* Posts by Destroy All Monsters

16005 publicly visible posts • joined 3 Jun 2008

Patch NOW: Six new bugs found in OpenSSL – including spying hole

Destroy All Monsters Silver badge
Trollface

MWHAHAHHAH. .heh heheh...

"Yes, grashopper. Non high assurance code for tasks needing high assurance code .... IT WILL HURT YOU."

(Maniacal laughter continues. Fade to black. Then a shot is heard. )

"The sudden proliferation of OpenSSL bugs is to be expected and a good thing. Like finding dirty socks during spring cleaning,"

Absolutely. But we really have to step it up.

Btw..

1) Isn't today Snowden aka. "Summer of Surveillance" 1-year anniversary? Coincidence??

2) http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0224: "Unable to find Vuln"... WUH?

Cisco COO: 'I actually thank God that we had a crisis'...

Destroy All Monsters Silver badge
Holmes

We "had" a crisis?

Newflash: It's going strong, transforming the world into a Hollandaise. Literally.

And currently it is GOING STRONGER. Lots of stuff is redlining for a grand finale now.

I wonder whether the even will be CISCO after the next one?

YOU - NASA. Enough with the ROBOTS, get some PEOPLE to MARS

Destroy All Monsters Silver badge
Facepalm

Stupid kids saying stupid things

Also, Uncle Sam is in debt to the tune of 21 trillion (or was 120 trillion), growth exponential. Yeah Humans on Mars. That's gonna fix things,

“The United States has been a leader in human space exploration for more than five decades, and our efforts in low Earth orbit with our partners are approaching maturity with the completion of the International Space Station."

The US has FAILED at human space exploration and the ultra-expensivy gypsy hotel in orbit is not "approaching maturity" unless you count permanently imminent plans for deorbiting as "maturity".

The only thing that "the US" (more like JPL, amIrite?) has been good at is robotic space exploration. It brings the bacon home. That's want you want. There is no point firing bacon into faraway sandy lands (it might even enrage people of certain religious tendencies).

Protecting code's secrets wins ACM prize

Destroy All Monsters Silver badge
Paris Hilton

Re: Err, so what gets tested at test time?

Yeah, but so what?

This operation will be used in low-assurance SW for consumers (and fock them if it doesn't fully work)

or in SW that "may fall into enemy hands" and for which more money can always be found for "bang on it until it works" operations.

Destroy All Monsters Silver badge
Headmaster

Re: Try this - in APL

EL REG WHEN ARE WE GETTING "tt" TAGS?

Destroy All Monsters Silver badge
Trollface

Re: OMFG

Otherwise if I'm running code I have every right to reverse engineer it

Sure, but you may not be ABLE to.

It's like with these "human 'rights'" that we so often hear about which are just reachable in a platonic ideal of a western liberal society with acceptable economic infrastructure.

Russians turn Raspberry Pi into fully-fledged autopilot

Destroy All Monsters Silver badge
Windows

Re: "one of the licensing conditions "

> 2014

> Using GPS to put a force package on target

Instead of honest-to-God real-time terrain recognition in a matchbox the way the original Tomahawk Cruise Missile was doing it via a baseball-sized computer back when Reagan talked about the Evil Empire on TV.

Youngsters. These days they just want to have it easy.

TrueCrypt hooked to life support in Switzerland: 'It must not die' say pair

Destroy All Monsters Silver badge

Re: Blazing Saddles

TwueCrypt from Twitwerland?

Destroy All Monsters Silver badge
Thumb Down

Re: FWIW

Saying that they understand this, but plan to host the website in Switzerland to evade their legal and moral obligations is utterly immoral...

I hope your fellow colleagues don't ostracize and bully you. Haranguing people on morality while not having a clue tends to backfire.

Destroy All Monsters Silver badge

Re: License smicense

sell the rights to a patent troll who go after every Linux distribution and corporation using Truecrypt

And is then royally ignored by everyone because it's about copyrights and trademarks.

Women found just TWO out of every HUNDRED US tech startups

Destroy All Monsters Silver badge
Thumb Down

Yet another Picketty-style retardation (YAPSR)

WHY IS THIS A PROBLEM?

Why should "percentage of tech startups founded by women" be an interesting number?

Why should it be a more important number than "percentage of houses painted in green"?

Why not consider "number of techs startups still alive after a year that were founded by women"? How about two years? Are the numbers better then or worse? Is there signal in the noise? Is the color of the front door more strongly correlated with startup survival?

How about "percentage of women not stupid enough get a slave to their work, the vagaries of the taxman and random business-unfriendly 'soak the nail that stands out' legislation"?

Why should it "tuned" somehow?

