* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

Boffins take biometric logins to heart, literally: Cardiac radar IDs users to unlock their PCs

Charles 9

Did their tests take monozygotic twins into account? Stressfull situations? Frog marches? How difficult did they say it would be to accurately replay the signals if covertly recorded?

Brit broke anti-terror law by refusing to cough up passwords to cops

Charles 9

Re: He should have just emailed it to himself encypted of course

What about tight data caps?

Charles 9

Re: Defeating Draconian laws

Except, one, consider tight data caps, and two, what if the cops confiscate your pad...BEFORE you can use it?

Driverless cars will make more traffic, say transport boffins

Charles 9

Re: Taxi?

And you're overlooking the EXACT reason so many people hate to take taxis: because they don't know who rode it before them nor what they did IN it before then.

Charles 9

Re: Bah!

"Imagine not only having to follow a truck, but never being able to pass because there are six of the buggers driving nose-to-tail. I predict this will result in fatalities and backlash."

Given the size of your average convoy (to the point there's a whole bloody song about it), you're not thinking big enough (and no, no one wants to slip between the trucks of a regular convoy unless they have to--too risky).

Charles 9

Re: Got rid of mine...

How rainy or snowy is it in your area? Given England's notorious weather (not to mention other areas' propensities for cyclones, tornadoes, blizzards, etc.), being forced to bike around during a downpour is not my idea of a good time.

Charles 9

Re: The part they missed asking

I think what they're saying is that the answer may well be, "No, but ONLY if I can hire an EMPTY one."

Charles 9

Re: Asking people if they're willing to share

Soluble you say? How long have we dealt with butts on the sidewalk and gum hidden on the handrails?

Wanna get started with practical AI? Check out this chap's Rubik's Cube solving neural-net code

Charles 9

Re: Amazing

They aren't. Most people figured out the Cube by watching other people. And those who didn't usually started with a solved cube (last I checked, Cubes are sold in a solved state) and just played around with it. Like what you see here.

Charles 9

Re: Amazing

"Seeing as the system has to be told the moves that were made to scramble it, I too would be able to write a program that used this information to "solve" it - by reversing those moves. Does this now qualify me as an expert in "Artificial /intelligence" or is this just another example of the worthless hype trying to equate algorithms with sentience?"

You're saying this as if a human who's never seen the Rubik's Cube before can come across a scrambled cube and, completely unprompted, can figure out the purpose AND solve it. As most things go, even humans need directions.

If you need to replace anything other than your iPhone 8's battery or display, good luck

Charles 9

Re: Oh, flip

Simple. That went out with the virtual keyboard, which BTW means you're not restricted to dialpad texting or the alphabet set by the manufacturer. Plus, having the whole length of the phone as a screen increases readable size. Customers voted with their wallets; hardware keys are out; not even Blackberry could endure.

People who really cared about their screens (like me) bought their own protection (like a case and holster).

Charles 9

Re: (Easily) Replaceable batteries FTW

As I recall, most battery controversies these days (iPhones, Galaxy Notes) have centered around SEALED batteries. As in, protection electronics seem to short out no matter where you put them. That to me is a case for keeping the battery (a confirmed fire risk) separate and removable from the unit. Bulging batteries (a warning sign you can't see if the battery is sealed) can be removed and replaced BEFORE they actually catch fire.

Linux 4.14 'getting very core new functionality' says Linus Torvalds

Charles 9

Re: Pointing people at the right forum reduces cobwebs

Just how much of their revenues actually goes to the support team rather than the development team or the marketing team or whatever? And that doesn't explain the commercially-supported distressed or those attached to commercially-supported distros.

Charles 9

Re: Pointing people at the right forum reduces cobwebs

"Whoever they payed."

(ahem, PAID) Most people didn't PAY for Linux. That's kinda the point. And their tech support's probably their relative who's working 8 days a week and only comes to visit once every few months.

"What I object to, is wanting professional support for free. You don't get that with Windows or OSX, I don't see why they should expect it in Linux."

Last I checked, both had support forums which ARE free AND which do get actual employees responding to request. It's supposed to be good for business since it discourages defections and collateral damage. That's the kind of expectations they're seeking, regardless of the costs of the OS (after all, Google's stuff is free--look at it from the POV of the clueless end user).

"The people in the forums are donating their time for free and are not paid to be there."

No, they're investing in customer loyalty in order to discourage defections and collateral damage.

Charles 9

Re: Who f***ing cares?

And if he's your ONLY option, as in beggars can't be choosers?

Charles 9

Re: Pointing people at the right forum reduces cobwebs

Now ask. Who's the manufacturer for Linux? Now do you see why everyone's looking around?

NBD: Adobe just dumped its private PGP key on the internet

Charles 9

Re: User friendly encryption ?

Do it that way and (1) identities get screwed up when users (a) change providers, (b) move, or (c) switch computers; and (2) do you really want to trust the provider?

