Berger

4851 publicly visible posts • joined 9 Mar 2007

Trans Pacific Partnership still stalled

Christian Berger

Those treaties typically don't benefit democracies

They enable foreign companies to sue against laws on courts not following the laws of the affected country.

Imagine a country deciding to ban Internet censorship and deep packet inspection. A maker of equipment used for that purpose, who invested some money into selling such equipment in that country can then sue that country. After all their investment is in danger.

Same goes for DRM. If a country would outlaw DRM companies like Macrovision could sue that country.

Since the interests of large companies able to sue typically don't align with the interests of normal people, this is very anti democratic.

Stephen Hawking: The creation of true AI could be the 'greatest event in human history'

Christian Berger

We already have artificial "thinking" beeings

Those are large organisations. They behave like a single being and show all the effects you would expect from such. For example an organisation typically has a drive to self preserve. Organisations also want to grow.

The implications of course are that many of those organisations are now harming our world since they are not properly safe guarded.

ARM tests: Intel flops on Android compatibility, Windows power

Christian Berger

It cannot be the point of x86 to run Android

The point of x86 is that you have the "IBM-PC"-Architecture which not just includes the instruction set and core, but also how graphics and mass storage works and how to discover hardware. That means I can run an image of every OS written for that platform, and it'll work, no matter what company I buy my computer from. It'll also work on a decade old computers or on computers in a decade.

ARM is still working on it, and it's likely that the SoC manufacturers will oppose/boycott it. This is the opportunity for x86. Now they could act to make mobile devices as useful as laptops are. Instead of having non-upgradable devices, you could have actual computers which you could install a new operating system on after the support for the old one runs out.

DreamWorks CEO: Movie downloaders should pay by screen size

Christian Berger

Remember when business proposals had to comply with reality?

Today you can just spend money on lobbying making sanity illegal.

Thanks for nothing, Apple, say forensic security chaps

Christian Berger

And yet no advantage for the common user

Since Apple can just push a new firmware to every user... which can simply read out all the data and transmit it everywhere you want.

Encryption is fairly useless unless you have control over the hardware that encrypts. If you control that hardware you can just bypass the encryption or read out the secret keys.

AMD adds ARM security core to new, low-cost x86 mobile processors

Christian Berger

Virtualisation and Secure Boot are no security features

Since they both either promote or enforce insecure closed code.

Secure Boot only makes sure you cannot boot vendor approved code... which isn't necessarily more secure than just any code. In fact denial of service attacks have already been found my accident, occurring with valid input. (just think of the EFI bugs)

Virtualisation sounds like a good idea at first, however most environments are terribly leaky. Quite often you will be able to snatch (part of) secret keys through the borders of virtualisation. It's a convenience feature, allowing you to share hardware, but not a security feature.

Awkward? Elop now answers to ex-junior Nadella as Microsoft closes Nokia buyout

Christian Berger

What may have been the problem

Nokia mostly sold to operators. Operators are rather peckish and have different interests to the actual users. That's why the Maemo line shipped (mostly) without GSM modems.

Just imagine a N770 with GSM or UMTS. Why use normal telephony on it, when you can not just use Skype, but even have a video capable SIP-client on it? Why use SMS when you have a variety of different instant messaging services? Why use WAP when you have a full featured web browser?

A good smart phone goes against everything the operators want. Smart phones only cause traffic, but generate little income. If Nokia brought out one of those, they'd have severely damaged their business relation with the operators... or at least they thought they would.

The only innovation Apple brought into this is that they gradually stopped caring about the interests of the carriers.

Christian Berger

Re: Already happened

Yes, but Jolla actually has a bit of a chance to succeed. (Even though the current hardware it runs on is brain dead)

Christian Berger

If I was an engineer at Nokia

I'd try to get my colleagues to quit with me to create a company. Investors love that and if it's something about the mobile web or the cloud they are even more likely to turn on the money hose.

Then you pay out the investor money in salaries and wait till you are bought up by some larger company. You then quit after having sacked in the money.

