* Posts by Paul Crawford

5667 publicly visible posts • joined 15 Mar 2007

UK Supreme Court declares Uber drivers are workers, not self-employed: Ride biz's legal battle ends in a crash

Paul Crawford Silver badge

Re: Well....

Funny thing is taxi firms have been sustainable for over a century after "the knowledge" was introduced.

Hero to Jezero: Perseverance, NASA's most advanced geologist rover, lands on Mars, beams back first pics

Paul Crawford Silver badge
Coat

Re: jaunting

Nah, too hot to appear on the surface of a star. Gets 1-star reviews.

Yes, mine has the rubbish joke book in the pocket =>

Paul Crawford Silver badge

Re: Been there, Done that

Yes, but cruise missiles already have a detailed map to follow. This has to interpret what it sees because there are not always good reliable maps with sufficient detail.

Post-COVID-19 biz travel: Jet in, go to hotel, meet in rooms sliced into sealed halves to separate locals and visitors. Still get jetlag

Paul Crawford Silver badge

Re: "The Clink" at Brixton Prison

That is a brilliant idea!

Gives them a chance of getting a good job and paying taxes, instead of ending up re-offending and costing taxes to be kept in jail again.

Paul Crawford Silver badge
Trollface

Why?

I mean why go to the trouble and expense and physical inconveniance for a slightly higher res version of Zoom, etc.

Oh, your company makes you use WebEx or Teams? Ah, yes I see why you would want to pay to go to a 5-star prison half way round the world...

Citibank accidentally wired $500m back to lenders in user-interface super-gaffe – and judge says it can't be undone

Paul Crawford Silver badge

Re: Double keying already used in some banking applications

Yes, but you care about the results, not about outsourcing to the cheapest supplier.

Texas blacks out, freezes, and even stops sending juice to semiconductor plants. During a global silicon shortage

Paul Crawford Silver badge

Re: There is no chip shortage!

Just in time = just too late when anything changes unexpectedly.

Paul Crawford Silver badge

Re: Probably insignificant when offset against the days they are working optimally

True, but you need the grid power to the gas network's pumps to keep going as well.

A major loss of the electric grid is going to utterly screw over any country in no time as practically everything depends on it.

Paul Crawford Silver badge

Don't need to - just use the low-grade heat from the exhaust or cooling systems...

Housekeeping and kernel upgrades do not always make for happy bedfellows

Paul Crawford Silver badge

Re: Just over a billion years ago ...

We also got some Sun hardware around 1991 and it was good. not cheap, but good and came with proper support and knowledgable folk at the end of the phone or email.

Later we got some UltraSPARC machines and one of them continued as web/email server without a hiccup for about a decade after it should have been retired. Its only real problem was the non-replaceable real-time clock module's battery had gone after ~10 years. And that also held the CMOS config! Doh! So to boot it you have to type in the partition info (that our guy had put on a sticky note on its box just in case)

Paul Crawford Silver badge

On a machine I was going to re-image anyway I decided to try out the rm -rf /* sort of thing as root just to find out how far it would go.

To my surprise it was very effective, eventually the desktop menu text/etc vanished as the fonts were removed and finally the machine went quiet. Booted in to the live CD to see what remained and only a few system directories were there, presumably as they had open files that somehow meant the directory itself could not be removed. But all files had gone, including 'rm' itself!

I was impressed and sobered at the same time!

Paul Crawford Silver badge

Once did something similar with:

chmod -R <settings> .*

In my home directory. Thankfully not as root/sudo because I discovered that '..' matches the wildcard and it went up a level and tried to descend in to the other user's home directories.

But for the grace of $DEITY go I...

Science of Love app turns to hate for machine-learning startup in Korea after careless whispers of data

Paul Crawford Silver badge

Re: Scatter Labs

Actually that sounds more like the nature of their business.

Can we exhale yet? EU set to rule UK 'adequate' for data sharing in post-Brexit GDPR move

Paul Crawford Silver badge

Re: If UK data rules have not changed ...

The UK has relied on the EU-wide get-out of "national security" exceptions for member states for the likes of RIPA and similar spying laws. As a non-EU country that sort of exception no longer applies.

