* Posts by Paul Crawford

5658 publicly visible posts • joined 15 Mar 2007

DoH! Secure DNS doesn't make us a villain, Mozilla tells UK broadband providers

Paul Crawford Silver badge

Re: Mozilla are only partly right

The problem with 'Cleanfeed' is the lack of transparency and the on-going urge for governments to feature-creep it beyond the original goal of stopping kiddy pornography (which AFIK is illegal in practically every country). First it was KP, then it was file-sharing, next it will be legal pr0n sites that don't follow the privacy-invading rules that the gov has proposed in response to red-top "readers". What next?

It would be very simple to allow, and indeed encourage, the KP filtering aspect of cleanfeed/IWF to be supported by any of the participants in the DoH system, but sadly it seems the lack of transparency and restrictions on access will get in that way.

But going back to basics, web browser DoH is a horrible kludge and a sad reminder that for many "internet access" is synonymous with web site, and ignoring ssh, pop/imap email, etc, etc. Really there ought to be a service in your router that translates UDP 53 requests to a secure query of the overall DNS system to avoid ISP-specific hacking about.

Oh well, there is always a VPN for that...

Blackburn ain't big enough for the both of us: Mr Creamy and Mr Whippy at the centre of new ice-cream war

Paul Crawford Silver badge

Re: Why are they all Misters

Ice cream selling with "extras" in Glasgow

https://www.youtube.com/watch?v=OdAGgUNyvyw

Paul Crawford Silver badge
Gimp

Personally I prefer Ms. Whippy, but it takes all sorts. Liquorish usually...

Brexit? HP Inc laughs in the face of Brexit! Hard or soft, PC maker claims it's 'no significant risk'

Paul Crawford Silver badge

Re: Ann Widdecombe

And somewhere in Englad there is an idyllic village, without a banjo in sight, that is quite glad to have lost its idiot...

NPM Inc settles union-busting complaints on third try – after CEO trolled for ordering internal mole hunt

Paul Crawford Silver badge

Re: JavaScript. just say no.

Enable it and watch your machine being p0wned

Will that old Vulcan's engines run? Bluebird jet boat team turn to Cold War bomber

Paul Crawford Silver badge

Napier Deltec

While it was horrendously difficult to look after and unreliable in service, it had a fantastic power/weight ratio in its day and is a marvel of engineering. There is an animation of the pistons firing and the three crankshafts' operation here:

https://en.wikipedia.org/wiki/Napier_Deltic

White House mulls just banning strong end-to-end crypto. Plus: More bad stuff in infosec land

Paul Crawford Silver badge

Exactly. Also I though a major point of WSUS was to allow the rapid and near-automated deployment of a wipe/image cycle over a big estate of Windows machines? You know, just perfect for such a scenario...

Scumbags can program vulnerable MedTronic insulin pumps over the air to murder diabetics – insecure kit recalled

Paul Crawford Silver badge

Re: A Couple of Questions

It is a pretty obscure attack for sure, apparently needing to be within radio range to pull it off and obviously only works for a victim using said device. However, if something can be done then sooner or later it will be done.

The thing with radio range is often it works quite well through normal walls/floor/roof so it might be a viable and possibly less traceable (in terms of physical evidence, maybe more so if the device is not logging all commands, etc) way of knobbling a known high-value target if the killer can get an adjacent hotel room, etc. Or a high-gain antenna from across the street, etc.

London Zoo offers a night tour with Ronnie and Reggie

Paul Crawford Silver badge

The love that dare not speak squawk its name

In Rust we trust: Brave smashes speed limit after rewriting ad-block engine in super-lang

Paul Crawford Silver badge

Re: Probably rewriting it they rewrote it right...

Indeed, as a 69 times speed increase (no sniggering back there - not tested on "speciality" web sites at all) is not what you would expect from comparing languages of similar style.

Against JavaScript or Python a factor in the region of ten/hundred makes sense, yes, but not against C/C++/FORTRAN and similar where compiler/language differences of 2-3 times are all one might expect (unless the original implementation was a VERY poor design).

That this AI can simulate universes in 30ms is not the scary part. It's that its creators don't know why it works so well

Paul Crawford Silver badge

You can look for where they are hiding here:

http://www.lightningmaps.org/blitzortung/europe/index.php?lang=en

While we were raging about Putin's meddling and Kremlin hackers, Five Eyes were pwning Yandex, Russia's Google

Paul Crawford Silver badge
Trollface

"Ensuring the security of user data is of critical importance to us"

Said Yandex, and yet they were using Windows machines all along.

