* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

DoH! Secure DNS doesn't make us a villain, Mozilla tells UK broadband providers

Charles 9

Re: Mozilla are only partly right

Multi-hosting filtered via SNI means the illegal server can be hidden among legitimate ones, and just entering the IP won't work (it'll go to the default server instead).

Charles 9

Re: NIMBY

Aleternate take on the alternate take:

New legislation passes, all DoH providers move to France or elsewhere, out of the UK's reach. Since DoH tunnels through HTTP/S, how's the legislation going to be able to tell the difference (one of the key aspects of DoH, as any dedicated port can otherwise be hijacked wholesale by an ISP or anyone else upstream)?

How do we stop facial recognition from becoming the next Facebook: ubiquitous and useful yet dangerous, impervious and misunderstood?

Charles 9

"The whole criminal justice system is flawed, it harms the innocent, prevents rehabilitation of criminals, and doesn't address the root causes of crime."

Root causes are usually human or societal factors: both of which tend to have long histories and will be difficult to solve without side effects (due to institutional, societal, and cultural momentum). Some people are simply dead-ended; dealing with dead ends is a moral quandry.

As for rehabilitation of criminals, one must recognize when criminals don't want to be rehabilitated. For example, there's no real way to change a sociopath. That means again you're dealing with dead ends. Not only that, erring on the side of caution can result in collateral damage of its own: like the "suspects" not brought in that end up going on rampages. Feels much like a dilemma: damned if you do, damned if you don't.

If the criminal justice system is flawed, it's because it's the product of humans, which are hopelessly flawed themselves. Thing is, no one's been able to do much better, meaning we could be staring at a least-worst system that's still unacceptable.

Charles 9

"But that is why we need legislation restricting its usage, especially use by the police and government, they are much less trustworthy than any private corporation."

Corporations can go transnational and play sovereignty against you, so your claim is debatable.

Charles 9

Re: The antisocial network.

And if you go that far, you might as well ban cameras since it's going to be impossible to track or even obtain the explicit informed consent of every bystander caught in the frame by accident when they just as quickly vanish into the crowd never to be seen again...

Google's Fuchsia OS Flutters into view: We're just trying out some new concepts, claims exec

Charles 9

Historically, for the same reason the original Windows NT sucked through a straw in graphics performance: userland graphics was slow due to context thrashing. Modern GPUs seem to work around this with better memory management so it's easier to achieve now.

Charles 9

Re: O rly...?

"Because frankly, anything less is worthless security theatre at best - obtaining permission is not a "formality", you either _are_ in control or you _aren't_. And I think I know the answer to all of the above..."

So how do you teach Joe Stupid all this when changing the channel is a challenge for him?

As in, for all you ask, you still (like in the comic) have to deal with Dave.

Charles 9

"Yes of course - since microkernel gets out of the way entirely, you can have better performance because that removes the context switch."

Not necessarily, as networking is I/O, which tends to be privileged due to the security implications (an I/O interface allows for intrusion).

Charles 9

Re: A new OS from Google

Or just build a chain enough that you can do gcc, which is open source. Is gcc (the compiler's source) strict C?

Charles 9

In principle, yes, but in reality nVidia and AMD are in hot competition and keep a lot of Trade Secret Sauce around because of that. You see the same thing with IoT/mobile SoC manufacturers who release their drivers only in blobs for fear of Giving Information to the Enemy.

IOW, sometimes there are bigger concerns.

Charles 9

Re: Filesystems in user space...

And Bruce Schneider produced a counter to the exercise using multiple compilers running against each other to make an evil compiler trip up, and it's possible to build a clean compiler in steps going all the way back to a hand-assembled program too simple and overt to subvert.

Charles 9

Re: A new OS from Google

But the differences shouldn't be that great? Something like a telemetry package would include bits that would stand out, wouldn't it?

Charles 9

Re: Filesystems in user space...

How do you make source code produce a binary not consistent with the source code, especially if you employ a third-party compiler? Unless you're saying they can subvert say gcc?

Charles 9

Re: A new OS from Google

So get another compiler from outside the walled garden. Build one from scratch using hand-tuned machine language on an old 8086 if you must. There's nothing to prevent the use of an outside compiler, is there?

Charles 9

What about networking, then, which is latency-sensitive? I know talk about microkernel performance has said they can do 1Gbps in userland, but now the talk is 10GBps and up. Can it still handle the throughput?

Charles 9
FAIL

Re: Filesystems in user space...

Kernel's open source. Would make it easy to find unless they've hired master code obfuscators.

