* Posts by John Smith 19

16330 publicly visible posts • joined 10 Jun 2009

Talos opens box, three Aerospike vulns fly out

John Smith 19 Gold badge
Holmes

"crafted packet makes the server process crash by dereferencing a null pointer."

Mistrust anything that comes from outside your application and anything that a user can overwrite which your application will (or can be made to) read back in.

That idea should be baked into every devs thinking.

But apparently not.

Lenovo to build and run SAP's cloud in China

John Smith 19 Gold badge
Unhappy

Free spyware riddled laptop for every 1000 user licenses?

This is a pretty big deal for both parties and no doubt both have spunked out dollops of platitudes on the subject.

Just as long as no one is expecting any sense of privacy .

Gulp! Drones dodge spray from California's gaping moist glory hole

John Smith 19 Gold badge
WTF?

"several reporting stations report over 500 inches"

That's close to 42 feet of snow in 1 season.

But this does look like the Mother of all water slides.

I suspect the trouble (apart from not being able to hold your breath long enough) is what's at the bottom.

DomainMonster mash: Hundreds of websites vandalized after Brit web host server hacked

John Smith 19 Gold badge
Unhappy

Web site security is rarely a priority when IT is a non core activity

Oh wait...

I hope DomainMonster is really cheap, because as it's been hit twice now it's clearly not very secure.

How's your online bank security looking? The Dutch studied theirs and... yeah, not great

John Smith 19 Gold badge
Coat

Sounds like Dutch banks should be talking to their ISP's

Because otherwise their internet front door will become their security back door.

Netflix treats security ills with Stethoscope: Open-source self-probing tool

John Smith 19 Gold badge
Go

Sounds a bit involved but...

It's good that at least one company is recognizing the compromising of their business starts with the compromising of one of their customers devices.

Netflix is a subscriber service so (potentially) offers a rich haul of personal and financial details for anyone who breaches their security.

It's a start.

'Hey, Homeland Security. Don't you dare demand Twitter, Facebook passwords at the border'

John Smith 19 Gold badge
Unhappy

In the UK a British teach was stopped from boarding a plane to the US from Iceland.

AFAIK even when you group book you have to provide passport details for background checks (despite the */11 planes being internal flights) so he should have been advised beforehand he would be be refused entry to the US.

It was a stopover for a party of schoolchildren from his school.

Would you be surprised his name was Mohamed and he was of the darker complexion?

Meet the chap open-sourcing US govt code – Paul, an ex-Microsoft anti-piracy engineer

John Smith 19 Gold badge
Thumb Up

Interesting it's coming out of the INL

Idaho is where they tend to build nuclear test reactors (and occasionally blow them up).

Given US paranoia about "dual use" and "loosing strategic advantage" this is even possible.

But I'm quite excited it is.

Apple to Europe: It's our job to design Ireland's tax system, not yours

John Smith 19 Gold badge
WTF?

Illegal state aid

Meanwhile HMG spent 3 years eventually handing over a paltry £60m to Reaction Engines,and in the process changing the rules so REL had to get a prime contractor on board first IE forcing REL to accept a BAe to buy in up front.

But holy s**t 12% tax down to 0.004% tax. F**k me sideways.

That's better than the deal Bernie Eccleston got for his alleged tax evasion of £2Bn.

John Smith 19 Gold badge
Unhappy

Of course not. Apple generates all its money in the internet

Which of course is nowhere.

Which is where they pay their taxes.

Apple once again showing why they pay their CFO $60m+ a year.*

For the colossal set of balls to spout this sort of arrogance.

*Well of course it's not really "pay" exactly because that would mean he'd have to be taxed at that level.

Automated, insight cannot be: Jedi master of statistics was good – but beware the daft side

John Smith 19 Gold badge
Unhappy

"Do not, however, mistake good communication skills for real analysis:"

This point right here.

"Presentation skills" are the way of the dark side Marketing

Analysis is the way of real management.

Farewell Hans. You had points to make and you made them effectively. Let's see if anyone paid attention.

NASA extends trial of steerable robo-stunt kite parachute

John Smith 19 Gold badge
Thumb Up

Nice to see work from the Aeronautics side of the house.

The first A in NASA

Improving recovery accuracy is one of those "enabler" technologies that should multiply the utility of experiments by getting the results back to the lab faster and hopefully leave the equipment in better condition to be reflown, a key benefit of balloon and sounding rocket development programmes.

Suffering ceepie-geepies! Do we need a new processor architecture?

John Smith 19 Gold badge
Go

"graph with 18.7 million vertices and 115.8 million edges."

So how many FP processors can you put in an FPGA?

How many FPGA's can you put on a board.

I think it was interesting when the EFF built their DES cracker (to finally prove DES was FUBAR) they looked at this and went with ASIC's because it was a more affordable solution.

