* Posts by Paul Crawford

5659 publicly visible posts • joined 15 Mar 2007

BadAlloc: Microsoft looked at memory allocation code in tons of devices and found this one common security flaw

Paul Crawford Silver badge

Re: "Then calloc() returns an error"

For typical PC code I use a version of the NR vector() function that calls calloc() AND checks the return, forcing a ext if it fails after logging that numbers that triggered the failure. That way my code is neater than lots of in-line tests, etc.

I know there are cases when you want to continue and try a different value, but in most cases if you run out of allocatable memory it is game over for your original planned execution anyway.

Other languages have ways to trap stuff that don't relay on a function wrapper, but equally mine can have a brutal #define vector calloc used if I want simplified code for embedded stuff.

Paul Crawford Silver badge

Re: malloc()

Generally I use calloc() so mistakes fail faster and more dependably, as the overhead of zeroing the allocated memory is not usually high compared to what I am going to use it for and I don't go in for over-provisioning (i.e. asking for loads more than I need and allowing the OS to deal with the fall-out if I and others do need it).

But once again we have code not doing sanity checking, sadly in the key C library. But I suspect the same sort of bugs apply in many other languages, just that C is most common for embedded stuff.

Known software issue grounds Ingenuity Mars copter as it attempted fourth flight

Paul Crawford Silver badge

Re: Ace PFY skills

Typically the watchdog will do that for you. With extreme prejudice...

UK government gives Automated Lane Keeping Systems the green light for use on motorways

Paul Crawford Silver badge

Re: paradigm shift

The current shit state of electric cars could be fixed at a stroke if they were able to slope off autonomously at night to recharge somewhere sensible, and be back by dawn.

Sort of AI dogging parties?

Paul Crawford Silver badge

Re: Naysayer

Don't forget they are piloted as necessary by highly trained individual who go though hours of simulator time to handle the cases when the autopilot hands back control. It does not always work out well (AF447) but it is one hell of a better that road users get.

Also said aircraft are professionally maintained and all actions and parts traceable, with any accidents or near misses being independently investigated. Will we see that for each "self driving" car prang?

Microsoft joins Bytecode Alliance to advance WebAssembly – aka the thing that lets you run compiled C/C++/Rust code in browsers

Paul Crawford Silver badge

Re: Essentially webassembly *is* Javascript

Be careful what you wish for...

FCC gives SpaceX the go-ahead to drop Starlink satellite orbits by 500 kilometres or so

Paul Crawford Silver badge

Better them at 550km and dropping out in 25 years no matter what, then sitting at 1200km for centuries or millenia and denying us safe access to the rest of the solar system (or GPS and GEO injection path).

What is it with Facebook and screwing democracies? Now calls for Prime Minister Modi to resign censored in India

Paul Crawford Silver badge
Facepalm

The situation in India is heartbreaking.

They were doing quite well for some time, but then the hubris of politicians wanting to hold electioneering rallies and religious gathering going ahead for $DIETY knows reasons led to the depressingly predictable outcome.

Starlink creates risk of internet investment doom cycle, says APNIC researcher

Paul Crawford Silver badge

It could be said and it is true.

But if you have put in a fibre run that can take, say, 12 fibre pairs, each of which can easily do 10Gb or more (depending on length, use of WDM, etc) you have one hell of a greater bandwidth than a GHz or so of RF spectrum will allow.

Delivering not just kilowrists of speciality video, but hitting that mythical megawrist barrier.

Chinese officials declare intention to become network superpower, tout glorious 5G rollout that's smaller than local carriers' claims

Paul Crawford Silver badge

Re: Sorry, China.

Sadly the west's appetite for cheap tat and out-sourcing to give bigger bonuses to the management says otherwise. How many companies or countries actually do anything against the Chinese government's increasingly authoritarian stance?

I rather suspect the UK will suck up to them again when Boso needs some trade deal or someone to fund new power stations, etc.

