* Posts by John Smith 19

16330 publicly visible posts • joined 10 Jun 2009

SIM card hacker: Bug is either 'a backdoor, gross negligence, or both'

John Smith 19 Gold badge
Happy

Hug a Hudl?

Safer than a hoodie

Unless the batteries are a bit suspect...

British Gas robo home remote gets itself into hot water

John Smith 19 Gold badge
Unhappy

Re: US houses

"You expected what in that third-world retrograde part of the US?"

This is a state that's got some people with serious cash to spend.

I'd hate to imagine what Arkansas (routinely listed as the 50th poorest US state in a field of 50) is like.

Although I guess bacons pretty cheap there (pig farming is a big industry there, along with "Deliverance" tours).

John Smith 19 Gold badge
Unhappy

Re: Combi boilers v Old Boilers

"Combi boilers are like any other tech you get the "cheap and cheerful" end and the "dearer, works better,higher spec and lasts longer type".Ergo you go for a low spec system you get more maintenance and repair bills.As for efficiency you would be lucky to get in the range of 30-40% from an older type boiler whereas a newer well built and maintained boiler can get over 70% efficiency."

Well strictly you'd expect 80% from an old boiler but modern (condensing) types run something like 90-95% by preheating the water through the flue heat exchanger.

But combi boilers are a compromise design. Either you want hot water for a tap and/or bath/shower or you want it to heat radiators.

Better solution is to separate the 2 tasks with separate systems that are best at each.

BTW IIRC in the book "Alternative Energy Without Hot Air" the author says solar water heating is always a good idea, even in the UK, as it's something everyone wants and the panels can use all the solar spectrum, unlike PV panels.

Yes I probably spend far too much time studying plumbing.

John Smith 19 Gold badge
FAIL

A Hive. One Queen. *many* drones.

So who does BG think you are in this picture?

And £200 for LCD + microcontroller +GSM card + (maybe) 4 lines for the boiler interface.

This is for a corporation with BG's buying power.

BTW the "smart meter" roll out is not mandated by the EU if the roll out for the business case does not close.

And AFAIK it does not.

You want control? Get a controller that supports an outside temperature sensor.

Bill Gates: Yes, Ctrl-Alt-Del salute was a MISTAKE

John Smith 19 Gold badge
Unhappy

Re: Ignore the obvious choice

"The dreadful first release of the Windows operating environment (i.e., a type of DOS application) came along just before 1986, and it did not become truly usable and widely popular until v 3.1 in 1992 - 11 years after the standard IBM keyboard was first manufactured."

And still being co-operativemulti-tasking, like the Archimedes IIRC, but without MS being very honest about it one rogue application could still hang your computer.

Thanks Microsoft.

eBay unveils data center that runs on fuel cells

John Smith 19 Gold badge
Unhappy

"Natural* gas can come from many sources.

Sadly there are probably too few staff to make the facility self sustaining for CH4.

But at least it's not using H2.

Chinese building orbital lab by 2023 to make 'space medicine'

John Smith 19 Gold badge
Meh

Rover by Christmas?

They'd better get a move on.

Surface Mini on shelves NEXT YEAR – and it will run Windows RT

John Smith 19 Gold badge

"if this were a flick: Zabriskie Point"

Because it's also a bit s**t?

John Smith 19 Gold badge
Meh

Re: Will they still be around next year?

"It would have made his argument no more or less valid. The old AC straw man argument is so feeble."

Wrong.

Because in 5 or 10 years time we'd know who made such a remark and recall that either they were a)Farsighted and wise or b)A fool with no knowledge of history.

I'm no great fan of MS (which you can check my posts to confirm). They've released many s**t products over the years, sometimes multiple fails in the same year.

But they are so damm big (and have so many lawyers and PR types to do lying

damage control for them) that the odds on bet is they will survive this, just as Linux will not be the desktop OS of 2014 either.

Their "argument," as you (they?) put it is simply an assertion.

Mine is based on historical evidence.

John Smith 19 Gold badge
Unhappy

Doing everything to try to help Intel.

You've got to ask if this is bumping up Intel's sales of their processors more than it's costing MS.

Can you say "Inter company cross subsidy?"

Seriously MS had to put in significant effort to make winRT different to Win 8.

