* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

Hitchcock cameo steals opening of Oracle v Google Java spat

Charles 9

Re: Well, it's clear infringement

The Clean-Room BIOS IIRC was done completely WITHOUT the API by using an actual chip's behavior to tell them what to do. Copyright can't apply against a coincidental copycat since BOTH could make legal claim.

Charles 9

Re: Well, it's clear infringement

Compaq beat IBM by rolling their own BIOS through Clean-Room Engineering.

Inside Qualcomm's Snapdragon 845 for PCs, mobes: Cortex-A75s, fat caches, vector math, security stuff, and more

Charles 9

According to the article, the secure processor is a black box to the VPU and vice versa. They don't even use the same physical memory, talking only through a single interface. If you can pwn a secure processor through a single interface port, you can probably pwn ANYTHING.

Charles 9

Re: RaspberryPi 4?

That's due to MPEG-LA who hold MPEG-related patents.

Charles 9

Re: Maybe it's time for a kickstarter campain...

Not to mention power efficiency, which is a make-or-break issue with portable applications.

Security industry needs to be less trusting to get more secure

Charles 9

Re: Where has she been living?

"The first lesson of "Reflections on Trusting Trust" (and more formal studies of trust in systems) may be that every component is suspect; but the second is that it's impossible to get anything done without assigning trust relationships throughout the system."

Seems to me transitive logic leads to a third lesson, and a grim one at that: "Anything of practical use can and likely will be pwned. Deal with it if you wish to use a computer."

Charles 9

Re: Has she been under a rock?

But that's a real problem in today's world: trying to keep a system secure against the Stupid User, who vastly outnumber and outpay the knowledgeable. The IoT problem traces to this, so there are serious real-world repercussions.

Charles 9

Re: Where has she been living?

But like you said, users hate hoop-jumping, which is why they already chafe at deadbolts.

Charles 9

Re: Has she been under a rock?

But then, how do you mesh this with demands from people over your head? How do you mesh security with ease of use, especially when necessary security clashes with necessary ease of use and your superiors demand the latter over the former?

Charles 9

Re: And then of course there is the PoS that is the Intel Management Engine

"People know how to do this. They've known for decades. But they won't accept the performance hit it will impose despite the techniques being around since the late 60'x/early 70's and processors being about 1000x faster."

There's also the simple issue that what man can MAKE, man can BREAK. At SOME point, you have to trust SOMETHING, and that's where a determined adversary can get you.

Charles 9

Re: What is the biggest example of undue trust by security professionals at Black Hat?

But that's the problem behind the problem. You have to trust SOMETHING at SOME point, or nothing gets done. And that trust can always be betrayed.

Charles 9

Re: Where has she been living?

But the problem is that paranoia can result in Turtles All the Way Down. Verify apps? Who verifies the verifier? Signatures? Forged by someone who co-opt ed the keys. You can't operate on complete distrust because you eventually end up in DTA Mode and nothing gets done. You ultimately have to trust SOMETHING, and ANY trust can be betrayed.

Elon Musk finally admits Tesla is building its own custom AI chips

Charles 9

Re: ...existing drivers pushed to unemployment

Having large numbers of fit young men who have no prospect of marrying (due to not enough women) can mean one scary aspect: lots of potential soldiers with nothing to lose.

Charles 9

Re: ...existing drivers pushed to unemployment

Forget the Middle East. Try China, where patriarchal traditions mean almost everyone insists on sons to the point the population there HEAVILY skews male. AND China has nukes AND that Eastern mentality of Death Before Dishonor.

Lap-slabtop-mobes with Snapdragon Arm CPUs running Windows 10: We had a quick gander

Charles 9

Re: It's like no one at Microsoft remembers the painful lessons of Windows RT

But the thing is, if you do the same thing over and over and actually get a different result, you're praised for your persistence.

Charles 9

Re: You can already buy one

Does it have to be an actual physical on-board 1080p screen? Most of these will drive a 1080p monitor via the HDMI port.

Charles 9

Re: Most people don't need a powerful computer...

So what happens when amateurs want to edit their home movies? Or want to play halfway-decent games from the likes of Steam?

Charles 9

Re: Linux?