There's Huawei too many vulns in Chinese giant's firmware: Bug hunters slam pisspoor code

Paul Crawford Silver badge
Joke

Re: idealistic communist enterprises

You REALLY think a "idealistic communist enterprises" is any different from any other profit-oriented companies in anything but name?

Sorry, you seem to have missed this =>

Brexit: Digital border possible for Irish backstop woes, UK MPs told

Paul Crawford Silver badge

Re: Wishful thinking does not make good policy

Most of that "smuggling" is the same as the rest of the EU borders (or Scotland / England for cheap booze following the minimum-price law), not a whole lot different from shopping in your best-deal supermarket.

But once you get big differences, or worse still, different regulations about how much chlorine in you chicken (or KY in your pigs) it allowed, etc, then you get industrial-scale smuggling by people willing to kill/maim to keep it sweet. And those not doing it go out of business.

Must watch: GE's smart light bulb reset process is a masterpiece... of modern techno-insanity

Paul Crawford Silver badge

Re: The GE Nishika 3D Light Bulb

It's as easy as 6-6-6!

Fixed it for you!

Ubuntu says i386 to be 86'd with Eoan 19.10 release: Ageing 32-bit x86 support will be ex-86

Paul Crawford Silver badge

16-bit apps

Yes, really. If you want to run some forms of DOS or 16-bit Windows emulation then the move from 32-bit OS to 64-bit OS drops access to the VM86 instruction and that has various implications. same reason why Windows dropped 16-bit support when going 64-bit as the ntvdm relied on it.

Now before you start saying "who on Earth programs with 16-bit code?" remember there are a lot of bespoke and industrial control applications that use this because it was written donkey's years ago and still works. Any replacement then has a whole lot of time, cost and testing/debugging to bring you back to exactly where you started. But without 16-bit instructions and with a fancier GUI. That gets broken by the next round of OS/desktop code paradigm changes...

Blighty's online pr0n gatekeepers are begging for a regulatory beating, says digital rights org

Paul Crawford Silver badge

Re: "The talk"

Comparing pr0n sex with real sex via food analogies (probably NSFW but actually very good):

https://www.youtube.com/watch?v=q64hTNEj6KQ

Paul Crawford Silver badge

For most things (e.g. the all-important pr0n access) you don't need any fancy VPN arrangements, just one to a non-UK server (and sensibly not one in a country with restrictive laws either).

I recently tried Ubuntu 18.04 and, of course, the plonkers behind systemd have made it leak DNS even if you set the usual firewall rules to block it. Fix for me was to use dnsmasq as covered here: https://askubuntu.com/questions/1065568/block-outside-dns-fix-dns-leak-ubuntu-18-04

Needed a reboot though. Various VPN providers offer their own clients but they often suck as much as the default NetworkManager, just in different ways. Was trying 'Eddie' from AirVPN but was quite disappointed to not see any Iron Maiden images or music clips on connection, etc.

Paul Crawford Silver badge

Or better still get a VPN to an outside-UK server and be done with the fsckers.

Don't forget to do a little research in to who you select, and always check your VPN's operations with something like https://ipleak.net/ as well so you have some confidence in it doing the job OK. As an additional benefit you side-step a lot of the RIPA snooping and get "targeted adverts" in Swedish (other liberal countries are available...).

This isn't Boeing to end well: Plane maker to scrap some physical cert tests, use computer simulations instead

Paul Crawford Silver badge

Re: nuts

Exactly! Have 100 up-votes if you could!

I always told students that if it fails in simulation it is pretty certain to fail for real, but if it works in simulation that is only a sporting chance of working in real life as models are rarely accurate for all of a device's possible operations.

Paul Crawford Silver badge

737 Mole?

UK industry calls for delay of IR35 off-payroll tax rules to private sector

Paul Crawford Silver badge

This would be the Brexit that is costing the UK (i.e. rest of us) £26B per year?

https://www.express.co.uk/news/politics/1045243/Brexit-cost-how-much-has-brexit-cost-uk-june-2018-500-million-pounds-a-week

Halleluja! The Second Coming of Windows Subsystem For Linux blesses Insider faithful

Paul Crawford Silver badge

Re: considerably snappier file performance inside Linux

Citations please?

