* Posts by regadpellagru

553 publicly visible posts • joined 31 Jul 2006

Page:

It's still 2015, and your Windows PC can still be pwned by a webpage

regadpellagru
Joke

facepalm

" ... one in Windows' handling of OpenType fonts, four in Windows' Journal file handling ..."

Journal handling, fonts, ain't Windows great ?

Can't say I'm surprised by the edge thingie, though.

Dell CEO: Very few will survive the PC bloodbath

regadpellagru

margin enhancing malware strategy

“Financially it is tough,” he said, “there is nobody arguing that we will not be there in the future. The market trends toward commoditisation ... plays totally in our favour. We know how to play the low-cts environment."

Yeah, we've seen how, but stuffing malware in Lenovo-installed OSes (http://www.theregister.co.uk/2015/02/19/superfish_lenovo_spyware/) and even in bloody motherboards (http://www.theregister.co.uk/2015/08/12/lenovo_firmware_nasty/) !

Of course, getting some money from cyber-crims to enhance margin ...

Fiat Chrysler recalls THOUSANDS more cars to swerve hack-my-brakes roadkill

regadpellagru

Unaware, geez ...

"The company is unaware of any injuries related to software exploitation, nor is it aware of any related complaints, warranty claims or accidents – independent of the media demonstration."

Of course, smart ass, cos no-one will even investigate nor have the competences to do so, even if those design flaws kill thousands !

How many deaths caused by cars design flaws, in the entire world, have ever been reported ?

Actually, the article should point out those problems result from DESIGN flaws, which are a lot more serious than software flaws.

Entertainment network should really share no physical part with driving network.

My understanding is, again, the manufacturor is just hiding it out with smoke, not fixing the design flaw,

which would be really costly, but just updating the software.

Mad.

Boffins clock MONSTER BLACK HOLES inside quasar-hosting galaxy near Earth

regadpellagru
Alien

Old news

If it is to happen 100 000 years after the current visible situation, and the objects are 581 million lights-years from here, then it already happened more than half a billion years ago !

We just need to let light the next half-billion and some years to come to us.

Astronomy is really a funny science. We may need Douglas Adams' dictionnary for time traveller ...

Nano – meet her: AMD's Radeon R9 4K graphics card for non-totally bonkers gamers, people

regadpellagru

Re: How does it compare to a GTX 970 ITX?

Probably not that great, seeing the only version that won't set your build on fire is severely under-clocked, vs. mitx 970, which some of them are over-clocked.

regadpellagru

Re: Cough.. cough... cough...

"175W in a mini-ITX case is called a fan heater, not a piece of electronics. There is no way in hell you can dissipate that amount of heat in that little space unless you are pushing all of it outside the case straight away which is not the case (the heatsink has vents on top and on the side in addition to the exhaust)."

Yes, 175W is quite high, but I really wonder about the Fury X TDP ... 275 W ?? Really ?! It's more than my total mitx new gaming build, which burns 250 W total on extreme load ! No OC yet, though.

And meantime, the ASUS GTX 270 mini IS overclocked, and as far as I can tell, doesn't throttle while gaming.

Desperate Microsoft PAYS Win Server 2003 laggards to jump ship

regadpellagru

Disturbing, really

"The Reg’s integrator source told us: “Microsoft is keen to help pay them [customers] to move. They want shot of it – they are committed to getting Microsoft customers off an unsupported version of Windows. They don’t want to support it.”"

That is well fully understood. Who would want to support it ? Costs arms and legs ...

However:

- They don't have to. Ever. They stated years ago when they'd stop doing anything on 2003. They just DON'T have to support it. In other words, the ressource burden is something of the past.

- Why on earth, given what is above, would they pay transformation fees ? There has to be, as some other commentards have already stated, some other reason (crap W10, fear of migration to other platforms ?)

MS is totally insecure, here.

Are smart safes secure? Not after we've USB'd them, say infosec bods

regadpellagru

@ The Original Steve

Yes, but still, I know no modern OS that still have this huge stupidity set by default: auto-executing of removable storage. Apart from Windows.

OS X doesn't do that, no Unix I've approached (and I've seen quite a bit) do that. QNX, I'll admit I have no idea.

It's totally baffling to see Windows devs never learnt from the 80s viruses on Amiga (and probably other platforms, Atari ST ?), which primary vector was indeed the autoexec of removable storage, aka floppies in this age.

When you haven't learnt from the mistakes of people 30 years past, it's really hopeless.

We tried using Windows 10 for real work and ... oh, the horror

regadpellagru

come again ?

