* Posts by Vic

5860 publicly visible posts • joined 7 Dec 2007

French gov used fake Google certificate to read its workers' traffic

Vic

Re: Techie question....

> I'm not an expert, but I'm pretty sure this would make a MITM attack even easier.

Only if you use a self-signed cert in an overly-simplistic manner.

> it could just be any old certificate

...But would it have the same fingerprint as mine?

I carry a piece of paper in my wallet with my fingerprint on for exactly this reason; I can tell instantly if a corprat cert is being used (because I don't get warned about my invalid cert), and I get a fingerprint to check if there's any doubt.

I used to consider myself somewhat paranoid, but recent revelations have shown I'm simply not paranoid enough...

Vic.

If you want an IT job you'll need more than a degree, say top techies

Vic

Re: The first hurdle....

> I don't recall any of the past three employers has asked for proof

When I took a permanent job back in July, my new employer asked for proof of the qalifications I'd claimed in my application.

I simply answered "I didn't tell you about my qualifications"... :-)

Vic.

US Supreme Court to preside over software patents case

Vic
Joke

Re: Has to be said.

> WTF is "Alice Corp"?

It was formed when she escaped from Umbrella Corporation, wasn't it?

Deals primarily with T-virus zombies in a fairely effective manner...

Vic.

Consumer disks trump enterprise platters in cloudy reliability study

Vic

Re: Size?

> when was the last decade you could actually buy 5.25'' disks?

I've got a few I could sell you. Bargain price, really... :-)

Vic.

NSA collects up to FIVE BILLION mobile phone locations daily

Vic

Re: Guilt by Coincidence

I still find it incredible that no armed policeman has ever been brought to trial after killing someone on duty.

[Emphasis mine]

I don't find it incredible at all. They were specifically authorised and ordered to do what they did. They were led to believe that they were preventing a terrorist atrocity.

The numbnuts that told them to do it, however, ...

Vic.

Women crap at parking: Official

Vic

> 'Some blokes'... Have you heard of a bell curve?

If tonight's commute home was anything to go by, I'd say it's more like a bell-end curve...

Vic.

Vic

Re: Parking

> we saw two cars facing each other, not moving, one red, one blue

Many years ago, I had a knackered old Transit van. Rear vis was dire.

One night, I was driving down a narrow road when a car came hooning round the corner and (just) stopped in front of me. There was a space a few yards behind him, but he wasn't going to reverse into it to let me pass.

So I started the long process of reversing a large van up a narrow street. I didn't hurry. This matey insisted on driving up to the front of my van at all points.

As I approached the crossroads (where I was planning to turn), I noticed another set of headlights waiting there. I backed into the side-road and glanced over my shoulder to see who it was - it was a cop van.

Said cop van then stormed across in front of me and forced the car to reverse all the way back down the street...

Some days are just lovely.

Vic.

Calling Doctor Caroline Langensiepen of Nottingham Trent uni

Vic

But we do feel that Mr Watson showed commendable initiative and a suitably twisty mindset for a career in computing security by trying to social-engineer his way to a solid outside confirmation that his assignment had been satisfactorily completed

Now if he'd mentioned the CCTV stills he has of you, the proxy logs of goat porn, or even just the location of a quiet and deep pit with adequate lime supplies, that would definitely have shown promise...

Vic.

MPs back call to boycott low-taxed tat from Amazon over Xmas

Vic

Re: So, this from the bunch that...

> I have two words for them one of which is rude

Not rude enough, my friend...

Vic.

Vic

Re: STFU

> What thins like defence, health care, social services

If only...

I put in a bid for some NHS work a couple of years back.

The job description had a budget attached of £7m. Even doing daft shit, I couldn't get my expenditure past £5m. And the job did go to someone who wanted the full 7.

So although it seems like a good idea to put money into "health care", what you generally do is just to put money into consulting firms like Serco and Crapita.

Vic.

EC trade secrets plans: Infringing kit may be DESTROYED by order

Vic
Joke

Re: How? Why?

> The formula for Coca Cola is a trade secret

The formula for Coca Cola is well-known :-

* Sugar

* Water

* Advertising

Vic.

