* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

Why a detachable cabin probably won’t save your life in a plane crash

Charles 9

Re: 'Without life rafts'

Perhaps, but usually when such a situation occurs, search craft start tracing the plane's flight path to look for something nice, bright, and large like the escape chute life raft. Once it's located, they can coordinate with other craft to drop supplies as needed and/or contact nearby shipping. The only reason crash searches have taken so long lately is because, like I said, the crashes were not of a survivable nature and the end result was a traceless crash: no life rafts or the like to find.

I may be wrong, but don't most life rafts also carry EPIRB that start broadcasting when they're deployed, allowing for a quicker search (and again, weren't deployed with all the sea crashes to date)?

Charles 9

Re: Really?

"without liferafts, etc."

You do know those escape slides double as life rafts in the event of a water landing. The main reason you don't hear of sea rescues after aircraft crashes are because, AFAWK, none were survivable. When an aircraft loses control at high altitude, it either regains control before long and then diverts or just continues on down at such speed you might as well be crashing into a wall at that point in terms of physical ability to survive.

Charles 9

Re: Pointless Idea

There's also the matter of the infamous CFIT (controlled flight into terrain), where the pilots think they're flying through the air but then suddenly go CRUNCH. CFITs typically have zero warning and are already at ground level while going above takeoff speed, meaning physics dictates everyone's pretty much screwed.

Charles 9

Re: Reminds me of something Spike Milligan once said:

I guess this was before that one time when an aircraft suddenly depressurized in mid-flight, knocking everyone out and probably causing all aboard to die of hypoxia before the plane finally ran out of fuel and crashed into a mountain hours later.

AI no longer needs to fake it. Just don't try talking to your robots

Charles 9

Re: @Nifty always something else next

"we also need to provide alternatives to work which are not self destructive."

The problem being ANY alternative to work is likely to be self-destructive because it becomes all "give" and no "take" unlike work which has both. Without something to balance the equation in terms of greater good, things will get ugly; this is why Utopian Communism doesn't work in real life.

Charles 9

Re: @Nifty always something else next

I was noting that. The primary reason humans are kept around is because they usually have some role to fill in the greater machine of society. Take that role away, and some difficult questions need to be answered. If we go by the well-oiled machine of Mother Nature, the cold solution is to reduce the population down (removing the unemplyables) to where those jobs that still need a human to do them remain. Trouble is that humans don't react to well to such a scenario, which is why stories like "The Cold Equations" make us uncomfortable. Sure, it sounds nice that people could do like the Federation and just have a basic income, but it all breaks down when you start asking who's going to PAY for all that.

Charles 9

Japanese Medical AI...reminds me of an anime movie I watched once on the subject, called "Roujin Z". It's thought-provoking (it also touched on the matter of an increasingly-elderly population) but also decently funny.

T-Mobile USA’s BingeOn is a smash hit. So what now?

Charles 9

Re: The moral of the story

Bandwidth is a limited resource, especially wireless (which raises physical limitations). You either ration ALL or ration NONE; otherwise, you're picking winners which isn't fair.

Charles 9

The main reason for the complaints has been that BingeOn picks winners. It says these servers are free while the rest eat into your data allowance. That's discrimination and against Net Neutrality.

Cops hate encryption but the NSA loves it when you use PGP

Charles 9

Internet must be awfully slow for you (TOR is slow enough with, what, three proxies). Plus if the plods REALLY wanted you, they'll just trace your proxies then pwn the first link in the chain to trace back to you.

Charles 9

Re: So the next logical question...

You're basically asking how to mail a letter without an address: barring telepathy, no. SOMEONE has to be able to know where the letter's going, and that alone can be exploited by the plods. About the only way you can avoid this is to go there in person using only private transportation (public will find a way to log you), and even then they may note something by your absence.

RE: "NAT at the ISP level is not widespread and not an obstacle if you are the local intelligence agency."

That's not the case in Asia, where they have billions of people and not enough addresses to go around, thus they were among the first to do carrier-grade NAT. Unless you're saying the plods were one-step ahead and mandated identifiable traces on all computer hardware before they were even sold.

Charles 9

Re: An old but solved problem

What kind of data would be illegal for an automated mangler to alter such that it wasn't illegal already, thus putting the onus on the uploader?