Remains to be seen if a challenge to our data sharing along the lines of the USA one will result in this (reported as happening) compliance decision being flipped.

Voyager 2 receives and executes first command in 11 months as sole antenna that reaches it returns to work

Paul Crawford Silver badge

Re: Press any key to continue

Earth destroyed by earthlings. Keep your head down. Don't look back.

Future astronauts at risk of heart attacks, strokes if radiation allowed to ravage their cardiovascular health

Paul Crawford Silver badge
Alien

Re: I want(ed) to be an Astronaut

Those guys were also about the fittest you could find when they were originally selected, so that should also be taken in to account for their longevity.

Also no one has done a long time outside of the Earth's protective magnetic fields yet, all of the long exposure has been on the ISS and similar in fairly low and relatively equatorial orbits.

Long term we need a solution to this, as eventually (maybe sooner than we might hope) we will have to move out and explore for new habitats.

helloSystem: Pre-alpha FreeBSD project chases simplicity and elegance by taking cues from macOS

Paul Crawford Silver badge
Gimp

Re: Further simplicity and ease of use...

Why not?

Faced with the sack, Nominet CEO half-apologizes for taking the 'wrong tone,' asks angry members to hear him out

Paul Crawford Silver badge

Step 1 - vote the useless tosser out

Step 2 - call in forensic accountants to look for any possible reason to sue for any severance pay

Step 3 - profit!

No underpants were harmed in this business strategy

Terraria dev cancels Stadia port after Google disabled his email account for three weeks

Paul Crawford Silver badge

Re: Wow

Even with uBlock Origin and FB Purity you end up with the stuff your "friends" have posted.

Christ, I weep for the future of humanity :(

War on Section 230 begins in earnest as Dem senators look to limit legal immunity for social networks, websites etc

Paul Crawford Silver badge

Re: how stupid a large section of people are

Sadly I expect so.

The problem seems to be ever-shorter attention spans and no 'adults' doing any analysis or commentary on what the lying bar stewards are up to. Just look to Brexit and the "people are tired of experts".

Paul Crawford Silver badge

Re: social media attack platforms

I'm afraid it is simpler than that - we just got to see how stupid a large section of people are.

I have various friends from school era and have seen them reveal staggering levels of stupid on social media, all without Vlad's help.

Chrome zero-day bug that is actively being abused by bad folks affects Edge, Vivaldi, and other Chromium-tinged browsers

Paul Crawford Silver badge

Re: And they want...

If I could upvote you a hundred times!

Actually make it 404

Microsoft delays disabling Basic Authentication for several Exchange Online protocols 'until further notice'

Paul Crawford Silver badge

Re: Easy to say....

Which don't work with all sorts of legacy software and devices that email errors/warnings, etc.

I gave up on outlook.com email as they broke POP/IMAP recently probably for this reason (dicking about with password authentication methods). Really, if you have a secured link as practically all clients support, or you use a VPN (so open port 25 test is safe) then the issue is underlying pisspoor password policy (UPPP if you want).

Christ, I ended up moving some stuff over to Yahoo of all places for a free email backup as they decided to improve security by requiring you to use a "token" which is just a fixed machine generated password of decent entropy instead of someone reusing pass12345 as they do on all other sites. Just how hard would it be for MS to do the same to deal with UPPP?

How do you fix a problem like open-source security? Google has an idea, though constraints may not go down well

Paul Crawford Silver badge

Re: Fixing the unfixable

Oh there is a fix, big companies that have a vested interest could pay others to do the dull work.

While some of the originators of the project may not care about documentation (on the ground they know it and don't care to pass it on) and they might not worry about bugs or security holes that do not impact themselves, generally if someone else is willing to do the donkey work to clean things up and make it all nice and easy to understand/build/test/review/etc, they will be happy.

And if not, you can always tell them to fork off..and do it.

Paul Crawford Silver badge

Re: Lots of questions

"an attested build system" means "a Google build system" right?