Is tuning it any more realistic than tuning the cosmic microwave background?

etc. etc. etc.

NEXT.

Piketty thinks the 1% should cough up 80%. Discuss

Destroy All Monsters Silver badge
Holmes

Re: wrong type of regression curve

Protip: These "hoarders" HOLD THE CAPITAL NEEDED FOR INVESTMENT.

Of course, in the nice new world of Keynesian Retards and Egalistards, we fake up the capital by printing in central banks, making everyone paper wealthy while the while world falls apart around us.

But all of this has happened before -- and it will happen again.

The way of surviving is of course being the first in line when the uniforms are handed out. Moral qualms, me? I have no problem making sure people stay in their assigned camps when the time comes, thank you.

Linux users at risk as ANOTHER critical GnuTLS bug found

Destroy All Monsters Silver badge
Holmes

Re: There are reasons that GnuTLS has to be used in some situations

I'm also not sure what your comment brings to the table either really.

What kind of "Could well be Unfit for Purpose" is unclear to you?

The original post is suggesting that GnuTLS is bad. No one has said it isn't.

Thus GNU License trumps Fitness For Purpose.

The sadness of License True Believers (LTBs) in a double negative.

With that kind of attitude, you ain't gonna get much traction, kid.

Destroy All Monsters Silver badge
Trollface

Someone is actually using GnuTLS?

GnuTLS considered harmful

Date: Sat, 16 Feb 2008 13:12:31 -0800

"Looking across more of their APIs, I see that the code makes liberal use of strlen and strcat, when it needs to be using counted-length data blobs everywhere. In short, the code is fundamentally broken; most of its external and internal APIs are incapable of passing binary data without mangling it. The code is completely unsafe for handling binary data, and yet the nature of TLS processing is almost entirely dependent on secure handling of binary data.

I strongly recommend that GnuTLS not be used. All of its APIs would need to be overhauled to correct its flaws and it's clear that the developers there are too naive and inexperienced to even understand that it's broken."

Well, maybe it has been fully rewritten since then but I doubt it.

Spammer sprung to run Russian national payment system

Destroy All Monsters Silver badge
Thumb Up

What can go wrong?

Nothing!

He will easily liaise with Wall Street types, Banksters, Hedge Fund Operators and other riffraff.

Feds hunt 30-year-old alleged to be lord of Gameover botnet

Destroy All Monsters Silver badge

I van damke!

I feel like we need Bruce Willis and a team of misfits trained in the use of arcane Texan oild drilling machinery. But why?

A DoJ statement on the case alleged Bogachev is using the online nicknames "Slavik" and "Pollingsoon"

Pretty sur, he's also now as "Tuna". Damn Ukrainians.

Apple's steamy OS XXX picture leak riddle: Blurry snaps deleted

Destroy All Monsters Silver badge

Re: Disappointing

Because change for change's sake is good.

It's refreshing.

It appeals to teenagers and random hipsters who couldn't into IT if their backup depended on it.

Destroy All Monsters Silver badge
Facepalm

blurry photos of what's supposed to be the next OS X

Photos. Of an operating system.

FECK OFF!!!

Apple: We'll tailor Swift to be a fast new programming language

Destroy All Monsters Silver badge

Re: Interesting how this creates another advantage for Apple

That looks like shit.

Destroy All Monsters Silver badge
Holmes

Yet another Dylan?

Anyone remember Dylan?

I was pretty excited about it - for a couple of months.

It also sank without a trace.

Well, back then Apple was throwing out people as fast as they could. Now they have the military budget of a small country in the bank. So....

Anyway. Bartender, one LISP please. With added STM.

Destroy All Monsters Silver badge
Holmes

What about just straight C ?

Frankly, you are part of the problem.

C was something like a cutter from a gore flick in the 80's. It is so now.

The only good thing about it is brevity of the manual. Which is, of course, very important.

Supreme Court nixes idea of 'indirect' patent infringement

Destroy All Monsters Silver badge
Headmaster

Re: Interesting ruling, but

But what if a drug company develops a pill that's a cure for leukemia, and someone copies it by producing a pill that contains all but a couple ingredients

SO FUCKING WHAT!

so few patients would take it instead of the official medicine

A) BRANDED SUPERSHARK® WALLSTREETO™ RELAXATOR® subsidized by Medicare B: USD 1500 per dose.

B) Shenzen Blue Oyster Copycat: USD 10 per dose.

A poor schlok in a poor country will go for B), not for A) even if there are risks, you can be sure of that. But at least he can go for B)

Microsoft's NEW OS now runs on HALF of ALL desktop PCs

Destroy All Monsters Silver badge
Windows

Re: Downvoters

the tiny minority who really use Linux for everday computing

Where the hell do you think you are here? Fecking toff.

