* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

Samba man 'Tridge' accidentally helps to sink request for Oz voteware source code

Charles 9

Re: Is source code necessary to validate correctness?

Having an open codebase does squat against a hardware subversion (and El Reg has had articles about that such as subverted hard drive firmware), and given the importance of elections, you have to assume someone will have the resources to secretly subvert any voting machine maker to hide a secret code in a normal-looking chip that only gets activated on a secret code set at the hardware level, otherwise totally invisible. How do you battle something that resourceful?

Charles 9

The only way the election process can possibly be truly transparent is to do the whole thing by hand: otherwise, any form of automation or mechanization can be construed to change the results in a way human senses cannot detect. The entire process from start to finish must be able to be seen by our innate senses. But then how do you process hundreds of millions of votes by hand in a timely manner and on a budget (and no, two out of three is not acceptable when whole countries depend on the results)?

Charles 9

Re: Is source code necessary to validate correctness?

But what's to prevent the voting machine pulling a VW: what I would call being a Janus, putting forth two different faces during testing and during actual use, and if it's done at a low enough level, there's no way for the testers to tell the difference between them, even if they have access to the source code (as someone said, there is no proof that the compiled open source you obtain is the same that is used in actual production, which may be hidden away in a component such that you can't detect it without expensive equipment).

US House okays making internet tax exemptions permanent

Charles 9

Re: @Tom No, this is bad, really bad.

Not so easy. Taxes have three or four tiers (federal, state, county/region, and usually municipal), and these tiers usually don't talk to each other. And even within each tier, taxes may be assessed differently for different things. Take Virginia. Each locality has a different tobacco tax on top of the state sales tax, then you get areas that charge an additional tax for hot-served food, there's confusion over whether or not energy drink count as grocery or merchandise (merchandise has twice the tax rate), and then there's the sales tax exemption for medicine and the tax holiday in August for school supplies. And all it takes to change these again is for a legislature to pass another Act or a city council to pass an Ordinance.

AND the federal government is notoriously inefficient. So do you still believe keeping track of such a complicated tax structure (which is necessarily complicated because the country is complicated) can be "trivially" done?

Charles 9

Re: What's so wrong with tax?

"I dislike the fact that I'm the one required to file the tax. I'd rather have the federal government mandate a flat tax to be collected (per payers address) and the business is responsible for paying the correct proportion to the states,"

The problem being they'll never agree on what that rate will be because states have different strategies for taxation, and a "one tax fits all" solution doesn't accommodate this. There are tourism-heavy states like Florida and Nevada that use sales taxes to draw the most money from tourists who they wouldn't get any other way. Other states are "live-in" states where people or businesses tend to settle down (Oregon and Delaware spring to mind). Instead of sales taxes, income and related taxes are the norm for raising revenue. Then you have odd states like Alaska (rural, sparse, and extremely rugged) where simplicity is the best solution (seeing as reaching everyone in the middle of nowhere is a challenge), so they use alternative methods like property tax.

Charles 9

Re: Hows did Sears

I vaguely remember the order forms from those catalogs with the blanks for items numbers and so on. Many of them keep a blank for "(Insert State Here) residents add (Insert Percentage Here)% Sales Tax". Pretty sure that was because that was there the order forms went and therefore where the taxmen of that state could demand documentation.

Charles 9

"Now what happens in future if they want to change rules on sales taxes, do they have to repeal the whole act?"

No, all it takes is another Act to amend any Act that existed before. Happens all the time, such as with the DMCA, which amended the last Copyright Act, which IIRC was about 1995, which in turn amended other Copyright Acts from before.

Charles 9

Re: Totally Skewed Outlook!

"I sympathize with the States. The lack of sales tax imposed on online sales is a true loophole in the principle that they are allowed to tax anything bought by a resident."

Ah, but here's the rub. The buyer normally pays B&M sales tax at the vendor's state. If a Virginian heads to DC on a trip and buys something in DC proper, he pays the DC sales tax (which is higher than Virginia's). So now ask, where is the buyer officially buying the goods? At the seller's state or at the buyer's state? How was this resolved back in the catalog-and-telephone days?

Charles 9

"What taxes the USPS pays is a matter that states could raise with the federal government through their congressional delegations."