God bless this mess: Study says UK's Christian beliefs had 'important' role in Brexit

Paul Crawford Silver badge

Re: Love your neighbour

Well, by the French for a start.

Harassers and bullies succeed in tech because silence is encouraged

Paul Crawford Silver badge

Re: Rednecks incoming.....

Anyone who uses "woke" in a sentence that does not include having a shower and breakfast deserves no respect. Either claiming to be one or denigrating others for it.

Do you expect me to talk? Yes, Mr Bond, I expect you to reply: 10k Brits targeted on LinkedIn by Chinese, Russian spies

Paul Crawford Silver badge

Well it seems Linkedin has some use after all.

Ever wondered what it's like working for Microsoft? Leaked survey shines a light on how those at the code coalface feel

Paul Crawford Silver badge

Oh I think the regulars have no issues working at Microsoft

Working with Microsoft, now that is a different ball game...

It was Russia wot did it: SolarWinds hack was done by Kremlin's APT29 crew, say UK and US

Paul Crawford Silver badge

Re: The Russians are coming

Well as long as they use some Kleenex, I don't want sticky patches under my bed again. Mutter, mutter...

Pigeon fanciers in a flap over Brexit quarantine flock-up, seek exemption from EU laws

Paul Crawford Silver badge

Re: Brexit.

English man: "I say, do you say a payer before evening meal like we do?"

French woman "Non! We know how to cook"

Paul Crawford Silver badge

Re: Brexit.

Not to mention the fishermen who thought it would be no-quotas AND the same EU market to sell to.

Of course the whole of the fishing industry contributes less to the UK's GDP that the (pre covid) west end theaters of London, and in the late 60s my grandfather (who was a fisherman then) was already telling folk that the seas would soon be emptied by the industrial-scale trawlers that were coming on the scene, so this particular tragedy of the commons was not unexpected

UK's National Cyber Security Centre recommends password generation idea suggested by El Reg commenter

Paul Crawford Silver badge
Coat

Re: Rainbow Tables

I thought they went to 11!

Mine has a copy of Spinal Tap =>

SpaceX's Starlink: Overhyped and underpowered to meet broadband needs of Rural America, say analysts

Paul Crawford Silver badge

Re: 5 years

The lifetime is not just in-orbit.

They actually have to keep going in terms of solar panels, battery systems, attitude control system, TT&C and of course the actual broadband payload. I seriously doubt that more than 70% will still be fully functioning after 5 years.

Airline software super-bug: Flight loads miscalculated because women using 'Miss' were treated as children

Paul Crawford Silver badge

Re: And this is why air travel is so safe

And on the other hand we have self-driving cars...

South Africa's state-owned energy firm to appeal after court rules Oracle does not have to support its software

Paul Crawford Silver badge

Sadly most of El Reg's commentards know this is the cost of touching Oracle products.

They don't even give you complementary tubes of KY.

Imagine your data center backup generator kicks in during power outage ... and catches fire. Well, it happened

Paul Crawford Silver badge

Re: This would never have happened at a certain broadcaster I used to work for.

Indeed there have been some remarkable two-stroke diesel engines developed, such as this beast:

https://en.wikipedia.org/wiki/Napier_Deltic

In their day an astonishing power to weight ratio, but reliability not on par with modern expectations.

Turns out humans are leading AI systems astray because we can't agree on labeling

Paul Crawford Silver badge

What would happen if a self-driving car is trained on a dataset with frequent label errors that mislabel a three-way intersection as a four-way intersection? The answer: it might learn to drive off the road when it encounters three-way intersections.

Clearly that is not intelligence at all. You have faulty software because you did not have a complete grasp of the programming of it. Some might even say a negligent approach as you assumed the Mechanical Turks provided valid data, and you did not verify it yourself.

Wi-Fi slinger Ubiquiti hints at source code leak after claim of ‘catastrophic’ cloud intrusion emerges

Paul Crawford Silver badge

I don't care about the source code of my router being seen, it is already open (OpenWRT).

