* Posts by h4rm0ny

4560 publicly visible posts • joined 26 Jul 2008

Kaspersky repeats offer: America can see my source code

h4rm0ny

I doubt a non-compete would do it. When the USA sets its sights on someone they say it's because of non-cooperation by the other party but that's just a fig-leaf. Saddam offered full access to weapons inspectors before Iraq war. Gaddhafi repeatedly offered ceasefires and dialogue from the very start of the Libya bombing. Kaspersky can offer, but unless he has a concrete guarantee that showing the source code will result in a calling off of the targetting, I wouldn't do it.

Remember, Kaspersky Labs are the ones that exposed the "Equation Group" (aka NSA) and also were our primary source for information about Stuxnet (Israel and USA in high probability). They have everything to lose here.

Linux 4.12 kernel lands: 'Go forth and use it' quoth Linus Torvalds

h4rm0ny

Secure Boot and Trusted Execution Environments.

So many, many arguments I had with zealots about these things when MS started taking advantage of such technologies. Glad to see GNU/Linux finally getting up to scratch with this as well - it's been an annoying omission.

h4rm0ny

Re: Cringe at the grammar though

I don't think it's a US thing. More just an idiot thing.

US Senators want Kaspersky shut out of military contracts

h4rm0ny

Re: If their computers run fast enough to let them

I use Kaspersky. Runs very efficiently so far as I can tell.

Also, if there were government mandated backdoors in software I use (I do not believe Kaspersky contains any for the record), I would prefer them to be Russian than Western. After all, if I do something illegal or subversive, do you think Russian police are going to turn up on my doorstep? They wouldn't give a flying fuck. UK police or surveillance though - that's what I logically would have to worry about.

Concorde without the cacophony: NASA thinks it's cracked quiet supersonic flight

h4rm0ny

Re: Let's just hope....

By the time this actually gets off the ground, I wouldn't think it would be flown by humans at all! Turn around time on a new commercial airliner can be a couple of decades. The Airbus A380 took first flight in 2005. Design began seventeen years before in 1988. And we've still only built about two-hundred of them.

This isn't even an actual plane design, is it? If a real plane based on these ideas launches in 2037, I can well imagine you wont need a pilot at all let alone need to fly it visually!

We'll drag Microsoft in front of Supremes over Irish email spat – DoJ

h4rm0ny
Pint

And that's why Microsoft are fighting this so hard. Microsoft want your money. They will do anything and everything to get it, up to and even including, doing the right thing.

Cheers, MS!

Heaps of Windows 10 internal builds, private source code leak online

h4rm0ny

>>But I have to say it couldn't have happened to a more deserving company.

Haliburton (backer and opportunist of the Iraq war), Goldman Sachs (fiddled figures to get Greece into the EU exacerbating massively the financial crisis for those of us in Europe), DeBeers (works people to death in mines), FoxConn (doesn't work people to death because they have safety nets to catch jumpers, now), BAE (so in control of the British government that they can get Number 10 to order the Serious Fraud Office to drop investigations into it), Keurboom Communications / Gregory Rudd (99.5 million nuisance calls in the UK).

But yeah - darn that evil Microsoft selling their software! ;)

h4rm0ny

Re: If I was a conspiracist...

This code is already available to governments and other big, security-conscious clients. So your Conspiracy Theory wouldn't hold up.

Teen girl who texted boyfriend to kill himself guilty of manslaughter

h4rm0ny

Re: Factor in suicidal people are not exactly thinking rationally.

Actually one study I read showed the people with depression were actually more aware of the world around them. Essentially they had greater clarity than non-depressed people. I think the principle of "better a comforting lie..." is relevant here.

Paranoid people have a distorted view of their relationship to the world. Paranoia and depression can co-exist. But depressed people often seem to lack the delusional self-importance and unfounded optimism that keeps the rest of us going.

h4rm0ny

Re: clutching at straws

I'd say it's more like evidence that the person is not well, confused and struggling with things herself.

h4rm0ny

Re: Stupid but?

Prison seldom works as a deterrent. Extra long sentences never do. If you're willing to give up two years of your life living in a box and have every aspect of your life controlled by prison guards, then you're already not thinking rationally about cost-benefit. So why do you think twenty years would make someone suddenly rational.