As a federal bureau, the USPS usually cannot be taxed except by the federal government. All Post Offices are officially US Government property (thus why state and local police cannot normally police a post office, the feds see to that themselves) so become exempt from state property taxes. I think refueling is usually done on-site with the fuel obtained by a federal supply chain so again the states don't get fuel taxes. As federal employees, state income taxes are questionable (depends on the laws), so state revenues from post offices are limited (the same is true of military installations and other federally-owned property).

Charles 9

Re: I see a problem:

"How does that help Oklahoma when all the businesses are in California, etc.?"

Then Oklahoma has to find a way to encourage physical presence, as by law that's the only way Oklahoma can enforce this.

Charles 9

Re: I see a problem:

Any state where the business has a physical presence (like California and New York where Amazon keeps warehouses) can assess sales taxes against that physical presence. Anywhere beyond that is beyond their scope due to the Interstate Commerce Clause, which by default makes cross-border commerce a federal matter. That means things like store pickup (which require a B&M presence) still get taxed.

Adobe: We locked our customers in the cloud and out poured money

Charles 9

Re: Short view?

Nope, because the newcomers have to associate with the incumbents, and guess who has their nuts. It's like writers and Word. Many would like to get away from it, but to get their stuff published, they have to go through the editors, and the editors swear by Word due to its annotation features. So if the only way to town is across a frozen river, you better learn to ice skate.

Boffins teach cars to listen for the sound of a wet road

Charles 9

Re: What the what?

Not true. Every car that passed it altered the conditions of the road by driving through it. Furthermore, it's rare for two cars to be exactly alike in terms of physics when they pass over a wet road. What one car can pass safely another may not simply because they're lighter/heavier, have less downforce, balder tires, etc.

Charles 9

You wouldn't say that after you've taken a run through Donner Pass. High altitude, significant grades, and frequent snow, often blowing to near-zero visibility.

Russian "Pawn Storm" expands, rains hell on NATO, air-gapped PCs

Charles 9

Re: How do you get the data out?

"Well, by definition they wouldn't be "compatible with Windows and NTFS" in that they wouldn't be mountable by Windows."

As in they'll work with the right program, a la TrueCrypt/VeraCrypt. And it would require a driver-like low-level interface to interact with the devices at the block level (like a low-level Hex Editor). And of course it would have to employ a robust encryption system throughout so that at the least contents can't be easily seen. Additional work would be needed to conceal the fact a secret filesystem is being used (namely, writing random data into all free space in the drive before creating it; that way you have the excuse of cleaning up the drive prior to reusing it, excusing the proliferation of random-looking data in the free space).

Joining the illuminati? Just how bright can a smart bulb really be?

Charles 9

Re: cart before horse

At least if it goes down, it's quick to get back up. You can't say the same with underground wiring which can be broken up by a stray shovel or swamped by a flood or storm surge. Trust me, we checked the numbers and determined (especially on the coast with their high water tables) that it wasn't worth it.

Charles 9

Re: bulb/lamp/pear

At least the logic's there. It does look like a pear, too.

HTTPSohopeless: 26,000 Telstra Cisco boxen open to device hijacking

Charles 9

Re: Is there a workaround or isn't there?

And replace it with WHAT, pray?

Because if one of the biggest names on the Internet is selling eternally-vulnerable unpatchable hardware, what does that say of every other supplier on the market? Rip and replace simply means someone else when you bend over.

Brit filmmaker plans 10hr+ Paint Drying epic

Charles 9

Re: Shipping forecasts

Use an old computer-generated voice and turn it loose on a large local phone book.

UK gov sinks £25k into Pi-powered cyberdesk

Charles 9

I recall those desks with glass panels and racks in the chair well to sit CRT monitors so people didn't have to crane their necks to see what they were typing.

eBay scammer steals identity of special agent investigating him

Charles 9

I think it's more a case of "Impersonating a Federal Officer" which, yes, is a federal offense (18 US Code § 912).

GPS, you've gone too far this time

Charles 9

Re: How far off? @Gomez Adams

It may me geographically shorter, but it may also be temporallly longer due to traffic or an accident. If people change lanes frequently, it's usually because the lane is backed up and moving slowly, so going around may requiring traveling further in terms of length but also allows traveling at a higher speed, offsetting the loss.

California cops pull over Google car for driving too SLOWLY

Charles 9

So what happens when you get a law-vs-law clash, where a car is BOTH prohibited from driving too slow in relation to other cars AND prohibited (due to vehicle classification) from going OVER a specified speed? Especially when the minimum becomes higher than the maximum, meaning the car can't help but break the law now?