What added-value for me to upgrade from a MAC-contained W7 VM, to W10 ?

I read the press but still haven't figured it out ...

It's all Uber! France ends its love affair with ride-sharing app

regadpellagru
Coffee/keyboard

Correction, here ...

"However the service is in fact illegal in France and last week Pierre-Dimitri Gore-Coty, general manager for Western Europe and Thibaud Simphal, general manager of Uber France, were arrested. They will have their day in court in September."

It's true that both blokes have been arrested, due to insane political pressure, that was deemed (source: Le Canard Enchaîné, 01/07/2015, page 2) as overkill by police insiders.

However, it is not true the service is illegal in France. This is up in the air at courts.

Taxis are actually angry because they buy their licence at 200 000 Euros which puts them much at debt, unlike Uber, due to, it seems, a legal loophole. Of course, Uber can have prices totally lower than taxis due to lacking this huge racket/tax, so we have unfair competition, here.

Amazon just wrote a TLS crypto library in only 6,000 lines of C code

regadpellagru
Joke

Re: OpenSSL

"OpenSSL code is not as bad as it is often presented nowadays."

If you really think this, chances are your C code is ready for IOCC.

regadpellagru

Re: s2n != OpenSSL

"http://www.openbsd.org/papers/bsdcan14-libressl/mgp00001.html

...

http://opensslrampage.org/page/49"

Ah ah good laugh, indeed. Have an upvote. Everyone should read the links.

Microsoft U-turns on 'free' Windows 10 upgrade promise for ALL previewers

regadpellagru

Re: Guessing games

That's 7: they lost it. They don't know how to make money anymore, after all the debacles.

Give it for free for 1 year (legit W7 & 8 users), maybe. Force cloud usage to rip users off ? why not.

They don't know where they're going ...

Duqu 2.0‬ malware buried into Windows PCs using 'stolen Foxconn certs'

regadpellagru

Only MS

"The question begs, however, why ALL Foxconn-signed executables are trusted automatically just because they're signed by Verisign."

Indeed, AFAIK, only Microsoft issues windows core executables, so they should really be the only ones to sign them, and no-one else !

Why can joe foxconn get anything installed and validated on Windows is a big problem. How many other companies ? HP, IBM, Lenovo, paypal ? FFS !!

MS has to tighten the bolts of who the f**k can install any package on *their* OS. Windows is MS's OS, shall I remind everyone !

Whatever the OEM deal is, with MS, MS has to keep control of its OS security, and that starts by being the sole responsible for exec's security.

DON’T add me to your social network, I have NO IDEA who you are

regadpellagru
Happy

First article from Dabdy I've read

And I liked it a lot.

Thanks El Reg and Dabdy for the re-run !

Scientists love MacBooks (true) – but what about you?

regadpellagru

Why I use a MacBook pro

Because:

- it works, and very rarely crashes. I only reboot to install patches, each and every 3-4 months, rest is suspend/resume

- there are not 50 useless keys cluttering the keyboard

- if someone stumbles in the power cable, it doesn't throw my laptop on the ground

- OS X is way easier to use than the Win 8 madness. Also, OS X doesn't change the UI each and every f**ing update

- for legacy apps, Parallel Desktops is really good

- there is a cool bash xterm in OS X, an ssh client, and not the totally retarded DOS-style term of Windows

Condoleezza to China: 'The rules' mean cyber-spying isn't allowed

regadpellagru

"Only 30 per cent of young Americans, she said, pass the US military's basic entrance tests. Failure can be due to medical problems including obesity, tattoos in the wrong places ..."

Really ? Tattoos blocking people from getting into the US army ? WTF ?

Obama issues HTTPS-only order to US Federal sysadmins

regadpellagru

Why now ?

TLS today shows its shortcomings (static and unmanaged list of trusted CA, some of them that don't have a clue), after years of good services, and just today, Obama signs this off ?

Crazy.

Freeparking web hosting services go TITSUP after migration

regadpellagru

Few post-migration issues ...

And a huge backlog tickets.

Yeah, right ...

Microsoft to TAKE OUT THE TRASH in the Windows Store

regadpellagru

intrusion in the pricing = bad

"Not a bad idea in general, but I'm wary of the part about removing apps because they are more expensive than equivalents. Seems like it would favour new copy-cat apps over the original innovators and it might also favour larger vendors over small independents. Neither of which are a good thing. Vendors should be able to set their own prices."

Agree, upvoted.

This is gonna put down a number of devs. And possibly ol' dear Gabe Newell from Valve.

It's a really surprising move from an US company like MS ...