Software dev bombshell: Programmers who use spaces earn MORE than those who use tabs

h4rm0ny
Headmaster

Re: If this were to do with the number of spaces...

>>"Using less spaces either means:-"

Fewer spaces.

h4rm0ny

>>Anyone who uses tabs has clearly never found themselves having to read a script on a server where the only available text editor is Notepad.

Found your problem and it's not with tabs. Seriously, if we have to design everything around the lowest common denominator, we might as well call it a day on this species now.

h4rm0ny

Re: tabs take fewer keystrokes

>>true. and then ANY text-based program or editor (say 'less' or 'nano') will show what you did exactly as you did it, always lining up, always consistent, etc..

Consistent with itself, yes - just as it would be if you used tabs. But not consistent with files from other authors such who used a different number of spaces. Whereas tabs would be.

h4rm0ny
Boffin

Re: A question

">>his means that you can't get meaningful results with global substitutions of fixed numbers of spaces.."

So you're saying spaces are a substitute for people who can't handle regular expressions. Now THAT I would believe.

h4rm0ny

Re: A question

Look at the pair of you arguing over whether the correct number of spaces is 3 or 4 (or any other number). Spaces are not a standard. Spaces are just a doorway to lots of different individual preferences. Tabs are a standard because the person who wants four spaces width sets tabs to display as that and the person who wants three spaces width sets tabs to display as that and neither is messing up things for the other.

Tabs are the only logically correct standard to settle on. Everyone who thinks differently is an idiot.

Also, I resent the article calling me a fanatic just because I can prove that I'm right!

Move over, Stuxnet: Industroyer malware linked to Kiev blackouts

h4rm0ny

Re: The as yet unknown authors of the malware were familiar with industrial control systems.

>>"Do you wear a tinfoil hat?"

In the future, I predict, everyone will be wearing one.

Kaspersky files antitrust suit against Microsoft

h4rm0ny

Re: pedantry

>>"However if MS removed the security holes from windows rather than produce a competing AV product then Kaspersky would not have a leg to stand upon, sadly this did not happen and so MS are at fault."

Sure, but is an invulnerable OS possible? If so, why hasn't any GNU/Linux distro done it, why hasn't Android done it, why hasn't Apple done it? Note that the ones that do it most successfully are also the ones that have a walled-garden. You want MS to remove "security holes" instead of provide AV, but many of those "holes" are legitimate functionality that is necessary. What much malware does is function as any other program but doing something you don't want. Being able to encrypt files is not a security hole that you can close (ransomware) for example. For that, you need something that can detect whether a program instructing the OS to do that is legitimate or not. Which is what AV does for the most part.

h4rm0ny

Re: Is there truly a market in failure?

Integrating HTML rendering and Javascript into the OS is a natural progression. Some people just don't like Microsoft. MS started down that road ages ago with Active Desktop and pulled back because of criticism. They have done it with Windows Store apps - again to howls of criticism. Yet many of the same critics fell over themselves with joy at ChromeOS and Chromebooks.

h4rm0ny

Re: No Kaspersky, spasiba.

Well to paraphrase Mady Rice-Davies, "they would say that, wouldn't they?" I mean you're relying on the world's largest propagator of surveillance with a history of false flag operations for your accusation here and no evidence provided. Even if AV providers were in-bed with their governments you logically have far less to fear about Russian authorities knowing you've broken British or US laws or leaked information than your own government knowing. If I expose someone connected to the government doing a dodgy arms deal (say Amber Rudd's husband to pick a non-random example) who do you think I'm more worried about figuring out that the anonymous source was me? It's not like I'm going to find Russian police on my doorstep.

And actually, there's never been evidence of collusion with Kaspersky that I'm aware of whereas we have some to suggest it with Microsoft and Trend Micro. So I'm calling your post as unsubstantiated accusation.

h4rm0ny

And MS are welcome to continue to do so. What they should not do is try to unfairly exclude others from also trying to make Windows secure. Windows Defender is decent for the average user. Several Third Party vendors do a better job though. Especially if you need Enterprise solutions.

h4rm0ny
h4rm0ny

Re: Is there truly a market in failure?

