* Posts by John Smith 19

16330 publicly visible posts • joined 10 Jun 2009

Microsoft Master File Table bug exploited to BSOD Windows 7, 8.1

John Smith 19 Gold badge
Unhappy

"by Dave Cutler, who Microsoft hired as the NT team leader."

I think you'll find MS hired quite a few others from his core team.

It's not that this component is visible, it's what ordinary users are allowed to do with it without any special safeguards.

People have looked at NT and noted it's close similarities to VMS in the data structures it uses and even its function call names.

However aren't most of the desktop Windows from a later, not NT code base? Testimony that the core data structures of an OS can long outlive the first implementation of the functions that manage them.

John Smith 19 Gold badge
Unhappy

I wonder how many people here have read "Software Tools in Pascal"

At one point (I think it's the chapter on macro procssing) they put in a print statement saying "Can't happen"

Later they comment that "Can't happen" got printed out quite a lot when they were writing the code.

Can not, does not, will not. You hear those a lot.

Except when they do.

John Smith 19 Gold badge
Unhappy

Looks like another example of the "Can't possibly happen" pattern

Multiplied by the lack of "validate user input whenever a user can enter data"

You can skip that sort of data entry checking provided you know 2 things.

1) The data will only ever come from other software

2) That software will never make a mistake.

In our universe the odds on bet is one or other of those statements will be false.

BA's 'global IT system failure' was due to 'power surge'

John Smith 19 Gold badge
Unhappy

"Delta had the same issue a few months ago. "

The question is not how long the DC took to recover.

The question is how long the business took to recover the lost passengers who decided it can't be trusted with their bookings.

That's harder to measure but I'll bet it's still not happened.

John Smith 19 Gold badge
Unhappy

"Agree, TCS is the cut rate provider among cut rate providers. "

Sounds like they have a bright future joining the "Usual suspects" in HMG IT contracts.

Bright for them. Not so bright for the British taxpayer.

John Smith 19 Gold badge
Unhappy

"And it is grossly inefficient. Right up to the point when you need it."

Not necessarily.

If the backup system is under the companies control (not a specific DR company) it can serve to train new sysadmins, test out OS patches and application upgrades and various other tasks, provided the procedures (and staff) exist to roll it back to the identical configuration of the live system in the event of the live system going down.

The real issue BA should be thinking about is this.

How many people in this situation will be thinking "F**k BA. Can't be trusted. Never using them again."

Network Time Protocol updated to spook-harden user comms

John Smith 19 Gold badge
Unhappy

I suspect NTP has been one of those protocols that "just worked"

So people have been slow to upgrade to current versions.

And when they have they have used default configuration.

"Monlist" sounds like one of those commands that should only be accessible to internal server sysadmins.

John Smith 19 Gold badge
Thumb Up

Probably more of an inconvenience to govt snoopers than criminals

Good.

Although I think from a sysadmins PoV there's no real difference. They're all information thieves in the end. Their motivation is irrelevant ("We were trained to do it, encouraged to do it and in the end we got to like it," as a former govt contractor might have put it).

It'll be interesting if, when this is implemented someone's server code is broken because they have been using the return fields (I'm looking at you MS) and some developer has been "clever."

ARM talks up fresh CPUs and a GPU, all tuned for AI

John Smith 19 Gold badge
Coat

My dad said "Ronco" used to supply dodgy products through late nigth infomercials

Something about "buttoneer"?

Possibly the worst name for a marketing man ever.

Hopefully the actual products will be rather better.

But announcing on a Bank Holiday in the UK?

British prime minister slams Facebook and pals for votes

John Smith 19 Gold badge
WTF?

"..have a 24 hour armed security contingent following us around. I'm sure I'd feel safe(er)"

Actually Wacky Jacqui Smith did and (when Home Secretary) still said she wouldn't walk the streets of London at night, due to the threat of crime.*

And because she had nowhere to go as no one liked her.

John Smith 19 Gold badge
Joke

"Politician give nuanced speech and explains reasons for situation are complex" shock horror.