If your business is selling software you don't care whose processor it runs on as long as you get paid. Which should be determined on how useful that software is.

But as we've seen once MS gets anywhere near a level playing field it usually gets stomped.

John Smith 19 Gold badge
Unhappy

@qwerty

"I for one have several apps that would work well on this kind of device but have enough complications (e.g. 3rd part libraries) porting to WinRT that I simply don't have the incentive to invest the time while RT-only accounts for such a tiny part of the market."

Which I think is rather the point,

Increasing the "ARM is rubbish" meme and supporting their long term partner in crime (and I mean that literally give the number of cases they've been involved with) Intel.

John Smith 19 Gold badge
FAIL

Re: Will they still be around next year?

"Pretty much every single Microsoft product line is upto it's neck in crap right now."

Blah blah..

Now if you'd had the guts to put your name on that post...

Google's boffins branded 'unacceptably ineffective' at tackling web piracy

John Smith 19 Gold badge
Unhappy

Tough call. One side is ignorant and/or stupid. The other is greedy and smart.

It is not Google's job to block copyright infringement, which is a civil matter, not criminal.

But OTOH that review sounded as the yoof might put it "Well bent."

And the "Digital Economy" act was one of the Dark Lords pet projects, so by definition highly suspect.

Blighty's great digital radio switchover targets missed AGAIN

John Smith 19 Gold badge
FAIL

So DAB <> Freeview and <> *general* digital radio

And WTF about no RDS?

Clearly someone thought they were being very smart by being 1st adoptors but this has in fact turned out to be a bit s**t.

Time to cut losses and take it out back with 'Old Yeller.

MPs slam bumpkin fibre rollout, demand halt to further £250m cash spaff

John Smith 19 Gold badge
Meh

The problem seems to be as a *public* company the govt can't order Openreach

to be sold off as an independent entity.

Let's say that it looks like that having what appears to be 95%+ of the UK telecommms infrastructure owned by a part of one of the competitors would seem to be somewhat "unfair?"

John Smith 19 Gold badge
Unhappy

"BT aren't the better service. They just started out with a massive advantage."

Damm right.

The rule of an effective monopoly is of course "Monopoly, what monopoly? All users have a choice."

John Smith 19 Gold badge
Unhappy

It's time the UK Govt realized that beyond a certain size of market share it's an oligopoly.

So all big players should be submitting plans for adding to their infrastructure.

Until that happens BT will remain the de facto UK monopoly supplier of the last mile.

John Smith 19 Gold badge
Unhappy

Re: Yes and No

" but BT have no plans yet to install the vital fibre to the cabinet that would help. They are not especially rural, and northern jokes aside it's nowhere near being classed as the back of beyond."

They might be better to form their ownISP and raise the cash locally to sort out the link to Barnsley, as a few places have done.

Boffins: Internet transit a vulnerability

John Smith 19 Gold badge
Unhappy

Re: load of tosh

"Any ISP/IXP with clue, only allows admin acess to their routers from some secured internal mgmt network. There simply is NO internet facing service on the modern router that can be exploited in a properly implemented network. "

Fine sentiments.

But then Garry McKinnons attack on the DoD servers through finding a desktop PC and remote accessing its remote admin tools from the internet (which IIRC had no password protection on them) should also have been impossible, given the DoD's core business is upsetting foreigners, who will probably want to retaliate.

There's a very fat line between should not and is not.

It's not a "sysadmin" problem, it's a human problem.

John Smith 19 Gold badge
Meh

Internet phone tap. Not just for the FBI. Now *anyone* can play.

As they have since Kevin Mitnick used to re-directed attempts by Bell security to trace his calls.

Back in the 80s.

And given that most router software appears to be based around Linux versions (so source is "sort of" accessible) the remote exploit issue does not seem that big a stretch.

Bottom line. Nothing new under the sun.

More people should be aware all comms systems are compromised by "legitimate" actors (IE operating country security and police services).

The questions are a)How easy is it for everyone else to gain access and b)How worried should you be if a 3rd party knows about your "stuff *"

*Where "stuff" ranges from your somewhat catty remarks about a gf/bf up to the revised nuclear weapons release and launch codes (yes, I know that should not be accessible anywhere on the open internet, only sent through dedicated systems etc, but what routers do those system run over?)

