* Posts by Charlie Clark

12182 publicly visible posts • joined 16 Apr 2007

Zlib crash-an-app bug finally squashed, 17 years later

Charlie Clark Silver badge

Re: Irony

No one was proactive in fixing this, including companies that arguably make billions from using it.

Charlie Clark Silver badge

Given the fact that Zlib is really just away to compress data, including http connections, I'm not sure that monoculture is an issue. But this is clearly an instance of the tragedy of the commons: everyone uses it but no one maintains it.

Charlie Clark Silver badge

Re: Ouch

Doesn't libpng require zlib as a dependency?

In any case lots of software, inlcuding MS Officce, will need updating because zip is the default file format for many, even if they use different file extensions.

Expect 'long tail of cyber retaliation' from Russia for sanctions, says ExtraHop CEO

Charlie Clark Silver badge

Re: Russia has limited resources

Those that can leave will probably have already done or are in the process of doing so. I certainly don't buy the idea that Russia is leaving off cyberattacks against the West just because the tanks have rolled over the Ukrainian border.

Charlie Clark Silver badge

Russia has limited resources

While it has in the past executed all kinds of cyberattacks, Russia has limited resources, specifically hackers to engage on this and the current brain drain because of the war and sanctions will also be having an effect. Even those sympathetic to Putin's war might well be considering their options. Reports are that the Russian military is already drafting reserves and training staff into the war. Who's going to want to wait for their call up?

Intel counters AMD’s big-cache PC chip with 5.5GHz 16-core rival

Charlie Clark Silver badge

Re: Let's Qualify that 5.5GHz Figure

The densities sound impressive and the technology that achieves it is impressive. But once you start thinking in the world of atoms then you realise that potentially there's a long way to go, which is why work on optical computers – bugger the size because switching is so much faster than using electrons – or molecular ones – a data centre the size of a sugar cube is ongoing, because we're reaching the physical limits of electronics, especially the ones like transistors dependent upon or susceptible to quantum effects.

Charlie Clark Silver badge

Re: Let's Qualify that 5.5GHz Figure

And then there are the packaging other optimisations of Apple's chips. 5.5 Ghz might be needed to run the software for which there is no hardware acceleration.

Debugging source is even harder when you can't stop laughing at it

Charlie Clark Silver badge
Go

Ah, Father Jack's Guide to Coding. You forgot: drink! and girrrls!

Will Chinese giants defy US sanctions on Russia? We asked a ZTE whistleblower

Charlie Clark Silver badge
Stop

Re: … it will be because they can't help but chase the revenue…

Your argument extends a false premise into nonsense. Trade with America is essential for many economies for many reasons but these three are key: the size of the market, source of capital, rule of law.

That many sanctions are poorly thought out, ineffectual and partial is well-known, Iran springs to mind. But sanctions-busting is entirely market-driven and the Russian market is not that interesting for many, or do you think Putin the Paranoid is keen on letting the Chinese run its networking and telecoms?

Charlie Clark Silver badge

Re: I don't think many Chinese companies will defy the sanctions

Economically sanctions act to drive up the risk premium. If the counterparty then goes on to default, the risk premium is likely to become unaffordable.

That said, Russia did largely manage to avoid the full pain of sanctions post 2014. This was largely down to the profits made by rising prices on essential resources. However, strip the economy of energy resources and you'll see that it has been in decline for over a decade. This is why Russia continues to lose trained personnel, essential if you want to build up "substitute economy" and nowhere is this more apparent than in the armed forces which have thus far been shown to be far worse equipped than most imaginged. Though this is as much down to the kleptocracy as any inability to make parts.

Charlie Clark Silver badge

… it will be because they can't help but chase the revenue…

Apart from selling military kit, which is incompatible with the stuff Russia makes, there isn't much revenue for Chinese companies in Russia. It's a resource rich kleptocracy, where the profits that come from exporting resources get spent on trinkets for the rich.