Also it does not attempt to inject adverts or extract a fee for continued use.

NASA sets the date for first helicopter flight on another planet – and the craft will carry a piece of history

Paul Crawford Silver badge
Linux

Penguins in SPAAAACCCCEEEEEE.....

I had to say it.

Qualcomm heads for rural Dorset to test agri-bots (and maybe a nice jar of Scrumpy)

Paul Crawford Silver badge

Re: Why 5G?

Not a range-limit as such, but mm waves are impacted far more by rain and (depending on frequency) cloud / water vapour level. Also it is far more difficult to make high power solid state amplifiers and low noise amplifiers, compared to the sub 10GHz bands.

Chrome 90 goes HTTPS by default while Firefox injects substitute scripts to foil tracking tech

Paul Crawford Silver badge
Coat

Re: localhost

Not all photocopiers, toasters and wifi dild0s have valid SSL certificates

Did they fail penetration testing?

Yes, I was just about to leave =>

Ministry of Defence tells contractors not to answer certain UK census questions over security fears

Paul Crawford Silver badge

69 votes (Well, you're either getting it or you're not)

I wanted to up-vote you but you were enjoying 69 at the time so it seemed too rude to do so.

Millimetre-sized masses: Physics boffins measure smallest known gravitational field (so far)

Paul Crawford Silver badge

It is ironic that while gravity is a tiny force on a particle-particle basis compared to the nuclear and electromagnetic effects, it is ultimately able to overcome all other forces and crush matter out of existence in a black hole.

Probably, I'm not sure the fate of black hole contents is known (or indeed, knowable).

Beijing pressures Alibaba to offload media assets, including Hong Kong's top newspaper

Paul Crawford Silver badge

Re: China has to be bigger than one man

More seriously, any leader how throws a strop about being compared to Winnie the Poo is losing the plot, and for China and the world that has serious consequences.

Paul Crawford Silver badge
Joke

Re: China has to be bigger than one man

They could follow democracies like the USA that vote in the "old, senile, incoherent, and intransigent in the face of their mistakes"

Google emits data-leaking proof-of-concept Spectre exploit for Intel CPUs to really get everyone's attention

Paul Crawford Silver badge

Precision timer?

Perhaps I am nieve here, but WTF do you need microsecond resolution for on a web page?

Having milliseconds with random dither (so it really is +/-0.5ms variability) might not stop it, but it sure seems a means to make it too much hard work to be practical?

Genuine question here.

Hacktivists breach Verkada and view 150,000 CCTV cams in hospitals, prisons, a Tesla factory, even Cloudflare HQ

Paul Crawford Silver badge
Facepalm

Re: They told us it would be great

Good, Cheap, Secure; pick two, you can't have all three.

You will be lucky to get one of the three.

A Code War has replaced The Cold War. And right now we’re losing it

Paul Crawford Silver badge

Re: Yet another uncomfortable truth

It is far worse than just the lack of "sound principles" being used, these days software comes with license agreements that abdicate responsibility of the consequences of crap code.

What other discipline would get away with that?

Add to that a lot of connectivity and inter-dependence being added is driven my marketing droids (or worse, advertising brokers) and the future looks bleak indeed.

Linus Torvalds issues early Linux Kernel update to fix swapfile SNAFU

Paul Crawford Silver badge

Re: fragmentation

For small files (relative to the disk usage) they do not, but as swap files can be large!

Also it is another thing that has to be turned off to unmount the file system cleanly, etc. A swap partition is not bothered by a hard reset as it never expected persistent internal structure anyway.

Paul Crawford Silver badge

Certainly the raspberry pi version based on Debian uses a swap file.

I also thought Ubuntu had gone down the swap-file by default route. Never liked the file based approach, assumed it was to make it adjustable in size later (with all of the performance issue from fragmentation presumably)

Beware the IDEs of March: Microsoft's latest monthly fixes land after frantic Exchange Server updates

Paul Crawford Silver badge
Pint

Beware the IDEs of March

Have a pint for that sub-heading!

