* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

'Oh sh..' – the moment an infosec bod realized he was tracking a cop car's movements by its leaky cellular gateway

Charles 9

Re: Default passwords...

I'd given a thought to that, actually (BEING SERIOUS HERE). In the old days, some PCs actually had locks on them so that if they're turned one way, the keyboard was disabled. Perhaps they should re-institute the key lock, flip-covered button, or some other form of physical safeguard. It doesn't necessarily have to be high security for this case (though they can be for when necessary like enterprise applications), just not meant to be tripped accidentally AND physically separate from the normal user interface to reduce the chance of click fatigue/zombie action.

Charles 9

Re: Default passwords...

Except there will be people who just don't get it and will complain to the point of filing lawsuits for defective products. And some of the complainants will have enough money or connections to cause problems regardless of fault, unless there's some king of law in the books that penalizes "being bloody stupid".

Charles 9

Re: It should just work

As they say, that's YOUR job. Either JFDI or come up with a Turing-style disproof so you have an alibi to put in front of a judge.

Charles 9

Re: GPS location on the router home page.

No good. Too many complaints. AND some of them have enough money to cause trouble. If you can't make it turnkey, you're not doing it right.

Charles 9

Re: It's almost like...

The government is fair game in caiptalism, too. You bribe, cajole, or vote in the most cooperative government you can. If all else fails, you bail out.

When's a backdoor not a backdoor? When the Oz government says it isn't

Charles 9

Re: The Holy Trinity

PROVE it's a false dichotomy. I propose the middle is UNHAPPY, meaning the natural gravitation is toward one or the other extreme, thus making it a dilemma long term. Or why else has no government haven't undergone serious upheaval if not serious replacement once a century or so? Even the US had a civil war about 150 years ago.

Charles 9

Re: This sounds like a really well thought out piece of legislation

But that's exactly the point where they get you: outside the envelope.

Charles 9

Re: Make it easy

Ever heard of, "Screw the Rules, We MAKE Them"?

Charles 9

Re: Who would pay?

Not even to a Utah-class data center and/or a secret quantum computer?

Stern Vint Cerf blasts techies for lackluster worldwide IPv6 adoption

Charles 9

Re: There Might Be An Alternative

But it does NOTHING to the routing table issue, which is ANOTHER thing addressed by IPv6 AND one with real-world consequences. Because of the IPv4 address shortage, the organization of the addresses got thrown out the door. Basically, you can't be sure an address starting in 109 or whatever goes to the same physical region anymore, and if you're an upstream router, that means your routing tables just got complicated. Sure, the telephone exchanges have to deal with this now, but their problem isn't of the same scale. Instead of millions of requests an hour, it's per minute. The end result is increased latency all throughout the Internet, multiplied by each hop the packets have to make. So there's more problems to IPv4 than just address exhaustion.

Internet engineers tear into United Nations' plan to move us all to IPv6

Charles 9

Re: IPv4 Address Pool Expanded

Except you'll STILL need edge routers. You can achieve the same thing with NAT64/NAT46 proxies in the same locations you'd have to put EzIP routers. Plus by starting fresh, you simplify the routing problems upstream that can lead to additional latency that stacks up over time. AND your plan relies on the Option field, which isn't trusted that much and can't be assured to propagate.

Google keeps tracking you even when you specifically tell it not to: Maps, Search won't take no for an answer

Charles 9

Re: "Privacy? Get over it / This is the way the world works"

"If not possible, run Windows in a tightly fire-walled VM over Linux"

And if not possible to use a VM due to high performance of RAM demands?

Charles 9

"This is also why fundamentally AOSP, lineageOS and other custom rom can work perfectly without google apps."

OK, know one that doesn't trip dm-verity?

Charles 9

Re: What exactly did they do?

But Google Play Services is built into every vanilla Android phone, and it alone can send all it needs to Google via base station triangulation (and the only way to stop that is to turn off the radio, at which point it's practically a paperweight. Remove GPS is only possible by tripping various safeguards built into the phone which can cause apps to balk.

Charles 9

Re: My solution

And then you get locked out from root-aware apps, and since Marshmallow dm-verity is enforced and can be checked, too.

