* Posts by John Smith 19

16330 publicly visible posts • joined 10 Jun 2009

Queen's speech announces laws to protect personal data

John Smith 19 Gold badge
WTF?

"Smart Meter Bill"

"smart meters will be offered to every household and business by the end of 2020"

Hopefully most of which will say "My 6YO could hack that PoS" and tell the offeror where to stick it.

John Smith 19 Gold badge
Coat

"But then again Phil's in hospital and the first race at Ascot is at 2:30."

You do wonder has she asked "Driver, can you put on the Blues & Twos ?"

John Smith 19 Gold badge
Big Brother

"So what's happened to 'backdoor for all encryption' then?"

Citizen.

We note from your comment that you are failing to apply the principles of "Double think" correctly.

Please review the relevant section of the Citizenship Manual, as a repeated failure will require you to report to the Ministry of Love for more extensive re-education.

<Signed>

Big Brother.

John Smith 19 Gold badge
Gimp

"United Kingdom retains its world-class regime protecting personal data,"

And that's why her Maj is paid the big £.

Saying that out loud without blurting out "Is she f**king kidding me?" takes decades of practice.

Following practice in Trumpistan America prepare for a Bill with the words "Freedom," "Privacy," "Democracy" or "Patriot" in the title which will aim to destroy any of the first three and would be a deep anathema to any reasonable notion of the fourth.

Tesla's driverless car software chief steps down

John Smith 19 Gold badge
Coat

I think Uber might have a vacancy.

Although I doubt he'll be seeing a $680m "hiring bonus."

Conservative manifesto disappears offline – then mysteriously reappears

John Smith 19 Gold badge
FAIL

"if..going to invest in infrastructure..then while interest rates are low..probably the best time. "

3 little words.

Public Private Partnership.

The UK has had very low interest rates for most of the decade.

And no govt with the balls to actually do what you asked. They have however let companies build schools and hospitals and charge local authorities and the NHS for them

Which will net the companies involved 600-700% profits over the course of the contracts.

Guess who's just locked up £1.5bn Australian prison mega-contract? Our very own Serco

John Smith 19 Gold badge
Coat

Re: Australia Mega Prison

"Australia II" ?

John Smith 19 Gold badge
Unhappy

"Guards were running "Fight Clubs" and betting on the outcomes "

Wow.

That really is making crime pay.

John Smith 19 Gold badge
Unhappy

New company motto...

"Making crime pay."

Ego stroking, effusive praise and promise of billions: White House tech meeting in full

John Smith 19 Gold badge
Unhappy

"a man who..can't pass legislation even with control of both houses of congres"

Well TBF it has only been a 152 days since the inauguration.

OTOH it has been 152 days since the inauguration and the Republicans do have control of both Houses.

I thought there was a shed load of laws that need passing or scrapping (from the Republicans PoV) all set to go.

John Smith 19 Gold badge

But enquiring minds need to know...

Was it as creepy as the video of that Cabinet meeting seen a few days ago?

Creepier than a meeting a meeting of the board of SPECTRE, even without the furniture being wired to the mains.

As for Ms Catz. Isn't everyone thinking "Too old." (and not Blonde enough).

Medicxi launches $300m European late-stage life sciences fund backed by Google company

John Smith 19 Gold badge
Unhappy

New fund bets on virtual certainties.

Not called "vulture capitalists" for nothing.

Hacker exposed bank loophole to buy luxury cars and a face tattoo

John Smith 19 Gold badge
FAIL

OMFG it's 2017 and you can still do this.

But what makes it especially impressive is you can do it within the same bank.

Microsoft admits to disabling third-party antivirus code if Win 10 doesn't like it

John Smith 19 Gold badge
Unhappy

"Microsoft is trying the same trick," "Redmond is ready to fight such claims. "

As it always was.

Microsoft has no friends in the software business. Only competitors to destroy or consume

anti virus represents another niche for them to colonize.

Although TBF to MS they basically created the AV business in the first place.

With their ongoing inability to write secure code. 2017 and still with the stack overflows?