Charles 9

"The real fun comes when looking at the history of maximum speed limits on open highways. At present, it's 65 mph unless posted otherwise...like 70 mph on some. The *original* limit was "reasonable and proper"."

It mostly goes to population density. The sparser the population, the less the risk of a high-speed collision and therefore the safer it is to raise the limit. It also matters if your state is of some significant size like Montana and Texas. Texas houses the longest single chunk of singly-maintained highway in North America (it's piece of I-10, ~880 miles long, over 1/3 of the entire 2,400-mile-plus Interstate), and it's probably one of the few states known to post an 80mph limit, especially in the rural stretches of I-10. Montana I think used to have "reasonable and prudent" for its chunks of Interstates like I-90 but had to scale it back to only 75mph.

Charles 9

Re: Klingt reichlich erfunden

You're supposed to start reacting when you see two or three cars in your rear-view, which you usually CAN see. Five's simply the limit upon which the police can intervene.

Charles 9

Re: I'll betcha a dollar that...

Or worse, a "ghost driver": someone who manages to go the wrong way down a motorway and ends up making a head-on collision with both cars at speed. Now you have two cars crashing at the sum of their respective speeds. Even with crumple zones, a ghost driver collision is tough to live through simply due to the sheer forces involved.

CloudFlare drinks the DNSSEC kool-aid, offers it on universal basis

Charles 9

Re: Trust is supposed to be a two way street

Well then, you better get off the Internet, because that level of paranoia approaches Don't Trust Anyone, and since trust is required to perform any real communications...

GCHQ director blasts free market, says UK must be 'sovereign cryptographic nation'

Charles 9

Re: Do they have internet in prison cells?

"It's like this: a body is found with an axe poking out the chest. There is a criminal around somewhere, the murderer, and there are suspects. The criminal is a criminal whether or not they are a suspect."

Not necessarily. The criminal may be the same as the victim: in this case, a Darwin Award Winner trying to play with axe juggling.

Roamers rejoice! Google Maps gets offline regional navigation

Charles 9

Re: maps.me uses openstreetmap

2D-only. A similar app already exists in F-Droid which by default is FOSS.

I'd prefer one that has a horizon perspective, better suited for driving navigation.

Charles 9

Re: Useful in tunnels?

It does. A compass (usually via tri-axial magnetometer) and tri-axial accelerometer is enough to maintain reckoning until you emerge, and you'll find most phones of note will have these features standard these days. Even my old Nokia N95 had a compass; don't know about the accelerometer, though.

UN privacy head slams 'worse than scary' UK surveillance bill

Charles 9

Re: HumInt and SigInt both require wisdom

"Confirmation Bias is approaching data with a personal bias and so wrongly confirming that bias. What I meant is more innocent, more common, when we approach data with no expectations and yet still misunderstand it. Normal human error."

Confirmation Bias IS Normal Human Error. Bias is an inherent human trait based on experience. We can't help but be biased because experience shapes perception, subconsciously. IOW, we can't help but be biased just as we can't help but measure speed in relative terms: there's no absolute reference point to check otherwise.

Drones are dropping drugs into prisons and the US govt just doesn't know what to do

Charles 9

Re: Put up a net

And the next thing you know, the drones will just cut the nets. Either that or the prisoners start hoisting themselves up to rip them down and use them for escape attempts.

How to build a city fit for 50℃ heatwaves

Charles 9

Re: Underground

Actually, south-facing windows make sense in the Northern Hemisphere because in the winter you want as much sun as possible to stay warm, and the sun tends to be heavily to the south in the winter, creating a shallow angle. In the summer, the sun is more to the north so comes down at a sharper angle which you addresses with features like porches and overhangs.

In the Southern Hemisphere, the directions are reversed, so you're better off facing windows north.

Google engineer names and shames dodgy USB Type-C cable makers

Charles 9

Re: Not "Linux commands"

Uh...what Radio Shack?

Charles 9

Re: Er....

I don't know why a USB 2 charging port is 1.8A and a USB 3 charging port is 1.5A, but I'm guessing it's because I've misread/missunderstood something.

Because USB Charging over the traditional cable was always limited by the spec to 1.5A. It's just that many devices push the envelope towards 2A. Type-C cables BTW are allowed to go up to 3A by spec.

XenData’s storage Jurassic Park: PC tape backup is BAAAAACK

Charles 9

Re: I wonder how that works from a technical standpoint

In my experience, most of them coped by producing drink coasters and (sometimes dangerous!) frisbees...