Page 2 Journo's cannot cope with large number of whole sentences. "He ran us into the ground."

page 3 Speech could not be summarised in 1 sentence."We were baffled."

John Smith 19 Gold badge
Unhappy

"Does she really believe radicalisation starts online?"

That and those violent video games.

BTW small point.

May is a PPE graduate.

'Nuff said.

TRUMP SCANDAL! No, not that one. Or that one. Or that one. Or that one.

John Smith 19 Gold badge
Trollface

"RUMP IS THE PORTUS and THERS NO way HES BEEN HACKSD. I"

Quality trollwork. Keep it up.

John Smith 19 Gold badge
Unhappy

"But no, you don't get white terrorism over there."

I think there are a 168 families around Oklahoma City that might disagree.

John Smith 19 Gold badge
Unhappy

"“We absolutely weren’t hacked,” Eric Trump said. "

Hmmm. I'm hearing Sir Humphrey Appleby.

Translation "They got everything."

John Smith 19 Gold badge
Headmaster

"Couldn't happen to a more deserving douchebag."

That's President douchebag to you.

Tech firms send Congress checklist of surveillance reforms

John Smith 19 Gold badge
Gimp

"The reality is that the measure must be reapproved by Congress "

So Congress could just refuse to renew the clause.

Which was why the provision for sunsetting it was put in the Bill in the first place (I suspect over lots of opposition from the snoopers).

9/11 was 16 years ago. FISA and THE PATRIOT Act are both well overdue for reform, if not scrapping.

Or is the Oceania US now on a continuous war footing with the rest of the World?

Your job might be automated within 120 years, AI experts reckon

John Smith 19 Gold badge
Holmes

"asked 352 machine learning researchers to predict how AI will progress."

And they all said that one day intelligent computers would do all jobs, including theirs.

Whoever could have predicted such an outcome?

I await a machine that can read syntactically correct but meaningless sentences (political slogans, Facebook entries, celebrity tweets for example) and deduce "This is bu***hit."

Barring serious medical advancements it'll be a long time after the Y2K fix I put into some software finally fails.

Last week: 'OpenVPN client is secure!'
This week: 'Unpatched bug in OpenVPN server'

John Smith 19 Gold badge
Unhappy

"Mostly rock-solid. "

Which was sort of my point.

Yes a serious security flaw is not good news, but how localized it is and how quickly it is dealt with by the developers is just as important.

My impression is they have mostly been doing the right thing WRT to security.

Brocade goes bye-bye: Out on a high note ahead of Broadcom slurp

John Smith 19 Gold badge
Unhappy

it seems only yesterday I saw them on a box of FiberChannel

How time flies.

UK ministers to push anti-encryption laws after election

John Smith 19 Gold badge
Unhappy

“Fear is the path to the dark side. Fear leads to anger. Anger leads to hate."

Manchester was a personal tragedy for 22 families.

The first incident in the UK in 12 years. Or the equivalent of less 4.5 days of deaths on British roads for 2016.

Or less than 2.5 Hours of deaths caused by smoking in NHS hospitals in 2014.

I point these things out because safety is an illusion. "Perfect" safety is a con. There are only levels of risk, right down to the possibility that reading this text will over stress your body to cause a fatal stroke. A vanishingly small chance, but if you insist on "perfect" safety....

Doesn't the human race have enough history that demonizing an ethnic or religious group because you are afraid of them (or merely jealous of their success) leads to very bad outcomes ?

Most British Moslems, like most people everywhere just want to get on with their lives in a law abiding society. More Draconian security measures, more security theatre, is a waste of time and money.

John Smith 19 Gold badge
Unhappy

"almost every media piece.. to tell the voters..how bad it would be under the PR system proposed."

With PR the devil has always been in the details. I suspect there are several PhDs to be written on the them of what would be a "fair" PR system.

At the very least it should give any MP elected a much cleared mandate. I think it would be great for an MP to know that more than 50% of the active voters (IE those who voted) find them acceptable, even if they were not those voters first choice.

John Smith 19 Gold badge
Coat

"last three decades trying to vote for the lesser evil"

Now that has an easy answer.