If you ever had the sad misfortune to be unable to avoid using GNU Radio you would be pleased if the code would actually build out of the repository. A project that needs to invent its own build management tools is a sh*t-show in the making,

Paul Crawford Silver badge

Re: Inevitably ...

Thing is, we already have "corporate Linux" in the form of distros by Red hat, Canonical, etc. They are the ones who should be doing the code review and build verification before it becomes "mainstream" to paying customers.

Customers who expect that without paying have an interesting prespective on the world.

Paul Crawford Silver badge

Hmm, so they want OSS projects to behave like paid projects, but without actually paying them?

Goals may be noble, but really having some cash thrown towards critical projects would be a good thing as well. Before they cause a problem and emergency work starts like openssl...

Nearly 70 years after America made einsteinium in its first full-scale thermo-nuke experiment, mystery element yields secrets of its chemistry

Paul Crawford Silver badge

Re: Just remember kids

Es are good?

EU infosec agency unveils 5G vendor security licensing scheme despite years of Huawei ambiguity

Paul Crawford Silver badge

The attempts to validate Huawei was a very good thing. Yes, it showed them to have piss-poor practice in terms of basic competence in having a stable bug-reduction software development process, but that was a useful outcome itself. The fact they were unable/unwilling to fix code development well enough is bad, but not uncommon these days, sadly.

What is needed is a similar degree of scrutiny of ALL vendors so a genuinely level playing field is possible.

Severe bug in Libgcrypt – used by GPG and others – is a whole heap of trouble, prompts patch scramble

Paul Crawford Silver badge

Re: Here’s one for all you C lovers out there...

I believe that C was basically created to write UNIX. Compared to writing an OS largely in assembler it must have been a joy! Essentially as fast/compact and largely CPU portable.

In fact C has often been called the universal assembler!

But part of the underlying unsafe aspect of C is the power to do things with addresses (both data an execution start points) that you need to manipulate in an OS, but start to become very risky within an end user program/library.

It is easy in cases like this to say "Oh that would not happen in $LANGUAGE" but it is avoiding the elephant in the room. That code was written in C, to rewrite it in a new language and port support to all systems using it is not a tasks anyone is willing to fund/undertake. So the arguments are academic, the blaming is a pointless distraction. The least-worst option that is open is to improve the development and testing process to use the tools already available for static and dynamic code analysis and fix the warnings.

Remember life on Venus? One of the telescopes had 'an undesirable side effect' that could kill off the whole idea

Paul Crawford Silver badge

Re: humans are still alone in the pitch-black depths of space

Schroedinger was not so sure about his one

'It's dead, Jim': Torvalds marks Intel Itanium processors as orphaned in Linux kernel

Paul Crawford Silver badge

Yes, but most use is for phones, etc, that have very little "legacy" or bespoke software for which customers can neither buy, or possibly afford to buy, replacements.

The server market on Linux is a bit better as it has long been that case you wrote code assuming it should compile and run on multiple platforms. Not that everyone did, of course, but far less of a monoculture than Windows / x86 became.

Paul Crawford Silver badge

TI also made a DSP using the same VLWI style of architecture. Its performance on typical compiled C code was rubbish compared to the advertised performance, as that assumed all 8 logic/arithmetic units could be used in parallel.

The compiler very rarely achieved even 2 parallel instructions, and decision branches dropped its pipeline killing throughput. Unless you were willing to waste your precious life learning the assembler and all bizarre limitations of what could work with what, and how to structure your algorithms to avoid many decisions (e.g. conditional loop break), it was just not worth it.

Google, Apple sued for failing to give Telegram chat app the Parler put-down treatment

Paul Crawford Silver badge

Re: "subversive glamour"

Is there really such a big divide between political or religious extremists, and more general conspiracy bollocks?

Is there not a basic point where you have to decide if something is causing (or likely to cause) harm. Would it matter if that harm is due to some suicide bomber following a fundamentalist cult killing a dozen in a bomb attack, or dozens of children dying from preventable diseases due to the parents being led by anti-vaxer groups?

