* Posts by regadpellagru

553 publicly visible posts • joined 31 Jul 2006

Page:

Has Europe cut the UK adrift on data protection?

regadpellagru

UK leaving the EU

I'm always baffled by the number of people supporting Cameron in leaving the EU and/or wielding the dangerous threat to do so, at the risk of having to do it for political reasons. Who cared a single second when he went berzerk on Junker election ?

After all, the UK is one of the few countries to still have a full sovereign currency in the EU: it can print money ad nauseam to start the economy again, so doesn't suffer from one of the sole EU problem.

Then, it seems unavoidable, to me, UK (minus Scotland) will leave the EU, so noisy was the spin around how it would make things better. This data protection ridicule posture and how no-one cares is one more syndrom that it will make everyone outside of UK happy.

End of the day, this will only kill UK exports to EU (yeah, no painful security/safety requirements anymore, china-style, only to be treated as the same rubbish).

I really hope Cameron gets to his senses again, so as to avoid the UK going down ...

iWallet: No BONKING PLEASE, we're Apple

regadpellagru

Re: Really?

"Apple won't use NFC because they don't hold the patent.

The patent for NFC payments is owned by Visa & Samsung <-- because this?"

Possibly. However, Apple is taking a risk in offering an "Apple-only" payment solution. Having the tablet OS and hardware by the same vendor has a lot of merit, but such is not the case of the phone manufacturer and payment provider. This is a problem as sellers will face 2 standards: Apple only or NFC based.

I don't see Apple winning this one.

BMW's ConnectedDrive falls over, bosses blame upgrade snafu

regadpellagru

Re: we are doomed

"Actually that pedal to the left is merely an interface to an electronic device - i.e. 'brake by wire' - for more and more vehicles on the roads. As are the shifter and shifter paddles, as have been most dashboard controls for years."

Not in my cars. All 3 pedals (yes, if you know how to drive, there are 3 of them) are mechanically connected to either a cable (clutch and accelerator) or pump (brake). Steering is mechanical as well.

There is no way I'm buying a car where any of those is electrical because I see the risks but not the gains. A mechanical or hydraulic device is always more reliable than an electrical system.

And yes, my most recent car is from 14 years ago, but still doing great.

regadpellagru

"It's a gimmick anyway. Seriously, it's only use is for the fun of seeing peoples faces when I make my car do a retarded Herbie impression."

Actually, it's a gimmick NOW, but if desirable, they're gonna put more services on it, incrementally.

Of course, without checking what if the service is down, each step they go through ...

And one day, someone might get killed because of this.

regadpellagru
Facepalm

fail

" complete re-programming at the server end, and starting again from scratch ".

It seems still in 2014, people are performing a major upgrade on live systems used by customers, with no prior backup of any kind ...

I like the "complete re-programming" term most, either the lad was not totally fluent with IT or maybe ... they lost the apps binaries AND source as well ?

Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade

regadpellagru

Re: firefox ESR updated too

@Trevor,

You have my sympathy, even if I'm ready to let them a chance still.

For people that are looking "where the <BIP> is the about/update button" it is hidden in "new bizarre menu bar on the right"/"tiny interrogation mark button I never spotted before"/About Firefox.

Geez.

New Star Wars movie plot details leak, violate common sense and laws of physics

regadpellagru

H2G2 style

"I have a bad feeling about this."

Same here, even worse than that ... Even episode 1's ridiculous pod racer looks better.

Really sounds, as others have pointed out, like an H2G2 thing, like the sofa that felt in the space time breach, just to en up in the middle of the Ashes cricket tournament ...

There's NOTHING on TV in Europe – American video DOMINATES

regadpellagru

French TV those days

Like the article pinpointed correctly, France as well is invaded by US series/movies.

Nowadays, a full week of french free to air TV is:

- loads of US series (all of them, multiple times). Some you can't follow because they're broadcasted out of order by complete retards (Hello, NRJ12 ?).

- loads of US movies

- loads of reality TV (entire channels of it, like D8, NRJ12 M6, and others, about 1/3 of the full specter)

- the obligatory "plus belle la vie" french serie which really sucks

- some rare good french and interesting program (Arte)

- some never seen stuff in new channels (RMC disco)

That's it. I even watch UK FTA channels when I'm bored.