Fresh shift of 'nauts arrives at Space Station, planning torch jaunt

John Smith 19 Gold badge
IT Angle

The short journey is due to the upgreded flight computer

apparently

The cruchy old one weighed about 90lb (Implemented in discrete TTLski logic) had been doing solid work for about 4 decades but they felt it was time for an upgrade.

Young people. Don't know how lucky they are. We did all with slide rules and log tables blah blah......

Is this the silicon chip KILLER? Boffins boot up carbon-nanotube CPU

John Smith 19 Gold badge
Thumb Up

"Other news sources are reporting that the CNT gates are around 9 mircons in size "

Now that makes the 1KHz clock frequency much more understandable.

But the real takeaway is that someone has put all the pieces together to create a full chip mfg process flow, including the design techniques to cope with what appear to be material specific failure modes.

Thumbs up for that. IIRC CNT's have been slowly getting into some existing processes over the years but this is a full on dedicated CNT process, and that's a big move.

John Smith 19 Gold badge
Unhappy

Re: A way to go yet

"In the late 1980's I had access to a 2.4Ghz (bipolar) process "

GEC Marconi? I did not think MOSIS offered bipolar.

"I never made one cos there wasn't any suitable ram available! "

The Achilles Heel of any architecture.

Boffins have constructed a new LIGHT SABRE. Their skills are complete

John Smith 19 Gold badge
Thumb Up

A neat application of RJ Jones "The other way around principle."

Instead of using light to shepherd particles, vice versa. And the article even lists some IT uses as well.

I've always wondered why no one seems to have gone the other way and built complex molecules using this technique. I'm sure there are some syntheses that have such poor yields (many steps and no good catalyst for example) that it would actually pay to do it this way.

Sadly I think the synthetic chemists don't talk to the kinds of physicists who do this sort of thing much :(

Thumbs up for a clever hack and hopefully many new applications.

John Smith 19 Gold badge
Unhappy

Re: Finally!

"Now where is my hoverboard?"

Actually the technology for that should have arrived about a decade ago, when scientists worked out the genetics of the "flagellum motor," and how to tweak it so it could be mounted to a framework.

1 motor generates about 1 nano Newton of force.

stick about 1000 billion of them on a framework (that's about the size of a full stop on a page), supply regularly with ATP and hey presto you have lift off..

The control problem (bit like the Segway but much tougher) is left as an exercise.

John Smith 19 Gold badge
Boffin

" Wonder what kind of application photon matter would have"

Read the link might be an idea?

But the TL:DR answer is :

"Particular applications of this technique include all-optical switching, deterministic photonic quantum logic and the generation of strongly correlated states of light9."

John Smith 19 Gold badge
Unhappy

Re: If I was making a press release like this

"I would make damn sure I released it on April 1st - just to fuck with everyone who dismissed it as a joke."

No can do.

This academia.

Publish or perish.

Amazon Kindle Fire HDX: Bezos dives into tech-support MONEY PIT

John Smith 19 Gold badge
Happy

Rubbish. It won't tell the taxi driver what hotel you're in if you're the worse for wear

Now that's what I'd call a Mayday button.

Space truck Cygnus left idling outside ISS after data format snafu borks docking

John Smith 19 Gold badge
Meh

Re: This was *not* supposed to happen. Orbital are *experienced* govt space contractors

"Which explains why SpaceX moved faster. They didn't have the experience that tells all seasoned government contractors just how long to drag out the contract."

You might think that.

I could not possibly comment...

John Smith 19 Gold badge
Unhappy

This was *not* supposed to happen. Orbital are *experienced* govt space contractors

IE The "Safe pair of hands" winner of the COTS contract.

While Spacex were viewed as the inexperienced chancers launch service providers by NASA, who needed a safe pair of hands to back them up.

It's not quite worked out that way. It's Spacex who've started the actually cargo deliveries (the CRS contract) and Orbital that are still in "testing."

Fortunately both have already trousered a portion of the cash for every cargo launch.

BTW the S/W glitch seems to be that Orbital are using the 13 bit week counter in the updated GPS spec and ISS uses the the older 10 bit week counter, that rolled over in 1999.

Which is odd, give that Orbitals Antares/Cygnus was much more of a systems integration exercise than Spacex's F9/Dragon. Sort of like a Dell versus say an HP.