The fact that Windows Defender is made by the same company that makes the OS is obviously an asset, but perhaps less than you'd think. Windows Security (well, post-XP) uses specific hooks into the OS that any AV solution can use. Windows Defender isn't actually connecting to the OS in any substantially different way than Kaspersky (or F-Secure, or Avira, or...). You might imagine that it's baked into the OS's libraries in some fundamental way but that's not the design. For good reason, really - modular coding and all that. If Kaspersky think they can use Windows security APIs better than Microsoft's own product, then there's nothing that stops them trying. And actually, their product scores higher then Windows Defender consistently, so they seem to be doing it right.

Also, when was the last time Microsoft exposed NSA malware in Windows? Third Party is useful. ;)

h4rm0ny

Re: News at 11

I use Kaspersky. Disagree utterly with your opinion of them. Kaspersky consistently scores near the top of AV solutions for malware detection and low false alarms. When I assessed AV solutions a few years ago, it was basically them and Trend Micro jockeying for the top spot. I think F-Secure were also very high, from memory.

Kaspersky Labs do real and valuable security research - Stuxnet and the Equation Group come to mind. Both of which we learned the details of from Kaspersky. Very good software suite as well, though their "Safe Money" tool can be a bit funky sometimes. No affiliation, but they've worked extremely well for me. And even if you (Planty) don't like Kaspersky, MS's behaviour applies to all Third Party AV providers, not just Kaspersky.

Utah fights man's attempt to marry laptop

h4rm0ny

I had a bunk bed, once. It worked for us.

h4rm0ny

Re: It takes two to tango

I'm tempted to ask my phone "Cortana, will you marry me?" just to see what it says, but imagining it in my search history is just too mortifying.

h4rm0ny
Paris Hilton

Re: Marrying a laptop is silly but...

>>"Why buy the cow when you can get the milk for free?"

...Choclate milk?

h4rm0ny

Re: Marry a laptop?

>>"People made exactly the same argument back when the issue was interracial marriage. If the government can't regulate who is allowed to marry who, then how can it legally stop someone marrying their horse?"

Where did this odd idea that marriage is about love come from? I thought it was all about ensuring proper inheritance and obligation to look after children. Interracial couples can have children. People and laptops (and horses) cannot. Gay couples sort of cannot but there are both adoptive and technological alternatives depending.

h4rm0ny

Re: Marry a laptop?

They should call his bluff and make him marry it. I'd enjoy seeing the consequences when he had to get a divorce because he actually wanted to marry a real person later, and the laptop got half of his stuff.

h4rm0ny

Re: Ship of Theseus

>>"Most of our bodies' atoms weren't there when we were born, and yet we are the same personae, so..."

If you're the same person as when you were born then... No, wait - never mind. This would explain a lot of things...

BA's 'global IT system failure' was due to 'power surge'

h4rm0ny
Thumb Up

>>"But everything worked as it should, although it did give me a few things that needed to be discussed afterwards for improvement."

It never gets better than this!

h4rm0ny
Joke

Re: Ho hum

Yeah, BA IT staff told their CEO they needed greater redundancy... So he fired them.

They're called Tata because that's what they say once they've got your money.

Tata have stated they'll be flying hundreds of engineers to the UK to resolve the problem. As soon as they find an airline able to transport them.

It technically IS a power supply issue. Alex Cruz should never have had any.

Google wants to track your phone and credit card through meatspace

h4rm0ny

Re: To be fair

Yes, but as people have remarked here before. It's not seeing the ads that bother me. It's the tracking.

Windows is now built on Git, but Microsoft has found some bottlenecks

h4rm0ny

Re: GVFS sounds super dumb

>>'cp' is not recognized as an internal or external command,

I don't know when the last time you used Windows was, but "cp" works. Open up Powershell and try it.

Netgear 'fixes' router by adding phone-home features that record your IP and MAC address

h4rm0ny
Paris Hilton

Re: Anyone here actually own one of these?

Same here. Firmware version V1.0.1.44_1.0.1 and no option that I can find for this. I clicked update because I figured better to get the new version now and turn this off than to have it come down later on and be overlooked. But it's not finding any newer firmware! It thinks this one is the latest! Something not right here if you have 1.0.7.12 and mine can't find an update from 1.0.1.44. Could it be updated by region? UK user here.