Seventh-gen SPARC silicon will accelerate Oracle databases

regadpellagru

Re: Are these the SPARC or the T processors

@Fenton

"Whilst they look good on paper with loads of threads, we have found that for a heavily loaded

transactional systems, they perform like a dog."

That's because the Niagara series (T) has been designed for apps that are light on the communication bus (App servers, web servers, mais relays) and very parallel, not for heavy DB servers. For this, you should use other gear (Power 7 from IBM or M series from Oracle).

OpenWRT gets native IPv6 slurping in major refresh

regadpellagru

Re: So much better than original FW

Exactly, all of this.

Also, contrary to popular belief, this come with a full UI, and there is no real need to go command line even for advanced config*.

Nowadays, any time I need a router or WIFI AP, I just go to openwrt hardware list.

* one silly exception: no way to get the WIFI PSK from the UI, when connecting new stuff ...

Software giant CA Technologies dumps arcserve biz

regadpellagru

Re: Arcserve

"I remember those days, it was fine until it decided to eat its own database and I would wonder why no backup tapes were ejected (My fault for relying on the inbuilt database)."

I remember Arcserve as well. Was in 1999, on NT 4, and my first backup software (that is after Unix tar :-).

I've never heard of it after this, despite spending a long time in DC and storage ... I wonder what it became after this ...

Wireless-controlled contraception implant is coming, says MIT

regadpellagru

Looking forward ...

To all the articles on security issues around those new IoT thingies.

And their consequences ...

Linux turns the crank on code for cars

regadpellagru

Re: "key applications developed in HTML5 and JavaScript"

"For this to work it will also need some way of getting software updates FOR THE LIFE OF THE CAR. This does not mean I need to buy a new car every time a new version of the OS is released."

Agree in the principle, but you used the undefined term "LIFE OF THE CAR", which, depending on company's business model can go anywhere between 5 and 20 years.

So this update for life would prove trivial to achieve for, say, f***ing Peugeot but quite more expensive for, say, Toyota or Kia (with their 7 years waranty, which is not even meant to cover the lifetime).

End of the day, that would biaise the market IMO, so to me, the conclusion is a level of automation in the car that would require an elaborated OS (windows/linux vs. Vxworks type of micro-kernel) is a bad idea.

True fact: Your CAT wees ... like a racehorse

regadpellagru

Re: Mogpiss Monday Blues

Ah ah, actually, it's probably, from the study, still the same duration, except this very male cat is coming EACH TIME at your place for it, part of its territory domination game ...

Quite a pain in the a*** I reckon, but could be worse (like in your boots) ...

Intel, Ford: Project Mobii will harpoon unsafe, unauthorized drivers

regadpellagru

There is however a good use for this

"And if you happen to reach for the navigation console while the car is in motion," Davis notes, "Mobii will gently remind you that's a bad idea, requiring you to speak your destination instead."

Who would buy this for being bugged by a defective program, surely hardcoded not to be able to be de-activated like those numerous bipping systems warning you've not your belt on.

Not me !

There is however a single legit use: driver asleep detection. Will save your life if triggered, and the techno already works. It's not rocket science by the way, only a matter of closed eyes detection + timer ...

DOH! Google’s internet of things vision is powered by… Mac OS

regadpellagru

Normal stuff

If you're giving a pres, you surely don't want a bsod like that poor Gates fella ...

Hence OS X

/fanboy

Patch looks like Microsoft FAIL, quacks like FAIL, is actually quite good

regadpellagru

Re: Vista?

"What about the few sad folk still unable to avoid suffering from Vista, is that not still considered a supported OS?"

I think no, see http://support.microsoft.com/lifecycle/?p1=11734, if you don't have extended.

Different note, I'm baffled MS even still cares about 7 ...

Traffic lights, fridges and how they've all got it in for us

regadpellagru

Re: No they haven't

"And if they don't have a choice...?"

Hmmm, Doom ?

regadpellagru

Re: Liability

"Make the suppliers of IoT stuff pick up the bills for any breaches that happen, say 30 days, after they have been notified of a flaw/exploit.

I think you will find it amazing how that would focus their minds on having it secure and patchable from the start."