You'd think they'd have had eyes wide open for those sort of interface glitches, when they bolted the assorted Russian, Italian and Japanese kit (and a few other nations as well I'd guess) kit together.

But apparently not.

John Smith 19 Gold badge
IT Angle

Re: while engineers worked on fixing the problem

"Just turn it off and back on again."

What did you think the phrase "This is ground control, you are go to cycle power" meant?

Works more often than people might realize too.

UK.gov's e-Borders zombie still lurks under the English Channel

John Smith 19 Gold badge
FAIL

Probably a *lot* simpler if they stopped all this *extra* rubbish and just tracked 1 thing.

Stop thinking about some super duper ID card "Fortress UK" b**locks.

Options include taking pictures, scanning machine readable passports

You've a name and a face and (mostly) a projected exit date. Accept you won't get everyone, but you well get a hell of a lot.

OK maybe you don't have a real name, but AFAIK most illegal migrants to the UK don't come in grabbing lorry axles. They come in on paid tickets, and give their (real) name on them.

Stop this fantasy of a "Total Recall" future where someone buys a ticket and they are instantly arrested for whatever the scare-du-jour is. It's BS now and will be (IMHO) until something like quantum computing becomes available on a large scale. Don't believe me? Work the numbers. UK entrants/ day * number of people in suspect database * number of entry desks * comparison time per picture (and no you can't use gender to half the list, they could be in drag).

Free movement of EU nationals within the EU is a noble idea but how do you do resource planning if you can't even answer the question how many eligible people are in the UK (or indeed anywhere else) for govt services without being able to count all those in, and all those out?

Radiation snatched from leaky microwave ovens to power gadgets

John Smith 19 Gold badge
Meh

So it's basically the way an RFID tag is powered.

Incidentally rectenna is a contraction of "rectifying antenna," as it rectifies the incoming (power) signal so it's all oscillating 0-X volts instead of +/1 y volts.

I'll also note the shielding maybe better than people realize. 2.4GHz is roughly a wavelength of 12.5cm, so any opening below that is (roughly) opaque if conductive.

So that grill you can see the food cooking through is actually an EM shield, as is the grill between the cooking chamber and the magnetron.

Take them off and start it up and you won't like what happens to you.

What's it good for? Time signal powered clock? Outside air temp display? Humidity detector for stuff boiling over?

The NSA's hiring - and they want a CIVIL LIBERTIES officer

John Smith 19 Gold badge
Unhappy

Re: That'll be the day!

"The nice part is that you get a fancy dress uniform with lots of gold braid, befitting the CLPO's real role as lipstick on the NSA civil liberties pig.""

Sorry, you don't even get that. Only actual officers get one of those.

NSA is (nominally) part of the USN under the DoD.

John Smith 19 Gold badge
Happy

Re: The motley is not optional

"Civil Liberties & Privacy Officer"

CLAPO for short?

John Smith 19 Gold badge
FAIL

Re: Responsibility, but no mention of power

I've had jobs with responsibility but no authority..

Never again.

Responsibility without authority --> CLPO

Authority without responsibility --> everyone else in the NSA

John Smith 19 Gold badge
Big Brother

Re: "(CLPO) is conceived as a completely new role"

"Because before Snowden grassed us up we never had to give a flying fuck about civilians or liberty"

What makes you think that will change now?

F-16 fighter converted to drone

John Smith 19 Gold badge
Meh

Target drones have been flying since the 1930's

What's (slightly) new is that F16 versions are still (AFAIK) in front line service.

But fully autonomous M2 drones (capable of take off and landing) were flying as part of the Navaho intercontinental cruise missile programme of the 1950s.

'Occupy' affiliate claims Intel bakes SECRET 3G radio into vPro CPUs

John Smith 19 Gold badge
Meh

Re: Implausible, except for the demo

"Intel demonstrates Intel® Anti-Theft Technology 3.0 on the 2nd Generation Intel® Core™ vPro™ processor. Learn more at http://newsroom.intel.com/docs/DOC-1903."

On a laptop with a GSM card fitted.

Did you not understand this is about servers?

John Smith 19 Gold badge
Unhappy

Re: Do have a extra CPU

"As discussed a few times on semiaccurate.com, these later Intel chipsets *do* have an ARM CPU on board to do some kind of various functions (i.e. it is in fact a black box that Intel says is for security.) Does it have a 3G radio? I really don't know but to me it seems doubtful."