And if anything fails, you can still go next door to Huawei or any other of the companies setting up their camps near the Nokia campus... which is what you and your colleagues probably are thinking of doing anyhow.

Christian Berger

Re: Android Linux

They do that for years. I think half a decade ago they signed an agreement with Novel. After all Microsoft also has a services branch and they somehow need to stay competitive.

Researchers slurp unencrypted Viber messaging data with ease

Christian Berger

Logical consequence of the way we build mobile devices

Those simply swept away years of experience on making computer systems secure. Since those devices are essentially completely new developments, only sharing the kernel.

Additionally "security" in the mobile world only means "security" of business models. Mobile devices have protections to keep you from installing a newer version of the operating system, making you buy new hardware whenever the vendor wants you to. It includes protection from copying software.

True security features like community based code reviews are nowhere to be found. Additionally development is so appalling few good programmers write for such mobile devices. Combined with the possibility to make a quick quid even with horribly bad software quality, there are now hordes of bad mobile app developers. This is just like it used to be with the "Multimedia CD-ROM" scene in the 1990s and the "web designers" which came afterwards.

So it's not surprising that a mobile application which claims to do something difficult is in fact completely broken.

New HDS array: It's a G1000 Jim, but not as we know it*

Christian Berger

Lots of smartphones had hardware keyboards

Of course the good ones had essential keys like the escape key. It's a rather smart idea since you can but the buttons a lot closer together than you could do with an on-screen keyboard while still keeping it usable, plus you don't waste half your screen for the keyboard.

Japanese boffin EYES up big bucks with strap-on digi-glasses

Christian Berger

This was just in the news in Germany

They even referred to "The Register". It was on DRadio Wissen.

'Maybe I'll go to Hell, but I think it's a good thing' says plastic Liberator gunsmith Cody Wilson

Christian Berger

The problem with such extreme liberals is...

...that they don't understand that laws can be important. Yes there are lots of crap laws which are a symptom of democracy failing in many countries, but laws are there to level the playing field. They are there to protect the weaker, let it be individuals from companies or small companies from large companies.

The question is not more or less laws, or more or less government, but the right laws and the right government intervention. The US are a prime example for this. There are people dying because they cannot afford going to a doctor, yet the government spends trillions on wars and spying on the world.

OpenBSD founder wants to bin buggy OpenSSL library, launches fork

Christian Berger

Re: Right, so ...

Well what seems to be obvious is that the OpenSSL team doesn't seem to be quite up to the job. After all they let that heartbleed bug in even though there apparently was no indication of any input sanity checks in it. If your code is critical to half of the SSL connections on the Internet, you should be somewhat more careful not to break stuff. Maybe you should even have multiple independent reviewers for any patches that come in. Plus you need to have the courage to tell someone that their code is not quite up to the standards they have, and perhaps give them tips on how to improve it. (this can, in many cases, be a pre-written text)

So yes, this might be an OpenBSD-only thing at first, but as with much OpenBSD originated software it'll spread out to other operating systems. After all most of the systems out there today are POSIX.

Happy 25th birthday, Game Boy!

Christian Berger

Re: And on, and on, and Ariston

I seriously wonder how they made that. Was it just an elaborate coreography done in real time, or did they use some form of compositing.

Who wants to work on a 264-Core, 6TB RAM supercomputer?

Christian Berger

Does that even count as a supercomputer any more?

I mean this is just "as much" as about 50 desktop computers (OK it has more RAM). I'd put it into the "midrange" category. Not something you'd predict the weather on, but something you'd use as an application server for 500 people.

Slip your finger in this ring and unlock your backdoor, phone, etc

Christian Berger

Reminds me of the Java days

Back when Java was still considered to have a bright future under the sun, they made rings with little Java chips inside so you could exchange data by touch through the conductivity of your body. It never really got anywhere but the keys were hideous.

Next Windows obsolescence panic is 450 days from … NOW!