Facebook flat-out 'lies' about how many people can see its ads – lawsuit

Charles 9

Re: And, of course....

Until you start hitting ad walls you can't see to pass...

Charles 9

Re: This is another easy win for Facebook

And what about multiple accounts for each actual human?

Snap code snatched, Pentagon bans bands, pacemakers cracked, etc

Charles 9

Re: Is it that hard

"Why else are we still using f##king pagers and fax machines in hospitals in 2018?"

Pagers run on lower frequencies than cell phones. Lower frequencies are easier to penetrate into buildings, making them better-suited for use deep inside hospitals where cell phone signals aren't guaranteed to reach (I can speak from firsthand experience; once I get well into a hospital, I go Out of Range).

As for fax machines, not only are they easier to deploy to less-sophisticated areas where not even computers are a given, there are legal requirements for hard copies and paper trails (such as for admission in court).

EU wants one phone plug to rule them all. But we've got a better idea.

Charles 9

Not to mention murder on the batteries because of the inherent heat issues.

Mattel's parenting takeover continues with Alexa-like dystopia

Charles 9

Re: Message to parents and toy makers.

"Parents: YOU are soley responsible for the upbringing of your children."

But there's no way to prevent them abdicating responsibility (because they can just drop a kid off at an orphanage and vanish), in which case you've got a bunch of potential delinquents and no one to raise them. And since Soylent Green and the like is not morally considered an option...

Mozilla-endorsed security plug-in accused of tracking users

Charles 9

Unless, of course, they changed their behavior AFTER they were vetted...

Democrats go on the offensive over fake FCC net neut'y cyberattack

Charles 9

Re: Pai is still damaging society

"That means EVERYONE EQUALLY MEDIOCRE. That's like SOCIALISM. Except, in socialism, "the elite" will ALWAYS 'get theirs'."

One, is it not better to be sure everyone gets their daily bread instead of some feasting and others starving, IOW steady flow instead of boom-and-bust? Plus, what about things like healthcare where lives are at stake? Do you just tell the poor to FOAD?

And two, how do the elite "get theirs" as you so put it?

Grubby, tortuous, full of malware and deceit: Just call it Lionel because the internet is MESSY

Charles 9

Re: Nothing wrong with the internet.

He's saying social media innately ATTRACTS them. Like how leaving puddles out in the open encourages disease-bearing mosquitoes.

Charles 9

"They might be resistant to fire (or even feed on it) but are they resistant to a good hanging?"

An iron neck would make them hang- AND decapitation-proof. They'd probably break the rope first and revel in it. IOW, the worst thing you can do to someone crazy is to give them airtime. Problem is, the crazies are crazy enough to make NOT giving them airtime EVEN WORSE.

You won't believe this but... everyone hates their cable company: Bombshell study lands

Charles 9

Re: Well, I...

Surprised I haven't started seeing a serious "America sucks! Move to Canada!" campaign yet...

Charles 9

Re: "Broadcast TV fee" has not existed for decades

They'll just fire back even the strongest signal allowed by the FCC can do squat if you live in a concrete canyon. The physics of a city's structure tend to make radio signals difficult to handle. Ask any cell phone or GPS user. Under the FCC mandate, they're not obligated to reach a particular stretch of people (TV is not considered essential). In fact, the cable company could (theoretically) drop the local channel if it can't reach a certain area (the onus is on the cable company, not the broadcast network).

Charles 9

Re: Conspicuously Missing...

Well, as they say, things could be worse. Newspapers suffer the same issues, I hear. Most people only buy newspapers for one or two sections. Without all of them, though, they wouldn't have enough buyers to stay in business. So you may not speak Spanish but your neighbor may be Hispanic, yet without both your subscriptions, television can be a much sparser world.

Charles 9

Re: Out of pure spite to my "free market" cable provider

But even that smacks of cutting one's nose off to spite one's face. There are plenty of fish in the sea who simply cannot live without ESPN. Say no, and they'll reply You Might as Well Be Walking on the Sun.

IPv6: It's only NAT-ural that network nerds are dragging their feet...

Charles 9

Re: What we need is IPv7.

