* Posts by Dan 55

15447 publicly visible posts • joined 13 Jun 2009

Mozilla wants EU to slow down its ePrivacy Directive process

Dan 55 Silver badge

Re: Mozilla could already do a lot for privacy

If they prohibit cross-domain JavaScript the whole jquery angular Web 2.0 bollocks would disappear up its own fundament overnight given that web designers are seemingly incapable of copying files across to their own domain and instead find it preferable to include them from elsewhere meaning they are at the mercy of third-parties deleting a left pad function or something.

And advertising and tracking would get killed overnight.

On second thoughts perhaps they should do it.

Android O-mg. Google won't kill screen hijack nasties on Android 6, 7 until the summer

Dan 55 Silver badge

Everybody will have to upgrade to Android O

This is crap (what Google are doing, not the article).

Google care more about the potential lost ad revenue from (malware) apps running on outdated versions of Android than backporting a dialog with allow/deny buttons the first time overpaint is used or whatever it is they're going to do in Android O.

The fix would eventually arrive on many phones, more phones than Android O will.

$6,000 for tours of apocalyptic post-Brexit London? WTF, NYT?

Dan 55 Silver badge

Re: They could do a real brexit tour

The BBC graphic in the middle shoehorns a proportional vote into FPTP by area. When nationally the results were 35% of the electorate voting to remain vs 37% voting to leave, it makes little sense to claim that almost every area of the UK voted leave.

Rich professionals could be replaced by AI, shrieks Gartner

Dan 55 Silver badge
Meh

Gartner's already been replaced by an AI

If you can call a random number generator an AI. As they're consistently wrong it's probably rand, not random or rand48, and definitely not arc4random.

London app dev wants to 'reinvent the bus'

Dan 55 Silver badge

Re: Ulsterbus

- Right, brainstorming guys. What can we do before the money runs out?

- I once went on a weekend break to $CITY and saw $THING on a bus. Let's copy it.

- Ok, anything else?

- I once went on a weekend break to $CITY and saw $THING on a bus. Let's copy it.

Ok, anything else?

- I once went on a weekend break to $CITY and saw $THING on a bus. Let's copy it.

Etc... etc...

Realistic Brits want at least 3 security steps on bank accounts

Dan 55 Silver badge

Re: Two glaring omissions

It's possible to refuse all online contactless transactions by checking a flag and not letting them go through. Offline contactless would be more difficult.

Dan 55 Silver badge

Two glaring omissions

I notice they've not given an option to disable contactless or to disable use outside (say) Europe.

If you're going to allow people to lock their cards down you might as well do it properly.

How to remote hijack computers using Intel's insecure chips: Just use an empty login string

Dan 55 Silver badge

Re: noob or arrogant...

And how would a string type fix the fact the programmer used a substring compare function instead of a full string compare function?

In many languages, that bug is simply impossible.

There are languages without substring compare? Tell me which ones they are so I can avoid them.

Dan 55 Silver badge

Re: bloody c language

That is a problem in the compare routine. If the length of the strings is different it should return a mismatch.

Also known as strcmp()...

Dan 55 Silver badge

Re: "It was a very similar bug that lets pirated Wii games to be played on the console."

The Wii's bootloader and OS are run by an ARM coprocessor in the GPU, but the games themselves are run by a PowerPC.

Your last sentence is, of course, correct.

Dan 55 Silver badge
Stop

Re: noob or arrogant...

It's purely bad coding, not C's fault that someone decided to use strncmp instead of strcmp. Looking at the code snippet we can be fairly sure that he two strings have already been validated and stored in their own string buffers, so why not use it? You'd get the same error in BASIC if you'd decided to use LEFT$ instead of = for some crazy reason.

And code review and QA should catch it. The fact that it didn't means AMT is probably full of other bugs.

Uncle Sam backs down on slurping passwords from US visa hopefuls

Dan 55 Silver badge

¯\_(ツ)_/¯

Travel history during the past fifteen years, including source of funding for travel.

Address history during the past fifteen years.

Employment history during the past fifteen years.

Well I could get about 3/4 of that right. Maybe. The question is, can I be arsed to jump through all the hoops? No, I can't.

I wonder what the US tourist industry has to say about this.

Today's bonkers bug report: Microsoft Edge can't print numbers

Dan 55 Silver badge

Re: And all the students that get stuck with Windows S!

Oops, so it is completely lobotomised.

Dan 55 Silver badge

Re: And all the students that get stuck with Windows S!

Presumably you can still install CutePDF writer and print to that from Edge, unless Windows 10 S is completely lobotomised.