Vote Cthulhu

Why choose the lesser evil?

John Smith 19 Gold badge
Unhappy

"LibDems are a wasted vote in this election. "

Except in the 63 constituencies where they were 2nd place. here

John Smith 19 Gold badge
Unhappy

"Broadens the debate, eh?"

No it doesn't.

UK anti-terror laws can absolutely proactively detain someone under house arrest.

John Smith 19 Gold badge
WTF?

"Once it is leaked, and it will leak, everybody will have to change their encryption."

Leak? Leak?

You don't think knowing there is a guaranteed back door into every encrypted data stream in the UK might be a bit of an incentive for, IDK every Black hat hacking crew on the whole f**king planet?

John Smith 19 Gold badge
Unhappy

"Pick your poison: the police state or anarchy."

A classic rhetorical method.

It's BS. IRL there is a trade off between freedom and risk. Raod accidents kill about 3 000 subjects in the UK every year, but no one in their right mind is talking about banning private cars.

It was estimated that in 2014 smoking caused 78 000 deaths in the UK. Yet no one is talking about an outright ban, because it makes too much money and would be as stupid as Prohibition was in the US.

This particular "cunning plan" trades off the slight risk IE 22 deaths in 12 years Vs the guaranteed hole put in everybodies personal data security.

John Smith 19 Gold badge
Unhappy

"Nobody is proposing no encryption. "

What they are proposing is worse.

A fake "walled garden" where encryption seems to work but is actually over rideable on demand.

Most people will barely consider that "on demand" part.

But any foreign business thinking about buying UK software will be thinking "WTF should I buy something I know will insert a big f**king hole in my security?"

Until one of the army of bad guys (actual bad guys, not the roughly 1 in 4333 UK subjects who MI5 said was a terrorist "suspect") reverse engineers this BS (you can smell the whiff of "security by obscurity" already) and does for real what a character in a William Gibson short story (burning Chrome?) is described to have done and guts a whole (African ?) countries economy.

John Smith 19 Gold badge
Unhappy

"No quorom, No defined second choice.. grrrr."

Quite true.

And hence the perfect plan for a Brexit referendum as well.

Indeed this system ensures someone gets elected even if only one voter turns up (and if it's the right borough and the voter is "Mr E. Blackadder" they may also be the only voter).

John Smith 19 Gold badge
Unhappy

"the way the FPTP system operates then a hung Parliament is not unthinkable."

Which worked quite well but this time round it's unlikely the LibDems will be in any position to put a brake on them.

Britain. The only country in Europe with a FPTP system.

Apparently its believed to be the only system simple enough for the British electorate to understand.

And when asked the British electorate agreed. "We are too lazy and ignorant to understand anything more complex, except for local authority elections, which we can understand."

John Smith 19 Gold badge
Unhappy

"The UK..go it alone from Europe,..last thing it needs is more companies jumping abroad"

True.

But that's what's going to happen because the 52% (of those who bothered to vote) say so.

IRL the UK makes a shedload of its cash from the City of London. You can bet every big banker will be working their political contacts hard to negotiate "special access" to the single European Finance market.

Because if whoever wins on June 8th fails to do so you can bet that sometime between June 2020 and June 2022 there's going to be a shed load of office space going cheap in the E1, WC and EC post code areas.

John Smith 19 Gold badge
Gimp

" I suspect that any legislation will be along the lines of:"

The legislation already exists. It's called RIPA. However it needs a "Technical Capability Notice" to be approved by Parliament. As described here The text of the draft is here

IOW a form of "Statutory Instrument," much beloved tool of the Dark Lord Mandelscum.

Note. Both house of Parliament have to approve it. Since it requires critical thinking skills (not something you see a lot of in politicians) to realize what errant BS.

John Smith 19 Gold badge
Unhappy

Should be

A backdoor for one is a backdoor for all.

FTFY.

John Smith 19 Gold badge
Unhappy

"I know how I am voting now, and it is not those two."

Did you vote on the referendum for proportional representation? If you did how did you vote?