Ukraine uses Clearview AI to identify slain Russian soldiers

Charlie Clark Silver badge

Re: Fallen soldier identification

For mothers who have not heard from the sons for weeks if not months this might come as a blessing. Russia is still claiming that any conscripts in Ukraine are there by mistake…

Charlie Clark Silver badge

They're doing that mainly by listening in to the non-encrypted radio chatter, which is why they know that Russia is now deploying not just some troops, but entire battle groups from the Eastern Military District (Siberia). Ukrainian troops can all understand Russian and recognise many of the accents.

Mozilla creates paid-for subscriptions for web doc library

Charlie Clark Silver badge
Stop

Non-starter

You make no commercial arguments for the switch. Apple has largely frozen browser development because it has achieved what it needs: a runtime to replace Flash for music and video content.

Switching to Gecko would be a huge wrench for Apple's team. It is far easier for it to pick bits of Blink and make it work with Webkit.

Charlie Clark Silver badge

Mozilla as a corporation has made an awful lot of mistakes and wasted oodles of money on side projects that no one was really interested in.

The work on the browser and in the various bodies around the development of the web, including documentation, has been outstanding. I'm not heavily involved in web development at the moment but, should the need arise, I'd certainly be interested because good technical documentation is hard to write and, therefore, usually hard to find.

BOFH: Putting the gross in gross insubordination

Charlie Clark Silver badge

Re: Very nice indeed

But also a real win-win. You'd have thought the beancounters might suspect something but obviously the young and the weak are targeted by the pack!

Charlie Clark Silver badge

What's left after the security guard burps?

An advert for a junior sys admin?

RIP: Creators of the GIF and TRS-80

Charlie Clark Silver badge

Re: Even though I disagree on his pronounciation

And while we're about it, what about gaol?

Gin and Ginger are both imports from languages with a soft "g". But that doesn't really matter because looking for logic in English spelling is asking for trouble! However, native speakers have innate rules for pronunciation and I remember assuming it would be a hard G when I first encountered it, not least because we already have jif in jiffy. I remembered being "corrected" as well but, the soft "G" has here has never sat well with me, so I stick with the hard "G".

Whatever your pronunciation, it was a great idea but later became many people's introduction to the notion of software patents…

Supercomputer to train 176-billion-parameter open-source AI language model

Charlie Clark Silver badge

Re: I have to admit I am curious about MS's AI

MS bought SwiftKey. It will be using a publicly trained model to make better suggestions for you personally, but will also provide anonymised data hit/miss, etc. back to the mothership.

RISE with SAP struggles to gain purchase with German-speaking users

Charlie Clark Silver badge

Necessary caution

Caution is inherent in many of the departments that chose to run SAP in the first place. Convincing them to move sensitive customer data to other people's computer systems is always going to be hard and that'e before anyone mentions compliance and data protection: contracts may stipulate that data must be processed on their own hardware and the fines for potential breaches of data protection law have always been steep.

Plus, having gone through all the pain and expense of installing SAP, few are going to have much appetite for migration: it will cost a fortune and the benefits will probably be small, come back in ten years or so…

Hackers weigh in on programming languages of choice

Charlie Clark Silver badge

For various reasons, lots of hacking toolkits are written in Python. As they generally wrap around system calls or C code, there's no real need to make them "faster", whereas rich APIs and good reporting tools make them popular for pen testing.

Charlie Clark Silver badge

Re: Horses for courses

If it were possible, I would completely ban high function interpreted language runtimes on boundary systems in an environment, but nowadays, so many admin tools rely on these runtimes that it's just not possible.

Seeing as you fairly easily install them as a single binary on a compromised system that's not necessarily going to help.

GitHub explains outage string in incidents update

Charlie Clark Silver badge

Re: smells like...

What are teal leaves? And where can we get them? The Github store?

Charlie Clark Silver badge

Re: It can't be MySQL

Yes, but is it webscale?

Shirley, this is mainly a read-heavy environment?

Russian IT pros flee Putin, says tech lobby group

Charlie Clark Silver badge
Coat

Re: Logistics software?