Leaked: The UK's secret blueprint with telcos for mass spying on internet, phones – and backdoors

Dan 55 Silver badge

Re: Encryption is not made "illegal"

If you're developer in the UK making something that can be considered a telecoms app or service, you need to avoid e2e encryption and build in realtime monitoring otherwise, if you are told to give up data on someone, you won't be able to respond in 24 hours with the data they ask for and therefore you will have broken the law.

They even tell you to consider this law when designing your app or service.

But no, there's no "we ban e2e encryption" clause. Why would there need to be if you end up in a whole heap of trouble anyway?

Dan 55 Silver badge

Re: Encryption is not made "illegal"

He doesn't need to argue, Skype etc... already are covered:

A telecommunication service is defined at Clause 223(13) as ‘a system that exists for the purpose of facilitating the transmission of communications by any means involving the use of electrical or electromagnetic energy’.

Privacy International

Dan 55 Silver badge

Re: Encryption is not made "illegal"

"14. To consider the obligations and requirements imposed by any technical capability notice when designing or developing new telecommunications services or telecommunication systems."

That there looks like banning e2e encryption and building in realtime monitoring.

Dan 55 Silver badge

Re: Encryption is not made "illegal"

If I understand it correctly, any developer who offers an encrypted app or service and is served a notice has 24 hours to decrypt the data they have on someone and hand it over or they are breaking the law.

This is does not allow for e2e encryption. Despite MPs saying it wasn't banned, it was banned.

Has their braindead legislation just made hashed and salted passwords illegal?

Maybe the future for apps is a plugin architecture and open source e2e plugins on github, similar to PGP encrypting email messages despite SMTP knowing nothing about how that's done.

Booze stats confirm boring Britain is drying

Dan 55 Silver badge
Trollface

"In the 1960s, the authorities declared that a bottle of wine a day was a safe drinking threshold."

So is the article insinuating that a bottle of red a day is real safe limit and the puritans have forced it down ever since?

Some of us have to work in the morning and think with our heads and that, we're not all journos you know.

Windows 10 S forces Bing, Edge on your kids. If you don't like it, get Win10 Pro – Microsoft

Dan 55 Silver badge

The MS spokesman will say something like, "You see, there's a very good reason why we've done this. It's very technical and veeery complicated. It needs Edge because cloud. Only Edge can offer the cloud as it was meant to be experienced."

Looking forward to the registry hack landing about the day after.

Gang-briefed by IBM bosses in Hawaii? Nah, I'll take redundancy

Dan 55 Silver badge

Re: "there was no automatic qualification based on sales quota"

Is it?

Dan 55 Silver badge
Coat

The Island with Bear Grylls

Can the IBMers survive on a remote pacific island using only their initiative and key performance indicators? Using some old AS/400s for heat and the staff canteen for food, watch as they try to make it to the end of the month to receive their wages. Their stay could be cut short at any time by an e-mail from HR telling them to relocate to an office 1000 miles away or pack their bags.

Cabinet Office losing grip on UK government departments – report

Dan 55 Silver badge

Re: Obvious, really

Yes, I'm serious. A government should not be able to set a date for a referendum in which nobody has planned for one of the answers and where the immediate aftermath was what we saw in June and July last year (and an early general election this year).

Dan 55 Silver badge

Re: Obvious, really

I upvoted, but then I immediately realised that the OBR is, after all, a government department so would face pressure to not be as generous with other parties as it would be with the government. But I'm unsure as to how it could be done in a different way.

Then there are also the actual manifesto promises themselves - are they politically feasible or is it just made-up shit? The Electoral Commission, for instance, should have had the power to block the referendum until there was a credible contingency plan from the government and a credible exit plan from Leave.

Microsoft Edge is the default web browser on Microsoft 10 S

Dan 55 Silver badge

Re: Microsoft Edge is the default web browser on Microsoft 10 S

- Yes m'lud, it is indeed true, because... Edge is integrated into the cloud!

- Oh that's okay then, do carry on. Not at all like IE is integrated into the OS from a few years back.

Unpaid tech contractor: 'I have to support my family. I have no money for medicines'

Dan 55 Silver badge
Devil

"We have responsibly declined to suspend business activities due to our commercial dispute...

... which prevents us making payments"

That's remarkably easy to say when you're not the one who's not getting paid.

Mozilla takes a turn slapping Symantec's certification SNAFU

Dan 55 Silver badge

Mozilla tells Symantec it should follow Google's advice

Why am I not surprised given what they're doing to Firefox.

What is this bullsh*t, Google? Nexus phones starved of security fixes after just three years

Dan 55 Silver badge
Black Helicopters

Re: Bye bye Android

How do you know it hasn't been compromised? Those Android phones with pre-installed malware don't announce it, they just get on with slurping.