Charles 9

Re: Oh really

That's why, if they're REALLY interested in you, they'll spear-fish, drive-by, or use any and all means to pwn you at the endpoint: outside any encryption of obfuscation envelopes (because, at the end, the content MUST be decrypted for you to be able to employ it, seeing as we're not in Ghost in the Shell levels of technology where we keep cryptochips in our bodies as of yet.

Charles 9

Re: constant traffic component of OpSec

How do you reconcile that with a low bandwidth cap?

Charles 9

Re: An old but solved problem

Plus what if the server routinely alters uploaded pictures, potentially mangling most stego?

Charles 9

Re: No catch yer with Captcha

But they can still snag you when you're trying to set up that code. First Contact is always the most vulnerable phase.

Most of the world still dependent on cash

Charles 9

Re: nowt wrong with cash

Those negative interest rates typically only apply to savings accounts (checking accounts are frequently non-interest or at best tiny-interest) so as to discourage hoarding, plus banks always need an incentive for people to put money in with them so they can lend it out, so that puts competitive pressure on the banks to keep a positive savings rate.

Charles 9

Re: Eh?

With an online order, you can order it before you even arrive and have it ready for you when you walk in the door. That may be less practical for quick-turnaround stuff like beer, but for something like dinner or takeout that removes the waiting in line, saving time (and by the equation money).

Inside bars and the like, maybe you can request something at something like a Ziosk without having to signal for a bartender.

Charles 9

Re: There's a good and a bad side to this

Plus what if they switched to high-valued barter like gold or jewels?

Charles 9

Re: IBAN

Probably because they don't want to be beholden to a foreign power. They'll take their chances with Western Union and MoneyGram and PayPal, thank you, unless you can force the issue.

Charles 9

Re: nowt wrong with cash

They figure the money gets spent eventually (otherwise you wouldn't have taken it out, due to inflation "cash in the mattress" loses value over time) AND they figure you'll have spent it in the general area. Give time and increased facial recognition, cash serial number tracking (Where's George?) and even cash will be functionally traceable and the only way to operate completely tracelessly will be in barter of self-made perishable goods.

State Department finds 22 classified emails in Hillary’s server, denies wrongdoing

Charles 9

Here's a very honest and serious question.

The article notes that some of the e-mails won't be released, even redacted, because they're part of Special Access Programs, basically "deny it even exists" clearance even above "top secret".

Here's the question. Given the nature of security, is it even possible for unclassified data to be reclassified, especially to SAP level, after it was previously disseminated in an unclassified level? It's sort of like a "genie out of the bottle" situation in that you can declassify something to a lower level but you can't classify something from a lower level to a higher level. The material has to originate at the higher level from the beginning. I know a bit about it because I had family in the military who had to deal with classification levels, and I've personally seen military media carrying things like green "Unclassified" designations.

VirusTotal bashes bad BIOSes with forensic firmware fossicker

Charles 9

The point is that the option will always remain open, which is something the EEPROMers may not have seen as necessary in a less-security-conscious world. Sure, there's the risk of flashing dodgy bits, but the point is that you don't end up like with those MacBooks: locked out. Worst comes to worst, you can always RE-flash. As for scenario #1, you're talking about someone able to subvert at the hardware level, meaning probably state-level adversaries. That's pretty much "bend over because you're screwed" territory because that's subversion at the physical level: the Nineteen Eighty-Four Panopticon. At that point, you're in DTA Mode because nothing is safe anymore.

Charles 9

Sounds like what's needed is some kind of fallback, built directly into the hardware so it can never be overridden, that allows you to reflash a firmware from some other source. Needs to be mandatory as a security measure.

US still lagging on broadband but FCC promises change is coming

Charles 9

Re: Nothing new here ...

One problem. Thailand is also much SMALLER. Now if you can show a place like Canada (which is larger than the US with fewer people) with universal high speed Internet even as far as Nunavut, then you might have an excuse.

Charles 9

Re: Politics

It's a political issue because Republicans are generally of the opinion that if you want it badly enough, PAY FOR IT—and most Republicans are of a high-enough income bracket that they can. You can't afford it? Tough, better luck next life...

Charles 9

Does all this talk of broadband rollout take into account the vast area the United States encompasses?

31 nations sign data-sharing pact to tax multinationals

Charles 9

Here comes the big problem. How do you tackle corporate money shuffling without violating sovereignty?