But, still, they may back this off completely ...

Windows 10 won't help. The PC biz is doomed, DOOMED, I TELL YOU

regadpellagru

Lack of trust

The problem is, MS has failed so much to deliver, after XP, Win7 being just Vista working, not really giving anything more than XP, and Win8 being the turd we know, that no-one, except the most fanatic fanboys, will bother before they see extended press reports on how much it's freaking great.

That's not gonna happen, so sales forecasts, as far as I'm concerned, are gonna be on-par with the ones of Win8 ....

Too little, too late.

Land Rover's return: Last orders and leather seats for Defender nerds

regadpellagru

LR 90 to be purchased, here

Funny to see an article on LRs, here at El Reg, as I'm on track to buy a 90 from 15 years ago.

It's superb, but will cost me 14 kE (only 60 000 km).

That's gonna replace a Toyota Prado, as it's called in Australia, where it's common.

Choose Deutsche Telekom for all your bargain spying needs

regadpellagru

Interesting

To see the BND has acted as a proxy to NSA. It seems Germany wanted to keep control, but was disturbingly keen enough to pass on non-terrorist intel to the US ...

Deutsch Telekom's response is surprisingly honest, franck and out of the usual bullshit on those matters.

Kuddos to the PR bloke.

Milking cow shot dead by police 'while trying to escape'

regadpellagru

Re: A cow is actually quite dangerous

"Last year 2262 cattle-caused injuries were reported in NZ. Even sheep caused 1500 or so injuries."

No, a cow is not dangerous, unless you're stupid enough to hand over some grass plus your fingers to it , as it's not really clever at making the distinction.

No-one should ever have the need to shoot a cow.

Want it no to walk on your toes ? move away from its path. Want to force it back to the barn ? Use a stick.

End of the problem.

I have wandering cows every single week on my roads, and fortunately, there's no lunatic copper here stupid enough to shoot them, with or without an helicopter.

Doom is BOOM! BOOM! BACK!

regadpellagru

Re: This sums up the problem:

"Ah yes, the "Call of Halo" genre of FPS. I really, really hate that most FPS games have dumbed down to the 2 weapon limit, linear levels, regen health and checkpoint autosave systems, it has even infested games that used to be better, like Bioshock Infinite and Dead Space 3. Oh, and Duke Nukem Forever, which didn't suck because it should've been released in 1998 ... it sucked because DNF was basically following all the BAD things from the "Call of Halo" genre."

I feel for you, as I'm the same. I made the fatal mistake to play Bioshock Infinite after 1000+ hours of Borderlands 2. A 2 weapons game after the weapin-fest of BL2. Guarantied frustration.

Solution ? Stay away from "Call of Halo", stick to better genre, and don't hesitate to play old games.

Doom 4 is on my radar, but get out if of the "Call of Halo" style.

World of the strange: There will be NINE KINDS of Windows 10

regadpellagru

Re: Home users

"So do I take it that the Windows 10 Home users will have autoupdate (whether they like it or not) so that they can be first to be hit by any screw-up from Microsoft?"

This is becoming more and more obvious. Same goes for W7/W8 adopters within the first year. They'll get it free and will test it before paying customers come.

Note it's the first time MS is stating openly about 2 classes of users: those guinea pigs, and the rest ...

This is really telling !

Red-faced Germans halt NSA cooperation after Euro spying revealed

regadpellagru

Re: Industrial espionage

"There is still no evidence that the NSA are spying on German car companies and leaking data to their competitors though."

Read NSA's charter and come back here when you have a clue.

regadpellagru

Re: Well...

"UK gets caught colluding with NSA and nothing much happens.

Germany gets caught and the outrage causes cease of collusion.

Hmmmmm........ says more about us Brits than the Germans, I think..."

Well, to be honest, GCHQ has long said to be a subsidary of NSA. It has been largely confirmed by Snowden documents also.

So no-one should be surprised by the fact GCHQ is running hand in hand with NSA.

German BND, at contrary, is another thing. Never was it allegated they were a sub of NSA ...

Quite a shame on them, actually ...

Lenovo system update flaws plugged, security world not impressed

regadpellagru

Just wondering why ...

I'm just wondering what is the justification for Lenovo or any PC maker to have ANY update system at all on the user-owned (pun strongly sugested) PC ?

WHY ? Even if it was not Lenovo, I'd do everything to remove this updater.

Windows 10 bombshell: Microsoft to KILL OFF Patch Tuesday

regadpellagru
FAIL

reboot fest

I'm probably the only one to bother about the following:

1- every day or so, my laptop will have to reboot

2- I'll never have the same OS booting between week N and week N+1

3- 2 will make my OS behave funny/bizarrely/buggyly

And what's worse, I'll never know which patch is bad, has to be removed, because they happen so frequently.