Dan 55 Silver badge

Re: Why is this shocking?

The fact that there's a link to the source doesn't necessarily mean it's good.

Voila, half-assed disk encryption.

Dan 55 Silver badge

Re: Google's fault

Blame it on commentards who are guaranteed to say "I'm alright, I've got a Nexus" in the comments whenever there's an Android security scare story?

Dan 55 Silver badge

Re: Bye bye Android

They've all got LTE cat 4, except the 3310...

Forgetful ZX Spectrum reboot firm loses control of its web domains

Dan 55 Silver badge

Security breach?

Seems more likely what was left of Retro Computers didn't know how pay the renewal because the ex-partners took care of that. When the domain lapsed, one of their valued customers snapped it up.

Warning! Your information is not secure - the first words on the Maudsley Hospital website

Dan 55 Silver badge
Facepalm

And... no change, 26 days later. Still revoked.

Firefox doesn't allow you further on than the revoked message, because it it was revoked it was hopefully (if that's the right word) revoked for a good reason.

UK outsourcing market hits record levels

Dan 55 Silver badge

Re: Hidden outsourcing

Until it becomes obvious that it doesn't work. When it does become obvious, they might hire one IT support person in the UK who can plug things in, turn it off and on again, and so on.

Gig economy tech giants are 'free riding' on the welfare state, say MPs

Dan 55 Silver badge

Re: Definitions of employed/self-employed ?

There are three, employed, self-employed, and worker. A worker covers all employed and some self-employed (usually when they are being exploited, like Uber drivers).

Dan 55 Silver badge

Re: Finally someone's noticed?

Frank Field usually talks sense, but if he's actually listened to is another thing entirely...

Just delete the internet – pr0n-blocking legislation receives Royal Assent

Dan 55 Silver badge

Re: Police state

Where's the age verification in Spain?

Apple fanbois are officially sheeple. Yes, you heard. Deal with it

Dan 55 Silver badge

Re: Couldn't be arsed. Elevenses.

Does he really want to be woken up and godforesaken-o'clock to be asked what he thinks about it?

Super-secure Pi-stuffed nomx email server box given a good probing

Dan 55 Silver badge

Re: "Everything else is insecure"

It implies it though...

Dan 55 Silver badge

"Everything else is insecure"

That, for me, is enough to get it crossed off my list. Nobody who knows about security should make claims like that.

Republicans want IT bloke to take fall for Clinton email brouhaha

Dan 55 Silver badge

Re: Bah!

And Attila the Hun was a weak liberal.

Dan 55 Silver badge

Re: He should take the fall

Since he's practicing diplomacy in 140 character-sized chunks, it can be argued he's using an outside service to conduct government business.

And that's before we look at the DMs.

HPE kills off its entire OpenSDN line, pulls plug on customer demos

Dan 55 Silver badge

Re: Looks like

What, the bit that suggests a replacement which doesn't do the same is available from a partner (i.e. not themselves)?

FTP becoming Forgotten Transfer Protocol as Debian turns it off

Dan 55 Silver badge
Windows

Re: FTP ...... ah the memories......

Ftpmail, eh? Jumpers for goalposts...

iPhone lawyers literally compare Apples with Pears in trademark war

Dan 55 Silver badge

Re: Dear Apple.

Very good, but shouldn't we be reserving our ire for the EUIPO which let them get away with this bollocks?

Dan 55 Silver badge

Re: Does anyone remember ...

Their logo was an apricot. Apple didn't get stroppy about it.

Enough of a precedent to demonatrate why they shouldn't get stroppy about this either, I think.

Netgear says sorry four weeks after losing customer backups

Dan 55 Silver badge

So the customer is held hostage^W^W^Wloyally carries on paying their subscription for excellent service, silly.

Dan 55 Silver badge

"ReadyCLOUD is an enterprise VPN grade remote access solution"

Pffft...

UK.gov throws hissy fit after Twitter chokes off snoop firm's access

Dan 55 Silver badge
Paris Hilton

They don't want to go after terrorists, they want to go after tourists

Watch: Theresa May’s Brexit blunder

Makes perfect sense that they want to be able to scan social media for holiday pics if Britain is to lead the world in preventing tourism.

Amazon: 'Alexa, how do you fix shoddy APIs that keep breaking apps? Asking, er, for a friend'

Dan 55 Silver badge
Mushroom

Re: "unless they submit their skill to a full manual test run each day"

Do you really like fucking about experimenting for hours on end instead of getting work done when the manufacturer already knows the answer and should just give you a changelog or new instructions as a matter of course.

I mean, send them an e-mail with three bullet pointed questions and they manage to answer none of them. Not speaking from experience in the past hour at all. Oh no.