Vic

Re: That's it in a nutshell

> How insane does the patent situation have to get?

This has nothing to do with patents.

It's about trade secrets that have been unlawfully obtained.

I'm not entirely sure how many companies will be affected in any way...

Vic.

I thought I was being DDOSed. Turns out I'm not that important...

Vic

It's a dictionary attack

Your mail system is being enumerated; the attacking network is atetmpting to obtain a list of email addresses for which your MTA will accept email.

There are some very poor attack lists doing the rounds, but since this is all zombie traffic, it's free for the attacker...

HTH

Vic.

Ex-Nokia team unveil Jolla smartphone with added Sailfish OS

Vic

Re: Don't think it's a good idea

> All you people that replied to my note.

Replied to you? This is the first post under the DJMoley account.

Unless you're confessing to using sock-puppets...

Vic.

Vic

Re: Don't think it's a good idea

> You don't have any chance

New user, one post, calls himself "Visionary"...

Vic.

El Reg Contraption Confessional No.1: The Dragon 32 micro

Vic

I've still got my Dragon32

...And I've got the Asteroids cartridge (which accounts for most of what I did with that machine).

My other oldie machines are largely gone, now though :-(

Vic.

We're making too much say CryptoLocker scum in ransom price cut

Vic

Re: If the spam problem were reduced, then this would be reduced, too

> I just don't see why email can't be secured using similar technologies.

It's astronomically simple.

If you have to get your credit card out for every single mail you send, you'll stop sending email. If you have to key in a PIN for every post, you'll have precious little contact with other people.

So what will happen? Email clients will hold credit, and pay for emails in hundreds or thousands at a time - after all, transaction fees are going to dominate if you're paying in anything less than that quantity. Paying 50p in fees to process a 0.1p payment is just daft.

So we now have an email client with sufficient credit to send a significant number of emails - either spam or ham.

If you think you can secure Joe Punter's machine against malware that can take over that client, then I fear you may have an inflated opinion of your capabilities. And if you can't, then the spam will keep on flowing in spite of the oppressive payment scheme you're proposing.

Vic.

Vic

Re: If the spam problem were reduced, then this would be reduced, too

> If not, it's hypothetical.

ISTR Microsoft and Yahoo! both attempted this quite a few years ago. Just because you don't know about something, that doesn't mean it didn't happen.

> Users would have the credit, not thier computers

And what form will that credit take? It will be accessible from the computer - because otherwise, users won't be able to send it. You won't be pulling out the credit card and doing the 3D-sec login for each and every email, because that is unworkable and no-one will use it. So the computer will have access to that credit. And that means that spammers will have access to that credit on compromised computers.

> Compromised machines would still have to sign the email

Big deal. The computer will have the capability to sign email.

> they'd have to also obtain the user's signing certificate first.

The computer will be compromised. That means the malware will be able to do anything the legitimate mail client will be able to do. And that means it will be able to send email.

The spammers win. Continuing to support this daft proposal isn't helping anyone. Search for the term "FUSSP" to see why. This has been done to death on many occasions; a little research will save you a lot of embarrassment.

Vic.

Vic

Re: If the spam problem were reduced, then this would be reduced, too

> I only propose to make junk email as equally an unattractive method.

I understand exactly what you're trying to do.

What I'm trying to explain to you is that your proposal does not achieve this. Not even slightly.

Spam is sent from compromised machines. If those machines have credit to send legitimate email, then they have credit to send spam.

So you either make email availably only to the rich (by pricing it so highly that everyday users can't afford it), or you end up with compromised machines holding credit to send spam.

And so those compromised machines will send that spam, with the *machine owners* footing the bill. The spammers get their spam out without paying a penny.

The end result? No decrease in spam, but problems with ham. This is the worst of all possible worlds.

> we'll just have to disagree since we are arguing in the hypothetical.

But this isn't just hypothetical; the micro-payment idea has been touted and dismissed more times than I'd care to count. It doesn't work, it won't work. It even has its own entry in the FUSSP list.

Vic.

Vic

Re: If the spam problem were reduced, then this would be reduced, too

> That was my point exactly

I hope not, because you'd be arguing against yourself if it was...