What is really pissing me off in W7 is the weekly patching. I really hoped they'd aggregate patches, like Apple is doing, so that you'd only install/reboot once per quarter.

But no, MS doesn't learn ...

New Windows 10 will STAGGER to its feet, says Microsoft OS veep

regadpellagru

So we now know why upgrades are free for one year

That's because it's even less finished than Vista ever was.

Yahoo! Mail! goes! titsup! in! Blighty! due! to! mystery! error!

regadpellagru

Re: To be fair

"It actually used to be quite good. At least up until gmail came along."

Yes, true, but that was, what ?, 10+ years ago ? I've used them myself but the GUI became terrible, and gmail was indeed ramping up with interesting services, like the POP/IMAP service to consolidate all your ISP-bound email addresses.

Microsoft uses Windows Update to force Windows 10 ads onto older PCs

regadpellagru

Re: Really?

"That was advertised on the App Store as a new free thing you could download and install, not in the update section."

Exactly. And if, like me, you ignored it, it will NEVER come back again unless you request it.

The problem with Windows is all of the fear is here with the "update NOW or you're screwed". MS is taking this as a lever for selling their shit.

But anyway, MS fans will go the MS way ...

Good riddance to them !

The Internet of Stuff is a gigantic ultra-perv robbery network – study

regadpellagru
Joke

Time to play Watch Dogs

Just to have an idea of what to do with IoT.

NZ used XKEYSCORE to spy on World Trade Org election emails

regadpellagru

"Actually yes.

More specifically, I think that the combined Five Eyes countries - population 448 million, GDP 23 Trillion USD - have access to rather a bit more interception, storage and analysis capability than those mentioned nations."

This. Plus the good support of collaboration inside 5 eyes. This shows the perverse relationship of those 5 nations: give me access mate I need your support locally, and I'll share some of my really nice toys (without being too picky about theyr usage).

Dear departed Internet Explorer, how I will miss you ... NOT

regadpellagru

IE won't die

Am I the only one to have 0 trust in MS to ditch IE ?

Spartan is just a different name aimed at having user-agent not match IE, that's all.

Code base will still be IE. After all, IE 6 to 11 share most of their code, as seen in every patch, every f***ing week, so how will Remdond re-write a full web browser ? Only the UI has changed ...

Funny to see MS being entangled into their own mess (messing up with internet standards for decades) to the point they need another name to dodge the usual user-agent conditionnal code in web sites.

But, yes, we'll see patches for IE 6 to 12 + spartan in all W10 patching sessions.

US threatened Berlin with intel blackout over Snowden asylum: report

regadpellagru

Re: Black & White

"It might explain why no country has offered Snowden asylum, despite the fact that he is one of the most obvious cases for it in the last decade or so."

Exactly. Let's remember, although only this german bloke has yet confessed the pressure, it's very likely it was used on other governments as well.

This woud explain France for example blocked the flight from an ambassador, on suspicion Snowden may be in it.

This confession anyway shows how freaking furious the US officials were, when Snowden fled.

Windows 10 build 10041: 99 bugs on the wall, fix a bug, add a feature, 114 bugs on the wall

regadpellagru

Re: Anyone trying with low end hardware

"Is this build working with lesser hardware? For example a Atom D2700 based small PC with 2Gb ram?"

Have you lost it ? This is Redmond,'s policy of N+1 needs 2Xtimes more gear than N. I wouldn't expect 10 to even boot on less than 8GB RAM.

regadpellagru

Re: Is it just me ...

"... or is that first desktop screenshot somewhat reminicent of early 1980's GUIs ???"

Have an upvote.

I'm, myself into retro-gaming, therefore into the said 80s GUI (AmigaOS, this stuff). And yes, W10 seems exactly like this thing !

We apparently have an OS running on 4-8 cores at 4 GHz with 4-8 GB of RAM look like my old 7 Mhz and 1 MB RAM Amiga !

World has officially gone banana.

Data centre dangers: Killing a tree and exploding a UPS

regadpellagru

Re: Many years ago..

"Subsequent investigation revealed that the main fuel tank (under a car park) had had a leak for quite a while. There hadn't been a policy of testing the level of fuel (the fuel gauge measured how much fuel had been put into the tank, not how much was actually there) so no-one had actually checked.

Opps.."