What an intriguing observation.

So ARM good enough for their server (IE Expensive) processors but not for your next mobile design?

Not exactly a case of eating your own dog food is it?

And has the FCC gotten a lot more relaxed about RFI & unlicensed emitters spaffing out lots of RF energy? I got the impression they can get pretty awkward if stuff that's not designed as a radio transmitter starts acting like one.

John Smith 19 Gold badge
Meh

Implausible.

"http://www.computerdealernews.com/news/intels-sandy-bridge-will-debut-at-ces/18660

[...]

With Intel anti-theft technology built into Sandy Bridge, Allen said users can set it up so that if their laptop gets lost or stolen, it can be shut down remotely. The microprocessor also comes with enhanced recovery and patching capabilities."

What? Anywhere on the the planet? I don't think so. Chip serial number yes. Individual IP6 address (which I think is what you need for this level of addressing) No.

So if this fantasy is true you're looking at 3G radio core + software +SIM card build into the processor.

Any idea how big a chunk of chip real estate that will take?

OTOH Could Intel (or any US chip maker) have installed additional "undocumented" functionality into their hardware under pressure from entities within the US govt?

Yes. And as we now know would have to lie about it if brought into a court of law*

*Does anyone appreciate how big a mockery of the rule of law the (extended) powers of FISA make of the chance of a fair trial in the US?

The target: 25% of UK gov IT from small biz... The reality: Not even close

John Smith 19 Gold badge
Unhappy

I'd say *some* corruption is *inevitable* on this scale, OTOH...

With the badly thought out policies (IE no impact assessment on existing systems)

With the moving goalpost requirements (partly due to the results of the assessment, partly due to every Sir Humphrey wanting some piece of shiny tacked on)...

With the locked in decades long contracts let to "The Usual Suspects (TM)"...

With the (reputedly) poor skills of Govt procurement staff....

You don't need much corruption to waste a hell of a lot of cash..

John Smith 19 Gold badge
Holmes

So not really "demands" more mildly worded requests.

Good luck with that.

BTW I'd suggest that at £240Bn that does not make HMG a "large" customer.

It makes them a f**king huge customer who should be getting close to factory gate prices on those volume.

But otherwise not exactly an earth shattering revelation.

Java updates too much of a bother? Maybe online banking's just not for you

John Smith 19 Gold badge
Unhappy

I only know that the NIST use Java.

Anyone else worth looking at?

John Smith 19 Gold badge
Unhappy

Re: So likely to hit the non IT literate pretty hard.

"Not just writing malware...

Writing butt-ugly, cross platform malware..."

Yay. Java's developers must be so pleased at how successful their development environment has been.

John Smith 19 Gold badge
Unhappy

So likely to hit the non IT literate pretty hard.

Who a)Probably don't know they have Java installed. b)Don't know how insecure it its c)Don't know how to disable it.

So is Java's major use writing malware?

RSA: That NSA crypto-algorithm we put in our products? Stop using that

John Smith 19 Gold badge
FAIL

So closed source solution * NSA championed algoritm * default option * slow =

Almost a perfect f**kup?

I'm completely baffled how anyone who had even minimal knowledge of what they were doing would choose this option if they'd done anykind of research or bench marking.

The $64m question. RSA management. Incompetent or pressured like any US company.

John Smith 19 Gold badge
Unhappy

Most really believe what they are told.

And few even bother to ask anything that is not on the nightly news, every night?

Outside El Reg's (and other tech web sites) I doubt many in the US have a blind clue what's going on.

The believe the "We're keeping you safe from TERRORISTS (IE anyone outside America).

In reality the real enemy of the NSA is the US people.

How I hacked SIM cards with a single text - and the networks DON'T CARE

John Smith 19 Gold badge
Unhappy

So this would be a "2* " de refernecing excercise in C++ ?

Reference-to-a_reference-to-an-array.

Now, is that a fail in the Javacard spec or the Javacard implementation?

Launchpads, catapults... what a load of - WAIT, there's £15m for grabs?

John Smith 19 Gold badge
Thumb Up

Re: They lost an opportunity for acronym redefinition

"Or CoDEC for short."

I see what you did with that. 2 level acronym.

Nice.