* Posts by Vic

5860 publicly visible posts • joined 7 Dec 2007

Google crafts custom networking CPU with parallel computing links

Vic

Re: "number theory"

4294967296 ought to be enough for almost anybody

Yeah? Try expressing that in 32 bits...

Vic.

Vic

Re: A bit like a ... 386?

What ever happened to Chuck Moore's low power parallel processors?

Several things happened.

Chuck uses his own layout tools, which produce very small dice for the amount of compute they provide - but the yield is far smaller than is commercially viable. As a result, although the engineering samples were fairly slappy, they would need a total re-design for mass production - and that idea didn't go down too well.

There was also a change in the way patent fees were allocated in the US; the parent company was funding the venture on the expectation of other patents deriving cash based on the value of the complete item in which the patent was used. When they suddenly had to confine themselves to a portion of the balue of the individual component, that left the cashflow a little bit sticky.

And then there were certain interpersonal issues. The less said about those, the better.

Vic.

Getting a grip on Puppet: A guide for beginners

Vic

But, for devops, puppet ain't that useful for day to day deployments, even less so if you are not paying for enterprise, it's only really good for building out environments.

I really disagree with ths.

For build-out, kickstart or similar will do a fine job. Puppet is more about *maintaining* the config in spite of devops...

Vic.

Vic

Re: Know what one is doing

But it's a real pain to use and a massive drag on development.

I disagreee. I've found Puppet very useful, quite simple[1], and very useful for accelerating rollout[2].

As with all these technologies, a little time up-front spent learning the tool goes a very long way...

Vic.

[1] I did fail to get a single rule working to remove the "Addr=127.0.0.1" line in the standard RHEL senmdail.mc line, then rebuild the config and restart the server. But I'm sure someone more skillful than I could do it.

[2] I run the manifest against a designated staging machine first, to do tests is a "production" environment. Then, once that's proven, it's just a case of changing the manifest file on the real server to do a rollout. That really does prevent finger trouble on release day...

Virgin Media spoof email mystery: Customers take to Facebook

Vic

Re: Seems fairly obvious

Reaching this tentative conclusion from the information posted so far in the thread is not rocket science. Any reasonably competent email (or IT in general) professional could reach a similar conclusion.

Any competent IT professional would realise that there are several ways for this to have occurred, and would be gathering data to attempt to prove/disprove hypotheses, rather than jumping at the first conclusion drawn.

For my money, this looks too small to be a VM breach. It bears the trappings of a standard address-correlated spam attack. I have seen many of those, across many different email providers. That's not to say that it couldn't be a VM breach - just that the data presented so far doesn't come anywhere near proving one.

Vic.

Vic

Re: NTHell, Teleworst and Virgin Mumble

If the mergers had been done properly

That was never going to happen.

Project Harmony was the attempt to unify the various systems involved. It was actively opposed by the former bosses of the bought-up companies, who still believed themselves to be the heads of their own respective fiefdoms, despite having sold the company...

But it does look as if an email store was intercepted "in transit" from gmail to VM

That is one possible cause. It is far from the only one. It wouldn't be where I would start investigating.

Vic.

Vic

Re: ntlworld email

This is definitely not anything to do with the individual user. The emails in question are only kept on the Virgin server as some of them are that old and PCs/laptops have been replaced a number of times since

That means nothing. Spammers keep target lists for a *very* long time. I still see attempts for addresses I retired a decade ago, as well as long-lived, recurring attacks against addresses that have never existed (there are some clear typos, indicating that some addresses are hand-typed into lists, some are snaffled using faulty scripts).

I'm not saying the VM isn't the problem - but the data you're presenting does not support the conclusion you're drawing.

Vic.

Vic

Re: Definitely VM

So without a doubt someone had access to my email and was able to mine it for addresses.

Although it does sound like the Bad GuysTM have seen an email you sent, that doesn't mean they saw it in your account; there are at least two endpoints for every email unless you're only sending stuff to yourself.