If you didn't vote, or voted for BAU, these are your options.

If you're happy with your MP, vote for them, to block others replacing them.

If not vote for the first runner up party from last time. Doesn't matter who they are. They have the best shot of getting rid of your sitting tenant.

Those are your options in a first-past-the-post system. A system the UK shares with all these fine nations. fine nations. although not with any part of Europe.

John Smith 19 Gold badge
Gimp

"Let me get this straight,

Let me get this straight, someone known to the secret services blows himself up in my home town and this scumbag government is trying to use it to get laws through even though they would not have prevented or made any difference to what happened."

Correct.

Just as the Madrid bombings were used when the UK had the chair of the EU to push through the EU Data Retention Directive, despite Spain (and several other countries) having zero interest in doing so. It has taken years for other countries to dial back this BS.

To the data fetishist cabal within the Home Office any terrorist event is another "opportunity" to tell Parliament how they would have been stopped (despite all evidence to the contrary) with yet more surveillance.

This has FA to do with "keeping people safe."

Mass surveillance is now cheap enough and easy enough (because of how much most people do on line) that (to a certain kind of senior civil "servant") it's just cheaper to do so.

"Give me 6 lines from an honest man, and I'll find something with which to hang him" as the Cardinal put it.

Three Nigerians sentenced to 235 years in prison for online scamming

John Smith 19 Gold badge
Unhappy

This used to be played by Mexicans on Americans.

and vice-versa to a certain extent.

Came across the "damsel in distress" scam in a book on con games written in the 50's

Human gullibility seems to be a commodity that remains in abundant supply.

And before anyone gets to feeling too morally indignant with Brexit coming and the possibility the UK Finance industry could head en-mass to Frankfurt or Paris perhaps UK readers might like to consider some alternative ways to raise a bit of extra money?

Juno's first data causing boffins to rewrite the text books on Jupiter

John Smith 19 Gold badge
Go

Astonishing science

People wonder what's the point of going to these other planets. One use is to calibrate the General Circulation Models used in Earth weather modelling with those of Jupiter, Mars and Venus.

They are all planets and a really good model should work everywhere, provided the right parameter values are inserted.

Best news. You'd never have trouble with a compass not working. OTOH the radiation will cook you. Incidentally I'd doubt the Earth's magnetic field is quite at constant as people think, given that Magnetic Anomaly Detection is a tool of geophysicists for detecting ore bodies (and the occasional nuclear submarine)

I look forward to the first probe powered by one of the Kilopower nuclear reactor systems (or KRUSTY) which should allow ion thrusters to be used to get there then increase the data rate a fair bit.

Scientists are counting atoms to figure out when Mars last had volcanoes

John Smith 19 Gold badge
Thumb Up

Ingenious. It's a way to do "Carbon dating" at the scale of a grain of sand.

Well technically it's the Uranium to Pb ratio, which changes predictably over time as the U turns into Pb.

And of course no trees required. Neat.

The revolution will not be televised: How Lucas modernised audio in film

John Smith 19 Gold badge
Unhappy

"movie theatres to calibrate audio playback"

40 years later and a shed more computing power in the device that plays that sound that sounds like quite a good idea.

Still not happened AFAIK.

One day......

'President Zuck' fundraiser opens for business

John Smith 19 Gold badge
Unhappy

"Silicon Valley plutocrats"

Usually a product of the "What's in it for me" culture.

I like the start of "The Social Network"

Soon-to-be-ex-GF "Mark, I know you will do great things but people don't like you. It's not because you're a geek. It's because you're an as**ole."

I think it was the former head of EDS who started this "Tech Billionaire wants to be President" meme. At least Gates has just got on with spending his money in places that can use it.

Industrial Light & Magic: 40 years of Lucas's pioneering FX-wing

John Smith 19 Gold badge
IT Angle

It's interesting how the little things matter

Computer controlled camera motion --> tighter ability to overlay different films (effectively the visual equivalent of "multi tracking" on audio tape) as each camera path exactly the same.