Which is why Russian generals have been complaining about the wrong kind of mud

Mine's the one with the British Rail crest…

Charlie Clark Silver badge

Re: Logistics software?

Not really the software as much as everything else: food, fuel, munitions. But also the engineers and technicians required not only for the weapons but for the trucks that keep breaking down on the way.

Charlie Clark Silver badge

Re: Russxit

They already have enough of them and the exodus is not directly to the west but to other former communist countries such as Georgia where being discovery of involvement in pro-Russian activities might carry a slightly higher price.

The fact of the matter for Russia is that it doesn't have enough engineers to maintain the war effort as it is and many of these are leaving if they get the chance. This is the direct consequence of the kleptocracy that has eroded the status that used to be attached to such employment.

Testing for COVID with the sound of a cough? There’s an app for that

Charlie Clark Silver badge

Coughing is only likely to occur if there has been damage to the bronchia, which is apparently less likely with the Omicron variant, which tends to infect other parts of the respiratory system first.

Hence testing someone with symtoms during a pandemic doesn't sound particularly revolutionary is very much like closing the door after the horse has bolted. Antigen tests remain about the best we have because testing positive is a good indication that you're infectious.

How Pfizer used AI and supercomputers to design COVID-19 vaccine, tablet

Charlie Clark Silver badge

Pfizer didn't develop the vaccine

The German company Biontech did most of the work, with Pfizer a partner for production.

US is best place to be a software engineer, salary survey finds

Charlie Clark Silver badge

Re: 96K doesn't sound that high

Depending on the state, lower tax rates in the states go some of the way to compensating for significantly higher healthcare costs in the US. But the main incentive in the US remains stock options which let people dream of retiring when Unicorn™ goes public in five years. During which time they're prepared to put in oodles of unpaid overtime, forego holidays right until the pink slip arrives…

How legacy IPv6 addresses can spoil your network privacy

Charlie Clark Silver badge

Re: I'm not quite sure I understand

That's what I was thinking, thanks. As I said, I think this is probably a greater risk than that of being tracked.

Charlie Clark Silver badge

I'm not quite sure I understand

While I do understand the information leak, the article doesn't make it clear to me how the tracker knows when it has a MAC address in the local part and hence to use this to track everything from that router. Is this done using a database for MAC addresses?

As it is, although my router is using IPv6 to talk upstream, it's also using a 4 to 6 tunnel to do so because so much of the outside world is stil IPv4 only.

But I also wonder if the bigger risk isn't being tracked, I think our consumer devices and own behaviour make it pretty easy to identify us whatever mitigation we try, but information about the network providing information for potential hacking.

Russian court deems Instagram and Facebook as 'extremist', WhatsApp spared

Charlie Clark Silver badge

Tokenism

I'm assuming Facebook and Instagram are being banned because they're primarily web based (1 -> n), which makes some of the blocking a bit easier. Russia has already tried, and failed, to ban Telegram (m -> n) and doesn't want to be seen to fail again.

Google Maps just got lost for a few hours

Charlie Clark Silver badge
Stop

Re: Hormone blockers

On the contrary, the poster made specific reference to the potential charge of child abuse, which only applies for minors.

Charlie Clark Silver badge

Re: Re:Texas : Can I move there please?

FWIW "hormone blockers", etc. are already considered harmful in many countries (Sweden, UK) and by an increasing number of US doctors, incuding some who have undergone gender reassignment surgery.

I have plenty of sympathy for those involved but no time for the extremists on either side nor for the burgeoning industry that has sprung up around it.

False advertising to call software open source when it's not, says court

Charlie Clark Silver badge

Bug reports are indeed managed in Word and Excel online and the specification isn't without its problems (it is very long, verbose and in parts contradictory and inaccurate) but makes it neither nonsense nor unusable.

Charlie Clark Silver badge

The specification is open. Though it was a fight to get it that far!

ExoMars rover launch axed over Russia tensions

Charlie Clark Silver badge

Re: I don't get the problem for the launcher.