Charles 9

Re: It's BeOS, it's the OS

I think Hydra is the oldest, going back to 1971. The Wikipedia article on it lists them, and I think they're roughly in chronological order.

Charles 9

Re: It's BeOS, it's the OS

"IIRC one of the problems with wanting to put stuff in userland for security reasons was that performance on x86 was shit due to the overhead of context switching."

I believe ARM is no different in this regard because the architecture doesn't include hardware features for this (which would be required to avoid the associated penalties of switching back and forth between kernel mode and user mode). This is especially true for parts of the hardware that historically needed close-to-the-metal coding for performance reasons such as graphics and networking (both of which are latency-sensitive, recall the original Windows NT).

Oz watchdog claims Samsung's leak-proof phones ad campaign doesn't hold water

Charles 9

Re: I have a great idea!

Airlines rend to be sensitive about fire issues. Their SOP for a burning phone battery is to douse or dunk it.

ReactOS 'a ripoff of the Windows Research Kernel', claims Microsoft kernel engineer

Charles 9

Re: It's an opinion.

Point is, once you install Windows 3.1 or WfW 3.11, DOSBOX handles it pretty smoothly, as long as you match the drivers to your configuration. Windows is just something else you install in your DOSBOX along with the target software.

Charles 9

Re: It's an opinion.

And if you need 16-bit programs, that's where DOSBOX can come in.

We are shocked to learn oppressive authoritarian surveillance state China injects spyware into foreigners' smartphones

Charles 9

Re: Facebook is pre-installed on my phone

Wanna bet? I'm seeing Nokias with Facebook on them.

Charles 9

What's stopping feature phones having telemetry? I'm seeing feature phones with Facebook, after all.

White House mulls just banning strong end-to-end crypto. Plus: More bad stuff in infosec land

Charles 9

Wanna bet? What's to say your adversary has MORE than 20 Trillion Tonnes...perhaps even in the QUADrillion...AND are willing to go M.A.D. if necessary?

Charles 9

Humans, like other primates, work best in clans and tribes. It's large enough to manage resources and defend itself but not so large as to get you a "too many cooks" situation.

Charles 9

Re: Usual Story

I too am quite familiar with suicidal tendencies, and I've lived in the Far East. While suicide can be an impulse, those tend to be so brief that just the mere act of walking across the room can create second thoughts. The ones that don't tend to have reinforcement; time makes it worse, not better. And you don't need a gun to carry out that impulse, either; a sharp knife can do it, too; remember, two inches in the right spot is all it takes; cut the right place (not just the neck or wrists, either), you can bleed out in a few minutes. No, most suicides are slow boils: the popping of long-term pressures. That's why the suicide rates in Japan, South Korea, and even Scandinavia are so high; intense social pressure results in rejects, which often become breaking points.

Charles 9

No, they'll just change the law to change the loophole. And sadly, nothing in the Constitution prevents this. Any Amendments that would actually get through would be to our detriment. Frankly, a long-term analysis would probably show humans aren't cut out for large-scale government, period.

Charles 9

Re: Usual Story

I disagree. The three preferred methods of suicide in the Far East (where guns aren't available) are vehicle encounters, self-defenestration, and poison/overdose. Of those, the first is usually pretty certain, especially if the vehicle in question is a train. For the second, a flat or head-first landing from at least 10 stories tends to assure results. The third is usually the choice of the infirm and elderly. Remember, they have much worse rates so they must know how to make it stick (South Korea is second worst in the world, INCLUDING the Third World).

Charles 9

Re: Usual Story

Suicide's a tough one to pin down because those bent on doing it resort to what's available. The US is middle of the pack whereas two of the worst (Japan and especially South Korea) have very tight gun controls.

DeepNude's makers tried to deep-six their pervy AI app. Web creeps have other ideas: Cracked copies shared online as code decompiled

Charles 9

Re: this whole thing is hugely complex & interesting

Not even mythological politicians could solve the problem because it's all subjective. One man's insult is another man's praise, and the line between ribbing and harassment is both mobile and different from person to person. That's why defamation suits and the like are so touchy-feely. They're human in nature, so they can't help but be touchy-feely.

Charles 9

Re: Am I the only one who...

You should see some of the fora floating around the Net. Not even gaming is immune as the two are often put together; both in mods and in dedicated games.

Charles 9

Re: This is only the start

Some people are totally shameless and will take insults as praise.

America's latest 5G drama: Spectrum row bursts into the open with special adviser fingered as agent provocateur

Charles 9

Re: 5G Use

And interrupt existing service, especially around Wall Street who probably pay top dollar for the service? Try again.