Intel and Micron's XPoint: Is it PCM? We think it is

Charles 9

Re: Duck

How about a miniature goose with a duck call?

Open source plugin aims to defeat link rot

Charles 9

Re: Hosts

Windows has it where it is due to it being the location of the TCP/IP stack. No such thing as /etc here.

As for protection, find one that's not only free but simple: turnkey simple, or Joe Ordinary won't get it.

PS. Why not use localhost? It resolves instantly, never goes out on the wire, and can be handled to your tastes, unlike any other number you can think of.

Death to clunky, creaky rip-off cable boxes – here's how it will happen

Charles 9

Re: Interesting

The reason DSL doesn't work too well in America mainly falls to two things: (lack of) population density and the historic wiring of telephone lines. DSL bandwidth falls off over distance, so if the local telephone exchange is too far away (due to being in a rural setting or because the old telephone wiring was too convoluted), then you're SOL. I should know, I looked into DSL back when home broadband was in its infancy, and the telephone company (who BTW is usually as much a local monopoly as the cable company) said I was in the extreme range of the technology, meaning I was likely to have issues).

Charles 9

Re: Are those CableCARD ports

The VESA Feature Connector. That was intended for the likes of MPEG-2 decoder cards (that were needed in the late 90's to let computers watch DVDs at a watchable rate) and 3D Accelerator cards. The Feature Connector meant they could hook up to the graphics memory without having to go through the computer bus. I think that faded because bus standard kept changing and it became easier to just use the VGA piggyback method. Some like the 3dfx Voodoos simply switched between the base card and it, others (usually DVD decoders) used chroma-keying.

Charles 9

Re: Interesting

The only difference in the US being that baseline channels, for historical reasons, are sent in analog in the clear, meaning cable-ready analog TVs didn't need the box at all. It's only when you get to digital cable that the boxes are a necessity, and the cable companies played it cagey by making sure, except for the local channels until recently, again for historical reasons, all the channels were encrypted. In other words, it's closer to your situation now but there are still legacy traces.

Charles 9

Re: A First Step

Actually, there's a roadblock to that. They proposed something like that called the Downloadable Conditional Access System (DCAS). Only problem was the FCC had already demanded that the control module be transportable, meaning it can't be part of a TV for fear of lock-in. So it was CableCARD or bust.

Meanwhile, the FCC is trying to work on a successor to CableCARD called AllVid. I believe Cox's Contour system is at least partially based on AllVid.

Charles 9

CableCARD's been on a bumpy ride, plus there's the matter of finding a third-party box capable of using it, particularly the V2 cards that allow you to do Video On Demand.

Charles 9

Re: Death to cable(and sat) box

Unless like me you're in a bad reception area. All the local channels break up in my area, so it's another supplier or no TV, period.

Charles 9

Re: This is LONG overdue but they missed one thing.

The reason the cable companies were able to lobby to turn off ClearQAM is because they can (fair enough) claim unfair treatment versus digital satellite (DirectTV and Dish), who HAVE to encrypt their channels due to their signals transmitting nationwide yet not every channel is allowed nationwide due to local network restrictions which are actually mandated by the FCC (due to them originating in OTA broadcast which the FCC regulates). Unlike satellite, cable companies, being capable of operating in local clusters, are capable of tailoring their channel lineups per area to deal with the local channels without too much interference.

So you see, it's kind of a no-win situation unless the FCC takes the bold step to declare that cable and satellite are too different to be seen as subject to the same regulations.

PS. Even before the ClearQAM shutoff, ONLY local channels were transmitted in the clear; fair enough, as all the other channels are paywalled while the local channels were being sent in the clear OTA anyway. I loved that capability since it let me record NBC during the Olympics (I have an alternate system set up in time for Rio).

Charles 9

Thing is, since the cable companies settled on DOCSIS, cable internet has seen steady progress, and with DOCSIS 3.1 1Gbps over copper coax is tantalizingly close. So that's saying something. I think most of the push for DOCSIS came from the likes of Motorola and company (IOW, the cable modem makers) who weren't too pleased with having to tune their cable modems for different ISPs.