Spammers have been correlating addresses for years - it improves the hit rate dramatically, as they'll often hit whitelisted addresses.

I frequently see spam purporting to be from one of my addresses, going to another of my addresses[1]. Spammers have not been inside my mail server - I watch it like a hawk.

Vic.

[1] It bounces off my SPF milter. Which is nice.

Don't you see these simple facts? Destroy Facebook and restore human Liberty

Vic

Re: Bottoms up

I've wanted to rant at the distinguished Mr. O myself once or twice, but then I was too pissed to be bothered.

I've wanted to rant at him a few times - then remembered that all his articles have moderation turned on for the comments...

Vic.

What took you so long, Twitter? Micro blogging site takes on the trolls

Vic

Re: #RIPTwitter

Some weird logic leaps going on there.

You new here? :-)

Vic.

Silent Nork satellite tumbling in orbit

Vic

Re: They passed over the Levi stadium?

WHOM with

With whom.

I bet your aunt's got a parrot.

Vic.

Vic

Surely they must know they would be obliterated out of existence if they started throwing nukes about

The North Korean playbook hasn't changed in decades. This is entirely an internal control thing.

1. NK waves a weapon about - doesn't matter if it's functional or not

2. The US obligingly steams in making a fuss about how much they're going to punish any military action

3. NK leadership shows its population how they're being threatened by the US, and it's only the Kim and his cronies protecting them from the enemy

Any real conflict is not in NK's interest - but being regularly threatened by the US is essential to their power structure. And so we get the same pantomime on a regular basis...

Vic.

Amazon UK boss is 'most powerful' man in food and drink

Vic

Re: Amazon for Groceries?

No, the old stock will either be sold at full price or sent to landfill.

I don't know where you live, but that's simply untrue here in sunny Southampton. The supermarkets always have short-dated stock at reduced prices.

I buy it often...

Vic.

Ex-TalkTalker TalkTalks: Records portal had shared password. It was 4 years old

Vic

Re: Not Surprised

We need a regulator who can give them a good kicking

I'd like to see a law that puts manglement in the firing line.

If you have a database of customer details, your management team's details need to be in there as well. If it contains bank details, management's accounts are there as well.

So if the database gets taken - the team who penny-pinched the security face the same consequences as their customers.

It needs tuning of course - e.g. to prevent them setting up bank accounts specifically to circumvent this - but the guts of the idea is there...

Vic.

Google calls out Comodo's Chromodo Chrome-knockoff as insecure crapware

Vic

Re: DNS hijack?

not everybody can run DNS like Google

Only those whose ISP blocks port 53 traffic cannot run their own DNS server. And that's not all that common anymore...

Vic.

GCHQ’s Xmas puzzle proves uncrackable

Vic

Re: or maybe...

But most likely, it was just too hard.

Or, more likely, it was too hard for those that bothered to attempt it.

This was a GCHQ recruitment drive, primarily. Take a look at their recruiting site to see what they offer as salary. Now ask yourself how many people of the calibre they seem to want are going to work for that money...

Vic.

Microsoft vs US.gov, Internet of Stuff, etc: What's up with 2015's legal cloudy issues?

Vic

Re: Realized lmits to USA control in/of other jurisdictions

the US Security Council

I think that's what we're worried about..

Vic.

Why the Sun is setting on the Boeing 747

Vic

Re: Really big

What I find really amazing is that the new big engines are so big that they're wider than the body of Concorde

And there's talk of making them even bigger...

The bigger the fan, the greater the thrust you get at any given speed - so you don't have to spin the fan as fast to get the same thrust.

The plan is to cut down on noise at airfields...

Vic.

Little warning: Deleting the wrong files may brick your Linux PC

Vic

Re: rm -rf / should only do damage if you're root.

In order for rm -rf / to do damage, other than to your own files in your home directory, you would need to use sudo (and even that can be further protected), or have su'd to root

And it still wouldn't matter.