This would be the right approach. Except all vendors would cry foul and would force regulators to back off immediately. Such a liability has never been imposed to a vendor in the consumer market to date.

And we're talking potential life threatening liabilities here !

regadpellagru

Re: No they haven't

"I got news for you. THAT HAPPENS EVERYWHERE. Microsoft's just the company with a big fat bullseye on it."

I agree it's not only ms, others in OSS and elsewhere get it wrong too.

If this is gonna be permanent, as you and me seem to believe it, then, as I said, the darn thing will collapse.

No-one will ever accept their supplies to be owned like their entertainment device is ..

regadpellagru

No they haven't

“The lessons have already been learnt on modern OSes."

No, they haven't. Supposing Windows is part of the "modern" OSes (and I'd happily argue against this, but given its spread, let's assume yes), they haven't learnt a thing, otherwise they'd have rewritten IE long ago, after designing a proper security layer, and no flaw nor patch would ever exist, covering 6 major versions (http://www.theregister.co.uk/2014/04/27/oops_we_did_it_again_microsoft_warns_of_ie_zero_day/) for a period of now 13 years and counting.

Instead, they kept patching holes after holes, like drunken lemurs scooping water out of their sinking ship, forgetting to plug the big gaping hole first. Why is ActiveX still in W7 by the way ?

"The mitigation techniques are out there and secure development lifecycles are well documented. IoT developers have access to the answers, if end users force them to use them.”

Yes, the technology is here, but end users don't understand a thing, so can't force anything onto vendors. So they won't, and no-one else will, since only end-users have such an interest.

Furthermore, the NAT barrier is today artificially protecting most devices, as an encouragement for doing security wrong safely (from a vendor reputation standpoint). So this will add to the problem.

I personally think the whole thing will rapidly collapse under the impact of security flaws exploited by crooks, together with less than stellar added value, a bit like some electronic "solutions" in cars died under reliability issues for no added value (at least for the part of manufacturers that are still on the reliable cars market, again, customers don't understand a thing, and still a market for gadget cars exist).

I liked this article (http://www.theregister.co.uk/2014/06/17/internet_of_things_fridge_fantasy/) which by the way managed to kill the idea without even digging into some of the difficult aspects (like lapsing dates of food, liability in case of bugs, etc ...).

The cute things they say

regadpellagru

Re: Lost Files

Another one quite similar:

This sales admin young woman was only using a single tool, salesadm, and for convenience, there was a shortcut for it on the desktop. Every month, she accidentally removed the short cut, and called that "salesadm has disappeared". Each time the support lad would recreate the shortcut.

I don't think she ever realised one could launch programs via the start menu ...

Redmond is patching Windows 8 but NOT Windows 7, say security bods

regadpellagru

Re: Goodbye windows

Mate,

This has already happened.

http://www.theregister.co.uk/2014/04/14/microsoft_version_of_windows_you_probably_havent_upgraded_to_yet_is_already_obsolete/

regadpellagru

Re: The question becomes, then...

"And actually it would be far easier for the NSA to try and subvert Open Source code via strategically placed development efforts than it would be to attack commercial software during the development process."

Actually, no, it's the exact reverse. Commercial SW can be subverted easily (couple of thousands bucks) contrary to open source which is open to public eyes.

Granted, openssl is such a smoking mess it didn't work for it, indeed.

TrueCrypt hooked to life support in Switzerland: 'It must not die' say pair

regadpellagru

Re: What about LibreCrypt?

"To use the "Libre" naming would make the intentions clearer and would borrow from the goodwill that LibreOffice created."

This. An also, with the fact hosting moves from the US of A to Switzerland, it would be a good punch in the face of Uncle Sam !

Valve says no Steam Machines until 2015, fingers crossed

regadpellagru

screw it

This screwed my week big time.

They really seem to have lots of issues with the controller ...

This is putting the whole ecosystem in jeopardy, as devs may stick to directx rather than opengl.

I really hope this is coming Q1 2015 otherwise I'll have to pay the Redmond tax again ...

Microsoft's 'CEO of no' on Xbox: NO SALE

regadpellagru

Good luck

"And he needs to do all this while maintaining a rather successful Windows business"

Well, good luck with this one. Win XP/7/8 are the same thing with only the GUI changing, people have become aware of this, and PC laptops and desktops are soon to be history. I see as much Windows future in this landscape as there was OSF/1 on X86.