Higher resolution cameras --> Reduce graininess.

Between them these opened up a whole range of options for the film makers. Although it would have been nice to get some idea what qualifications you need to get into the industry today compared with them.

CGI still remains problematical. As the prequels showed just because you can create 1000s of robot "extras" unrolling across the background there are times when you shouldn't.

'Cloak and dagger' vuln rolls critical hit against latest Android versions

John Smith 19 Gold badge
Unhappy

Should Android be classed as an Advanced Persistant Threat?

On this basis, probably.

Pure's punchy first fiscal 2017 quarter opens door to billion-dollar year

John Smith 19 Gold badge
Unhappy

TL:DR 3 years in and still making a loss.

At what point did CEO stop thinking that making a profit for the companies investors was an actual goal?

DARPA orders spaceplane capable of 10 launches in 10 days

John Smith 19 Gold badge
Unhappy

"launch 10 time in 10 days or ever 10 hours then use 10 vehicles and 10 launch pads."

Today having 2 launch pads for a vehicle is a large programme.

John Smith 19 Gold badge
Unhappy

"Then swap out the “easily accessible subsystem components”; such as engine, fuel tanks,"

No, the goal is most of it is not swapped out unless necessary. They mean it's designed to be taken apart, unlike the Shuttle, which was a PITA to service. Eliminating pyrotechnics is also a good idea.

It's called "designing the support" rather than "supporting the design."

The Shuttle had about 100 separate data bases to track stuff on it, done to it or to be done to it. Despite this there was no central DB for fluids (there was for electrical components). That meant you could pull a list (say) of exactly where a certain switch type was used. Handy if they were from a defective batch.OTOH with fluids (and all LV's have lots of fluids) all they could say about how many and where valve type X was used was "lots" and "everywhere."

John Smith 19 Gold badge
WTF?

There are plenty of issues with this.

Starting with the fact they ditched Blue Origin as their engine partner in favour of some SSME's that AJR say they will cobble together from the left over parts they've got lying around the workshop.

Were Blue too expensive or where they just bid candy to impress DARPA?

Then there's the fact the whole budget is $146m. I'm not sure if that's going to include the upper stage, which being expendable you want as cheap as possible. OTOH being solid makes it quite expensive (H&S nappies everywhere).

"Attitude" is a difficult thing to assess but you've got to wonder if Boeing has the right attitude to pull this off or are they playing the same route LM did with their X33/Venturestar BS?

Incidentally "Operationally Responsive Space" ("launch on demand" perhaps give you a better sense of what they want) is a thing for the DoD. Partly it's about how fast could they replace a satellite if it was (for any reason) taken out of service.

It's also about how fast could they add capacity (EG comms, imaging, ELINT) over a particular area (say for example the D decides to invade Poland for some reason, who knows) if needed.

Yes this also needs a set of either standardized payloads or payloads you can plug together to perform missions at short notice.

Windows is now built on Git, but Microsoft has found some bottlenecks

John Smith 19 Gold badge
Thumb Up

"Perhaps they are storing build artefacts in the repo."

I guess it depends if you only do "source code" control or "whole version" control.

It seems likely that they hold everything in there so you can track the code, the compiler settings, the resources and of course the test results.

As others have noted there will likely be different branches for "Home" "Small Business" "Enterprise" editions as well

OTOH I'm not so sure that includes Office, Dynamics or the languages.

John Smith 19 Gold badge
Unhappy

"Microsoft, back in the days (1990 - 2000), relied on Unix (Sendmail) "

IIRC they also used to run an AS400 for their warehouse management, back when they were still monopolizing shelves with (mostly) empty boxes.

Of course now they've had 17 years to integrate the 2 software packages that make up MS Dynamics I'm sure it's up to the job

Probably.

John Smith 19 Gold badge
Headmaster

""feel the biglyness"

I stand corrected.

Network-sniffing, automation, machine learning: How to get better threat intel

John Smith 19 Gold badge
Unhappy

"all internal communication..through end-to-end encrypted and authenticated channels,"

Now that sounds properly paranoid.

Sadly.