After what you mentioned became a perennial complaint, drives started coming with internal buffers capable of holding a few seconds worth of burn. They also came up with techniques like BURN-Proof to help cope with recovering gracefully from an interruption.

Condi Rice, ICANN, and millions paid to lobby the US govt for total internet control

Charles 9

Re: ICANN is using internet community money to lobby against the internet community !

Fair enough. Now tell us how we can wrest the power back from them? What cards can the community still play?

Lithium-air: A battery breakthrough explained

Charles 9

Re: yawn

The problem is that all the temptation amounts to crying wolf. Wake us up when one of these technologies actually hits the market and is actively undergoing real-world use. Until then, what use is it for us to know about something that may never pan out?

Charles 9

Re: Yeah, yeah that all sounds great until you learn...

Days to discharge at what rate? A watch battery can last a year, but then again the watch only sips the power. A car OTOH has some pretty significant power demands which have to be delivered in a timely manner in order to be practical. So the big money question: can you run electric cars off these batteries right now?

Google roasts critical twin Android bugs in new Marshmallow OS

Charles 9

Re: T-Mobile to update 13 non-Nexus phones to Android M

I've seen "Coming Soon" signs covered in cobwebs, so I'll believe it when I actually see it.

Stuxnet-style code signing of malware becomes darknet cottage industry

Charles 9

Re: @AC

Or a RAID-0 where one of the drive firmwares has been pwned. Basically, trust on the Internet is a pipe dream yet you need trust to make communications work, meaning we're basically screwed. ANY trust system we can think up, someone else can subvert (like using shills to subvert a Web of Trust).

Is the world ready for a bare-metal OS/2 rebirth?

Charles 9

Re: Major niche OS

Babylon 5 mainly used the Amiga not just because of the 3D rendering and CGI but also because it was possible to overlay said CGI on top of the recorded footage thanks to its support for genlocks (in a day and age when video compositing hardware capable of keeping all the footage in sync was really hard to come by). That said, due to the limitations of the hardware, it's now pretty easy to see when the footage is composited instead of taken straight from film.

Opera Jon's sparkling Vivaldi proves the browser isn't dead

Charles 9

Re: Opera 12.16 is still the best browser, despite 3 years of neglect.

I find this odd, given that I use Firefox and Steam and have no issues. Perhaps an add-on is messing with steampowered.com and causing a redirect loop.

E-mail crypto is as usable as it ever was, say boffins

Charles 9

Re: 'Easy' ways to get and validate keys

"The obvious way to get the right key is to meet in person and exchange keys - or at least key finger prints. The less obvious way is to read and understand how the chain of trust works."

And then you run into the First Contact Problem. How does Alice know Bob is really Bob and not Mallory if Alice has never met Bob before? And if she tries to use a third party, how can she know Trent is really Trent?

Charles 9

And how can you be sure the public key repository is a real public key repository and not one that's secretly switching out keys for imposters so they can send you "trusted" malware? IOW, how can you trust that Trent is really Trent and not Gene or Mallory?

Next year's Windows 10 auto-upgrade is MSFT's worst idea since Vista

Charles 9

Re: Is the Windows 10 forcefd upgrade even legal?

Didn't a few countries try that already only to come back?

The only GOOD DRONE is a DEAD DRONE. Y'hear me, scumbags?!

Charles 9

Re: Paint balls vs CCTV

"However, it is a felony to engage in a straw purchase - buying a gun for someone (usually a felon) who is not legally allowed to possess one."

But it's kind of hard to prove the gun was straw-purchased and not stolen as the former owner claims, and under the Sixth Amendment, it falls to the government to prove the straw buyer's lying.

After Burner: Sega’s jet-fighting, puke-inducing arcade marvel

Charles 9

Re: I have to disagree on the Amiga version being bad.

What about Reactor? It had that distortion guitar music tied to a BIG speaker.

Channel Islands firm touts all-in-one secure comms app

Charles 9

How can they assure the safety of their sandbox even against rooting and jailbreaking, which IINM let's the OS go ANYWHERE?

How to build a totally open computer from the CPU to the desktop

Charles 9

Re: Or you could just...

But this project goes one further. It's an attempt to build a computer that is open both in software and in hardware: with every bit of electronics open for scrutiny, including chip innards (which Lemote devices cannot fully assure).