Only junior sysadmins that can't do Linux will be the customer base of Windows servers, and that's not gonna make his numbers.

Gigabyte Brix Pro: You don't need no steenkin' Xbox... when you have 4K-ing amazing graphics

regadpellagru

"PC gaming - gaming for people who like fixing broken crap."

When was the last time you fixed your _hardware_ ?

Let me fix it for you:

"Windows gaming - gaming for people who like fixing broken crap."

That's basically the whole point of a steambox.

regadpellagru

Windows 8, really ?

I really hope they'll remove the Windows tax, as the whole point of the Steam boxes is exactly this: remove the middle-man.

I also would really like to know how this kind of boxes performs with Planetary Annihilation. The game is very demanding and it seems 8GB would be a minimum requirement to play with comfort.

Slow IPv6 adoption is a GOOD THING as IETF plans privacy boost

regadpellagru

Re: NAT has to go, no..

@itzman

Very interesting post, mate, have an upvote.

It seems to me you're describing a TOR network on IPV6.

It really seems to me this could be the future ...

regadpellagru

Re: NAT has to go, yes

"IPv6 is a fucking mess, designed by people who gave absolutely no consideration to security or privacy. People who were unable to see the positive (if unintended) consequences of how IPv4 had been put to use in the real world. There just aren't words suitable for publishing anywhere which can convey my absolute contempt for it."

I'll give you credit for 2 points:

- IPV6 designers gave no consideration for privacy. yes, indeed.

- They didn't give a shit about IPV4 -> V6 transition. yes, indeed, but some people woke up late on this (See RFC 6144)

However, I maintain the argument that it's not the network's responsibility to maintain a barrier between devices because device's developer have been completely careless on security.

If things have degenerated this way (and they have), then the end game must be that:

- device devs have to get their acts in order

- IP V6 has to be deployed

regadpellagru

Re: NAT has to go, yes

@Roland6,

I agree 100%, NAT has indeed its use for mergers with companies that just ... didn't bother.

This will unfortunately survive IPV4 and will of course be here in IPV6.

I was more speaking of consumer NAT used in every day box/router. Point noted.

regadpellagru

NAT has to go, yes

I think, contrary to some, NAT has to go.

The problem is, NAT evolved from a terrible burden due to address exhaustion, to a security measure hiding internal hosts from the internet. This was NOT the intend !

As a result, yes, endpoint security has become freaking terrible, and removing NAT will expose the weak internal hosts.

However, in the grand scheme of things, the end game should really be:

- fully meshed network (all hosts communicated with all hosts of da net)

- security ensured by updated V6 firewalls (I'm sure we have already V6 FW that can stack rules on V6 nets and V6 hosts in the relevant manner, without having as many rules as hosts to be written)

Back on topic, indeed, another thing of V6 is each hosts may have a unique and persistent address. This RFC should address it. Provided each host cannot be uniquely identified by other endpoint problems (browser for example).

Still many years of work ...

Don't let hackers know Mandiant founder checks his email on an iPad. Oh.

regadpellagru

Re: Just wondering ...

"I thought that they weren't allowed to store credit card numbers, never mind in plain text?"

Why would they not ? Any regulation ? Not.

So, of course, everyone is doing it, and of course in clear because it's easy. Don't be fooled by the fact you see stars and no number in the portal, it's just a front-end illusion, it's all clear in the DB behind). I've seen only few exceptions around my decade long of online purchase, for services that connect to real banks instead.

Just to name a few:

- Amazon is storing your CC numbers

- Steam as well

- Paypal as well

- 98 % of the french local online purchase sites

That's why you must NEVER put in your real CC number, and rely on special secure payment like E-visa.

Symantec: Antivirus is 'DEAD' – no longer 'a moneymaker'

regadpellagru

Re: It won't be missed

"Whatever happened to them? I mean in the mid 90s they were to techos what sysinternals is today.

Speeddisk. Diskdoctor. Awesome batch file extensions. But now the best advice is to avoid their rubbish."

As usual, dumb corporate politics turning good tools into utter crap.