Sure that guy was a sandwich short of a picnic now, but presumably was once smart and sane enough to get and hold a job in medicine. In this time of lock-down stress and rising mental illness, is it really a surprise he ended up believing the fake-news / alternative-facts narrative beloved of Trump, or the general anti-vaccination myths being promoted on social media?

Paul Crawford Silver badge

Re: "subversive glamour"

There is a big difference between "silencing" someone the way some governments do, by jailing or assassinating them, and denying them a platform to spout bollocks from.

This is a far deeper problem than political extremists, just look at how the anti-vaxer are causing deaths by omission of protection, as one example, or the whole covid-is-a-hoax movement, or that 5G phones cause illness, etc. And I'm not talking theoretical today, if you saw this case:

https://www.bbc.com/news/world-us-canada-55821623

Making it easy for every bozo to share rubbish suits social media companies as it drives advertising revenue, but that lack of accountability and the fools who follow with potentially fatal results is an issue that has to be addressed somehow.

Paul Crawford Silver badge

Re: "subversive glamour"

The flip side is there are an awful lot of gullible fools out there waiting to be lead.

History has shown us many times that people want simple answers. Not right answers, or decent answers. Blame XYZ minority for your troubles and you will find supporters willing to persecute and kill for any made-up cause..

Firefox 85 crumbles cache-abusing supercookies with potent partitioning powers

Paul Crawford Silver badge

https everywhere

I have no issue with sites offering only https for security.

I do have an issue with web browsers disallowing http or self-signed certificates and no configuration to allow it, as that breaks lots of legacy equipment you might need to administer locally over http.

You would expect a qualified electrician to wire a building to spec, right? Trust... but verify

Paul Crawford Silver badge

The neutral doesn't join up with anything on the switch!

A dangerous practice you occasionally see is a 5-pin three-phase socket that lacks the neutral because whoever wired it assumed the load was always a delta-connected one. Then someone plugs in a star-connected load that has some imbalance and one leg get most of the 400V and the others tens of volts, with predictable damage following.

If the socket has a neutral pin it must be wired up, no matter what the original plans for it are. If you don't need the neutral use a 4-pin socket (L1/L2/L3 & E) and that way no one can plug in something that needs the neutral.

Paul Crawford Silver badge

The USA has quite a strange set of "standard" voltages. While its mentions 110V the spec is actually 120V and most homes have a "split phase" supply that is 120-0-120V so you can wire in both 120V or 240V loads depending on how much power you need, etc. And of course you get all sorts of risks as the article describes, made worse by the relatively small differences in the plug/socket types used.

But wait, it gets better! For 3-phase you can have 120V to neutral giving you 208V phase-phase, or you can have 277V to neutral giving you 480V phase to phase. Or potentially your 120-0-120 is ones side of a 138V/240V set from a "high-leg delta" 3-phase transformer connection.

Here in the UK/EU it is simpler, with a nominal 230V single phase to neutral, and 400V 3-phase (also 230V L-N) being fairly universal and almost always using the colour coded "commando" plugs and sockets (blue=230V, red=400V). the exception being building sites where the supply is usually 110V on a yellow connector but as 55-0-55V split-phase for safety, a bit like the USA system except it is unheard of to have loads taking a a half feed of 55V. The centre tap is there just for a safety earth point.

ADT techie admits he peeked into women's home security cams thousands of times to watch them undress, have sex

Paul Crawford Silver badge
Facepalm

Re: Can’t account for wilful ignorance

Last time I got a hair cut the young and attractive hairdresser was idly chatting (seems to be a job requirement) about her new Alexa device in her bedroom. I commented that it must overhear a lot when her boyfriend visits and she went bright red and the older hairdresser just laughed.

She really had not thought through what those devices are capable of.

Nothing new since the microwave: Let's get those home tech inventors cooking

Paul Crawford Silver badge

Re: touch controls on hob

Add to that the lack of any meaningful labelling of controls.

And another hate - cookers that need the clock set before the work. With shitty controls that are non-obvious and nobody has the manual any more. WTF is that about? If you worry about a cooker coming on after power fail just do a no-volt release/reset like machine tools have.