Those numbers mean either 2^25 or 2^27 elements are being processed. So either those PE's have to be very simple (how much smaller a floating point range can you get away with) or you'll need a lot of chips.

This looks quite sensible, although I'd wish the graphic at the top could be blown up. It's pretty useless at that size.

BTW has anyone else noted someone has been fiddling with the outlining code for icons?

Beeps, roots and leaves: Car-controlling Android apps create theft risk

John Smith 19 Gold badge
FAIL

Yet another market that's discovering it's now in the computer business

Pity. MISRA's standards for writing reliable C for embedded automotive applications IE engine and gearbox management, were reckoned to be quite good.

Of course the mfg's argument for this is that you no longer have to carry that heaaaaaaaaavy key with you, and you don't have switch off your car alarm after you get in, saving you literally minutes a year.

Java and Python have unpatched firewall-crossing FTP SNAFU

John Smith 19 Gold badge
Unhappy

Inherent in the protocol or inherent in the default configuration of the servers?

Given FTP's pretty widespread the former is going to be tough to fix. The latter rather less so.

Obvious I know but is this yet another example of why web external (and most internal) web servers should all services not directly and immediately needed to be either switched off or removed entirely?

Uber hires Obama's attorney-general to review its workplaces

John Smith 19 Gold badge
Unhappy

Interesting

Arianna Huffington (often said she thought it Sen. Huffington said it) and Obama's former AG working together.

Now that's what I call "Across the isle" support.

I'm not sure what for exactly.

BTW Ubers business model (burn VC funds to drive competitors out of business to secure a near monopoly on a transport mode) is not unknown in the UK.

Say hello to "Stagecoach" and their destruction of local bus services across the UK. Obviously Uber being USian their goals are more ambitious.

UnBrex-pected move: Amazon raises UK workforce to 24,000

John Smith 19 Gold badge
Unhappy

You say “fulfilment centres”

I say labor camp.

As for "1500 new software devs" you can bet most of them will be on some sort of "Apprenticeship" which will extract maximum result from minimum additional training.

In colossal shock, Uber alleged to be wretched hive of sexism, craven managerial ass-covering

John Smith 19 Gold badge
Unhappy

"and a studied relaxed demeanor, very bizarre"

Not at all.

He (or she) has successfully conned their manager into believing their BS and neutralized or enrolled HR into their world view. They have a license to treat their staff like s**t and know they can keep on getting away with it as long as they can persuade or coerce any key subordinates into continuing to do their job for them.

You see the chaos and financial ruin they bring and think "How can we fix this"

They think "Who can I blame for this and how can I get a pay rise out of it?"

Psychopaths don't get why "It's bad" and they don't care about your feelings, unless of course they are manipulating them to do what they want you to do.

And as it's a severe personality disorder, not a disease, it's viewed as incurable.

John Smith 19 Gold badge
WTF?

2017 and male managers still consider this "appropriate" behavior with women staff?

In fact he seemed to view it as completely normal.

In an operation with 20% women.

Icon says it all really.

Love lambda, love Microsoft's Graph Engine. But you fly alone

John Smith 19 Gold badge
Trollface

Re: I would rather drink bleach

Nonsense, a 7YO child could understand this.

Now all you need is a 7YO child.

SpaceX blasts back into the rocket trucking business

John Smith 19 Gold badge
Go

Good return to flight from the Cape.

But I'll be looking for the first flight of a reused first stage.

More specifically what SX will charge for it.

Space won't become truly viable till launch prices drop at least 10x. Nothing else is really going to do it.

Let's see how much SX will cut it.

Probe President Trump and his crappy Samsung Twitter-o-phone, demand angry congressfolk

John Smith 19 Gold badge
Unhappy

But people you're forgetting the "Shaggy Defense"

A press conference in a White House far far away....

"Mr President could you explain what you meat when you tweeted "I wouldn't pay Hilary $5 to suck my inordinately large d**k" ?

The D."What are you talking about. That wasn't me. I've never tweeted anything about sex with Hilary. This is fake news"

"It was received by all your Twitter followers at 1158 last night"

The D "Then it was by my bed while I was asleep. It sounds like I may have been hacked. My people will be looking into this. Next question."

John Smith 19 Gold badge
Unhappy

"The piss-eyed tango-skinned buffoon seems to want to get it all out of the way early."

Which implies after the first few weeks months he and and his team will get over their high jinks settle down to run the country in a business like and efficient manner.

It's a nice idea to hope for.

Call me a tad skeptical it's going to happen.

Jun-OH-NO! NASA's Jupiter probe in busted helium-valve drama

John Smith 19 Gold badge
Go

Note while it's in a stable orbit NASA can look at safe ways to lower its orbit

without firing the main engine. Possibly by some tricky solar sail effects on the solar wind, maybe attitude thrusters, if Juno has any.