Sacre bleu! Apple's high price, marginal gain iPhone strategy leaves it stuck in the mud

Charles 9

Re: Leave your password everywhere, or just tattoo it on your face

"Better password schemes are actually passphrases. Easier to remember and more secure."

But, one, you have to remember a bunch of them, which can get mixed up in your head. And two, what if you have a bad memory.

For every time someone mentions passphrases or the xkcd comic, I always reply, "Now was that correcthorsebatterystaple or donkeyenginepaperclipwrong?"

Don’t fear the software shopkeeper: T&Cs banning bad reviews aren’t legal in America

Charles 9

Re: 'You have that backwards, or replied to the wrong story.'

Or you find a Contingency lawyer. He only gets paid if you win. Makes for some encouragement.

Android slingers tout mobes with customized baked-in big-biz configs

Charles 9

Re: You just gotta learn to disable the rest.

Care to specify which they were? Odds are they're core apps which is why they can't be disabled.

Charles 9

Re: Can we eliminate operator cruft this way ?

You've never used it internationally then, have you? Being able to call home without incurring international rates simply by using a hotspot (especially when the destination number will ONLY talk to a domestic number), at no additional charge, has saved my bacon on more than one occasion.

And no PBX required. No third-party subscriptions. And I can still use my root-aware apps.

PS. You still haven't replied re: visual voicemail, which is ALWAYS carrier-specific because voicemail runs on carrier servers. I've yet to see an MVNO that allows Visual Voicemail (because 9 times out of 10 they don't allow call forwarding, either, preventing third-party voicemails from working).

Researchers claim ISPs are 'complicit' in latest FinSpy snooping rounds

Charles 9

Re: VLC + WinRar

Except they'd probably be able to catch ALL of them by using on-the-fly stream searches for the filenames, hashes, etc.

Even HTTPS is no th immune to the key being copied or the government mandating their store be added. If done at the outset, it'll be their certificate pinned, solving that problem.

Equifax's disastrous Struts patching blunder: THOUSANDS of other orgs did it too

Charles 9
FAIL

Re: Computer Security Professionals Vs Unprofessionals

Why not? Seems cheaper to pay off the lawyers than to do things right.

Charles 9

Re: Security should be commensurate with the consequences.

"IMHO, to be blunt, if you want to play with Big Boy Data, then it's your balls on the chopping block if you don't properly secure it. If that's too difficult for your organization, then maybe your organization is in the wrong business. We need laws that punish with a severity based on impact. Maybe then a few more companies will take security seriously."

You forget that one of the jobs of business (especially corporations, who do this by design) is to deflect risks. That includes legal risks. Laws? Pay off legislators to keep that from happening. If that doesn't work, play sovereignty against them and move to a more lax country. Extreme end, probably take the Shadowrun route and become sovereign. Same for financial risks: a little bribe can go a long way, and if persuasion doesn't work, move up to intimidation. And all this can likely be had for less than the cost of actually doing it right.

DRM now a formal Web recommendation after protest vote fails

Charles 9

Re: Can it be turned off?

"Well that'll be up to Google/Mozilla/Opera/Apple"

Not if compelled by governments on penalty of being barred from participating.

Charles 9

Re: Oh really?

"Is that copy DRM-free such that it can be freely and legally copied when the copyright expires?"

Jury's out, but I think they CAN compel copyright holders to provide a means to unlock locked content as and when necessary since their remit means they must be able to ACCESS it on demand.

Charles 9

Re: Slaughtering the golden goose as usual

"We only got to the scale we have today because the Net was open and accessible to all."

That's arguable. Some would say it was the commercial interests that drew the masses to the web in the first place: turn the Web into the next Sears Catalog, for example. Well, that and porn, of course.

Point is, money still talks, so if you tried to keep the Web open, commercial interests would simply "fork you" and go their own way, like they have with Flash and so on. Even if Flash were to disappear, they'll just enforce something else in its place, and do you think you have the cojones to take on the mass of customers that regularly use Google, Amazon, Facebook, etc.? IOW, what you describe would happen anyway, only in a different way, and since the masses follow the commercial interest...well, let's just say, you're outvoted.

"The next step is self-evident: prioritisation of DRM content. Bye bye Net neutrality."

Google has already shown the way to beat Net Neutrality: private nets. As soon as it's financially worthwhile to do it, all the big Net companies will start deploying private nets to shortcut their way around the Net. Net neutrality soon becomes inapplicable because they can bypass most of the Net. Why do you think the likes of DHL, UPS, and FedEx keep their own vehicle fleets? Same thought process.

Charles 9

Re: Can it be turned off?

No, because the First Amendment in this case falls to the content creators themselves (IOW, the people who WANT DRM). Not only that, but Copyright IS a congressional mandate under Article I, Section 8, so establishing rules concerning copyright IS a direct federal responsibility.

IOW, the law's on big media's side, not ours.

Charles 9

Re: Oh really?

"...while if you rely on copyright you have to sell at least one high quality version of the content to the public via non-DRMed media but you get full copyright privileges / DMCA protection."