The last couple of NASA landings have gone well so the data seems to be there. "Dummy" landings on Mars are prohibitively expensive – it's not the landers themselves so much as the time and cost of getting them there.

There's no doubt that the ESA has the capability to do it all but it is financially much more constrained than NASA and Ariane has to earn its keep. Furthermore, cooperation in scientific missions with other space agencies is considered a sine qua non.

Hear us out: Smartphone lidar can test blood, milk

Charlie Clark Silver badge

Re: Too good to true?

Right, but it's the same kind of development: you add new kinds of sensors while refining the existing ones. If you're lucky the results are "greater than the sum of the parts".

The point is the parts required are available on any Shenzhen market, when they reopen that is!

Charlie Clark Silver badge

Re: Too good to true?

Calibration is likely to be the big problem here, but it's pretty clear that you can probably knock up pretty reasonable sensors using phone sensors. Think of it like the early days of Time Team as they went from metal detectors to radar and then lidar.

How experimental was Microsoft's 'experimental banner' in File Explorer?

Charlie Clark Silver badge

Re: "experimental"

It's a bit like 150,000 soldiers rolling up to over your border "for exercises".

FTFY

Charlie Clark Silver badge

Re: Usual answer

The Windows interface before Windows 95 was deliberately crippled by Program Manager, the sole reason for existence was to avoid lawsuits by Apple. I don't think Windows 95 was much better but at least it had a tree menu avoiding oodles of windows opened just to start a single program.

Since then there have been several attempts to incorporate the ideas of Taligent with vayring degress of success.

How CAPTCHAs can cloak phishing URLs in emails

Charlie Clark Silver badge

What's new?

Phishing has for a while relied on bouncing users around various URLs in a way that gateways generally can't because the resources required to run browser engines would grind servers to a halt. In such cases, protection is best done in the browser using one of your favourite ad and script blockers. Oh, and routinely providing spam and scam training for employees.

Russian demand for VPNs skyrockets by 2,692%

Charlie Clark Silver badge

Did you say turnip? Where can I get one? Gravel and moss is the best we can get.

Charlie Clark Silver badge

Re: Obviously...

The sad fact is that the majority of Russians get their news from the TV and believe it. I was discussing this the other day with someone who is from Russia and is used to having difficult conversations with relatives there.

Then again, as many studies have shown, people elsewhere are not that much better informed. Still, at least we have a choice of competing conspiracy theories!

Arch Linux turns 20: Small, simple, great documentation

Charlie Clark Silver badge

The thing that distinguishes Linux from other free Unix-related OSes such as FreeBSD is that Linux isn't a single piece of software from a single team.

I'm not sure what you're trying to say, it's not as if every BSD release only contains code from the core team and then there's the ports. Ports have for years ensured that the OS release schedule decoupled from whatever packages users want to install. Linux might initially have an advantage is supplying binary packages and, while BSD has taken a while to settle on packager managers, it's never had the Yast vs yum vs apt vs… problems and cd path/to/port && make install still always works.

Startups bag billions to fill gaps left by chip world giants

Charlie Clark Silver badge

Re: The Next Big IPO Splurge

Also, the bottleneck isn't chip design which has become refreshingly open and competitive over the last few years, but manufacturing. But you don't get many UV lithograph machines for the small change the VCs are handing out.

Oh, and while the size of the market sounds impressive, margins are going down across the range.

Microsoft proposes type syntax for JavaScript

Charlie Clark Silver badge

So the long and short of that, is that all those "modern" languages aren't strongly typed

No, they are not staticly typed but they may well be strongly, Python certainly is. JITs figure out the types, which is one of the reasons for their speed.

Charlie Clark Silver badge

Re: Copied from Python

Static analysis of Python code has always been good and there are numerous example where static typing fails to prevent bugs. You need fuzzing and things like Hypothesis to test inputs.

Type hints are essentially compiler optimisations and were originally ruled out of Python for precisely that reason.

Charlie Clark Silver badge

Re: Copied from Python

Its also easy to ignore.

I don't find this at all. Descriptors are a much more legible and less intrusive way of providing support for typing.