JPL put a lot of work in engine design for hypergols during the 1960's and 70's that's served them pretty well. Valve sticking is one of the areas they spent a lot of work on . It's quite tricky. You want a hard coating to resist attack by aggressive chemicals (and both propellants are aggressive) but you'd like a soft coating like a rubber O ring to seal well and stop leakage.

They also developed some of the baseline ways to model injector sprays and develop injectors capable of 10:1 thrust modulation.

John Smith 19 Gold badge

"Hopefully the electronics will last the extended duration of the mission. "

They will.

The 56 day orbit duration puts it much further away from Jupiter as a radiation source, which is where most of the radiation comes from.

Smash up your kid's Bluetooth-connected Cayla 'surveillance' doll, Germany urges parents

John Smith 19 Gold badge
Childcatcher

"charge them with aiding and abetting paedo's."

I hate to say this but just for once that TOTC BS could actually be useful.

And let's be honest what sort of people want to mass compromise a doll mostly aimed at young girls?

A) People wanting to build the next IoT botnet.

B)People with a keen interest in young girls.

Some of those might be boys their age but what are the odds they are not?

New Royal Navy Wildcat helicopters can't transmit vital data

John Smith 19 Gold badge
IT Angle

"Calculating the baud rate for human speech "

Well speech vocoders can do human speech in 2400bps. At 200 words a minute with an average 7 characters a word that's say 108 bps.

John Smith 19 Gold badge
Unhappy

" it's not like "Over the Horizon Targeting" and "Battle Damage Assessment" is a real thing"

Oh it can do all that.

The crew just can't actually tell anyone about the results before they land.

Which may be a bit late.

John Smith 19 Gold badge
Unhappy

"How did so many idiots get into positions of power?"

The MoD has a "procurement" staff of about 23000 for about $18Bn

The Israeli MoD about 500 for about $15Bn (IIRC from El Reg previous article)

Clearly someone is doing it wrong.

UK Snoopers' Charter gagging order drafted for London Internet Exchange directors

John Smith 19 Gold badge
WTF?

Hmm, Legal advices from unnamed sources, new paid executve directors, new constitution

written by who?

And that opening move with "You do agree the Chairmen should be able to force through changes (in an emergency)"

Is it just me or does this sound like the internet equivalent of the "Act of Enablement" routine?

I'd love to find out a)Who wrote this document and b)Who agreed to it being submitted to the members in the first place.

John Smith 19 Gold badge
Gimp

I think it's been HO policy for a long time and they usually manage to have Home Secs go native.

should read

"I think it's been the plan of a cabal of unelected data fetishists mostly based in the HO policy for a long time and they usually manage to have Home Secs brainwashed into believing their apocalyptic, unargued and unconformable BS"

May was what the 9th of them to spout the line?

Did Oracle just sign tape's death warrant? Depends what 'no comment' means

John Smith 19 Gold badge
Pint

I'm staggered

There really are sysadmins who get that cheap hard drives (or "The Cloud") have serious drawbacks.

I raise my glass and order a round for you all.

THE SCHMIDT HITS THE BAN: Keep your gloves off AI, military top brass

John Smith 19 Gold badge
Unhappy

"“If you have something that you don't want anyone to know, maybe you shouldn't be doing it"

And some people wonder why human beings call him creepy.

Privacy <> legality.

John Smith 19 Gold badge
Meh

Creepy Eric Schmidt said you should be afraid of large AI (which does not exist yet)

Ignore the vast personal data harvesting machine behind the curtain.

It is of no importance.

Zuckerberg thinks he's cyber-Jesus – and publishes a 6,000-word world-saving manifesto

John Smith 19 Gold badge
Coat

""Or possibly the next Messiah?""

We should put a stop to this right now.

He's not the Messiah.

He's a very naughty boy.

John Smith 19 Gold badge
Meh

"A girl I knew.." "a tattoo on his arse, which read "100% C**t"."

Sounds like a UL to me.. or another Mark Zuckerberg (6Bn+ on the planet. Got to be at least two of them).

Because

a)The FB Zuckerberg doesn't look the sort to handle the amount of pain that would involve

b)He seems to lack the introspection needed to realize he actually is a bit of a c**t a lot of the time.

But who knows? Perhaps he's a deeply thoughtful individual who often ponders the human condition and the plight of humanity and is often disappointed by his own behavior.

No, I don't believe that for a second, but there's just a snowballs chance in Hell it might be true.

John Smith 19 Gold badge
Unhappy

So you have a choice of views.

a) It's his well meaning but misguided view of to create (to coin a phrase) "Better living through Facebook." It's not bad, it's just sad.

b) It's self serving BS from a megalomaniacal narcissistic designed to make him look better and generate more attention on FB (I presume it's on FB), possibly with a view to entering politics.