Man sues date for cinema texting fiasco, demands $17.31

h4rm0ny

Re: I can see where he's coming from

You're right - it's not worth the headache over $17. Which means that really it's about something else. "Getting even", I would guess. A news station contacted him and arranged for them to meet her again so she could hand over the $17.31 which she said she would willingly do if it got rid of him. The guy was pretty gloaty about the attention and seeing her "apologise" on TV to him, him grinning at the camera with pleasure. Honestly, I got a pretty bad vibe from seeing the guy. As you say, $17 is not worth the headache. What he really wanted was to put her in her place, was my impression. :(

h4rm0ny

Re: Good on him if he wins

>>"I expect my date to share half the bill on the first date."

Presumably however, you let them know you're going halves up front and that you don't pay for everything and then present them with a txt demanding money back two days later when they don't want to meet up again.

h4rm0ny
Paris Hilton

Re: now we'll see the true definition of "unacknolwedged privilege"

I'm not sure about that last part (I agree with the rest). Female of the species here and I don't think it would be right either way round. Anyone who has ever had to wait for a court date or been to one knows there are a Hell of a lot more important things they could be getting on with than crap like this.

Also, apparently before he went to the law he had started hassling the woman's little sister to get the money for him as well. Maybe she had more than one reason to leave.

h4rm0ny
Pint

Re: Austin

Holy shit! This is my new favourite theatre and I've never even been there! Beer for all the staff at that place.

h4rm0ny
Paris Hilton

Re: A cheap mistake

If he was planning to take her somewhere the pizza costs $4, she was probably wise to leave.

h4rm0ny
Facepalm

I don't think anyone is saying just walking off and forgetting about your date isn't bad. And they're certainly not saying that txting in the cinema is okay because it's downright unconscionable. I don't think most people are even suggesting that he shouldn't be upset.

But what I believe pretty much everyone thinks is that suing a date to get the price of their movie ticket back is downright petty and hysterically over the top. Seriously - if we've reached the point where such trivial human interactions and sleights are handled through the law courts rather than human interaction, we might as well just reboot civilisation now.

h4rm0ny
Trollface

Re: First Date...

>>I always take first dates to somewhere where I don't have to talk to them! I've done it loads of times...

That's pretty considerate of you, all things considered.

h4rm0ny
Joke

Re: This guy is about to become a legend

Suing is really not appropriate.

Using your phone in the cinema should be criminal court, not civil.

White House sicko sent down for 20 years after sexting underage girls

h4rm0ny

Fun fact: A Texan man was once prevented from marrying his horse because the horse was under four years old which state law forbade.

h4rm0ny

>>"You digress with attacking or killing. Which is worse? killing a child or leaving them to a life where they can't have relationships because some git used them."

I highly doubt those corresponding will be unable to "have relationships" because of sexting. One was 14, one was 17, and the third was a 32 year old FBI man. ;)

Now without details, there is a wide range of possible circumstances but there's nothing in the story to suggest that it was harassment or traumatic for the two girls (one of which would be over the age of consent anywhere in Europe, btw).

I don't know how long it's been since you were a fourteen year old girl but at that point attraction to older men is not uncommon. If she felt anything genuine towards this man, then learning he's been sentenced to twenty years for sexting with her is probably going to upset her more than a dick pic ever did.

Now none of this is suggesting that it is a good idea or right for a man in his thirties to be flirting with a girl of 14. It isn't for several reasons. But it is saying that you're wrong to assume that the girl is likely to be damaged psychologically or unable to be willing or even actively encouraging. Given what is said about the ongoing sexting, it presumably wasn't one sided as the two girls didn't just block him. As it never even made it to the point of following through (which we don't know if he would have or not and in one case it would be legal in Europe anyway), they were probably fine with it and it is unlikely to be traumatised.

This sentence has more to do with (a) American puritanism and (b) his being a Secret Service agent which invites a super harsh sentence as a means of deflecting damage to the organisation's reputation.

h4rm0ny

>>"How much does it cost to keep a prisoner in a (for-profit privately run?) US prison these days?"