Google says once third-party cookies are toast, Chrome won't help ad networks track individuals around the web

Paul Crawford Silver badge

Re: PiHole

What proportion of the general public (not El Reg readers) install Windows? Being 10 or 100 times easier is still a very small number.

'Incorrect software parameter' sends Formula E's Edoardo Mortara to hospital: Brakes' fail-safe system failed

Paul Crawford Silver badge

It is the result of a human mistake.

That mistake was to assume software is reliable enough. Where is the back-up hardware or hydraulics that can be 100% tested?

NASA sends nuclear tank 293 million miles to Mars, misses landing spot by just five metres. Now watch its video

Paul Crawford Silver badge
Thumb Up

Re: And for us East Pondians

Just looked them up, news article here:

https://www.heathcoat.co.uk/perseverance-landing/

Facebook and Apple are toying with us, and it's scarcely believable

Paul Crawford Silver badge

Re: Luxury goods

I bought a Casio 'Waveceptor' because it is radio-controlled, so no need to set it for accurate time-keeping, and it is solar powered, so the battery drain from radio control and the leaks that usually follow battery replacement are gone.

As far as i know they are not easy to find in the UK any more, so presumably i am from a very limited group who want a watch that just works and keeps working.

Axe-happy Microsoft halves support for Windows 10 Long Term Servicing Channel

Paul Crawford Silver badge

Re: Up to date experience

I also think the w2k (and "classic" for XP, not default Fischer-Price) user interface design was the best MS did in terms of being logical and consistent in virtually every way. Win7 is tolerable, but the lack of keeping constant look & feel was showing before it disgorged its unholy load with win8 and later tried to stuff it back in, poorly, with win10.

And shall we mention the spyware of later MS offerings?

UK Supreme Court declares Uber drivers are workers, not self-employed: Ride biz's legal battle ends in a crash

Paul Crawford Silver badge

Re: Well....

Funny thing is taxi firms have been sustainable for over a century after "the knowledge" was introduced.

Hero to Jezero: Perseverance, NASA's most advanced geologist rover, lands on Mars, beams back first pics

Paul Crawford Silver badge
Coat

Re: jaunting

Nah, too hot to appear on the surface of a star. Gets 1-star reviews.

Yes, mine has the rubbish joke book in the pocket =>

Paul Crawford Silver badge

Re: Been there, Done that

Yes, but cruise missiles already have a detailed map to follow. This has to interpret what it sees because there are not always good reliable maps with sufficient detail.

Post-COVID-19 biz travel: Jet in, go to hotel, meet in rooms sliced into sealed halves to separate locals and visitors. Still get jetlag

Paul Crawford Silver badge

Re: "The Clink" at Brixton Prison

That is a brilliant idea!

Gives them a chance of getting a good job and paying taxes, instead of ending up re-offending and costing taxes to be kept in jail again.

Paul Crawford Silver badge
Trollface

Why?

I mean why go to the trouble and expense and physical inconveniance for a slightly higher res version of Zoom, etc.

Oh, your company makes you use WebEx or Teams? Ah, yes I see why you would want to pay to go to a 5-star prison half way round the world...

Citibank accidentally wired $500m back to lenders in user-interface super-gaffe – and judge says it can't be undone

Paul Crawford Silver badge

Re: Double keying already used in some banking applications

Yes, but you care about the results, not about outsourcing to the cheapest supplier.

Texas blacks out, freezes, and even stops sending juice to semiconductor plants. During a global silicon shortage

Paul Crawford Silver badge

Re: There is no chip shortage!

Just in time = just too late when anything changes unexpectedly.

Paul Crawford Silver badge

Re: Probably insignificant when offset against the days they are working optimally

True, but you need the grid power to the gas network's pumps to keep going as well.

A major loss of the electric grid is going to utterly screw over any country in no time as practically everything depends on it.