I'll leave others to answer that one.

If FB is "new media" does this make Z the first challenger to Rupert Murdoch?

John Smith 19 Gold badge
Unhappy

Re: Mr Bookface wants to be President. Like?

I think you're right.

Or possibly the next Messiah?

I've only seen the start of "The Social Network" but the line from his ex-girlfriend seems spot on.

Roughly

"You think people don't like you because you're a geek. It's not. It's because you're an a**hole"

Inside Confide, the chat app 'secretly used by Trump aides': OpenPGP, OpenSSL, and more

John Smith 19 Gold badge
Mushroom

"The President's brain is missing. Could it possibly get any worse?"

But that was satire.

This is real life.

John Smith 19 Gold badge
Unhappy

"Crypto consists *entirely* of details, in a way that less ... demanding ... "

It'd tend to agree.

Steve Connell in "Code Complete" described how he wrote a DES encryption routine to do real time code coding on an original (4MHz) PC to drive a serial line and how he re-wrote it about 20 times to get the necessary speedup.

Implementing a high security encryption / decryption may be some of the smallest but most demanding software anyone can be asked to write.

Why I had to sue the FCC – VoIP granddaddy Dan Berninger

John Smith 19 Gold badge
Unhappy

"Do you pay "rental" for the electrical supply cable coming into your home,"

Actually you do.

It's built into any kind of "standing charge" or it's delivered by raising the rates per unit of whatever charged.

OTOH the concept of "line rental" on a mobile phone is complete BS, since part of a line rental is to guarantee access to the network, which is an obvious lie on a mobile.

Talk of tech innovation is bullsh*t. Shut up and get the work done – says Linus Torvalds

John Smith 19 Gold badge
Thumb Up

" I've actually dropped linux on an AIX frame,"

Now back in the day the SP2 boxes where the choice for oil companies crunching through their geophysical data for the umpteenth time. I'm not sure if this is still the case.

If anyone has the right to say they originated "data mining" it's the oil and gas industries because the data sets were (and are) vast and the cost of repeating a survey eye watering.

John Smith 19 Gold badge
Unhappy

"I stared at the letters FSM for an embarrassingly long time"

Err, it's an IT site. IBM manuals tend to describe protocols using state diagrams.

Obviously such practices are less common than I thought.

Perhaps that's why such work is so hard. *

Note. True FSM's are not Turing complete. The question is how much of the functionality in the kernel needs needs something more powerful than an FSM to deal with situations due to massive growth in the number of possible states.

John Smith 19 Gold badge
Unhappy

Never mind the code quality, feel the "innovation."

Ideally there's a balance of some innovation delivered with solid program running.

My instinct is a lot of a Linux kernel is about protocols and protocol implementation.

I wonder how many of the developers do this as an FSM with the code written by the tool?

Or how many (eventually) implement it as a bodged up FSM?

As Microsoft touts Windows Insider for biz, let's take a look at W10's broken 2FA logins

John Smith 19 Gold badge
Unhappy

"a cunning plan to use your company and its staff as alpha and beta testers"

Correct.

John Smith 19 Gold badge
FAIL

"Microsoft Insider for IT Professionals"

Because WTF should we spend money testing our code when you can do it for free (to us)?

Does it need to be said any outfit looking to buy into this should set aside separate machines to be contaminated with this and a full regression test list so the stuff staff really need (like this key for example) goes on working ?

OK, it's time to talk mass spying again: America's Section 702 powers are up for renewal

John Smith 19 Gold badge
Gimp

Probably best to hit them in the wallet.

IE How much does this beast cost to support and how many actual terrorist incidents has it stopped?

My WAG is a "shedload" and "not many."

Maybe America is awash with terrorist sleeper cells.

TBH though I kind of doubt it.

Americans should fear a takeover of their government alright. By unelected data fetishists and a "coalition of the willing"(ly stupid).

Oracle 'systematically stiffed its salesforce' claims new sueball

John Smith 19 Gold badge
Unhappy

How can that be legal?

Simple. Like any law. If no one complains the law does not know about it. :(

if true it is morally reprehensible.

Yes it is.

Forget quantum and AI security hype, just write bug-free code, dammit

John Smith 19 Gold badge
Unhappy

"boss tells you that an important customer needs a "small change" that must be ready by tomorrow. "

Then you do a breakdown showing that a)It's not minor b)This is what it will cost in development time and c)If they want it done right now there is a real risk it will break the release.

All project management requires you a)Manage the team below you b)Manage the manager above you.

Did you not know this?

That's the difference between a professional development environment and and making it up as you go along.

Get it while it's hot: NASA's Space Poo contest winners wipe up $30k

John Smith 19 Gold badge
Coat

Clearly a huge outpouring of effort to handle this problem

I'd say "thumbs up" but that might be misinterpreted.