John Smith 19 Gold badge
Unhappy

"once people have gotten used to MS removing stuff and accepted it as the new normal, who knows?"

Indeed.

"Push in the bayonet. If it meets fat, push harder"

VI Lenin teaches so many valuable lessons to the receptive PHB.

John Smith 19 Gold badge
Unhappy

"What us paying customers actually want is burned "

Depends if you really bought that copy of Windows.

AFAIK most are bought by the HW mfg.

From MS PoV they actually only have about 6 "real" customers.

And you aren't one of them.

John Smith 19 Gold badge
Unhappy

"It is amazing that companies still use Windows,"

No it's not if you study business, not IT.

Gates went to Harvard to study Business, not IT.

MS's "business" is making money by creating (and maintaining) a monopoly.

TBH quite a lot of companies would like to have this model but few can achieve it.

The first rule of (RL) monopoly is no one calls it a monopoly (while doing everything possible to ensure it remains one.).

You've got to keep the magic money tree fed.

BMC and CA in agreeable acquisition talks – report

John Smith 19 Gold badge
Unhappy

By having a monopoloy of all options for certain tasks on a MF or legacy platform.

"All your licensing revenue belong to us."

To coin a phrase.

Companies, like sharks, have to keep moving or they die.

And CA is more shark like than most.

Google, Mozilla both say they sped up the web today. One by blocking ads. One with ads

John Smith 19 Gold badge
Unhappy

Paradox. Everyone hates ads. Everyone wants stuff for "free".

This situation is not long term stable.

Sooner or later people will have to find a new funding model for web sites.

Efforts should be rewarded.

In the Epyc center: More Zen server CPU specs, prices sneak out of AMD

John Smith 19 Gold badge
Unhappy

SEV sounds like what you need for "The Cloud"

You provide the app, "They" provide the cores to process it.

Huge caveats. Can (has?) the memory encryption processor code been independently audited or is open source? Can the Hypervisor UI be trusted (IE when you click "encrypted" on the setup options it is actually enabled)?

We've seen the f**kup Intel supplied with it's MIPS based unit that appeared to have just been cut N pasted in wholesale, along with its software.

An interesting legal question. Could the USG declare such systems illegal as it would spoil the NSA's ability to snoop

Intel: Joule's burned, Edison switched off, and Galileo – Galileo is no more

John Smith 19 Gold badge
Unhappy

Re: Intel is an ARM licensee...

Don't worry, I'm sure they'll sell that off ASAP.

John Smith 19 Gold badge
Unhappy

"failed to get across in their marketing that this wasn't aimed at the Pi users "

So if you spend a lot more money you get a box with a lot more processing power.

Now yes it sounds like a good deal 20x speed for 10x money.

But the Pi is a baseline for ARM performance, not the pinnacle.

There are a lot of ARM based processors, and quite a lot of ARM based boards.

John Smith 19 Gold badge

You pay top $ to Intel for its instruction set

And you do that because you've got a shed load of software (and tools) written (and tuned) to run on that ISA.

If you don't have that investment to protect they the x86 instruction set has to stand on its own two feet.

At it's core is it's a typical 1960/1970 microcoded complex instruction set. designed when instruction set design tools only existed inside mainframe mfgs by (essentially) hardware engineers.

So it's got lots of kool stuff that does one single task on one single data type (which might be tied to a specific register), which is also a nightmare to generate code for from a high level language. In 1979 (when they 8086 was launched) this was not a high priority (except on Burroughs mainframes, which were famous for being programmed only in HLL's).

The problem is if you sell a cheap x86 processor people start to ask WTF do they have to pay such prices for the high end stuff.

One option (which I think some very cheap 8051 versions use) would be to go with an internal bit serial core that retains x86 compatibility. Then there would a reason why they were so cheap (small die size and more clocks to do stuff) but you could have many more cores as an option.

Another would have been to keep Strong ARM (then the fastest ARM implementation) and said "It's not x86, but we sell a shed load of them and make a decent profit, and as long as people want maximum performance for ARM we will own the market" IOW Accept they are a chip company and whatever the market wants in the best way possible. In the long run owning quite a lot of a big market beats owning 100% of a tiny market (as the British GEC company eventually discovered).