> SPAMing works now *because* it is free.

And spamming will *continue* to be free under your proposal.

> If an email isn't stamped then it doesn't get delivered;

And all spam will be stamped, so it will be delivered. But it won't be the spammers who pay for those stamps; they'd be stolen from the computer's owner.

> Obviously this would require new or vastly rewritten email protocols

Yes. You'll have to strip out the entirety of the email system.

> but if that's what it is going to take...

It won't take that because your suggestion simply will not work. The spammers will steal credit in the way they currently steal bandwidth from unsuspecting users. Spam levels will not decrease in the slightest; your proposal simply adds bueaucracy to legitimate users without benefiting them in any way.

Vic.

Vic

> How do other OSs handle this btw

You already did this last week

Vic.

Vic

Re: If the spam problem were reduced, then this would be reduced, too

> I suggest the sender pays 1¢ (or equivalent) per email sent

This does not work.

> they can't spam-blast 10 million email addresses hoping for 1000 replies if it costs them $100,000

But it doesn't cost them - spammers do not send spam from their own machines. They send it from zombies. So it costs someone else all that money.

All your proposal does is to make legitimate email users have to account for everything; the spammers are competely untouched by it.

Vic.

'Schrödinger's Comet' ISON LIVES (or DOESN'T) after Thanksgiving solar roast

Vic

> The End Is Nigh

What, Right Nigh?

Vic.

[ Well, Ronnie actually ]

Weird PHP-poking Linux worm slithers into home routers, Internet of Things

Vic

> PHP and wikis are the stuff of nightmares from a security standpoint.

I once had a customer who was *incandescent* that the (internet-facing) wiki I'd installed for him wouldn't let him just write PHP and have it executed.

I told him I'd need written authority to turn that on...

Vic.

Vic

Re: @ alleged legion of AC trollops (eg: 11:51)

> as stupid as saying "my systems are secure - attack them..."

Russell Coker put his root password on his website. I don't know if the machine is still up - I'm at work, and can't ssh out of the building.

It was pretty secure last time I logged in (as root) and tried stuff...

Vic.

Assange flick The Fifth Estate branded 'WORST FILM OF THE YEAR'

Vic

Re: Worst film of the year?!

> Have you seen Pacific Rim or Man of Steel?

I've seen "The Counsellor". That's two hours of my life I'll never get back :-(

Vic.

False widow spiders in guinea pig slaughter horror

Vic

Re: I live near Hedge End...

> I live near Hedge End, too. That's why this article caught my attention.

I work in Hedge End, so I had a look.

BT has 2 Richards in the phone book in Hedge End, and neither of them back onto a school.

The other day, we had a story about fish shagging in Woolston, keeping people awake. I live just up the road from Woolston, so I read that one too.

BT has none of the people mentioned in that story in the phone book.

Now I know that some people are ex-directory - I am - but I'd expect at least one hit. Unless, of course, the Daily fail is just making this shit up...

Vic.

Barnes & Noble's Nook sales take a long walk off a very short pier

Vic

> i've never had a first time swipe to unlock work

I thought that - but in fact, you probably have.

It's *incredibly* slow to react; I found myself swiping a second time, thinking the first had failed, but if you actually wait that long, it does unlock.

> lots of other niggles

Worst for me is the quality of the PDF reader - it's bollocks. Poor rendering of anything but simple text, and no zooming.

Aside from that, I reall ylike my unit. It was cheap,. and it lets me read ebooks easily. I plan on rooting it to try to get a better PDF reader, though[1].

Vic.

[1] One of my main reasons for getting one was to put airfield diagrams on, so I can find my way around an unfamiliar field without having the book falling open at all the wrong pages all the time. The Nook could be an ideal piece of kit for this - small & light, long-lasting battery, daylight-readable screen, backlight for night flying, and the ability to set out your detinanation/checklist/whathaveyou as the screensaver, so even if the power does fail, you still get to see what you need. But the PDF reader is so totally crap I haven't yet.

Microsoft, HURTING after NSA backdooring, vows to now harden its pipe

Vic

Re: The Arsonist

> No more boom and bust

Credit where credit is due: he delivered on that promise.