Christian Berger

Why this is less of a problem with open source

Your typical Linux distribution or *BSD system comes with all the software you need in place. So you get your kernel, your shell (graphical if you like), but also things like your web-server. Software running on those systems typically is ported to multiple systems. So your web-server most likely doesn't just run on Linux, but also several BSDs, Solaris and maybe even Windows. Chances are extremely high it'll run on the next version of your operating system without any changes... and even if it needs changes, your distribution will take care of those.

While on Windows you have your operating system, which is fairly bare bones compared to what you get on most other operating systems. Therefore every software vendor needs to supply large parts of the system. Your operating system vendor has no idea what software you run, and your software vendor has no way to contact your operating system vendor in case of problems.

An additional problem is that most software vendors on Windows don't adhere to the UNIX philosophy. This means you end up with closely integrated "do it all" modules having binary interfaces. Since there is little communication between different companies, misunderstandings are common. Particularly with binary interfaces this creates a mess amplifying every little version mismatch.

Christian Berger

Re: Already migrating clients off 2003

Wait, a client makes your server crash? That's most likely a serious security critical bug.

AMD's 'Seattle' 64-bit ARM server chips now sampling, set to launch in late 2014

Christian Berger

We need a common plattform first

We need something where it doesn't matter if you've got ARM system from Vendor A or B. You just slap on the ARM version of your favourite operating system just like you do on x86.

Of course there is a big niche for ARM in hosting. Most people and organisations don't need a full x86 server. However they do not want to have a virtual server because of all the security problems involved.

ARM servers might fill the gap, giving you a 10 Euro/month dedicated server.

Happy 40th Playmobil: Reg looks back at small, rude world of our favourite tiny toys

Christian Berger

Re: Of course there is a sad story behind it all

I believe next to it there's the Tucher Park, a park run by a brewery.

Christian Berger

Of course there is a sad story behind it all

As someone who has been to the native country of the Playmobilians officially known as "Playmobil Funpark". It's a small enclave fully inside of Germany near the town of Zirndorf. It's easy to get visa, but they charge a small fee for them.

The Playmobil people actually seem to consist of several different races. The larger ones sell the smaller ones into slavery in large stores where the smaller ones are brought into degrading poses.

Since tourism is one of their main industries they do takes Euros as a currency. The natives don't actually do much, but they employ Germans to do much of the public work for them. I do have photographs somewhere.

Brit boffins use TARDIS to re-route data flows through time and space

Christian Berger

Re: Traffic costs are always relevant.

Well, but virtually all data intensive companies offer free peering plus free CDN nodes in your network if you provide the rackspace.

Besides I pay my ISP so I won't have congestion (at least not 99% of the time, accidents can happen).

Christian Berger

It's not like traffic costs are relevant

At least not on the backbone where they plummet as the equipment continually gets upgraded as part of the maintenance cycle.

So this is yet another attempt of turning the Internet into a "Google/Facebook/etc."-centric network modelled after 1980s online services.

Bored with trading oil and gold? Why not flog some CLOUD servers?

Christian Berger

Does this mean...

we'll now have computing power shortages caused by trading?

Want a free Bosch steam iron? You'll have to TALK TO THE DEAD

Christian Berger

Working at that company...

...introducing Ouija boards as a new means of "communication" probably would solve a lot of internal communications problems.

OpenSSL Heartbleed: Bloody nose for open-source bleeding hearts

Christian Berger

Re: no armageddon here thanks

Actually that's incorrect. Since OpenSSL has its own memory allocator, those 64k are guaranteed to belong to the OpenSSL library. So the chance that you get keys and/or passwords is pretty high.

So an idiotic design choice inside of OpenSSL also contributed to the problem.

So you invent a wireless network using LEDs, what do you do next? Add solar panels. Boom

Christian Berger

Re: Not as dumb as it sounds

I believe you are overestimating the possibilities here.

Fast speeds require special LEDs plus low multipath situations. You cannot simply put a lens in front of it and hope to get by with diffuse light... and still hope for a Gigabit. At such low ranges radio is much more competitive and needs much less power since you don't need to drone against that high intensity noise source in the sky.