"So, yes, IPv4/IPv6 interworking is a mess, however the real problem is the seeming lack of progress on a global public IPv6 Internet to encourage people to take the migration seriously."

Problem is, a lot of people are in "If it ain't broke..." mode, and anything that's broke right now under the current regime, they probably don't need. Since people need an IPv4 address to stay visible on the Internet in general, people just keep trading in them. Who cares about the new market when everyone's still in the old one, IOW? Unless and until something essential seriously breaks stone cold dead, IPv4 will continue due to sheer momentum.

Charles 9

Re: "the world is clinging stubbornly to IPv4"

Because ANOTHER problem hit: with the IPv4 address drought, routing tables got complicated, and no matter how much you try, complicated routing tables introduce latency, especially at the upper-tier routers that have to churn through a ton of this stuff every second. The reason IPv6 went so big was so it could go sparse...and simplify the routing problem WITH plenty of room to grow. Now instead of complicated lookup tables you can work with much simpler binary rules.

Charles 9

Re: Adoption of IPv6 is inevitable.

What about taxes? Sure, you'd like to hold them off, too, but it tends to be more trouble than it's worth most of the time.

Charles 9

Re: Overly complicated

"They have made IPv6 overly complicated, it's like you have to know more or less everything, before you start with the stuff, otherwise you'll end up having a network which might work, but you don't know why - and if you connect it to the internet you can't hide behind a NAT'd firewall - which is really really bad."

Well...there's a problem right there. Why does it have to be a NAT'd firewall. Why can't it be a straight-up firewall?

"And don't get me started on the notation, I've entered thousands of IPv4 address on my keyboard, on a numeric keyboard everything is there 0..9, and a '.' - everything which is needed."

IPv6 addresses CAN be entered in decimal, too, WITH the standard period notation. That's why the bracket notation: it helps to distinguish which is which. Hex notation is simply easier to read for the longer addresses and allows for the double-colon shorthand, but the spec DOES accommodate.

Charles 9
FAIL

Re: "the world is clinging stubbornly to IPv4"

"This is because when IPv6 was first published it was DELIBERATELY made incompatible with IPv4 a little fact that was pointed out to the committee who came with IPv6 and not only ignored but smug at."

Do we have PROOF of this...or proof of the fact that because IPv4 is not forward-compatible (it was designed DECADES ago in an age when RAM and CPU power were at a premium) that if you're going to break the mold, might as well start fresh?

"All that was needed was an extra 2 octets on the addressing, that's all."

Riddle me this, Batman. How do you transport 18 eggs in an egg carton only build for 12 without breaking something? Because that's basically what you're proposing. You CANNOT add octets to IPv4 (which has a FIXED 32-bit address limt--it's in the spec) without breaking something. PROVE us wrong WITHOUT adding anything in between or changing likely-unchangable firmware.

Charles 9

Re: Mobile devices / 4G networks

Confirmed. I'm on T-Mobile and The IPv6 Test Site says it's native IPv6. And that was at least two years ago.

Charles 9

Re: Ipv4 origins

In addition, IINM there are special allocations set aside for setups that don't easily fit into a geographic or otherwise sane structure (like perhaps a pan-global company with multiple external gateways in multiple countries). IOW, part of the reason for 128 bits is to (unlike last time) try to take everything into consideration.

Charles 9

Re: Obvious need for..

UNLESS even the smallest change breaks the mold. That's the problem with IPv4. It was designed (DECADES ago) for fast processing on limited memory and computing power. Ergo, it was designed with a fixed (meaning impossible to adjust) packet structure. It wasn't designed with forward compatibility in mind, and without that, there's no way you can make an extended IPv4 work without breaking something. Otherwise, how does one cram 13 eggs in a carton only built for 12 without breaking something along the way? And no, something like EzIP won't work very well without the same kind of infrastructures you would need in IPv6 anyway (special edge routers et al--guess what NAT46 and NAT64 routers do).

You can't always trust those mobile payment gadgets as far as you can throw them – bugs found by infosec duo

Charles 9

Re: And when the payment is actually sought?

That's what's happening here. Another scenario descried was telling the customer the transaction was declined when it wasn't, triggering double charges.