But the day is coming when Intel's advantages will disappear.

When all transistors are 1 atom wide everyone has maximum density.

Then we will see how vital compatibility with an architecture designed around the time "Saturday Night Fever" and "A New Hope" were on first run at your local cinema (or "multiplex" for younger readers).

Stack Clash flaws blow local root holes in loads of top Linux programs

John Smith 19 Gold badge
Unhappy

"Why is it even an option? "

Because sometimes it will be the wrong thing to do?

Because devs are compulsive knob twiddlers?

Because in developing very large programs devs will favor a faster compile "dev version" of the program than the "full safety check" version, and then forget to change the settings for the compile to the release version?

Pick any or all of the above.

John Smith 19 Gold badge
FAIL

Not just linux, also OpenBSD, NetBSD, FreeBSD and Solaris on 32-bit and 64-bit x86"

"developers weren't building their code with sufficient stack protection checks."

But y'know that secure coding stuff is right tricky and I imagine it's hard work. Let' see what the article has about a fix.

"The fix, by the way, is to rebuild and reinstall the dynamic library ld.so and executables with gcc's -fstack-check feature, which should kill Stack Clash dead."

So no, doesn't look like that hard a task to me. But I can already hear the squeal's of "But it'll hurt performance."

I'll remind devs of DE Knuth's comment about "Premature optimization is the root of most evil." True then. Still true now. Most code does not spend the bulk of its time where you think it does. You should also factor in how often your oh-so-clever creation actually runs.

If the "normal use case" is it runs 10 times a day and takes 10 seconds, but the secure version takes 11 seconds that's a whole 10 extra seconds a day. IR WTF cares?

The fact that developing an exploit for this opens up a bunch of *nix variants suggest this would have been a very cost effective tool for "budget minded black hats" to work on.

And by "budget minded black hats" I'm talking about the T&FLA's who spy on people.

Developers. This one is on you. Update your build options to stop this happening. I'm quite sure GCC is not the only compiler suite that has this option available.

The Internet of Flying Thing: Reg man returns with explicit shots

John Smith 19 Gold badge
Coat

"Honeywell’s connected aircraft veep, Kristen Slyker,"

Known to her friends as "CT"

Internet boffins take aim at BGP route leaks

John Smith 19 Gold badge
Unhappy

Re: I guess a key question is how many of these things there are so how many to update

"I don't know but I *can* use Google 8)"

Bully for you.

So about 700 000 units would need have their software updated, not their routing tables.

Sounds like a fairly major task to me.

John Smith 19 Gold badge
Unhappy

I guess a key question is how many of these things there are so how many to update

Not really sure

10s of 1000? 10s of millions?

John Smith 19 Gold badge
Unhappy

sounds like a start

Provided the sender can be verified as being what it actually is.

Hotheaded Brussels civil servants issued with cool warning: Leak

John Smith 19 Gold badge
Unhappy

"44 C today and tomorrow here in Fresno, CA,""And no, we don't do air conditioning."

This just seems unimaginable without aircon.

I've spent some time in Arizona and the closest I've come to frost bite was the nights in an Arizona motel room.

They seemed to think all visitors like aircon up to 11.

But I think humidity is the biggest PITA. I met someone who worked in Hong Kong. They said that even with aircon they were changing their shirt three times a day. I've often wondered what SF is like. People say it's cold and damp (the old Mark Twain like about "The coldest Winter I spent was Summer in San Francisco," boom boom) , but that's by Californian standards.

Varjo promises Oculus-killing VR/AR, but is it the next Magic Leap?

John Smith 19 Gold badge
Unhappy

In Photoshop anything is possible.

It seems they are planning to apply the "Magnifying glass" tool seen on ARM computes of the 80's to VR.

Yes, coping with spectable wearers is tough (and I'm not sure how well other AR/VR deal with them) but let's see how well the whole system works first.

Sorry, but this is an area with lots of previous very dodgy claims about what can, will and is going to be done.