The 'market' (I know an ugly word) for this is like the one of NFC. It's for communicating with something over <1m distances, for example for having "location based services".

Light is cheap for low data rates and short ranges, but once you want higher ranges and/or faster data rates, it's a different kind of animal.

Russian deputy PM: 'We are coming to the Moon FOREVER'

Christian Berger

Makes sense

Maned moon missions are a great way to boost your engineering for decades to come. Just look at what it did in the US. The momentum still lasted into the 1980s when it gradually became desirable not to be an engineer, but a banker.

Sony battery recall as VAIO goes out with a bang, not a whimper

Christian Berger

Hmm. let's look at what Sony uses when they need a laptop

For their (back then) new Betacam SX they obviously had to have an edit controller. They chose to go with the time and just have a laptop with some extra hardware to control the VTRs.

Let's look at what kind of laptop they used:

http://www.marcelstvmuseum.com/folders/sony%20betacamSX%20folder.pdf

That doesn't look like a Vaio, does it?

Not just websites hit by OpenSSL's Heartbleed – PCs, phones and more under threat

Christian Berger

Re: Debug malloc

Actually OpenSSL comes with its own malloc, that's why you always get its data. And why do you ask did OpenSSL use its own malloc? Because they thought the OpenBSD one was to slow. (it's slow because it tries to be secure)

Microsoft: We've got HUNDREDS of patents on Android tech

Christian Berger

The sad things are...

Most of those patents are either trivial or make the product worse or both.

Mad Raspberry Pi boffins ripped out its BRAINS and SHRANK them for your pleasure

Christian Berger

We need a "communicator" case for that :)

So we'll have a real computer in a pocket.

Beat it, freetards! Dyn to shut down no-cost dynamic DNS next month

Christian Berger

As a paying subscriber I now consider canceling my contracts

Back in the 1990s I used dyndns since I simply couldn't afford anything else. Then when I wanted DNS dyn seemed the obvious solution, plus I'm doing something good by supporting the free service.

Now since that's gone, I'm considering going, too. The main problem is of course that I cannot port my dyndns.org subdomain.

Final Windows XP Patch Tuesday will plug Word RTF vuln

Christian Berger

Linux has to many versions?

"Linux has TOO MANY 'versions', some wildly different!"

Uhm, yes, there are specialist versions of Linux, true. The Linux on your router is different to the one on your desktop... however you can easily write software which runs on all of them by just recompiling it. And that software would even work on a Linux Distribution from 1993 just as well as it does on todays systems, despite of potentially different hardware architectures and such.

Since you don't have package managers or full automated updates, even installations of one Windows version quickly diverge. And even on stock installations no two versions are alike. For example there is a whole separate set of versions for non-latin character sets. A feature which is implemented as a per user setting on most other platforms.

And even when you step back a bit, even the most basic APIs change. While you may still be able to port software from Win16 to Win32 and even Win64, .net is completely out of the question. And you cannot just choose one of them. While Win16 and Win32 can run on anything from Windows 3.1 (if you install Win32s), it won't run on Windows RT or Windows phone devices. (You could however port it to Windows CE).

"Android is made to run on *particular* hardware."

Yes and that is why Android development is so slow. The same is however also true for Windows phone or even Windows CE.

Torvalds rails at Linux developer: 'I'm f*cking tired of your code'

Christian Berger

I don't know if you have ever seen how those Freedesktop guys react to criticism. Typically it's just something like shouting "WHY DO YOU HATE DISABLED PEOPLE!!!".

Christian Berger

Yes, but 10 out of 10 times it's about something that's about something which was trying to re-invent the wheel, but hasn't by far reached the functionality and maintainability of its predecessor.

Honestly I can understand him.

Christian Berger

Unix philosophy

I guess one problem here is also people thinking they can do better than unix without understanding its philosophy.