Paul Crawford Silver badge
Coffee/keyboard

Given that making soup is arguably more important than ponzi cloud money in fairyland, Robo Chef Maximillian wins the moral ground when it comes to flippant energy wastage.

Need a new keyboard!

We'll explore Titan with a methane submarine, a methane submarine, a methane submarine...

Paul Crawford Silver badge

Re: At -179C

My first though was about lubrication for bearings, etc. But the issue of a power source is a serious one as even with batteries able to charge/discharge at -179C you need ways to top them up. Solar panels will provide SFA at that sort of distance, so unless you can somehow work a fuel cell to use the lake you are back at RTG supplies.

But as heat engines efficiency depends on the difference in absolute temperature, it might well be possible to use 100C-ish RTG and the lake's -179C to drive a Sterling engine for power and propulsion.

Oh I really wish I could work on that project!

BOFH: Are you a druid? Legally, you have to tell me if you're a druid

Paul Crawford Silver badge

Yup, at least not DOS with the 1980 start date. Less glam, but would that result in a new romantic robot war?

Must 'completely free' mean 'hard to install'? Newbie gripe sparks some soul-searching among Debian community

Paul Crawford Silver badge

Re: Free means somebody is not getting paid

So why did the complainant not sit down and write the driver himself?

Even for someone who is able to write a device driver (and very, very few programmers can as its a specialised area), can you provide them with the hardware documentation to allow that to be done?

Methinks you don't have a clue about the issues here.

Signal boost: Secure chat app is wobbly at the moment. Not surprising after gaining 30m+ users in a week, though

Paul Crawford Silver badge

Re: I Don't understand

Call costs?

Sure you might have X free minutes for a limited amount of calls in your country, but if you make VoIP calls overseas to avoid the usurious fees that some countries impose (or the ~35p per photo by MMS in UK) then you can start to see why folk like the functionality of WhatsApp.

Just not the slimy business practices of them now FB has the tentacles in.

The curse of knowing a bit about IT: 'Could you just...?' and 'No I haven't changed anything'

Paul Crawford Silver badge

Re: Firewall vs router

ISP routers are crap, in my case I set the VM device to "modem mode" and use my own OpenWRT based router and firewall instead.

But the move from dial-up style connections to NAT'd routers was at least a big step forward in security as by default nothing could get in directly to the attached PC, only in response to an outgoing request, so internet worms were basically blocked.

Of course that did not last due to the abomination of UPnP being added and enabled by default and the ne'er-do-wells moving to email and web-based infections.

UK on track to miss even its slashed full-fibre gigabit coverage goals, warn MPs

Paul Crawford Silver badge

Re: the trouble with the network

If it is soft ground then it is pretty easy for digging and laying duct, any farmer or builder could do it.

Once you start digging roads or tarmac and/or have to take care around existing utilities (water, gas, power, etc) then it becomes tricky and expensive and you really ought to be insured against any accidental damage to them.

I think Openreach charge around £40/m for soft ground and £120/m for 'hard' installation, but a reasonably builder could probably do it for around half that (might not get permission for digging a public road though). But for a couple of 100m that still costs dearly!

Buggy chkdsk in Windows update that caused boot failures and damaged file systems has been fixed

Paul Crawford Silver badge

Re: When is it safe to make the jump?

It depends on what you need the machine to do. If you don't have any high-end graphics requirements or specialised hardware then you can run Windows of various era fairly safely in a VM, obviously munch more safely if they don't need much internet access (so email/web on the VM host machine).

That way you can keep a backup/snapshot of the VM and restore it fairly painlessly to another machine if needed, and you can have a host that is subject to a greater degree of hardening and/or control then Win10 gives you (without the usurious fees for the enterprise version).

Also if you do plan a software upgrade or major change, you can make a VM copy just before the deed, and roll back almost instantly if it is broken. That is also made far simpler if the host has a file system that supports low-overhead snapshots (such as ZFS, or if you feel lucky punk, btrfs, or if an Apple fan then I think APFS has this capability)

Paul Crawford Silver badge

Re: Damned if you do. Damned if you don't

What am I missing ?

A decent operating system?