Now, there is a CableCARD standard out there to allow for a third-party STB to interact with a cable company. Look at the back of a cable STB and you just may find the CableCARD slot secured with a CARD in it. Problem is, for whatever reason, those boxes aren't available to the average consumer. Then there's the matter of the rental fees for those CARDs: usually almost as high as the boxen: at those rates, why bother?

Brit censors endure 10-hour Paint Drying movie epic

Charles 9

Re: Meh

They have to let every frame show in case of a secret frame (one you can only see clearly if you pause right on that frame). A fast-forward runs the risk of skipping the frame.

'Unikernels will send us back to the DOS era' – DTrace guru Bryan Cantrill speaks out

Charles 9

Re: Unikernel, No-kernel, whatever

So what are you saying? That all this will do is encourage hypervisor/Red Pill attacks?

Charles 9

Re: Forth

So what happens when you get caught between a reliability requirement and necessary complexity? Does it become a case of A Bridge Too Far?

Charles 9

Re: I assume...

I think that's what some of the commenters are saying: that in a containerized/virtualized environment, there's still a degree of separation in play: in this case between the guest and the host. And this degree of separation is more significant than the one between kernelland and userland; there's more abstraction between host and guest, which is why VMs can transport.

Five technologies you shouldn't bother looking out for in 2016

Charles 9

Re: Please not VR...again...

But there's still the matter of Simulation Sickness, and that's not going to go away for the same reason seasickness won't go away: because it's biologically-triggered. The very thing that we want to see in VR is the same thing that makes us sick: part and parcel, and the closer to realistic we get, the worse the problem will become.

Eight budget-friendly 1TB SSD data packers for real people

Charles 9

I don't know. You could say the same thing about tape drives, yet the consumer end hasn't seen any trickle down since the days of Travan cartridges. Suppose enterprise-class SSD retain some fundamental characteristic that, like LTO, makes it useful for business but still too expensive for the consumer end.

Stop the music! Booby-trapped song carjacked vehicles – security prof

Charles 9

Re: Automatic firmware updates

You're screwed either way. Either they pwn you via the unpatched exploit or they pwn you via an evil update. And for all you know, there's a wireless connection to that bus and you don't even know it or have the capability to remove it.

Charles 9

I do since the tape deck is worn out, there's no AUX port, and it's the stock 6-CD changer deck and I can't be asked to plunk down the few hundred it'll take to replace it as it's double-height.

Five reasons why the Google tax deal is imploding

Charles 9

Re: Think about it...

Maybe not 16%, but SOME appreciable amount. Otherwise, one of the many other businesses that would also benefit from the tax cut would decide to use the new leeway to undercut the competition. Competition is what keeps companies honest since they can't keep their prices high without risking losing business.

Show us the code! You should be able to peek inside the gadgets you buy – FTC commish

Charles 9

Re: Open Source FTW

"That would be a clear flag to everyone that the company practices do not stand the light of day!"

Not if it's "hidden in plain sight" using a gestalt of very subtle adjustments that are legitimate in and of themselves but when put together just so create the exploit. Remember, we're talking some of the highest stakes there are. Nothing is taboo.

"I believe such regulations would do wonders to embedded code quality even if very few people actually inspected the code: it would force companies to stick to proper configuration management process. Any short-cuts (such as shipping code with patches that only exist on some developers laptop) would make impossible for others to replicate the build."

Unless you use techniques like evil compilers or just go beyond the firmware and use state-level tricks like subverting more basic hardware chips. Eventually, you hit stuff that CAN'T be opened up due to copyrights, trade secrets, or even patents, which means you're going to have to trust SOMEONE. Only problem is, with these kinds of stakes, ANYONE can be bought (or pushed out of the way and replaced with someone pliable).

Charles 9

Re: Open Source FTW

"The best way to improve IoT security is to name, shame, and fine offenders. Source code is nice, but it's irrelevant without strong consumer protection."

What's to stop unscrupulous dealers then from seeing this coming, vanishing, and reappearing under some new cover in a game of Whack-A-Mole?

Charles 9

Re: We need another Underwriters Labs!

Nothing can really test for resistance to sabotage for the simple reason there's always an ultimate saboteur that no system can defeat: the one who PUT IN the anti-sabotage system in the first place. Even if you attempt to use multiple layers, you can just replace the single saboteur with a team: each member having put up one of the layers. And given the stakes involved in governmental elections, you can't count out such a scenario.