Doesn't the Library of Congress fulfill that by its obligation to hold a copy of every American-made work?

Charles 9

Still don't know whether they've actually cracked the system (since we don't know HOW they're doing it) or have sidestepped it perhaps with an insider.

Charles 9

If that were true, we'd already be seeing 4K BluRay rips, but so far the only rips have been web rips. Also haven't heard much about pirated Xbox One or PS4 games. Seems to me the rights holders are doing their homework and finding nigh-bulletproof systems to protect their content, unless you can prove me wrong.

Charles 9

Re: Elephant in the room

What about things like the US Constitution where such grandfathering is strictly forbidden (Article I, Section 9, no retroactive or ex post facto acts allowed)? It would take an Amendment to do that, and Congress is way too divided to agree on anything enough to get the necessary two-thirds majority. And what kind of crisis can you manufacture to remove the retroactive restriction?

Charles 9

Re: There are bigger fish to fry

Don't give the software makers funny ideas...

Charles 9

Where are the 4K Blu-ray rips, then? All I've seen so far have been Web rips.

Charles 9

But as Sir Tim noted, what can you do? The Web as we know it was MADE by corporate interests. They have the money, and money talks. All else walks. If you want a purer Web, like back in the days of Gopher and unencrypted FTP and Telnet, you'll need to go back to Square 1.

GNOME Foundation backs 'freedom-oriented' smartphone

Charles 9

Re: We don't need more hardware!

If you're gonna go that route, though, you might as well stick with AOSP since that's (1) supported by a Linux kernel anyway, and (2) was built from the outset for phones.

If you're saying it's not possible to build a phone using unencumbered COTS hardware, then there's simply no hope for an unencumbered phone (and there may well be no hope because radio access requires government permission with all that entails).

Downloaded CCleaner lately? Oo, awks... it was stuffed with malware

Charles 9

Re: All of my clients are on a budget...

"Now I only recommend even poor people should try to buy MBAM."

And if they're TOO poor even for that?

Charles 9

Re: Obligatory old geezer aside

Except in this case an inside job would probably be using THE SAME certificate. No help there.

Charles 9

Re: Ruisert

"I too have used CCleaner since the days it was known as CrapCleaner (the name didn't upset its home UK market but was eventually deemed too much for sensitive souls across the Pond) and of course, it isn't malware."

Why didn't they just rename it CrudCleaner? Same implication, cleaner cuss word.

Charles 9

Re: Obligatory old geezer aside

Problem is, a determined ed opponent will simply replace any compromised seals with new ones. Plus tamper-proofing is useless against an insider who can meddle with things PRIOR to them being sealed.

Charles 9

Re: "The dodgy software was signed..."

Certificates can't save you from INSIDERS, and it looks like the build was infected from the inside, BEFORE it was signed.

Charles 9

Re: Doesn't matter

You never heard of a drive-by attack?

Someone checked and, yup, you can still hijack Gmail, Bitcoin wallets etc via dirty SS7 tricks

Charles 9

Sounds like a bridge too far to me. You won't trust any app the bank provides, and the banks can't trust any app you choose, and any third party could be a Mallory posing as Trent so can't be trusted, either.

Which means if you don't have a physical branch to go to, you're in trouble.

Charles 9

Unless you're NOT ALLOWED to add an extra character due to length limits...

If you can't extend the length, your only option is to widen the gamut.

Charles 9

Re: NIST & FCC

But at the same time, you can't make security too hard or people will blow off your hoop-jumping and find ways around you. You have to make it EASY AND SECURE at the same time or you won't be effective.

Charles 9

Re: FIDO/U2F.

Don't you know what the immediate reply would be?

"Oh great, ANOTHER thing to lose...or get STOLEN."

Regulate, says Musk – OK, but who writes the New Robot Rules?

Charles 9

Closer analogy would be you accidentally kicked a hammer hidden in the tall grass (no foreknowledge), and it flies up and hits the cat. Now it gets murky? Are you at fault for not being perceptive enough? Is the owner of the hammer at fault for not keeping track of it (since he/she may not have made the move that hid it in the grass)? Is the manufacturer at fault for not making the hammer easier to see? There's enough wiggle room that any of those three liabilities can apply.

Charles 9

Re: will the rise of the Robots

That's why the quotes. The idea was that these professional musicians couldn't tell the compositions were created by a computer instead of a human. It's not exactly a Turing Test, but it is in the spirit of its purpose.

Senators call for '9/11-style' commission on computer voting security

Charles 9

And what's to stop someone (say an insider) switching the votes out while you're not looking?

DoJ: Look! Google is giving up overseas data for warrants outside Second Circuit

Charles 9

Re: Good fences make good neighbours.

"They also do not apply to US citizens here, US Marshals cannot come over here and pick up some US citizen and take him back to the USA for trial, not legally anyway."

Oh? What specific law says this cannot apply? And what about extradition and the like?