Destroy All Monsters Silver badge
Devil

Re: Its not suprising..(Just use Classic Shell!)

Just stay with 7

He ... BROKE THE HOLY UPGRADE CYCLE!

STONE HIM!!

Quantum teleportation gets reliable at Delft

Destroy All Monsters Silver badge
Headmaster

Re: Question.

I would assume this is the first step towards real teleportation. Teleportation of data happens almost instantaneously through measuring entangled particles.

Totally wrong. First you "teleport" (the correct way is "move") quantum state which you don't know what it is. Nothing happens "instantaneously" (because in what frame?) And if you "measure" it, you do not even to get out if bed, you already lost.

The closest thing to "real teleportation" is putting the thing on a truck and driving it there. Ain't no way around that.

as you measure (and thus set) the spin of one electron, the other immediately takes on the complementary spin

In the same way as finding out that you have the queen of spades in your hand causes your opponent to have the queen of hearts?

Destroy All Monsters Silver badge

Re: *Ahem*

Pestilence has retired after the discovery of penicillin

Not even wrong.

Never, ever attempt "who wants to be a zillionaire".

FAA: All systems GO for Virgin Galactic space plane to launch from US

Destroy All Monsters Silver badge

Re: New Mexico Spaceport Authority

Not so fast, young grasshopper.

This is just the cargo-cult future.

Whether the actual future will ever arrive is still open.

SpaceX 'Dragon V2' rocket podule can hover-land on Earth - or MARS

Destroy All Monsters Silver badge

depending on how well the money flows from the US government in the next couple of years

A nice formulation for "current and as yet unborn taxpayers".

Problem is that the economy is rapidly reaching extreme buttock clenching time. We will see.

Destroy All Monsters Silver badge

Re: SPACE!!!

World president? Are you crazy? We have already enough problems with the US president.

Did NASA probe detect a KILLER GAMMA-RAY burst in Andromeda?

Destroy All Monsters Silver badge
Holmes

Well, in this case you just get pure light (gamma radiation), so there won't be shielding by magnetic fields (which trap electrically charged particles, forming the Van Allen Galactic Fried Grilling Zone)

On the other hand, the atmosphere is pretty good absorber of this kind of energy. You will get ionization in the upper layers and the accompanying chemical reactions (NOx formation and whatnot, possible elimination of the ozone layer) and electromagnetic phenomena on-ground. See also: electromagnetic bursts from nukes popping in orbit.

Not sure how much energy could be maximally put into the atmosphere by an Andromeda-located neutron star merger and what the consequences would be. Enough for an extinction event? Some PhD should do the calculations.

SPB's mountaintop HQ menaced by wolves

Destroy All Monsters Silver badge

Re: Good news for the Tourist industry!

"If the Wolf is too fast for you, you are too slow!"

TrueCrypt turmoil latest: Bruce Schneier reveals what he'll use instead

Destroy All Monsters Silver badge
Terminator

Re: Nah, follow the money...

All that effort and time in planning to completely discredit the brand only to try and resurrect it later as a commercial venture? If that was the plan...

Maybe they are Cylons.

Destroy All Monsters Silver badge

Re: All this...

It's just another Gainax Ending

Destroy All Monsters Silver badge
Paris Hilton

Re: re: "closed up before a more detailed review could be done of the code"

the crypto-analysis phase which requires incredibly skilled people to actually perform

I don't understand. The code review is not there to ascertain that the cryptographic algorithms are any good. The cryptographic algorithms should follow the specifications...

Destroy All Monsters Silver badge

Because it's the Sound of a Thump on the Table!

Destroy All Monsters Silver badge

Downvote your dick away, it's coming!

Destroy All Monsters Silver badge
Paris Hilton

"Somebody was about to de-anonymize the Truecrypt developers, and this is their response," suggested Prof Green.

Isn't a list of Names that are under Particularly Close Surveillance by NSA due to be revealed "soon"?

For your next privacy panic, look no further than vending machines

Destroy All Monsters Silver badge
Trollface

Re: More useful to look at those who do *not* buy

"Hello, Mr. Snowden!"

French Hacker Legion is West's foremost snoop squad says Robert Gates

Destroy All Monsters Silver badge
Holmes

Freedom Fries back on the menu soon!

So, did that french Mistral frigate sale to Russia actually go through? I thought it was still on hold.

“There are probably a dozen or fifteen countries that steal our technology in this way."

When one thinks five seconds about the possessive pronouns in this phrase, throwing up bilious acid in the face of unelected bureaucrats robbing you blind (if not maiming you outright) is the best thing to do.