I own an Intel-based version of this (mostly as a media device, so lack of power isn't an issue, the onboard GPU does the lifting--sucks at 3D but plenty of oomph for 1080p). He's right, it'll likely uses eMMC (and it CAN be a bit skimpy, mine only has 32GB), so they'll likely have an SD or MicroSD slot to use for data storage. There's just about no way you can get 20 hours of battery life with spinning rust.

Charles 9

Re: Emulation ?

So a combination of recompilation and native libraries. Since it's not on the fly after the first invocation, and since it's software-based, Intel would probably lose in a lawsuit given existing prior art.

IT buyer? Had enough of pesky resellers cold calling? You aren't alone

Charles 9

Only to learn the company they claim to be doesn't exist and the number can't be traced. Based on all the cold calls sent to homes, you'd have to think cold callers to businesses will be even more savvy to stay one step ahead of fraudulent call investigations.

Charles 9

Re: TPS anyone?

But don't be surprised if in future you're just given fake details so as to put the blame on another company while the actual nagger is safely covered by hostile powers.

Charles 9

No good. They'll just call back, and odds are the calls bounce through hostile nations to block tracing and the number ID is fake. In which case you're talking to a nagger who knows he can't be stopped short of a whitelist, which most phones won't use because they'd block out customers and those who order privatization services.

Looking through walls, now easier than ever

Charles 9

Re: Yes

"There are some questions regarding the legality, for example phone jammers are said to be illegal."

That's correct in the US. Jammers of any kind are illegal for any civilian use. You can legally shunt a signal, but you can't jam it.

Charles 9

Re: Faraday+?

"Is one counter measure to feed random radio noise into (or just outside) your Faraday cage walls? Possibly around the frequencies the scanner uses?"

That's an active jammer and illegal under US federal law. This is true of the LEOs, too, though. AFAIK, only the military can use jammers and only while in active operations.

Charles 9

Don't think that's going to help you. Those frequencies mean a very narrow bandwidth, meaning they're likely to get through the case. Plus they can probably use enough local power to overwhelm it in any event.

Yes, Britain has an urban-rural 4G schism. This is what it looks like

Charles 9

Active boosters cost more and require power. A passive reflector simply bounces existing signals. The fact he can get a good signal once in line of sight means strength is not the problem; he simply needs to establish a better line of sight which the reflector can do.

Charles 9

"Gordon, my parent's house is on the side of a hill and the nearest tower is on the other side of the hill."

Sounds like you might want to invest in a passive reflector hoisted above your house so the signal has a chance to bounce around the hill.

Report: Underwater net cables are prime targets for terrorists and Russia

Charles 9

Re: old news

It's too late to protect anything, as farmers need both diesel fuel and ammonium nitrate fertilizer to do any serious farmer. Those two alone can produce serious havoc, as Oklahoma City demonstrated. So unless you ban farmers (and then what do you do for food on the table), you have a serious dilemma.

Charles 9

Re: meh

Not that great, though. I recall the physical limits of an underwater fiber optic bundle beat the physical limit of wireless transmission by several orders of magnitude, and as much as wireless efficiency is improving, so is fiber-optic efficiency.

Charles 9

Re: old news

They wouldn't be that stupid. They'd either figure it out anyway or (here's the rub) just blast everything to be sure. Making them search can increase potential for collateral damage and innocent casualties.

Charles 9

Re: meh

The problem is physics. You simply cannot transmit as much over open air than you can through the confines of a cable.

Charles 9

Re: Easy answer

Wouldn't they just counter with trained attack dolphins? And lasers don't operate well underwater.

Expert gives Congress solution to vote machine cyber-security fears: Keep a paper backup

Charles 9

Re: Preferred solution to electronic voting >

Thumbing me down doesn't make it less true. How would things get done PROPERLY without politicians?

Charles 9

Re: Preferred solution to electronic voting >

But without politicians, how do you get things done short of war? If you and another state/district have a trade dispute or whatever, how does it get settled without bloodshed?

In the US in the 60's a lot of the student protests over Vietnam were because they were old enough to be sent to die but not old enough to vote for the people sending them to their deaths. Without politicians, how would such wrongs get corrected given there could be true injustices that are actually endorsed by the majority?

IOW, how do you get around the phrase "Necessary Evil"?

Charles 9

Re: Anonymous - why?

No, because you now get stupid or random votes which are just as bad, especially in close contests where Unintended Consequences. Some would say recent elections resulted in Unintended Consequences due to stupid votes.