For graphics and battery life then you are probably right given the propitiatory nature of many hardware drivers and APIs needed to make them work to their best.

For file system and general performance it seems Linux is still a bit better than Windows 10:

https://www.phoronix.com/scan.php?page=article&item=windows10-okt-wsl

Stiff penalty: Prenda Law copyright troll gets 14 years of hard time for blue view 'n sue scam

Paul Crawford Silver badge

For those not understanding your reference, here is a summary article on ACS:Law

https://torrentfreak.com/acslaw-anti-piracy-law-firm-torn-apart-by-leaked-emails-100925/

And the matching Hitler rant for Andrew Crossley's downfall:

https://vimeo.com/15463930

Paul Crawford Silver badge

Re: No publicity is bad publicity

Going down for a stiff sentence

Please be aliens, please be aliens, please be aliens... Boffins discover mystery mass beneath Moon's biggest crater

Paul Crawford Silver badge

Re: EAT a fruitcake?

You can add some fruitcake to porridge to make it less bland and thus a bit tastier, a way of using it up and having a healthier breakfast. Just crumble some bits in with the oats before soaking/heating the water.

Praise the lard! Police hook up with Microsoft to school us on National Phish and Chip Day

Paul Crawford Silver badge
Pint

Re: I've never seen wine in a british seaside chippy

Not quite seaside, but L’Alba D’Oro in Edinburgh has a good wine list, and any of the sit-in plaices like The Ashvale in Aberdeen, or most Harry Ramsden's, offer decent wines to go with your supper.

Yes, I like my wine in pint glasses =>

The best and worst of GitHub: Repos wiped without notice, quickly restored – but why?

Paul Crawford Silver badge

Re: Backup - ever heard of it?

The problem here that was pointed out is not the GIT repository as that ought to be local as well (so at least a 2nd copy, if not more should your team or in-use computers number more than 1), but that a lot of discussions and bug-tracking are only held on the github server and (I presume) lack any way to mirror that aspect locally. Something to be fixed?

Musk loves his Starlink sat constellation – but astroboffins are less than dazzled by them

Paul Crawford Silver badge

Re: Reflective?

Yes, 'vent' was not the best choice as it might imply fluid flow - as you pointed out I meant radiate.

Paul Crawford Silver badge

At least the initial SpaceX' Starlink plan is low enough that debris should be gone in a couple of decades, but later planned launches and others (in particular OneWeb) are much higher and any crap will be there for millennia.

Paul Crawford Silver badge
Big Brother

Re: Debunked?

And all to allow even more advertisement and social media shit to be thrust upon an already suffering world.

Paul Crawford Silver badge

Re: Reflective?

Often they are reflective for thermal control reasons - they are in full sunlight most of the time and internally dissipating a lot of heat from the electronics so often need to 'vent' via a black heatsink looking away from the sun while keeping more heat away.

Paul Crawford Silver badge

Re: who ever the greedy corp

For now GPS is "safe" in that it is in a 12h orbit well above the planned mega-constellations. However, if debris from Kessler syndrome failure gets really bad it might be a hit & miss thing to get any replacement GPS up through our crap-layer.

Controversial American bigwig in London... no, not Trump: HPE ex-CEO Meg Whitman to give Autonomy trial evidence

Paul Crawford Silver badge

Not for Tom Jones

Can't quite cram a working AI onto a $1 2KB microcontroller? Just get a PC to do it

Paul Crawford Silver badge
Facepalm

Oh great, we will finally have to argue with the toaster over our choice of bready snacks.

Introducing 'freedom gas' – a bit like the 2003 deep-fried potato variety, only even worse for you

Paul Crawford Silver badge

Re: @John Savard

If you quickly get to > 60% of your energy without fossil fuel then yes, but that is not looking likely for many.

Also electric *heaters* are not that great (due to the poor conversion from original heat in fossil fueled cases) but electrically driven heat pumps are a good idea, providing you have the necessary low-grade heat source for it (e.g. buried pipe, or enough garden area and noise tolerance for air sourced ones).

Paul Crawford Silver badge

Re: Good on them

A moments web search:

https://www.usboiler.net/high-efficiency-condensing-gas-boiler-best-choice-home.html

"For example, a 30-year old boiler might be 70% efficient, meaning that for every dollar you spend on gas, 30 cents of heat escapes through the chimney or vent pipe. In comparison, a condensing boiler may provide up to 96% efficiency"

https://www.energystar.gov/products/most_efficient/boilers

Notice the AFUE values of 95%?

https://en.wikipedia.org/wiki/Annual_fuel_utilization_efficiency

Paul Crawford Silver badge

Re: Good on them

Replacing electric heaters with gas ones is not bad if your electricity source(s) are predominantly fossil fuel, as even a typical large-scale generator (without heat reuse in a cogeneration manner) is only 40%-ish efficient and then you lose another couple of percent in the distribution network, whereas a gas *heater* (or boiler) is typically 80%+ efficient. Of course if the majority of your electricity is from renewable/nuclear it is a different story.

I seem to remember some news about Germany shutting down nuclear plants to be "Green" and then importing electric from neighbours generate largely from Russian gas...or am I misremembering?

Paul Crawford Silver badge
Facepalm

Re: Dubious re-branding?

At least they have not re-branded radiation leaks as "magic moonbeams" or similar.

Sh*t, I just gave them an idea...

Senator: US govt staff may be sending their smartphone web traffic 'wrapped in a bow' to Russia, China via VPNs

Paul Crawford Silver badge

As Opera is now Chinese owned then most definitely.

But why do you use Opera? If it is to bypass pr0n filters and similar then not really such a big issue, if it is for accessing gov web sites and similar then the MITM approach they use to compressing https pages is a much bigger risk than encrypted page info passing a VPN point in a foreign location.

We ain't afraid of no 'ghost user': Infosec world tells GCHQ to GTFO over privacy-busting proposals

Paul Crawford Silver badge

Re: No less true than when I first said it years ago

Exactly, it is just another backdoor.

No matter how you dress it up, a "ghost user" is still a means of decrypting without being one of the original parties based on some supposedly secret user-key, and so is subject to all of the same fundamental weakness as knobbling the cryptographic function directly.

If servers go down but no one hears them, did they really fail? Think about it over lunch

Paul Crawford Silver badge

Re: A bit (less) noisy now...

In a large room it would not be too unusual to have several power circuits. If you lost 1 out of, say, 4 breakers the change in fan noise (unless right next to them) may not be quite so obvious.

Exclusive: Windows for Workgroups terror the Tartan Bandit confesses all to The Register

Paul Crawford Silver badge

Re: Changing Wallpaper can have career enhancing effects

It could also kill remote desktops' usability.

I once has to support a system in Borneo from the UK via dial-up modem, and somebody had changed the desktop from plain blue to an image and it *literally* took minutes to redraw the screen as it was not as massively compressible as the plain backdrop.

It's 50 years to the day since Apollo 10 blasted off: America's lunar landing 'dress rehearsal'

Paul Crawford Silver badge

Re: Species angst

I think this rather sad infographic covers what you need to know:

https://xkcd.com/893/

Wine? No, posh noshery in high spirits despite giving away £4,500 bottle of Bordeaux

Paul Crawford Silver badge

Re: A relevant study

That is quite an interesting paper and it comes back to the same point that while we might assume the wine you should by is the one you actually enjoy, not what someone else said you should, in reality the expectation/marketing can reverse that.

Paul Crawford Silver badge

Re: Wine Steward

Exactly, apply the two-question test:

1) Do I like the taste of this?

2) Am I prepared to pay the price?

If the answer is yes to both then you have completed your flow chart and can progress to the next level bottle...

Titan-ic disaster: Bluetooth blunder sinks Google's 2FA keys, free replacements offered

Paul Crawford Silver badge

Short distance

"Frankly, an attacker might do better to grab the device in question and run."

What if the attacker is in the adjacent hotel room to yours? These are unlikely attacks for sure, but if you are a high-value target to some major agency then it is quite a neat way to bypass the security without the alert of the device's disappearance.

Ex-Arm execs' upstart Agile Analog palmed $5m to sink into AI-driven chip design

Paul Crawford Silver badge

Machine designing machine, what could possibly go wrong?

Oh yes, Westworld...

Essex named sexiest British accent followed closely by, um, Glaswegian

Paul Crawford Silver badge

Re: Awrite doll

You missed the matching video: https://www.youtube.com/watch?v=OdAGgUNyvyw

Upgrade refuseniks, beware: Adobe snips away legacy versions of its Creative Cloud apps

Paul Crawford Silver badge
Trollface

Re: To be fair to Adobe ....

Stockholm syndrome?