So far there have been very few (if any at all) non-unixoid systems that actually work and are maintainable, while most unixoid systems were rather good successes. The Unix philosophy seems to be such a great way to reduce complexity. Most software projects fail because of overboarding complexity.

IEEE signs off on 400 Gb/s Ethernet development

Christian Berger

Re: Sod that...

Actually 10Gbps Ethernet could have its place in the consumer market. It could be used to transfer high definition video at low latency. For example you could have a single computer in your basement/closet which powers all the screens in your flat connected via fast Ethernet and small dumb terminals which may consist of nothing more than an ethernet controller and a framebuffer.

Tamil Nadu's XP migration plan: Go Linux like a BOSS

Christian Berger

Because they didn't believe in it

FOSS proponents have always noted that support for Windows will eventually run out and that if support runs out no organisation can continue using it for extended periods of time. If you have FOSS you can just continue to support it yourself, and you automatically pool your efforts with everybody else still using that software.

Greenpeace reveals WORLD'S FILTHIEST CLOUDS – and the cleanest may shock you

Christian Berger

There are datacenters running on coal, gas and nuclear?

So far every datacentre I have looked into for hosting was running on 100% renewables without nuclear. Just look at companies like Hetzner or Manitu (the later positioning itself as an ethical company).

http://www.manitu.de/unternehmen/oekologie-und-klimaschutz/ (100% water)

http://www.hetzner.de/hosting/unternehmen/umweltschutz (also 100% water)

Other sources of electricity would just be far to expensive to run a datacentre of.

3CX Phone System takes on the corporate mobiles

Christian Berger

Or of course...

you could get an engineer to set up Asterisk, Freeswitch or anything normal, was well as a VPN and get all of that cheaper, more reliably as well as more suited to your needs.

Hardwired crypto certificate FAIL bricks Juniper router kit

Christian Berger

Systems enforcing licenses...

...should not be considered highly available. It's a completely unnecessary part that can fail, and that can even be a security issue.

Microsoft's ALREADY telling of bugs in Fondle-Office for iPad

Christian Berger

I'm sorry, buf if your company needs that...

... you are in _serious_ trouble. Apparently you have stored all your data in non machine readable (office) formats.

I'm also shocked to hear that a product from 2010 _still_ requires ActiveX or plugins.

Spooks vs boffins: MIT bods say they've created PRISM-proof encryption

Christian Berger

Fairly academic

It's something called a homomorphic encryption where you can do certain operations on the plaintext by only having the cyphertext. It's doesn't exactly solve a real-life problem as today you can simply perform operations on a trusted device, i.e. your computer at home you can access via your mobile device if needed.

As WinXP death looms, Microsoft releases its operating system SOURCE CODE for free

Christian Berger

Re: Are you insane?

"Rubbish, the first 10 years of effort would be retrofitting some kind of skinning, then the community would start work on four hundred Notepad replacements..."

The Windows fanboy community probably has a head start on it. I'm sure there are _way_ more than four hundred Notepad replacements, and skinning already was a feature of Windows XP.

Christian Berger

Re: Are you insane?

Actually people would stop using the newer systems after Windows XP was open sourced. After all open sourcing would mean that it's going to get a thorough cleanup while still making it compatible.

Just imagine an operating system 100% compatible with Windows, but without all the useless crap added in the newer versions?

Interview: Cisco's security supremo on the Internet of Everything

Christian Berger

Given the track record of Cisco when it comes to securing their own products...

... this does seem like a blind person talking about colours.

SECRET Apple-Comcast CONFAB BLAB: Movies streamed to TV? – report

Christian Berger

No, there is no congestion on the Web...

Even if you assume that by "Web" they mean the Internet, there is no congestion under normal circumstances. The backbone is easy to upgrade, and you need to exchange your lasers regularly anyhow.

The place where there are congestions is the access network of cable companies. The problem simply is that "broadband cable" is a passive distribution network, it never was meant for individual communications. Those networks are a bit cheaper to roll out, but very expensive to update. The shared part of the network is distributed over many buildings.