US voter info stored on wide-open cloud box, thanks to bungling Republican contractor

John Smith 19 Gold badge
Unhappy

" Deep Root Analytics"

Deeply rooted is exactly what most of their victims will be once enough ID thieves and credit card scammers work through the list.

Mexican government accused of illegal phone hacking of citizens

John Smith 19 Gold badge
Big Brother

Sounds like some politicians and crooked civil servants are getting a bit nervous.

Good. Maybe they should consider running out now.

Anyone want to bet the suppliers will be changing their name again soon?

As for those fees, well buying a zero day is not cheap.

Interesting point that Blackberry is the most expensive one still.

Note. These are not the data fetishists of the UK and US who want to spy on everyone all the time forever.

They are crooked, corrupt members of the government.

NASA's Kepler space telescope finishes its original mission catalog

John Smith 19 Gold badge
Go

"Only exoplanets with orbital periods less than a hundred days were considered, "

Which suggests you're going to see planets with a certain set of properties.

And they are not likely to be those of an Earth.

That said this is an excellent result for a first serious pass at the problem. I fully expect that the team have learned a lot about what is possible in building a planet hunting telescope and how to improve such a mission. While the mission design seems unlikely to find very Earth like planets the statistical analysis of planets found versus types of sun surveyed should (if done carefully) reveal some interesting patters to help inform people who model how solar systems form.

However the Fermi paradox remains. It's definitely looking like there are plenty of planets on which life can evolve and at least some of them should get to be intelligent.

So why isn't anyone talking? Is the human race too early, or too late to the party?

NSA had NFI about opsec: 2016 audit found laughably bad security

John Smith 19 Gold badge
Gimp

"agency had too many users with admin privileges,"

TL:DR Several 1000 BOFHs have tools that can break into your network at will but (trust us) "we will not misuse this privilege. "

Good to know.

It's 2017, and UPnP is helping black-hats run banking malware

John Smith 19 Gold badge
Unhappy

"The downloadable spreadsheet indicates the US in 10th (out of 34)"

So not the broradband speed.

Guess that leaves the other options.

John Smith 19 Gold badge
WTF?

So why US only?

Americans have statistically worse home security?

Americans have (on average) faster broadband?

Americans have more potential credit to harvest?

But uPnP. ? I'd heard some gamers needed it back in the day but now?

As always, if you don't need it why is it on? If you do need it why is it accessible from the far side of your router?

Backdoor backlash: European Parliament wants better privacy

John Smith 19 Gold badge
Gimp

" “decryption, reverse engineering or monitoring of such communications shall be prohibited”,"

Lucky for Britain that they are leaving the EU and HMG, lead by their Beloved Leader Mrs May will "Take Back Control" of UK broadband users privacy.

You must feel so much safer already.

Yeah, if you could just stop writing those Y2K compliance reports, that would be great

John Smith 19 Gold badge
Coat

"COBOL has been a fossil since 1980 at least and that's over a working lifetime ago."

Supported by the "Programmersaurus Rex"

The "Big Beast" of software development.

John Smith 19 Gold badge
Joke

"I am quite certain COBOL will still be around in y10k."

I have a possible defense.

PHB "I see from our records Mr Smith that you did the last year mods on this program and we've confirmed you were the John Smith on the change log."

Me:" I could only afford the low res brain scan for my personality recording and they may have missed a few things. What's a COBOL developer?"

PHB "The computer language, COBOL."

Me."No, I mean what's a developer?"

Brit hacker admits he siphoned info from US military satellite network

John Smith 19 Gold badge
WTF?

"Nothing annoys me more..US military whining that they got owned..stupid embarrassing way"

I think the thing people find very odd about the DoD is this.

Despite being in the habit of invading foreign countries (they seem to have started getting over Viet Nam when they invaded Grenada and have been putting in regular practice ever since) and having one of the words biggest and most technologically advanced armies on the planet they don't seem to absorbed one simple lesson.

Quite a lot of people don't like them.

That, plus the fact they have various assorted kinds of information that could be financially or militarily beneficial for unauthorized outsiders to know, means that they are (to coin a phrase)

"A big f**king target."