For those products not totally sabotaged technically (thinking of the ex Veritas suite, Veritas Cluster Suite, VxVM also), they've turned their pricing into such ridiculousness no-one could actually afford them. And this is even before the OS vendors actually and finally come with a solution (HPUX 11iV3 comes to mind, all previous versions being utter balls for storage mgmt ).

regadpellagru

"Does anyone have any thoughts \ experience on android anti virus? Best programs etc?"

Yes, friend, and you named it in your post: Avast. Install Avast AV, and while you're at it, they have a backup SW which is not shite, contrary to all the ones I've tried, and also a very nice anti-theft.

I normally install all 3, no perf impact, works well AND detects malwares.

HALF of London has outdated Wi-Fi security, says roving World of War, er, BIKER

regadpellagru

"Had to downgrade my wireless security at home, as the brand new Internet enabled TV I bought for my wife to watch in bed while convalescing only supports WEP!"

Even if it is completely appalling in 2014, I'm not that much astonished. Most consumers products don't give a crap about implementing basic security.

You have my sympathy.

Even Nintendo with their bugged first WiiU firmware failed to have any security working at launch. Not even WEP. Had to go to clear text !

Please work for nothing, Mr Dabbs. What can you lose?

regadpellagru

Good article

"Basically, just because online content is free doesn’t mean it costs nothing. Mercenary I may be, but when I want to be charitable, I do charity, not business. What I’m sick of is being asked to work for nothing by someone who isn’t. "

Good point and very good article. Good laugh at the start with the blonde, BOFH quality I think ...

Just wanted to say I'm in vacation this week, so do I earn something for reading ?

Just kidding ...

Keep it up, and get paid !

Snapchat updates fap-snap sharing app ... now with more Chat

regadpellagru

So Long, Naughty pics ...

"It seems Snapchat – which never guaranteed that you could be sure your naughty pics were actually deleted – now operates on a policy of "deletion by default – you keep what you want, and we'll get rid of everything else!""

Maybe it's just my being an old 44 years old chap, but having spent the whole week in vacation with my 15 years old daughter, it never occurred to me she ever considered the service to *guarantee* your pics would be deleted.

She knows plain well the pics are gonna be binned *unless* you're screenshoting ...

Therefore, so long with the apparently long fantasied for "naughty pics".

Sorry El Reg :-)

Titsup UK Border IT causes CHAOS at air and seaports in Blighty

regadpellagru

That's nothing

<Ted mode>

Got caught recently in the Frankfurt security staff strike (http://www.reuters.com/article/2014/02/21/us-germany-airport-idUSBREA1K0XS20140221).

As I was in transit, contrary to the lucky others, I _had_ to go through.

This was 4 hours of waiting, pushing, being pushed, all while sweating to death.

The best part was not I arrived home with 8 hours delay over a normally 10 hours trip.

The best part was the completely insane cop who almost started a riot by relocating the back of a huge queue of people competing for a _single_ open security door, next to the front of the same queue, for the same f***ing door !

See, there was not really a queue, just a front, 30 people large for the same door, all pushing, that became a front 60 people large, with half of them "cheating" the queue.

Tons of insults, in german, to the insane copper, and some agressivity between the 2 fronts.

I think I still have the meaningless answer of the head of frankfurt airport after my complain.

Frankfurt = insecure airport. Don't go there.

</Ted mode>

Windows 8.1, which you probably haven't upgraded to yet, Already obsolete

regadpellagru
FAIL

Dear Customer

Thank you for purchasing Windows 8.

We are sure you appreciated all of its features.

We want to assure you we took a lot of pleasure to screw you. We are looking forward for your forced purchase of our incoming product, Windows 9, due next year.

Anatomy of OpenSSL's Heartbleed: Just four bytes trigger horror bug

regadpellagru

Re: I don't get it..

"> why expect a length parameter at all ? That is metadata that can be calculated quite trivially.

How? A socket connection is just a stream of octets, there are no record delimiters (except as provided by your own protocol).

And then you need to detect with partial data (eg. interruption on the network)."

A long time ago, XDR solved those problems. It just needs to be used.

http://man7.org/linux/man-pages/man3/xdr.3.html

regadpellagru
FAIL

Re: I don't get it..

""C"

The path starts here."

@Destroy,

We'll all get tons of downvotes for this obviously, but I completely agree with you. C does not have any idea of objects, their size, bound checks etc ...