How may booms have we had since he made that speech?

Vic.

OpenSUSE 13.1: Oh look, a Linux with YOU in mind (and 64-bit ARMs)

Vic

Re: What about SLES?

> (there is a tool called alien which can make you agnostic)

Beware that alien doesn't convert dependencies...

Vic.

VIOLENT video games make KIDS SMARTER – more violent the BETTER

Vic
Joke

> But otherwise a top post.

Top posting?

Yeah, that should be banned.

Vic.

'Best known female architect' angrily defends gigantic vagina

Vic

Re: So what?

> A vagina without a woman is terribly out of context and doesn't make any sense.

Oh yeah?

Vic.

LOHAN buffs body for sizzling vinyl wrap

Vic

Re: Ooo, I have a bad feeling about this.

> Let's see how it pans out.

What happened to the REHAB kit?

LOHAN might benefit from another visit, just to make sure there's no air trapped under the vinyl that might cause embarassing tumescence at altitude...

Vic.

Cryptolocker infects cop PC: Massachusetts plod fork out Bitcoin ransom

Vic

Re: Windows

> average user who can't even follow "don't run untrusted applications" knows how to run Linux commands!

It's a little easier pasting the output from a terminal into a forum page that trying to do a screencast. The idea was to show that the OS doesn't run stuff that isn't explicitly marked as executable.

> Windows will inform that it is an application when they try to run it anyway

But users have been conditioned to agree to any popup that is placed in front of them. There is an "OK" button to push.

What I was demonstrating is that if the executable bit isn't set by default - and NTFS does support that[1], although I'm not sure I've ever actually seen it in the wild - there is no way to agree to such an action; the file cannot be executed because it just isn't executable.

If you want to make it executable, you have to go out of your way and deliberately make it so.

> In what circumstances will the executable return permission denied?

In the circumstances where the file does not have the executable bit set by default. *nix platforms do this by default. Windows can, but generally doesn't.

Vic.

[1] http://technet.microsoft.com/en-gb/magazine/2006.01.howitworksntfs.aspx

Vic

Re: Windows

> other operating systems don't use the extension for file types anyway, so the user would be no more aware

[vic@fortyniner ~]$ ls -l really_bad_file_that_is_obviously_malware

-rw-rw-r-- 1 vic vic 3770976 Nov 21 16:34 really_bad_file_that_is_obviously_malware

[vic@fortyniner ~]$ ./really_bad_file_that_is_obviously_malware

bash: ./really_bad_file_that_is_obviously_malware: Permission denied

Vic.

US watchdog snaps on thick gloves to probe Tesla's FIREBALL e-cars

Vic

Re: Did anyone actually read the article?

> Currently the stats show it has fewer fires than conventional cars.

Do they? Has anyone actually run the numbers? With what confidence interval?

N.B. I haven't run the numbers either - I just flinch every time I see someone make a simple division and claim that *proves* something; with small sample sizes, it usually does nothing of the sort...

Vic.

The right time to drink coffee

Vic

Re: Personally,

> I've found it's better to drink coffee while one is awake.

I used to have a T-shirt that said

"If I'm awake, buy me beer.

If I'm asleep, wake me"

Vic.

Dell orbits Linux a third time with revamped Sputnik notebooks

Vic

Re: How could they find an SD-card reader....

> ... that doesn't work out of the box

I had an old HP laptop that had an SD reader with an embedded processor - it needed a closed-source firmware blob to get any life out of it.

I never bothered...

Vic.

Fukushima fearmongers: It's your fault Japan dumped CO2 targets

Vic

Re: ****shit merchants

> Extrapolating "possibly slightly increased risk"

The first thing I do on posts like that is to see who the author is. Many of us here have known the other personae for some years, so it's often apparent who the newcomers are.

So when you see a new user, joined that day, with just a handful of posts (often just one) posting something inflammatory, it's pretty obvious this is an evangelist...

Vic.

Dr Wolfram touts coding language to revolutionise mankind ... just like Wolfram Alpha did

Vic

Re: Language?