According to a report from the Vera Institute the average cost of imprisoning someone in the USA was $31,286 per annum, in 2010. That was seven years ago and it will certainly be significantly higher today. That figure is how much it costs directly, including all services. It does not account for loss of income from an employed member of society such as in this case.

The figure seems off compared to the UK where average cost of imprisonment per year is £40,000 per annum. However, the USA has the highest prison population per capita anywhere in the world barring the Seychelles (where there are only around 80,000 people in total and the place is used to imprison Somali pirates). So maybe the USA just has economy of scale or a more "battery farming" approach to its prisoners.

Regardless, this is a very expensive dick pic. for everyone, except the private companies that run the prisons. For them, it's profit.

Bloke charged under UK terror law for refusing to cough up passwords

h4rm0ny

Re: Don't remember password

>>so it would be illegal for me to hack them and illegal for me to not....

"There's a catch though," said the Doc.

"What catch asked Yossarian."

"Catch-22" came the reply.

h4rm0ny

Re: If Jesus Christ was born today he would be a terrorist.

>>Not white - Check (get real idiots he was NOT white)

It is very probable Jesus existed, but what his race was in modern terms there's really no way to say. It's been argued that he was everything from Caucasian (for reasons of racial ideology), Black (for reasons of racial ideology) and even North Indian (because why not?). Jesus's race has been a political football for centuries but nobody knows what it actually was. It's fairly safe to say he was Jewish and was probably what we call olive skinned and dark haired. Probably. IF he came from Nazareth as described, then that whole region was a heavy trade centre with people from many different places and a big ethnic melting pot. Unless you think Jewish people aren't White for some reason (which if you don't, has probably far more to do with modern identity politics than science), then it is at least as possible that he was White as it is he was Black.

h4rm0ny

Re: Device with multiple partitions

Bitlocker doesn't do this - it encrypts but doesn't conceal you have done so. However, there are several successors to TrueCrypt such as BestCrypt and VeraCrypt which do support Hidden Volumes / Hidden Containers which are what you're referring to.

Because all of an encrypted partition or file appears as random noise, there's theoretically no way to distinguish empty space on the disk from used space. So you can have two encrypted containers appearing as one and determine which you're accessing by the password. Think of it as a magic door. You knock three times and it opens on a room where you've stored a few innocuous things like your email password. Knock five times and it opens on a room where you hide the state secrets you just stole. The magic is that the number of knocks can't be guessed so you just tell the interrogator it's three knocks and that's the only room they'll ever see and they can't prove that a different sequence of knocks would show a different one. It adds the last vital component of encryption which is deniability.

Microsoft to spooks: WannaCrypt was inevitable, quit hoarding

h4rm0ny

Re: You're assuming that Microsoft didn't actually implement these "flaws" at the request of TLAs?

>>Much of this work was done for a reason, and it wasn't all to provide better reliabilitiy for Skype based communications. I believe Microsoft were part-paid by the NSA to decrypt Skype's peer to peer secure model, and hence the high price Microsoft was willing to pay for Skype.

Quite probably. But I'd say there was also a pretty big stick held up visibly as well. I used to work in telecomms and was once interviewed for a job writing an interface to enable real-time eavesdropping on phone conversations. (Hence this will be my second or third ever Anonymous post in all the many years I've been commenting on El Reg.). I didn't know what the job was when I applied for it, only that it was in my area of expertise (Add-Drop Multiplexer controller software) and paid well. I like to think that I would have turned it down for ethical reasons but I was rejected anyway due to a poor interview performance (seems likeliest).

Anyway, as I understand it, nobody gets away with not implementing backdoors for Intelligence Agencies. Nobody. Anybody recall when Vodafone's eavesdropping system was subverted by an unknown party to listen in on the Greek Prime Minister and cabinet? Much like this case, the hacker or hackers looked at what a State agency had done and then just repurposed it to their own benefit. I'm not sure the hackers were ever caught - somebody simply noticed some dodgy software connected to their "legal" APIs. That was ten years ago. Incidentally, the person in charge of the Vodafone networks in Greece was found hanged and Vodafone were very uncooperative in the investigation to the extent they were fined £76m for it. (Link for those who still have optimism in their hearts and need citations).

I don't trust the spy agencies, and nor should you.