Charles 9

Re: 5G Use

How do you do that when the ground is already heavily built-over...or rocky (Manhattan happens to have BOTH problems, being built up ON a rocky island)?

Boffins put the FUN into fungus by rigging yeast to squirt out the active ingredients in cannabis

Charles 9

Re: lots of heat, light and water.

They didn't use brownies. They used ice cream. You're thinking Nice Dreams, one of the later movies produced by Columbia Pictures.

Could an AI android live forever? What, like your other IT devices?

Charles 9

Re: "maybe the bleeding stops after a minute or two"

Also has disadvantages IIRC. Including worse side effects. Not a good thing when one has Sick Sinus Syndrome and requires both thinners and a pacemaker.

Charles 9

Re: Android vs Robot?

Which is why the proper term for a machine made to resemble a woman isn't ANDRoid but GYNoid.

DeepNude deep-nuked: AI photo app stripped clothes from women to render them naked. Now, it's stripped from web

Charles 9

Some people literally don't have imaginations. For others, pretending is never as stimulating as actually seeing it.

This weekend you better read those ebooks you bought from Microsoft – because they'll be dead come early July

Charles 9

When it comes to DRM content, I make it a point to only RENT them. Because that's the end goal in any event: so that you can only rent things in future. And for those who think no DRM will bring repeat pull, what happened to Kirby and Electrolux?

Charles 9

Re: Why not watermarking it..

It's been tried. Back when Palm did eBooks, the key to unlock your books was your credit card number . I'd have thought they would try some more subtle watermarking techniques such as space encoding or subtle errors and substitutions.

Charles 9

Re: It's a book

How many of those can I pack along with my things into a 20-lb. Carry-on limit? And yes, my vacations tend to be lengthy.

It's a fullblown Crysis: Gamers press pause on PC purchases, shipments freeze

Charles 9

Re: Nvidia bet on the wrong horse.

I'm only interested in the latest cards because I'm curious about their non-gaming potential (say, modeling), but as I haven't heard much on that front, I'm content to wait.

FedEx fed up playing box cop, sues Uncle Sam to make it stop: 'We do transportation, not law enforcement'

Charles 9

Re: Fifth Amendment ? Seriously ?

What makes you think they actually "earned" anything? That's what lawyers are for.

The seven deadly sins of the 2010s: No, not pride, sloth, etc. The seven UI 'dark patterns' that trick you into buying stuff

Charles 9

I wonder how many sites go all the way and do an, "Aw, too late! All Sold Out!" Only to find some other way to hook you?

These boffins' deepfake AI vids are next-gen. But don't take our word for it. Why not ask Zuck or Kim Kardashian...

Charles 9

Re: One Legitimate Use

It's quite simply not for everyone. You see it with anime, with camps pretty evenly divided between reading and hearing it in English. I'm personally of the dub camp, though thanks to DVDs and BDs the argument's been settled by simply including all options and letting the viewer decide. I'm like that with mainstream movies, too: I prefer English but wouldn't mind roaming once in a while.

Queue baa, Libra: People will buy what Facebook's selling. They shouldn't, but they will

Charles 9

Re: Half the population—

"This was a time way before you were born."

I beg to differ. The four most-drilled words in MY childhood were, "Don't talk to strangers." Thing was, by the time I was in my teens, molesters, kidnappers, and worse stopped asking. This was the REAL real world I faced, and the problem reached problematic levels with mothers sobbing for their lost one-and-onlies, lawsuits, electoral turnovers, and everything. How do you tell a grieving mother, "You just failed at parenting"? Because that's what I saw with my own two eyes (that and the death of a cousin of mine). If life's harsh, you have to also agree that it can easily be TOO harsh.

Open-heart nerdery: Boffins suggest identifying and logging in people using ECGs

Charles 9

As much as I understand the problem behind biometrics, the problem behind the problem is that we still really need an alternative that doesn't rely on fallible and likely failing human memory. Any ideas?

Charles 9

Re: ECG still suffers from the same problem as all biometrics

So what's to stop a replay THROUGH the hash function? The argument is that, if it can be captured (and nigh anything passing through a wire can be captured), it can be replayed.

Please stop regulating the dumb tubes, says Internet Society boss

Charles 9

Re: DNS over What

Most routers I know use a custom port. Otherwise, you're in a dilemma because of what I said earlier (if not the State, then your ISP may hijack the port wholesale).

Charles 9

Re: /etc/hosts restricts access into my private property

But you can't just replace a host name with an IP to bypass DNS because most hosts use SNI (which is a server-side thing) to multiplex hosts from a single IP.