> Seems to me like this thing translates hieroglyphics into a set of calls

Such things are not new - the Z language, for example has been with us for nearly 40 years.

The problem that all proponents of such systems seem to forget is that the language is largely irrelevant; the job of coding a piece of software is predominantly a specification issue. You need to tie down the required behaviour accurately and completely, and although some languages make that harder, very few really make it much easier.

"Natural language" invariably makes the whole thing worse, because natural language is inherently imprecise unless you hang out with us "picky" geeks...

Vic.

Microsoft fears XP could cause Indian BANKOCALYPSE

Vic

Re: If it all goes wrong, just sue Microsoft @Nigel

> CentOS/Scientific support ends in 10 years

CentOS / Scientific support is around for as long as you want it. And you can pick how much you pay for your support - the more you need, the more you pay.

> White Box EL seems to have been canned years ago.

WhiteBox is still in existence, and I still have support customers using it.

Vic.

Vic

Re: If it all goes wrong, just sue Microsoft @Nigel

> Vic, you fail.

Well, one of us does.

> The cheapest RHEL equivalent for XP would be the Red Hat Enterprise Linux for Desktops.

Alternatively, you might find the cheapest RHEL *equivalent* would be CentOS, WhiteBox, Scientific, or various others.

And they all cost nothing whatsoever. You get all the RHEL updates for zero outlay.

Should you want personal support, that is also available at a cost. But forrather more support than you get with a standard XP installation, any of the above will do. And they're all both free and Free.

Vic.

Vic

Re: If it all goes wrong, just sue Microsoft @Nigel

> Take the cheapest RHEL equivalent

Righto.

> calculate the subscription costs for it for all those 13 years.

OK. That's 13 x £0 = £0.

> That will be several times more expensive than XP Pro license ever was

Not if you're using legitimate XP licences, it isn't.

Vic.

Europe, SAVE US! Patriot Act author begs for help to curb NSA spying

Vic

Re: USA FREEDOM Act.

I don't know what you pay MP's, but affording a "team" of matriculants from the London School of Acronomics is entirely out of question on a legislator's salary.

Running an election campaign is entirely out of question on a legislator's salary. But they do it...

Vic.

Ultimate electric driving machine? Yes, it’s the BMW i3 e-car

Vic

Re: Fast?

> 0-60 of 11.9 seconds and a top speed of 89mph is 'fast enough'?

It is, actually.

A real 89mph is somewhere in the region of an indicated 100mph in most cars (modern cars all seem to over-read, to the tune of nearly 10% in many cases). You'll be hard-pushed to sustain that.

12 seconds to get to speed is no performance machine, but it'll do. That's faster than most of the traffic I see nowadays.

The trick to being quick is all in the observation, not in the machine...

Vic.

I want NSA chief's head on a plate for Merkelgate, storms Senator McCain

Vic

Re: Is anyone really suprised?

> If we're talking in terms of a traitor and a coward,

ODFO...

Vic.

NO! Radio broadcasters snub 'end of FM' DAB radio changeover

Vic

Re: Honest question...

With digital, you have to convert from analogue to digital and back to analogue, which takes time, depends on the codec, but possibly as much as a second.

It's not the conversion from analogue to digital or digital to analogue. It's the *compression* that takes time.

Compression occurs over a time window, so you can't even start the job until you've digitised that much audio. You necessarily delay by *at least* the time window in use.

A second seems rather long, though; when I was doing videophones, it was generally perceived that 100ms+ delay made you sound evasive, and meant the other persion was more likely to distrust you...

Vic.

Vic

Re: Streaming Radio

> every bit received goes off your download quota

Your what?

Vic.

MPAA, RIAA: Kids need to learn 3 Rs – reading, writing and NO RIPPING

Vic

Re: Let's generalise this a bit

> Sorry Vic, but you're wrong..

My aplogies, you are correct. It does indeed say that downloading is stealing - which is factually incorrect.

ISTR a version that juxtaposed two statements together to create the *implication* that it was saying that, when it hadn't. Perhaps there's been some editing going on. Or perhaps I've had an incorrect[1] quantity of beer.

Vic.

[1] It is left as an exercise to the reader to determine the sign of such error :-)