TrueCrypt considered HARMFUL – downloads, website meddled to warn: 'It's not secure'

Destroy All Monsters Silver badge

Re: Hmm .....

if something isn't fit for OpenBSD, then they either patch it or drop it

OpenSSL says that this is not so

Destroy All Monsters Silver badge
Thumb Down

Re: If you were the NSA...

Surely we can find some new bugbear du jour. Can we blame the "Dark Web"?

Dear Monsieur Wojcik,

Might have been your mom instead. Frankly, one must be a bit woozy in the head to call NSA "bugbear du jour".

NSA is first in line when suspicious shit HTF in relation to crypto. Their prior is extremely high. Bayesian evaluation of

Probability( NSA involved | Weird and mysterious stuff happens with crypto )

yields a value rather far away from 0.

Destroy All Monsters Silver badge

Re: Replacement?

From your brain to your hands is where the trust begins and ends.

Dr. Strangelove is of a different opinion.

Destroy All Monsters Silver badge

Re: Intriguing

Sounds like a nontruism.

Destroy All Monsters Silver badge
Pint

All along the watchtower...

And also...

The TC devs have been willing to labor in obscurity for 10 years on an ideological project that almost certainly hasn't earned them a living, that is wasted on and unappreciated by most computer users, that could earn the devs some pretty powerful enemies, and the importance of which has arguably been steadily eroded by the feature creep of popular operating systems.

It would not be shocking to learn that the devs were fairly eccentric. Socially idiosyncratic. Crotchety. Grouchy. Zealots. Justified paranoids. Assholes, even. And I say this with affection: I've used TrueCrypt for years. It warms my heart to imagine that my security software was designed by grouchy zealot paranoid assholes.

I point this out because most of the "something is UP" vibe this story seems to radiate really just comes down to "But this is so abrupt and confusing!" That is, it comes down to the social signals connected to the event, or lack thereof. But the devs have never been very forthcoming with any sort of social signals. If they're grouchy zealot paranoids, they may see social signals as weakness. Well, in this newfangled game, where every detail of your writing style is preserved for all time, for later analysis by computers and programs that don't even exist yet, maybe they can be.

I'm coming around to the point of view that this isn't as crazy a way for the devs to quit the TC project as it seems at first blush. TC is open source and I'm sure the program will continue to be developed to some degree by someone. Probably several projects, several someones. Maybe the TC devs (who haven't updated TC at all in nearly two years) have a new project they view as more important. Maybe being a grouchy zealot is really tiring.

posted by Western Infidels at 9:24 PM on May 28 [18 favorites]

Snowden never blew a whistle, US spy boss claims

Destroy All Monsters Silver badge
Devil

A nation of muggles.

Yes, the education system of the US is in such a parlous state that actual skilling-up has to be performed by knowledgeable person from abroad.

These then train sysops.

Which are then mistaken by amurricans for spies.

Destroy All Monsters Silver badge
Thumb Up

KerryTruth®. So nourishing you absolutely want to hear more of it!™

"If he cares so much about America and he believes in America, he should trust in the American system of justice," Kerry said

Hey it's the Swiftboat Wonderboy speaking again. You know, the guy who allegedly threw his medals over the fence of the White House house, then found them back to show them on TV. Guy's just sick. I wonder what kind of black magic they use to keep his brain alive?

Linux Foundation flings two full-time developers at OpenSSL

Destroy All Monsters Silver badge
Trollface

Re: LibreSSL

Yeah, but the content makes up for it. "AES Infinite Gerbelling Extension" And immediately thereafter "Weaponized Comic Sans: This page scientifically designed to annoy web hipsters - donate now".

And then

"The OpenSSL 'Foundation' is basically a FIPS consultancy - we are not. We believe this creates a priority inversion to the needs of the larger community. FIPS is actively harmful to the security of the library,... FIPS is not a goal of LibreSSL"

This may explain why OpenSSL.

Destroy All Monsters Silver badge
Facepalm

Meanwhile, at OpenSSL

This is sendmail levels of bad.

How to strip pesky copyright watermarks from photos ... says a FACEBOOK photo bod

Destroy All Monsters Silver badge

That's pretty Uber!

Welcome to the ISS. Don't mention Ukraine if you ever want to leave

Destroy All Monsters Silver badge
Trollface

Re: who cares about the Ukraine?

Pretty sure US/NATO is ready to fight for Ukraine down to the last Ukrainian.

Obama gave his full-on "exceptional superimperialist commander in chief" speech at West Point. You know what's coming.

(Meanwhile people rejoice because April's durable-goods orders are unexpectedly up 1.6% as Uncle Sam buys Nuke Subs for 18 billion on the credit card. The end is near.)

Also, El Reg: "Comrade". A quarter of a century after the Soviet Union imploded? Really, now.