[root@perridge ~]# rm -rf /

rm: it is dangerous to operate recursively on `/'

rm: use --no-preserve-root to override this failsafe

Vic.

Vic

Re: Old Linux Steam Client ...

But they probably *did* intend to nuke the file system

In which case, they won't be using the rm -rf / command, since it will fail to do so. Adding the --no-preserve-root flag would turn it into a very slow way to detroy a computer.

Vic.

Vic

Re: This is like BIOS flashing by Unix commands

Linux should take steps in the same direction of making accidents harder, like making the --one-file-system option a default for rm.

Perhaps. But then again, --preserve-root is the default behaviour for rm, which gives the POSIX-standard behavioiur of refusing to delete recursively from / - so this whole thing is pretty unlikely to occur...

Vic.

Vic

Re: Sounds Really Clever?

This is a longstanding "problem" with the Unix permissions model. "Write" always implies "delete"

This is not true,

[vic@perridge foo]$ touch bar

[vic@perridge foo]$ chmod 555 .

[vic@perridge foo]$ cat bar

[vic@perridge foo]$ echo "hello" >> bar

[vic@perridge foo]$ cat bar

hello

[vic@perridge foo]$ rm bar

rm: cannot remove `bar': Permission denied

It is the directory's write permission that decides whether or not you can delete a file; the file's write permission merely decides whether or not you can write data to it.,

Vic.

NASA preps silicon-photonic modem for space laser internet test

Vic

Re: Instant Laser Communication

The "Hall Effect" shows polarized light changes instantly

You do realise you make less sense than amanfrommars, don't you?

Vic.

Why a detachable cabin probably won’t save your life in a plane crash

Vic

Re: Really?

There is nothing intrinsically fatal about a ditching on the high seas

Well, wave action means you're trying to land on an uneven surface - and the peaks keep moving about. Although sea landings are part of the PPL theory course, it's unlikely to go well...

Vic.

Vic

Re: I'll tell you one thing...

I think the problem is that CFIT sensors can be fooled, throw false alarms, or be overridden

Such alarms are regularly ignored.

When I was doing my retractable undercarriage training, the aircraft I was flying had an alarm that sounded below a certain height if the wheels were still up and the engine revs dropped below a certain level.

During the week, we fly a lower circuit than at weekends[1]. So as soon as I reduced power, the alarm would sound. Every single circuit. And so the alarm gets ignored.

Vic.

[1] Thruxton is situated within the Boscombe Down / Middle Wallop CMATZ, so on weekdays, when Boscombe is active, we have to keep low to make sure we don't interfere with anything they might be flying.

Vic

Invent a hyperspace button. Problem solved

*Immediate* problem solved - but you just know you're going to rematerialise right in front of a big rock...

Vic.

Vic

Only thing which might be of value could be the ability to jettison a burning engine, leaving the rest of the aircraft intact

You sort of have that - the engines are fixed to the airframe with low melting-point pins. In the event of a (serious) fire, the pins melt and the engine falls off.

I expect in reality even that would be of minimal use

ISTR an aircraft dropping an engine over Schiphol about 20 years ago. It didn't end well...

Vic.

Vic

Re: Personal parachute

I've never been offered a parachute in any GA aircraft

We have them available at the airfield. I've yet to see anyone take one[1]...

Vic.

[1] I might for my next aero flight. I'm planning on doing some inverted spinning :-)

Vic

Re: Looks as though it requires a high-wing aircraft configuration.

a 747 can't land on landing strips or gravel runways.

It can. But only the once...

Vic.

Vic

Re: 'Without life rafts'

the only evidence of their departure was the sound of their screams in the darkness as they were picked off one by one.

You're unlikely to hear much screaming from a shark attack; if they're actively hunting you, the attack will be from depth. The (2-ton) shark will hit you at about 30mph, taking a dirty great bite out of you, then leave you to bleed out. It's unlikely that you'll be able to scream...

Vic.

Vic

Re: Really?