Despite this they seem to behave with an attitude to IT security that would embarrass, say McDonalds.

It's 2017 and it seems parts of the DoD still think this is the 1970's.

John Smith 19 Gold badge
Coat

"Unencrypted bounty on the HDD for the win."

And they got it.

Tor sounds like good SOP if one were planning something like this.

Not suggesting it, just observing.

As you head off to space with Li-ion batts, don't forget to inject that liquefied gas into them

John Smith 19 Gold badge
Pint

"Volvo manufacture hybrid trucks and busses that use Li Ion batteries. "

Given the American Mid West can reach those sort of temperatures it seems likely Sweden could as well.

I take your point I'd also expect most places to keep that sort of stuff in a shed, possibly heated but at least insulated.

I'm not so sure about buses. I could see this as being quite handy if you don't have garage parking or if you find yourself staying out all night somewhere and worried it won't start, or hold charge in the morning.

TBH my instinct is the fact it stops working as an electrolyte if it gets too hot, shutting down thermal runaway (and hence those Li battery fires that unfortunate headlines from time to time) is the big feature for this tech. Provided the internal pressure is not too high of course. People regularly handle 6 atm pressure vessels.

Beer because that's what a lot of those pressure vessels contain.

John Smith 19 Gold badge
Go

"Regularly in American Midwest...and colder. Seen -30 to -50 F "

Interesting.

It seems there would be a market for such batteries.

Do they do Li Ion batteries for trucks and farm machinery already?

Teen girl who texted boyfriend to kill himself guilty of manslaughter

John Smith 19 Gold badge
Unhappy

Factor in suicidal people are not exactly thinking rationally.

A rational person would indeed have realized that someone who's encouraging them to kill themselves probably does not exactly have their best interests at heart.

Shock news. Depressed people have a distorted view of their relationship to the world (and wheather or not it will change) , to the point where killing themselves actually seems like quite a good idea.

You can't understand it.

I can't understand it.

But it seems like a good idea to them.

Google coughs up $5.5m to make recruiters 'screwed out of overtime pay' go away

John Smith 19 Gold badge
Unhappy

""Defendants deliberately and uniformly cheated plaintiffs "

Sounds like we've found what half the curriculum of a modern MBA course covers.

Worried about election hacking? There's a technology fix – Helios

John Smith 19 Gold badge
Unhappy

"Besides, having a way for a voter to prove they have voted "

Or perhaps it's time to repeal the fact that you have to express a preference for voting when you register to vote?

Actually the suggestion was not to prove you'd voted.

It was to verify that a vote could be identified back to a real person, if necessary.

Look who's joined the anti-encryption posse: Germany, come on down

John Smith 19 Gold badge
Gimp

"ts time for a revolution to throw off these big brother police state fanatics."

Understand that the politicians are just the visible part of this "Coalition of the willing," as GW Bush put it.

You need to identify the cabal of data fetishist civil servants in the Home Office (or Interior Ministry in many European countries) and their allies in the spying agencies that are pushing this data fetishist agenda.

Without identifying them the (violent) removal of one bunch of sock puppets will simply be used as a pretext to justify more spying laws, as has each recent previous incident in the UK and France.

John Smith 19 Gold badge
Unhappy

"Lawful Interception; Handover interface..lawful interception of telecommunications traffic"

I don't think anyone should be surprised that such an interface exists.

The problem is how many lines can be monitored simultaneously and what amount of judicial scrutiny is needed to authorize it?

The German proposal seems hell bent on reducing that "judicial scrutiny" to nothing.

Joseph Wambaugh wrote "Police work is only ever easy in a police state."

This sounds like they want to make police work "easy." This should never be a goal of policy.

John Smith 19 Gold badge
Gimp

" i have no interest in what other people do, so i assume privacy is a given for everyone, "

It's not about having an interest.

It's about continually collecting the information so that (if at sometime in the future) someone does have an interest in you they can simply look up all of your past online behavior at will.

After all it's all about keeping the suspects citizens safe.

And with this system the authorities can find out exactly who feels safe whenever they like.

Doesn't that make you feel "safe"?