Leaky-by-design location services show outsourced security won't ever work

Charles 9

Re: DEFAULTS

You forget about the stupid user. They'll want access to the data, quickly, easily, and WITHOUT the use of passwords they easily forget.

Boffins foresee most software written by machines in 2040

Charles 9

Re: I smell BS

Replying to my own post, the main reason we need human programmers is that we never get the complete specs to a job at the start. Something always gets left out that then needs to be addressed in a hurry. A computer needs to be able to handle the job even when the specs change (sometimes drastically). They also need to be able to handle vague specs and know whether to just assume something or to ask for more specifics which may not be forthcoming.

Charles 9

Re: I smell BS

Because we realize computers can't predict what it doesn't know. Heck, WE can't handle a defense system properly without all the parameters. We can't expect man-made computers to be any better.

Charles 9

Re: Commonsense isn't common

For example, never assume everyone writes or types left-to-right (Hebrew and Arabic are both right-to-left, as are other Middle East languages).

Charles 9

Re: We've been here before...

Or put simply, measurements are always taken as a singular since the unit (plural or not) is describing a single continuous thing: not the thing itself but an aspect of that thing, and that thing usually only has ONE of each aspect. You don't normally drive a kilometer 1,000 discrete meters at a time, nor do you hold a meter of ribbon in 100 separate 1cm pieces. Don't go by the unit; go by what the unit is describing.

Get ready for laptop-tab-smartphone threesomes from Microsoft, Lenovo, HP, Asus, Qualcomm

Charles 9

Re: "binge watch TV shows for 12 hours straight"

Except (1) they're bulky and take up precious space, and (2) they're not self-limiting which means you have to use the overhead light which inevitably disturbs the passenger next to you.

Badass alert: 1 in 5 Brits don't give a damn about webpage crypto-miners

Charles 9

Re: Considering what the "legal" Javascript malware does...

"Being able to control CPU allocation is nice, but very far from "the only real fix". I'd much prefer that the functionality of NoScript be part of every browser by default, to give users actual control over which scripts are allowed to run and which are not."

No, because Joe Stupid will complain that their website that they MUST visit (and has no substitute) doesn't work and they can't figure out how this "script blocking" whatchamacallit works.

Remember, always look at problems from the perspective of someone who just wants to turn a key.

Is Oomi the all-in-one smart home system we've been waiting for?

Charles 9

Re: One small concern

No, because Joe Stupid will just get spooked and consider returning the thing. Turnkey operation is REQUIRED of things sold to Joe Stupid. They don't want the dirty details, just get the bloody work done!

iPhone X Face ID fooled again by 'evil twin' mask

Charles 9

Until it gets nicked and taken to a dance club or whatever that ALSO uses black lights. And, of course, there's the matter of LOSING the pen lamp or it running out of batteries.

'Break up Google and Facebook if you ever want innovation again'

Charles 9

Re: Simple solution to FB/Google dominance

Because the human condition prevents truly free markets from staying that way. Either someone cheats or someone gets enough of an edge to start muscling everyone else out. Either way, sharks start entering your minnow pool.

Charles 9

Re: Complete Bullshit

Wanna bet? Remember what the American phone world was like BEFORE the iPhone?

Charles 9

Re: The fundamental problem

Which is why I like to refer to raw capitalism as "winner economics" or as "life's big poker tournament."

US politicos wake up to danger of black-box algorithms shaping all corners of American life

Charles 9

Re: Ever consider that those prison sentences are justified?

"2. The US population is by far the least law-abiding, most criminal, most debased and anti-social population existing anywhere on Earth.

You may choose Door 2 if you like. But I don't believe it."

Oh, BELIEVE it! Don't believe me? Take a spin down South Central Los Angeles or some other crime hotbed. Or perhaps a few days in Pelican Bay State Prison will change your mind. Most crime in the US statistically is committed against other criminals. I don't think any other country has the kind of gang problems the US has (most of which are heterocultural in nature; something almost uniquely American).

Charles 9

Re: The System of Legal Fraud

Technically, that's more tax evasion than anything else. Think the days of Charles Dickens.

Google to crack down on apps that snoop

Charles 9

Re: Opt out

Well, that's the hand you're dealt when you rely on others. You either hold 'em or fold 'em. The only third option is to roll your own, if you can. The rest of the populace just isn't there to back you up otherwise.