And then it'll need to scrub speed to prevent the parachutes and/or their attachment points from failing

That one is a solved problem - you initially deploy a small drogue patachute which slows the payload and puts tension on the line ready to pull out the main chute.

You then have a "barostat" - combination timer and pressure sensor - preventing the main chute from deploying. If the payload is too high or moving too fast, the pressure on the barostat is too low, and so the main chute stays packed away. Once the pressure reaches the appropriate value, the cable is released, and the drogue now pulls out the main chute.

This is how the Martin Baker ejection seat works.

Vic.

US government's $6bn super firewall doesn't even monitor web traffic

Vic

Re: hardly a firewall

What has happened is that people have got used to all sorts of non-primary functions being built in to domestic firewall products and have started mistaking them for what a firewall has as its primary function.

Your point notwithstanding, setting -A INPUT --dport 80 -j ACCEPT hardly counts as a firewall...

Vic.

UK taxpayers should foot £2bn or more to adopt Snoopers' Charter, says Inquiry

Vic

Re: Dear readers

If any of you voted for these clowns at the last election I hope you feel suitable ashamed of yourself now.

It actually makes little difference. The other bunch of clowns tried to push through the same thing under a different name.

Vic.

Vic

Re: if they collect every ICR ...

4) Target is investigated for working with terrorists etc

That would be an effective DDoS against the security services themselves, since they'd spend their entire lives chasing red herrings - until they realise the data they're collecting is useless and start ignoring the whole thing. What a way to hide a real terrorist cell...

Vic.

Vic

Re: A better suggestion

'not deserving of a rise oxygen this year'

I'm getting the hang of this correction malarkey...

Vic.

Vic

Re: ICR

[2] I haven't done so, and don't intend to, so I can't tell you anything about the site, or even if it responds on port 80!

[vic@perridge ~]$ nmap -p 80 horsesex.com

Starting Nmap 6.01 ( http://nmap.org ) at 2016-02-02 15:13 GMT

Nmap scan report for horsesex.com (185.53.177.8)

Host is up (0.13s latency).

PORT STATE SERVICE

80/tcp open http

Nmap done: 1 IP address (1 host up) scanned in 7.20 seconds

Yep. It does.

Vic.

Brit airline pilots warn of drone menace

Vic

Re: causing the crash of a plane is already a serious crime.

The disadvantage of not being a native speaker.

That might explain why you didn't get my (rather crude) joke...

Vic.

Vic

Re: causing the crash of a plane is already a serious crime.

What we don't want is some idiot walking out afterwards because his lawyer managed to get the term reduced..

FTFY...

Vic.

Vic

Re: Registration will not help

All I have to do is push out a couple of Watts worth of power on those frequencies with a directional antenna and your controller won't be able to get through

That depends on the kit in question...

Spread-spectrum transmission has many benefits, including resistance to jamming. That, coupled with its being usable with levels below the noise floor, made it very useful during the war...

Vic.

Vic

Re: I hope you drone pilots have decent insurance

I would personally have no problem with anyone declaring the unauthorised/uncleared use of drones near air traffic as equivalent to an act of terrorism

I would.

Hoever reckless/idiotic/dangerous it might be to fly a drone near an airfield, it's not an act of coercion, and therefore clearly not terrorism.

The problem with using the word to describe everything you don't like is that pretty soon, you cannot differentiate between terrorism and any other sort of law-breaking. Before you know it, all those anti-terror laws become pertinent to day-to-day problems...

Vic.

Most of the world still dependent on cash

Vic

Re: Just a couple of questions

They'll lend it to you at 30%

30%?

Over here, they seem to be mostly in the 1250%-1600% range. And that's down from the 6000% I saw a few years back.

We used to have a law against usury. It needs to be reinstated...

Vic.

Two-thirds of Android users vulnerable to web history sniff ransomware

Vic

Re: Malware, app.... all very similar

Directly make phone calls, read SMS, MMS, send MMS SMS, take pictures and videos (why does a play store need control of the camera?)

"Google Play Services" isn't just the store - it's essentially a layer of OS services. They changed it to this format to try to do something about the manufacturers who wouldn't update the base OS; this way, it's upgradeable through the store. As such, all those permissions are required, because otherwise, they're denied to any OS upgrades delivered in this fashion.

For my money, it would have been better to deliver more modularised chunks, rather than this hulking great megalith - but that's how it is; I didn't get to make the decisions. And the alternative is to go back to what the early flavours of Android did - install once, never update anything...

Vic.

Land Rover Defender dies: Production finally halted by EU rules

Vic

Re: If it was tax-deductible as a capital asset

Based on the explanation from Isuzu, you had to be able to carry 1 ton to be classified as a commercial. No ifs, no buts, no coconuts.

That is certainly not true across the board.

The smaller version of my van has a 600Kg carrying capacity. That's definitely a commercial,

Vic.

The monitor didn't work but the problem was between the user's ears

Vic

Re: The thing is...

The lead locks in by clamping to the earth pin until the red tab is pulled.

Do not use those anyewhere someone can stand on them.

The red tab breaks off. You only discover this after plugging them in...

Vic.

You've seen things people wouldn't believe – so tell us your programming horrors

Vic

Re: SWAP SWAP is a great solution

That is genius code

It really isn't. And no, I can't telling if you';re being sarcastic, but I do hope you are...

Vic.

Vic

Re: SOAP web service client… written in bash and netcat

I did one sanity-improving step to swap out the homebrew netcat HTTP client for curl.

I saw a SOAP interface[1][2] on a device with a set of bash scripts on the client to control it. The bash scripts used netcat to dump a hand-crafted bit of XML into the maw of the device...

I ran away from that one.

Vic.

[1] I use the word in its most generous sense; IMO, an interface is generally supposed to abstract the implementation details...

[2] Oh - and no WSDL either. Cheers for that.

Vic

Re: contract: clean up existing code

1. lost source files

I used to work on HP 98xx-series machines. Although they did have a Pascal system available, most people programmed them in HP's Rocky Mountain Basic[1]. We were no exception.

Although these machines could have large amounts of memory for the time, they were limited to 32K lines of Basic - larger numbers simply weren't valid. To overcome this limitation, HP produced a "compressor", that would cause functions to take up a single line - with no code displayed, just an asterisk.

We shipped code like that - we had to. Our Head of Software kept the original source on disk[2] on his shelf, so we could recreate any of these "compressed" functions on demand.

Until, that is, I demonstrated that what we were shipping could not possibly be produced from the code that was supposed to be its source. It had different behaviour...

HP claimed it was impossible to write a decompressor. So I wrote one[3].

Vic.

[1] ::shudder::

[2] Yes, IIRC it was a single copy of each function on a single disk

[3] To be fair, I never finished it - I decompressed enough to work out what the code was actually doing.

Vic

Re: An excerpt from the Rogue's gallery...

Apparently, in the 21st century, he didn't like code where lines wouldn't fit in an 80x24 vi window.

Expect to see more of that. Python's PEP8 coding standard says :

Limit all lines to a maximum of 79 characters.

For flowing long blocks of text with fewer structural restrictions (docstrings or comments), the line length should be limited to 72 characters.

I've seen some right pig's ears from developers trying to comply with that,.,.

Vic.

Vic

Sadly a lot of C code horrors are covered by compiler warnings or static analysis tools, but are ignored all the same.

I worked with some code a couple of years ago where the developer had turned on both -Wall and -Werror. And it failed to build on the test rig I was running.

We had a couple of days of argument about that - it didn't fail on his machine, after all, so it *must* have been the test rig's fault - until he tried to cross-compile it for the embedded target, where it failed in exactly the same way...

Vic.

Can't upgrade, won't upgrade: Windows Mobile's user problem

Vic

Re: Storage space

Install the new boot loader with all required parts to go and download the rest of the os, wipe whats not needed to free up space, download the rest, install

That makes rollback a touch difficult...

Vic.