One version of this one, I have heard severall times is this:

"refuelling fuel tanks is under facilities dept, people didn't budget it since it's rarely done, and no-one has asked for it, fuel is almost exhausted when the power cut happens". Same results.

OpenSSL preps fix for mystery high severity hole

regadpellagru

Re: Conspiracy of Optimism

"Coders love their half baked poorly crafted code since they made it. "

Well, I think it is worse than that as far as openssl goes:

- they indeed love the undecipherable crap openssl coding is, love the inconsistent API you can short-circuit at will

- none of them understand all parts of the lib

- since it can compile on platforms long gone 25 years ago, no-one touches low-level parts by fear of disrupting WIN16 support, DOS 4 or Ultrix

Another symptom of openssl being out of control is the versioning. 1.02a, 1.02m, 0.9.8zf, seriously, WTF ?

Here comes Vulkan: The next generation of the OpenGL graphics API

regadpellagru

Re: Great...

"How is this going to kill Microsoft off the gaming market? It might hurt Microsoft's aim of DirectX everywhere, but OpenGL runs on Windows, and so will this."

Because, once devs have a non-proprietary alternative to the monopolistic DX, they'll switch to it for more platforms integration. Then MS, will loose more market share, typically the likes like myself who only still have windows because of gaming.

Those will switch to things like SteamOS.

Then, when another reason for loosing Windows (gaming) is there, the question of having it for classical personnal desktop will arise, and given some severe misaps I've seen amongst all my computer illiterate neighbours (win 8, viruses everywhere, vista insta-killed by a patch, etc ...), this would shift more market share to alternatives. A lot of people have fallen to MS's failures in the last 6 years or so ...

regadpellagru

Re: Great...

"The real question is why we haven't had this until now.

I wish it success."

We never had this up to now because of MS-imposed vendor lock-in. As simple as that.

MS was clever enough to see that a nice 3D API would attract devs and lock gamers to Windows (or Xbox).

Now, MS is struggling and Valve and others are seemingly backing this up.

I also *really* wish them success. This could kill MS off the gaming market, and also off the OS market, where they are really performing like crap.

25 years of SNK's Neo Geo video gaming platform

regadpellagru

Pleasure Dome

Just a heads-up, for those that want to replay their fav. Neo Geo games and many other (legit.), head over to http://www.pleasuredome.org.uk/

Be sure not to be shitlisted there :-)

Redmond's Patch Tuesday to kill off the Windows FREAK show

regadpellagru

can we just shorten the wording ...

"MS15-018 A cumulative update for Internet Explorer 6-11. "

Should really be shortened as "every single IE versions, 'cos the code base is all the bloody same"

Bite my shiny metal Ask: Java for OS X crapware storm brewing

regadpellagru

Re: Bloody hell, when will this nonsense ever stop?

"For fuck's sake, when are these disreputable practices going to stop? How the hell can we expect the multitudes of nefarious exploits to cease when supposedly reputable companies resort to such treachery by only being one step removed? The excuse being by example.

This disreputable nonsense is truly getting out of hand, it's time we users revolted, big-time."

There's only one way, mate: uninstall the whole shite, and tell every single person you meet in the street how it's an awfull pile of dangerous shit. People are becoming *very* suspicious each time they're bitten by crapware, so they are eventually listening.

$250K: That's what Lenovo earned to rat you out with Superfish

regadpellagru

Re: $250,000

"$250,000 will barely pay the annual bonus of the marketing 'droid who thought up this scam"

Indeed, and this shows how low the Lenovo customers' security is valued.

F*ck them, for the 20 ongoing years, really.

regadpellagru

Re: Just goes to show....

"But these days consumer PC/Laptops etc you don't even have that option; You only get the OEM's rebuild partition"

Yes, indeed, and this just shows MS will have to amend their policy on this, as some vendors are just f***ing bonkers, selling their customers' security for a mere couple of USDs.

Previously, vendors would only add mid-usefull bloatware, but not any security-destroying fuckware. This time is gone.

The model is screwed as hell, and MS has to re-gain control of *their* OS !

regadpellagru

";...promising to never again install bloatware...', '...six month subscriptions to McAfee...'

It may have been a PR disaster but at least Lenovo still have a sense of humour"

Is it really humor ? I have yet to see anyone else paying their users a sub to an anti-virus company, to clean up *their* mess ... Geez.

Visa: One million bonks a month for Europeans from next year

regadpellagru

Re: Some of us don't want...

Well, yes, the service case is very unclear.

pros: contactless, no password, faster

cons: can of security exploits if not done well (and contactless techno opens quite a few)

So far, I failed to see how the cons wins ...

Page: