* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

Six charged for 'hacking' lottery terminals to spew only winning tickets

Charles 9

Re: Picking winners and losers

"The bug is the terminal displays the hands in the queue when there is a printer fault (out of paper/lid open)"

I agree that is a bug. In Virginia, when there's a printer fault, the entire display blanks except for the notice to change the printer paper. All printing is on hold with no knowledge of what's in queue until the problem is solved, and the unit will refuse to do anything else until you fix the problem (sure you can cold boot the unit, but that defeats the purpose as the ticket queue gets erased).

Charles 9

Re: Rigged

They CAN'T be rigged, unless you're saying the ENTIRE STAFF, including the independent accounting firm required by federal gaming law is on the take. Look, allegations of lottery rigging have been around since the modern age of lotteries. I recall a big new story of the sort blowing up around 1987. That's why the machines are set up the way they are: they make ball tampering exceedingly difficult.

PS. You math's rather off. Given 1 billion tickets, the odds are actually quite good for at least one of them to hit since there are now about four times more tickets than combinations, meaning the Law of Averages will favor a hit. That's why the likelihood of a hit goes up with the jackpot as more tickets are put into play. The $1.5B Powerball one was a pretty wild case of the odds beating everyone.

PPS. Going back to the fraud bit, the system shouldn't even be telling the retailers if a ticket's a winner or not. That's how it works in Virginia. You see a ticket number on the display, that's all, with no knowledge of whether or not it's a winner.

Charles 9

Re: Idiots...

Then you lose the predictability.

Ransomware now using disk-level encryption

Charles 9

Re: Always a fool

"Education is amazingly effective in combating malware, yet the vast majority of companies I have performed consulting at completely ignore it in favour of tin that they haven't got the in-house skills to use/maintain."

Because education isn't as effective as you think. Guaranteed there's that someone in your group who isn't capable of learning. To quote the comedian, "You can't fix stupid." And before you can suggest firing him, more often than not the idiot's up top.

Mud sticks: Microsoft, Windows 10 and reputational damage

Charles 9

Cheapskate? That's all the laptop I was using could take!

"More RAM regardless of OS."

Exactly my point. As someone noted, Firefox actually isn't that bad when you compare them side by side against Chrome (all threads combined) and especially against IE. The high multimedia factor of modern websites and the need to have so many pages open is what drives up memory usage, not the browsers themselves. Meaning they'll hog memory even in an LXDE environment. It's basically the cost of web browsing these days. And don't get started with lower-standard browsers and especially Lynx. Good chunk of the web probably won't function with them these days.

Charles 9

Including serious web browsing? Because I tried with Mint and found it chugging regardless of the OS until I got things up to 4GB at least. Web browsing these days can be a real memory hog, regardless of the graphical browser you use.

Charles 9

Re: Feed this into MS' Agile development methodology...

A lot? The Linux catalog is barely 20% that of the Windows catalog, and plenty of headliners like Fallout 4 are still missing.

Cunning scam: Mobe app stalks victims then emails booby-trapped bogus speeding tickets

Charles 9

Re: Reasonable doubt

In-car camera will fix that.

Net neut naught: Netflix throttles its own video

Charles 9

Re: They need a download option

You forget that Netflix is the female dog of the content creators. Credits to milos the restrictions are at their insistence or they wouldn't offer the content at all. No downloads or no deal, get it?

That's why I don't even bother. If I want a program and it's on TV, I just record it with my Hauppauge. That way it's out of their control once it's at my end.

Charles 9

Re: Not a violation of net neutrality

"It looks like they're now going to offer the ability to make the choice yourself, so that's that part sorted. If you want to boycott them for being dishonest by omission, go for it, but I don't see this as hypocrisy myself."

OK. Better. Defaulting to conserving mobile bandwidth is all right as long as there's an opt out. The quote you give is pretty accurate as Sprint and T-Mobile are the underdogs of the mobile market and tend to have more aggressive offers (such as what I have now, with two completely unmetered LTE lines). Try getting that at a reasonable price with Verizon or AT&T.

Charles 9
Facepalm

Re: Whither Internet?

And how pray shall the twain meet without some medium in between them? Mobile data is not being hampered by the Internet but the other way around, and as you've noted aerial bandwidth is physically limited AND pretty much already taken up, so how can content providers get their stuff to their unwired customers without using precious spectrum?

Charles 9

Important Question

Not being a Netflix user myself, I have to ask.

Is this a fixed, non-adjustable setting being made on the part of Netflix, or is Netflix just setting a default option for mobile customers which customers can choose to override? If there is an option for the user to opt out, then I don't see this being against Net Neutrality. As Netflix has said, this helps prevent sticker shock for mobile customers, particularly prepaid ones, who have low data caps. As long as the user can choose to turn the cap off, I don't see an issue.

Wait! Where did you get that USB? Super-stealthy trojan only drives stick

Charles 9

Re: This is what I would do

"Just look out for temptation if you work in a sensitive area, and do your best to resist it."

Not going to do much good if the spy locates an official stick used for transport and SWAPS it out with an identical-looking tainted one (complete with any signatures it may need to carry).

Charles 9

Re: Guvmint Work

Anything you can do, a determined adversary can copy unless you go straight to the chip level, and even then there may be bad actors in the manufacturing stage which nothing can prevent or mitigate given the sophistication of sleepers.

Charles 9

Re: Examples

If USB is broken,then hardware in general is broken because there is absolutely nothing being done that cannot be done another way by another bad actor posing as a good one. It's full on DTA mode with no alternative. You either get nothing done or run the risk of a backstab. No third option.

Charles 9

"I occasionally check Task Manager to see what's running & any 'Trojan' app is going to grab my attention pretty quickly."

NOT if it's a trojan running ON TOP of an existing legitimate app. That's how this thing works. It hitches a ride on a genuine portable app making them part and parcel.

Charles 9

Re: Guvmint Work

Many desktop computers don't carry built-in flash card readers (that's mainly the realm of laptops). So how do you trust the card reader you're going to need to install to make them readable?

Net neutrality crusaders take aim at Comcast's Stream TV service

Charles 9

Re: Much as I hate Comcast

Which IGNORES the COAXIAL connection in between, which DOES NOT go straight to the Internet or Comcast would be unable to intervene. There's also the fact Comcast DOES serve OTHER stuff ON THE SAME cable.

Look, why Comcast and not Google, who are known to use a private fiber network AND use it to get past Internet restrictions? Why not Netflix, who tend to insist on having their boxes installed at local exchanges?

Microsoft adds 'non-security updates' to security patches

Charles 9

Re: As many PC users think IE is the Internet...

"Surely - in an admittedly over simplistic view - a monopoly is sometimes going to be the end of a free market if a free market is many people starting with similar products? All partakers in a capitalist free market desire to be monopolies don't they, if they want to make more money than others and have more customers?"

Monopoly is ultimately the end game of capitalism (thus I sometimes call it "Winner Economics"). I compare it often to a poker tournament. Everyone buys in, but eventually the competition whittles down as people bust out, and if you keep at this long enough, you eventually have the last one standing: a de facto monopoly.

Charles 9

Re: Stating the Obvious

"Until I have time to sort out a spare machine, install a suitable Linux variant on it, and either find suitable equivalents of all the software I need, or ensure I can get existing stuff running."

You'll be in for a long wait, I reckon. Too much software is WINE-unfriendly and has no Linux counterpart, which is why I had to come back to Windows.

Police create mega crime database to rule them all. Is your numberplate in it? Could be

Charles 9

Re: 3 points @Charles 9

"Simply having knock-on effects in public doesn't make the initial action a crime."

Yes it does. It's called, "Thinking It Through," which I don't see very much of these days. If you're getting drunk the night before you're supposed to go to work (meaning you KNOW you're supposed to be sober the next day), then that's willful disregard, and that's at least grounds for court action if consequences result. Okay, it may not necessarily be a crime (but if could, say if someone dies or is permanently maimed as a result), but negligence has a lower bar in the civil courts, and civil judgments are themselves both a punishment and compensation for wronging someone else.

Charles 9

Re: If Datamining worked

Well, since sports betting adjusts to the bets being made before the event, Diminishing Returns eventually kicks in.

As for the stock market, since unpredictable humans and insider hijinks are involved, the data set will always be inadequate to make a truly accurate prediction.

Charles 9

"Most people are able to overcome the 'natural instincts' to go around trying to have sex with anything that moves, defecate wherever they like, and grab hold of anything that takes their fancy."

We're NOT "overcoming" them. We're merely repressing them. Thing is, it builds up like water behind a dam, and the dam doesn't have very solid foundations. Or perhaps a better analogy, a forest that keeps getting tinder built up. Sooner or later, the dam's going to break down or the forest is going to flash into a blaze. Why do you think we see so much scandal these days? We LIKE to think we're creatures who can control our emotions, but when crisis hits, what do we turn to? Not the brain, the gut, and like I said we do it practically on a reflex, without even thinking so we don't even have time to consider our actions until it's too damn late.

Charles 9

Re: 3 points

"Finally, I would like the opportunity, as a responsible citizen, providing I do no intentional harm to others, the right to do whatever the fuck i like in private, with consenting adults of my choice. This may include unwise or immoral or simply depraved activities, not least of which might be the consumption of illicit substances."

Problem is, doing UNINTENTIONAL harm to others is STILL a crime: negligence, and things you do in private can have knock-on effects in public, such as getting too drunk to work, leaving your boss understaffed on the day of a surprise inspection, and so on. So no, you cannot do whatever the F you like in private because no man lives in complete isolation.

Charles 9

"What we really need is a cultural change towards acceptance of violence of all sorts in our society, be it the public brawl on the high street on a Friday night, or the more insidious violence that happens behind closed doors, and this is an area where predictive policing could really help."

I doubt it'll work. Violence is damn near instinctive, probably even biological. That's why it feels so damn GOOD to vent steam, to shoot guns at nothing in particular, to unload on a punching bag, and so on. I would say getting rid of violence is going to be a tall order when our bodies are against us in that regard.

Stagefright flaw still a nightmare: '850 million' Androids face hijack risk

Charles 9

Re: What is the point of this article, other than as advertising?

"Don't trust any mobile phone companies, don't buy an Android phone that can't be unlocked and rooted, and have Cyanongenmod applied to it. Going to update my 2012 phone to Marshmallow tonight, as it now has an SELinux enabled build, with official Cyanongenmod nightlies not far off. Without that I'd be stuck on insecure ICS."

And what about the increasing number of apps that don't like running in a rooted or custom ROM environment?

Charles 9

Re: click-to-play won't protect against trojan smut!

Then as the comedian once said, "You can't fix Stupid." At some point, you just have to give up the hopeless idiot as a lost cause.

Charles 9

Re: Play installs firmware?

Overlays have been around since Lollipop, but they're only now getting carrier and manufacturer attention.

As for separating the drivers and the rest of the OS, Android N should be a start to this if Google's word is accurate. Drivers can get tricky since they're usually tied to the kernel (due to the architecture; hardware on ARM is usually static rather than dynamic like it is on x86), and if the kernel itself has a problem, this can create a cascade effect.

And then there's the matter of the manufacturers working in cartel to keep a captive market. Especially now with Android apps increasingly root- and custom-aware.

And as for choosing Nexus, the main reasons I don't like them are lack of a removable battery (probably the least graceful part of the device to age) and lack of an SD slot.

Charles 9

Re: 850 million at risk

Because they're all UNOFFICIAL upgrades, and Android apps are increasingly becoming root-aware and custom-aware, meaning upgrading now entails a serious tradeoff.

Charles 9

Re: Too risky to use Android browsing the web.

NoScript IIRC ALSO safeguards media tags, making them click-to-play.

Lost in the obits: Intel's Andy Grove's great warning to Silicon Valley

Charles 9

Re: Bah!

So what do you do? You don't want your resourses raped and pillaged yet you don't want to be seen as slave-driving, and there's no guarantee the medium is a happy one (it could be UNhappy instead: too high to be comfortable to the business owners and at the same time not high enough to be considered breadwinning).

Charles 9

Re: My brain has already drained

Because if you expect to have any customers for your goods, you better make sure people get paid.

Charles 9

Re: Translating to:

"were you kidnapped and held at gunpoint and forced to work?"

Being told to work or starve amounts to the same thing. We may pray to be given this day our daily bread, but reality demands we sing for our supper. The problem is that jobs can be considered a resource just like everything else. And when there are twelve people on the island but only six coconuts, no matter how much you try to divide it, things can only get ugly.

Reg reader casts call centre spell with a SECRET WORD

Charles 9

Re: Recording illegal???

"How so, when I often hear "Your call may be recorded for your protection, or for training purposes.""

Odds are they're located in a "one party consent" area where only one party has to consent to recording the call to make it legal. Since the recording party is party to the conversation, consent is implied, making the whole recording legal.

Four of the top 10 places in the world for internet are, er, in the US

Charles 9

Re: I don't want to pile on...

"I would like to point out to the commentard that inferred the DC ranking was due to investment by the federal government, that is likely not the case (but I won't completely discount it)."

You're ignoring the special case that this is Washington, DC, the nation's capital. This place is practically packed with military contractors and lobby networks, especially around key areas like around the Capitol and along Embassy Row. If the government doesn't roll out the broadband (for its own purposes), then those aforesaid businesses will be calling for serious bandwidth to keep in touch, both with constituents and with Congresspeople. That's why Verizon made sure to make Washington FiOS territory. Plus there's the matter of the Pentagon and related military facilities in nearby Arlington, and the military these days is going to be data-hungry.

It's nuts but 'shared' is still shorthand for 'worthless'

Charles 9

Re: The difference with this company is the *sharer* gets a piece of the profit

"But sharing (or as it's know in business teamwork) is not really taught very well at most level to the extent people really practice it and get comfortable with it."

Because the business world is increasingly becoming zero-sum. You know all the work adages: everyone gets the blame, but only the top man gets the credit. In a "it's you or him for the raise/promotion/whatever" kind of world, teaming up is just as likely to get you a knife in the back as praise from the higher-ups.

Charles 9

Re: "Shared ownership is hell"

"Gifts, favors, BSD-style licenses -- that's the way to do it: no-strings-attached sharing."

Betrayals, backstabs, behind-the-back fingers-crossed double-crosses. That's why they're not considered prudent in most of today's society.

How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript

Charles 9

Re: Good.

"Postquam Post Scriptum".

But for the record, PSS can be valid, too (as it would mean "Post Super Scriptum").

Charles 9

Re: Timing

" it's more about perceived good will in the brand and whether the brands could be confused."

Classic example I put up. The name "Cracker Barrel" has at least TWO non-conflicting registered trademarks (meaning the government has looked at them and agreed they're non-conflicting): one belongs to Kraft for a brand line of cheeses, the other belongs to a restaurant chain with an old-town theme appropriate for the name.

Reprogrammble routers axed by TP-Link as FCC bans custom firmware

Charles 9

Probably because the way it's designed prevents a selective block. It has to be all or nothing.

Mystery Kindle update will block readers from books after Wednesday

Charles 9

Re: I applied the big update to my Mk2 Paperwhite a couple of weeks ago.

Anytime you mess with internal storage, you have to accept the risk of a wipe. It just comes with the territory. It's like trying to rebuild a desk that's full of stuff when the desk is the only place the stuff can be stored. The protected books are returned automatically because those are the ones registered with Amazon. The self-uploaded books they don't know about.

FBI backs down against Apple: Feds may be able to crack killer's iPhone without iGiant's help

Charles 9

Re: if they crack it

They don't have to. Countermeasures have already been introduced in the 5S onwards. It's just that this particular model, a 5C, predates them.

Charles 9

Re: taxi

Then you reply that the cash you have he can't readily handle. I was about to say the smallest you have is a hundred, but a Jersey cabbie would probably be able to handle it, so perhaps say you have foreign cash. Now you force the cabbie to declare he lied and that his card reader works or force him to waste time (and lose perhaps another fare) driving you back.

Charles 9

I wonder if the FBI backing down had to do with this little discovery. Since the exploit is publicly disclosed, the FBI can't deny it, and since it affects all iPhones to date (as the patch has not yet been released), the FBI also can't deny being able to use the exploit to get into the phone's data. So they're kinda caught in a blatant lie, meaning it's now extremely unlikely the court will grant the motion, seeing as necessity (meaning a lack of alternatives) is generally required to get such a motion granted.

Charles 9

Re: precedent

"That can't be. They changed the iCloud password, then for the phone to sync the password has to be entered again from the phone. Can't change the iCloud password back and make the iPhone happy."

Are you sure? If the iCloud account's password is changed back to the original password, the one the phone itself is synced against, how will it be able to tell the difference?

iOS flaw exploited to decrypt iMessages, access iThing photos

Charles 9

Re: FBI presumably salivating

And would you look at that? The FBI's actually backing off! Seems the revelation of this new exploit crumbled the foundation of their case since it's now proven they don't need Apple's help to get into the phone, and by law you can't compel something when an alternative is available (necessity is required).

Charles 9

Re: The tinfoil hats are strong with these ones.

"Yes, they do want a legal back door. But they want it because access is (1) physically impossible, (2) prohibitively expensive or, if you're ultra paranoid, (3) they don't want to reveal the technique they are using."

Well, the article says that, according to these researchers, (1) doesn't apply (it's proven possible), (2) is unlikely (though it takes state-class resources, it's unlikely to be too costly for a state), and (3) is moot (the secret's already out).

Charles 9

Re: Nation-state?

Just because you discover it's possible doesn't mean you have the resources to actually pull it off. Think "Traveling Salesman Problem". Simple to describe, utter nightmare to implement.

'Contractual barriers' behind geo-blocking could breach EU rules

Charles 9

Geo-locking of video is usually on the basis of sub-licensing. Different companies can license the content for distribution in their individual regions, and the companies and regions can't (and for practical reasons usually don't) cross. Whoever can show or sell the video in Europe is usually different from the one that sells it in America and different from the one that sells it in Australia/Oceania, and so on.

Boffins find a way to put your facial expression on Donald Trump's mug

Charles 9

Re: I hope it's *main* result will be to teach people to believe *nothing* digital

"Because without very strong audit trail and encryption anything you see or hear could be faked."

What makes you think the audit trail and encryption can't be faked, too, if they REALLY want you?