Sitting pretty in IPv4 land? Look, you're gonna have to talk to IPv6 at some stage

Charles 9

Re: Never!

Wouldn't really matter either way. It's just that using RFC1918 addresses makes it that much more likely the packet stays inside.

And I've got a better one for you. Why don't you prove it actually happens in real life by describing the means to do it using a spare home router, meaning one can easily do it at home using actual physical devices and wires?

Surprise, surprise. Here comes Big Cable to slay another rule that helps small ISPs compete

Charles 9

Re: Time for Pai to hold out for some more stock options from Big Cable

"If a gummint official EVER profits from his position like that..."

...he probably has enough resources to make the problem go away, too.

Money talks. All else walks.

Charles 9

Re: How to lie with statistics?

"Donn, there is no such thing as a free market. I can't set up a telco; I can't afford it. It isn't free.

The existing big telcos inherited most of their cable runs. Many of the rest were subsidised by the gummint they now despise. I can't inherit anything (and I can't afford to bribe a congressman/senator - they're not free, either)."

It's like I said: Barriers of Entry. A high barrier of entry tends an industry towards monopolies and cartels because it's easy for incumbents to keep upstarts out. Utilities have high upfront costs (utilities have a high capital prerequisite; they require lots of infrastructure to operate) and thus a naturally high barrier of entry (as in it's a trait of the industry itself, not of any particular part of it, and thus hard if not impossible to skimp).

Charles 9

Re: How to lie with statistics?

You forget about Barriers of Entry. Utilities, especially rural ones, are notorious for a combination of high initial cost (capital outlay for infrastructure) and NIMBY issues that make them among the most likely to form natural monopolies.

Charles 9

There was never an opportunity. Rollout to rural areas involves so much capital investment that providers would've refused to roll out AT ALL without sweetheart deals. When rural communities desperate to keep residents are stuck with a Hobson's Choice, it's literally a matter of Take It or Leave It.

Microsoft devises new way of making you feel old: Windows NT is 25

Charles 9

Re: Long live the dinosaur

So why couldn't those apps be shunted into VMs and be done with them?

ZX Spectrum Vega+ blows a FUSE: It runs open-source emulator

Charles 9

"Pi is halfway there. The problem is nobody is selling games for them in the shops."

Pi software won't be sold on high street until Pis are sold on high street. The bundling effect on which high street relies tends to require they have all the piece on hand.

Encryption doesn't stop him or her or you... from working out what Thing 1 is up to

Charles 9

Re: Not to defend IoT security but...

Except you don't have to physically be present to figure this out. Plant your bug during the day while everyone's at work/school/shopping, then you can peek in from the privacy of your own place.

As for chaff, one problem is if you have limited power, meaning you're caught in the middle of the scale of efficiency versus obscurity, unable to achieve both yet forced to do it anyway (because you don't want your traffic sniffed BUT you can't waste power either).

For all the excitement, Pie may be Android's most minimal makeover yet – thankfully

Charles 9

Re: Who's at fault?

But the software may complain. More and more apps won't work without a "pristine" environment (sort of like the "Warranty VOID if removed" sticker), and that usually also includes the bootloader.

Charles 9

I've been told the ADB backup system is not that reliable, not compatible with many devices, and hard to determine if the backup actually worked. Holo Backup has been abandoned on those grounds (couldn't trust the underlying system, no alternatives).

The age of hard drives is over as Samsung cranks out consumer QLC SSDs

Charles 9

"Whereas I suspect that for the cost of these 4TB SSDs you will be able to fill a 5 bay nas with 4TB mechanical hard drives and still have some change"

Hmm, I'd like to see some numbers. 4TB rust drives run about $100 or so each depending on the specs, then there's the NAS box itself (which has about a $100 baseline, too) where price and quality vary considerably from device to device. So that's a minimum $600 right there.

Charles 9

Re: No story here

"Tape is dead?"

It is in the consumer sphere. When was the last time you saw a tape drive at the local Best Buy? At least when QIC drives were around, consumers with a bit of cash could use them. No such analogue exists today, much as I wish there was, as we could really use some reliable way to archive a few TB at a time of stuff. As of now, the closest solution out there is rotating external hard drives.