It's time IMHO to start using a really secure language for those critical security components.

This fiasco wouldn't have happened on a lib written in ADA.

You can't trust a language which allows a tab (erm, sorry, a pointer, since tab don't exist) to access memory anywhere with no control.

UFO, cosmic ray or flasher? NASA rules on Curiosity curiosity

regadpellagru
Joke

As mad as a box of mad frogs

""Look closely at the bottom of the light," Waring wrote. "It has a very flat surface giving us 100% indiction [sic] it is from the surface. Sure NASA could go and investigate it, but hey, they are not on Mars to discovery life, but there to stall its discovery.""

100% addiction to some substance, I think. Either this or he forgot his pills for the second consecutive day ...

Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed

regadpellagru

Simple solution

Telcobox = unsecure

mybox = secure

Use the telcobox for transport only and triple-play, then get LAN/WLAN and security from mybox only.

Of course, mybox must not be remotely managed, must not trust anything coming from telcobox and it should run one of the popular freewares (dd-wrt, openwrt, tomato).

Et voila.

India's GPS alternative launches second satellite

regadpellagru

Re: To those who bleat about cost - you might have misssed something . . .

"FFS!

The U.S. or E.U. would spunk that away just by producing Powerpoint presentations for one operation with not a single spanner being lifted."

Yeah, but India is using geostationary sats, because, you know, it's local coverage only, so no need to use low orbits, like GPS/Glonass/Galileo do. The latter is more expensive techno and of course use more sats, while the former uses sat techno already everywhere around the globe for TV.

Still, not bad a price to have their service for the whole country and surroundings.

China demands answers from US after 'I spy on one little Huawei' report

regadpellagru

Re: Seems strange...

"If the NSA wanted to know if Huawei kit is/was sending information back to the Chinese government could they not have determined that technically through looking at the packets being sent, stripping a machine down to look for secret transmitters and so on?"

That is assuming the dodgy kit is installed on every box, leaving everyone the ability to find it out, which I don't find credible at all. No-one is that stupid, those days.

No, presumably, it is only installed on request (locally or remotely) when the kit is to be used by a target, thus the need to find out at manufacturer's end.

End of the day, average kit is totally clean ...

Stop fiddling with your VMAX knobs or I'll chop your fingers off

regadpellagru

Ex storage admin, here

As an ex-storage admin, I've always found the level of control you had on the latest Symms (Symm 3 & 4) creepy.

Who needs to rebuild a RAID group anyway ? This needs to be planned at installation time and only if you get it completely wrong, would you need to do that. Also, to be able to break LUNs entirely ? Quite some risk here (wrong LUN ID anyone ?) ...

I've also (painfully) fixed mistakes coming from this flexibility. Joe Local Admin thought it would be good to create a LUN of this size, but failed to understand where the LUN parts would land in terms of physical devices, creating a LUN effectively twice the speed of any other ...

I haven't touched VMAX yet, but if EMC has offered the same level of control, I can surely see how things can get screwed up by Joe, big time :-)

Star Wars movie to start shooting in UK this summer

regadpellagru

I can't see ...

what much coherent story can be told after I to VI ...

Republic, issues, clones, Palpatine taking power with help of Vador, Vador eradicating Jedis, war, first death star destroyed, empire chasing rebels, one jedi returning unexpectedly to terminate both Vador and the emperor ...

Seems like a finished story to me. Everyone will then live a happy life and democracy will reign again in the galaxy.

Seems like a Highlander II plot style is to be expected, like, you know, new villains coming from nowhere, for no explained reasons, and the sequel carousel will go on.

Humdrum Documentum momentum makes EMC glum? Off alone into the scrum it should be spun

regadpellagru

The problem is ...

Documentum is a Documentation mgmt product that has always tried to stick with the EMC portfolio (aka, no tape, pls, we're EMC ! and also, sell Centera and pretend to be an archiving product).

This rarely fitted customers' needs, therefore the decline or lack of ... momentum.

Also, they used to have very aggressive EOL policies, along with major architecture changes, which would quickly loose customers. You really don't want to do a major update of your doc repository every single 18 months ...

Indeed, this division never seemed to have had a happy life inside EMC ...

Page: