* Posts by Paul Crawford

5659 publicly visible posts • joined 15 Mar 2007

Upgrade refuseniks, beware: Adobe snips away legacy versions of its Creative Cloud apps

Paul Crawford Silver badge
Trollface

Re: To be fair to Adobe ....

Stockholm syndrome?

Panic as panic alarms meant to keep granny and little Timmy safe prove a privacy fiasco

Paul Crawford Silver badge
Coffee/keyboard

Re: Weak double entendre

Or GGILF perhaps?

Paul Crawford Silver badge

Re: "The potential for harm is massive"

Really? You don't think this could also be abused to occupy emergency/social services for whatever reason the bad guys have? Or to trick your nonagenarian in to doing something like reading out bank details to "confirm her identity"?

I'll, er, get the tab? It's Internet Edgeplorer as browser pulls up chair to the Chromium table

Paul Crawford Silver badge
Facepalm

Re: web OLE

Allowing a word document or power point slide to link directly to 3rd party content on the web? What could possibly go wrong with that unholy combination of security blunders I wonder...

Essex named sexiest British accent followed closely by, um, Glaswegian

Paul Crawford Silver badge
Facepalm

Re: An eternal truth?

It also goes a long way to explain the rampant fuckwittery present in society and government these days.

Paul Crawford Silver badge

Re: Three Stops beyond Dagenham

That sounds like either a Madness song or some horror novel.

Yes, I had a work placement in Basildon many, many years ago :(

Sushovan Hussain told me to fiddle revenues, says Autonomy sales chief

Paul Crawford Silver badge
Coat

Re: @STOP_FORTH

Partially. They no longer give you a full service/maintance manual with the device, and the stuff is deliberately hobbles so you have to pay for a "software upgrade" to actually use the full capabilities of the hardware you have just purchased.

Mine is the one with the HP8640B manual in the (bulging) pocket =>

Take my bits awaaaay: DARPA wants to develop AI fighter program to augment human pilots

Paul Crawford Silver badge

Re: I'll see your General Adversarial Network ...

And I will raise my Admiral Adversarial System to that!

Late with your financial paperwork? Here's a handy excuse: Malware smacked your bean-counter cloud offline

Paul Crawford Silver badge

Re: I am glad most units have a way to self test

Yes, and most of our Dell UPS that failed did so as a result of self-testing! Of course, that probably meant they would have failed if a real fault cam along...

Still not a good show.

Paul Crawford Silver badge

Re: "Assuming CCH has good backup in place"

A test is worth a 1000page SLA...

Paul Crawford Silver badge

Re: "Assuming CCH has good backup in place"

Backups - even if they hare made, are they frequent enough and tested for a full bare-metal recovery?

It is a bit like UPS support: few are willing to send Igor to throw the big red switch and see how the whole building copes with a power outage (you know, to see if aircon holds up while servers are shut down in an orderly manner, etc, instead of overheating).

Self-taught Belgian bloke cracks crypto conundrum that was supposed to be uncrackable until 2034

Paul Crawford Silver badge

Re: It wasn't running Windows then

We ran DOS software under dosemu/MSDOS 6.22 and it never seemed to crash. OK the host machine would be rebooted occasionally and the dosemu instance restarted occasionally, but we never saw an "OS crash" with uptimes of the order of 600 days.

Having said that, if you don't poll for time at least once per day by some program/system action then the DOS date gets stuck as the time-of-day counter simply sets a midnight flag, and is not actually incrementing the date counter...

Taylor drift: Finally, a use for AI emerges? Cyber-smut star films fsck-flick in Tesla with Autopilot, warns: 'I wouldn't recommend it'

Paul Crawford Silver badge

Indeed, you would have thought he would have given it up by now. Such a let down..

A day in the life of London seen through spam and weak Wi-Fi

Paul Crawford Silver badge
Gimp

Definitely a euphemism =>

Paul Crawford Silver badge

London WiFi

Was in London about 10 years ago and the hotel cost £125 / night, not too surprising for that city and it was not too shabby for the price. However, they wanted £25 for breakfast and another £15 for WiFi per day! So I thought bugger that and went to a café that did waffles just round the corner. you could get a bacon & maple waffle along with a latte (for that breakfast experience) along free and usable WiFi for the princely sum of £8.

'Lightweight' UPS-style flywheels to power naval laser zappers

Paul Crawford Silver badge

Re: F1 KERS flywheels

Ahhhhh! You have a woman’s wine! I'll wager that was never on tap when Roger the cabin boy was in need of some refreshment after a hard day of hunting the golden rivet!

NSA: That ginormous effort to slurp up Americans' phone records that Snowden exposed? Ehhh, we don't need that no more

Paul Crawford Silver badge
Big Brother

Just like Facebook then?

Paul Crawford Silver badge

Re: Alternatively...

Sauna? I've never heard it called that before.

Oh I don't know - hot and moist has some resonance.

It's springtime for Springtown as Seagate rains nearly £50m on Northern Ireland plant

Paul Crawford Silver badge

https://zstereo.co.uk/2013/11/07/strathearn-sma2/

Paul Crawford Silver badge

Good to see a success story about NI for a change.

A copy-paste of Europe and a '5G' hotel: El Reg's Adventures in Huawei Land were fairly wacky

Paul Crawford Silver badge
Mushroom

Funny as I read that as "Windscale" to represent Blighty

IT sales star wins $660k lawsuit against Oracle in Qatar – but can't collect because the Oracle he sued suddenly vanished

Paul Crawford Silver badge

Re: Wow just wow.

Nice! So I guess that all copyright/patents on Oracle software also vanished and the folks of Qatar can have a free-for-all as a result?

No? Oh well whoever wants to asset IPR has to pay the bill...

Brit spy chief: We need trust or we won't have a 'licence to operate in cyberspace'

Paul Crawford Silver badge

Re: "to build security into their products and services at the design stage"

It could be a "euphemism for backdoor" insertion if you start with the assumption that device manufacturers, IoT purveyors, OS-mongers, ISP router selection, etc, are all made with security as a #1 (or even recognisable) priority.

Or, cutting them some slack, you could also look at the current pisspoor state of the above and find it might be quite the opposite.

Tricky one to decide...

So, that's cheerio the nou to Dundee Satellite Receiving Station: Over 40 years of service axed for the sake of £338,000

Paul Crawford Silver badge
Joke

Re: suspicious smells

The students union?

Microsoft debuts Bosque – a new programming language with no loops, inspired by TypeScript

Paul Crawford Silver badge

Re: What's Wrong With a Loop?

The problem with "goto" is not its effectiveness - hell that is exactly how flow control happens in the generated assembler/object code - but in another human reading it and upon seeing a jump destination being able to work out how many ways one gets there.

For some very small functions with a local jump (please, PLEASE, don't bring up setjump/longjump here!) it might be fine as a simple way, for example, to break out of nested loops. But on a larger scale the program's intentions become unintelligible.

Mind you, there are other constructs that are also a bit dodgy, for C you can return out of a function at any point, not always clear logic there. But $DEITY forbid you find yourself working on old FORTRAN where you can have multiple entry points to a subroutine!

Open-source enterprise software slinger Red Hat bravely reveals that IT bosses love open-source enterprise software

Paul Crawford Silver badge

Re: do I trust those libraries maintained by a retired guy and his cat?

It might not be "in permanent need of fixing" but simply subject to lots of application-breaking changes by folk who are using it for something not quite the same as yourself and/or care not for compatibility (or who don't might fixing their own applications every couple of weeks).

Either way it is also a bit of a warning that maybe you should think twice about using it.

Paul Crawford Silver badge

Re: Security benefit and risk

At least you got your own copy of the code either way so (in theory at least) it can be fixed as needed. Not like some high profile software:

https://www.theregister.co.uk/2018/01/16/microsoft_equation_editor_patched/

Kaspersky updates its cybercrook look book: Smashing Office is hot, browser vulns are not

Paul Crawford Silver badge

Worryingly, the 2018 CVE mentioned by Kaspersky was patched in January that year, suggesting user and/or sysadmin slackness has a part to play in the popularity of these particular problems.

Of course the MS "patch" for the equation editor simply breaks it - they DID NOT FIX IT. Apparently they don't have to code or license to do so! https://www.theregister.co.uk/2018/01/16/microsoft_equation_editor_patched/

So if you have many documents using the old-style equation editor and don't want masses of pointless work trying to re-draw them (probably introducing errors) in the somewhat more shitty new-style MS equation editor, you simply can't plug that hole.

Google Fiber experiment ends with Choc Factory paying Louisville $3.8m to clean up its mess

Paul Crawford Silver badge

Re: Scorched Earth

what have Google ever done for us?

Plundered our privacy?

Of your list, the only things that are actually better* than the competitors are their search and mapping stuff.

[*] not just cheaper due to the aforementioned privacy issue.

Amazon boss snubs 'expensive', 'sub-optimal' relational databases. Here's looking at you, Larry

Paul Crawford Silver badge
Joke

Well if the Gnome doesn’t have a broad mind to begin with, it sure will have by the end!

Paul Crawford Silver badge

"Alexa, order a garden gnome, and tube of KY jelly, and a rubber mallet. Confirm"

Paul Crawford Silver badge
Gimp

Last time I was at the local barbers the hairdresser was chatting away and mentioned she had one of these in the bedroom. I just quipped about what it must have heard when her boyfriend was over and she went bright red and the other hairdresser laughed out loud. It had NEVER occurred to her this device could be listening to all sorts of intimate activities.

No, I have no idea if she did, but what if =>

Silk Road 2 + Dread Pirate Roberts 2 + 1 Liverpudlian = over 5 years in prison

Paul Crawford Silver badge

Re: setting up a hidden service? pretty easy...

I think most people don't commit crimes because they don't believe it is OK. Sure the correlation between "crime" and "morally wrong" can be tenuous, for example copyright laws, so there is a degree of flexibility there.

However, what the real moral of his story is that it is practically impossible to be truly anonymous on-line. The probability of being caught, of course, depends on what resources the authorities are willing to apply to finding you. If it is something high-profile like what the Silk Road was doing then you see what can be done.

Shame they don't try a bit harder against the huge number of the "minor" scams that cheat old folk and naive PC users out of savings, etc.

Not biased against you and not going anywhere, judge tells Post Office in Horizon IT system case

Paul Crawford Silver badge

Evidence?

So has the software in use at the time, as verified by some decent code versioning system, been subject to a proper audit and found to be trustworthy or not?

I am reminded of this analysis of Toyota's engine management software: http://www.safetyresearch.net/Library/BarrSlides_FINAL_SCRUBBED.pdf

RIP: Microsoft finally pulls plug on last XP survivor... POSReady 2009

Paul Crawford Silver badge

Re: Rest. In. Peace.

childishly coloured hateful bloody thing

By default yes, but you could easily preserve your sanity by switching it to classic Windows 2000 look.

Why oh why don't companies offer that sort of theme-choice now?

MoD plonks down £2m on table in exchange for anti-drone tech ideas

Paul Crawford Silver badge

Radar should be able to discriminate between a drone and a bird simply by looking at the Doppler profile of the return and the spread due to the high speed of the rotors. It is short-ish range (km or so I guess?) so you could choose a band well above the typical civilian radar and comms bands for it and not worry too much about rain attenuation (heavy enough to kill radar probably means it takes the drone out as well)..

But as you point out, what to DO once you see the target is a whole new kettle of fish.

Hmm, fire fish at them to (a) clog the rotors, and (b) any that escape get the attention of local gulls?

You were warned and you didn't do enough: UK preps Big Internet content laws

Paul Crawford Silver badge

Re: OK, Zuck...

The UK does not have to enforce its laws in the USA - just to fine the company like facebook for GDPR-like amounts. Very quickly FB would have to either (1) fix the click-bating feed of shit, or (2) get out of all UK advertising business (so I guess dropping 1/8 or so in revenue).

A win-win from where I'm standing...

US government tells internet body to hurry the funk up on privacy

Paul Crawford Silver badge

You don't need the cops to treat it as a criminal case, you go to court as a civil case and get the judge to grant access to specific data.

As the UK updates its .eu Brexit advice yet again, an alternative hovers into view

Paul Crawford Silver badge

Lets face it - the .inc domain is simply another profit-driven gouging exercise by ICANN.

Stick to your .uk address if UK based, or get an EU office plaque if you want to keep .eu (and its probably much cheaper as well).

Hams try to re-carve the amateur radio spectrum in fight over open or encoded transmissions

Paul Crawford Silver badge

Re: @imanidiot

That is exactly my point - this is not about forbidding advanced coding/modulation techniques for performance or reliability, but about stopping obscure/closed systems that you can only interact with if paying the company behind it. Just like DRM, and the opposite of the amateur radio ethos.

Paul Crawford Silver badge

Re: "nothing but lose privacy"

There are two separate points here:

1) The use of encryption for emergencies in support of disaster mitigation - fair enough (and allowed in the UK).

2) The use of obscure/propitiatory systems as a DRM-like system that looks out any user who is not willing to pay the company behind it. It is this point that I object to.

The issue of error correction coding for performance is not a problem, that is well known and perfectly fine if it is an open system (like those covered by the CCSDS standards) and some well known amateurs have freely contributed to this (just search for Phil Karn as an example).

Paul Crawford Silver badge

Re: "nothing but lose privacy"

Amateur radio has NEVER offered privacy. Indeed that is a key aspect of it in that you can get a license to transmit after passing the technical & regulatory exams, or simply act as a receiver listening in to those with a similar interest talking to each other anywhere in the world.

If you want secrecy there are MANY internet based services that do it properly.

Paul Crawford Silver badge

Forcing the opening up of all systems used for amateur radio use is perfectly right and proper, after all the whole ethos is about understanding and furthering radio use for the benefit of all.

Encryption (or "propitiatory" obfuscation) should never be an option - even for spacecraft command it should be authentication-only to prevent others monkeying with anything important. If that is incompatible with your business then move to a commercially licensed spectrum and compete with the big boys/girls.

Ethiopia sits on 737 Max report but says pilots followed Boeing drills

Paul Crawford Silver badge

Re: Birds

Unlike Airbus, which is supported quite a bit by European tax payers.

And what of all those USA military projects that only go to Boeing?

Hmm, the smell of pork barrel in the morning...

iFixit surgeons tut at iPad mini 5 X-ray: Looks like a mild case of pain-in-the-arse-to-repair

Paul Crawford Silver badge

Re: Business sense

I guess if they were required by law to offer a 5 year warranty on everything but for catastrophic sit-on damage, then repair might magically become a design priority...

Ignore the noise about a scary hidden backdoor in Intel processors: It's a fascinating debug port

Paul Crawford Silver badge

Re: Needing root is not the problem

What it means that a bad good guy™ can use the feature on their own equipment to investigate and overcome the curse of DRM.

Fixed it for you?

NB: Good girls are also available...

Huawei savaged by Brit code review board over pisspoor dev practices

Paul Crawford Silver badge

Real point here

"We have no real (at least not this in depth) assurance that products from rival vendors are more secure"

If, and it seems a good idea, that critical infrastructure needs to be secure against both back doors and crap code, then it should be a requirement that the alternative suppliers are similarly audited to show they actually do better. After all, it is not that Cisco have no history of both back doors and serious bugs needing fixed either...

Oracle asks Supremes to snub Google's Java API copyright protest – and have a nice cuppa tea, instead

Paul Crawford Silver badge

Those "11,000 lines" could well be just the header file's function / class definitions, you know the stuff that has to be exactly the same for an implementation to be compatible?

A crude 'wc -l /usr/include/*.h' on my box reveals 52,771 lines of text for the standard C header files, easily 11k lines of "code" by a certain definition.