* Posts by ElReg!comments!Pierre

2711 publicly visible posts • joined 22 Jun 2009

Wanna write a Cloudflare app? No? Would $100m change your mind?

ElReg!comments!Pierre
IT Angle

I'm sure CloudFlare serves a purpose. Somehow.

I mean, I do know that El Reg is a CloudFlare (CF) client for example. I know that because I've been prevented from accessing my beloved Reg writers' ramblings more than a couple of times, with little more than a so-called "ray-ID" to sooth my pains. I'm pretty new at this IT thing (not), but I can't help wondering whether that cloud-based approach to "protection" really is worth it. I mean, do you guys really save that much money by using CF over in-house IT? Genuine question.

European Commission chucks cash at UR – the universal language of mind your own biz

ElReg!comments!Pierre

Re: VPN

The "perfect VPN" connundrum is almost impossible to tackle in my opinion (and not just for your project). It's good that you did not set up your own, as it removes the "single point of pressure" that could undermine the whole thing, unless you can have access to enough funds to set up and operate proxies in several countries operating under separate laws, operated by proxy companies set up under these same laws, and that's going to cost dearly. Using distributed Tor-like models would severely impair the performances (and let's be honest, that maket is already crowded). Using third-party VPN services will let you open to criticisms (and / or unpredictable costs, possibly) but is certainly the safest route for now, as long as you keep monitoring said VPN services for possible changes in, erm, "allegiance", which in itself has a cost.

In any case, that's a step in the right direction, keep it up!

ElReg!comments!Pierre
Pint

Sh*t, the error has been corrected

I was going to congratulate the author for the most creative use of the word "adobe" I had ever seen, but the sentence has been corrected to "he argued place it *above* the competition". Well, better luck next time!

ElReg!comments!Pierre

Re: He's missing the point.

"The alternative suggested here requires you to go off, research and then install the appropriate browser. How exactly is that any better?"

Better than researching individual plugins and their settings, as well as making sure thare they are not Trojan horses by themselves? I'd say much, MUCH better for Joe User. I'll indulge in a (necessarily flawed) analogy: sure you can go buy a shelf at Ikea, but how is it better than go buy a few raw planks, cut them to size, buy a set of proper tools, decide on the design, implement it then paint the thing?

The difference is: unfortunately, no matter how hard you try to educate users, the effort is just too hard for most. See for example El Reg's reporting on a fine piece of research on the matter:

https://www.theregister.co.uk/2017/06/13/privacy_betrayed_for_a_pizza/

In IT sec a one-stop shop is a GOOD thing, provided of course that it can be trusted. The guy from that company seemed straightforward enough about the strengths and possible shortcomings of his product, I'd tend to trust him more than the usual snake oil sellers that pollute the "ITsec for consumers" scene. Of course it *could* be an elaborate scheme, but that's going to be easy to verify. In one step.

What? What? Which? Former broadband minister Ed Vaizey dismisses report

ElReg!comments!Pierre
Meh

I don't live in the UK or Spain

I can remember when it was hard to get cable or fibre to the premise here. It was quite a long time ago, by government tunover rate (10 years perhaps?). But we we never had a ministry of broadband doing "a brilliant job" over here, which may be part of the explanation.

(OK, I'm not so young as not to remember the times when it was hard to get a dialup connection to a private home, but that's beside the "brilliant job" point).

Take-home message: when you really, REALLY don't want to do something but want to appear to be doing it nonetheless, create a Ministry and declare it to be your "number one priority". Protip: you may declare any number of "number one priorities" at any one time, the proles won't notice before you're out of office because of a sex or money laundering scandal anyway.

Games rights-holders tell ZX Spectrum reboot firm: Pay or we pull titles

ElReg!comments!Pierre
Pint

Damn!

I logged in only to post that maybe RCL wants to be the new Apple, but there you were with your comment. Damn you, alien overlord, damn you to hell!

Software dev bombshell: Programmers who use spaces earn MORE than those who use tabs

ElReg!comments!Pierre

Re: A question

All my vims are set to replace tabs with 4 spaces, but I almost always tap the spaces by hand anyway; never assume, all that.

Telegram chat app founder claims Feds offered backdoor bribe

ElReg!comments!Pierre

Re: Secure Chats

You guys are so obvious. The trick is to give away an easily disproved offence in order to hide more serious intentions, because having nothing to hide is obviously a deception.

my spanish nephew loves the golden rain

ElReg!comments!Pierre

Re: Secure Chats

>What you can't hide - and what spooky agencies should be using - is the metadata. What account you spoke to. When. For how long. How large a message. Who else did that speak to? Can you tie that to another person?

Oh, they're using that, a lot, but you definitely can hide it, by broadcasting largely enough that almost anyone could have read it. Radio broadcast, classified in a widely-distributed newspaper (or on Craigslist), Usenet, etc. You could even setup a Yahoo! mail account, that's true plausible deniability ;-)

Trump nominates a pro-net-neutrality advocate as FCC commish

ElReg!comments!Pierre

Re: Man bites dog

From what I gather, a tepid defender of net neut was nominated to take the place of a more radical one. A remaining seat is still to be attributed; this will be done shortly, and it will probably go to a rabid anti-net-neut advocate, thus considerably shifting the balance towards anti-net-neuts, while giving a superficial impression of non-partisanship. The delay between nominations is designed to prevent direct comparisons. Classic political manoeuvre.

Uncle Sam █████████ cloud so much, AWS █████████ it another kinda-secret data center

ElReg!comments!Pierre

Lame redaction

I mean, just copy-pasting reveals the text, how lamer can you possibly get*?

More seriously, it does raise concerns. The AWS space will probably only be used only for the most mundane content, or for deliberate misinformation, and Amazon is probably only advertising this after a comprehensive review with US.gov. Governments around the globe are notoriously shy about using third-party IT solutions, especially when it comes to data. And rightly so. So this is either an attempt to lure foreign govs into giving away their sensitive data to the US (because what more proof could you possibly need that Amazon is cuddly with US.gov?), or a lure for particularly stupid "nation-state" hackers (either as a way to spread misinformation, or as a way to identify wannabe spooks at little risk).

Or all of the above, of course.

*besides trying that based on a random comment, that is

French firm notches up 50km unmanned drone inspection flight

ElReg!comments!Pierre

Re: BVLOS?

Well, the expression "line of sight" is also commonly (mis)used for any number of wireless comms, unredundanting* the "visual".

The French authority involved, on the other hand, is DGAC, not DGCA

*my entry for the Ugliest Neologism contest

Ex-Waymo engineer pleads the 5th in ongoing Uber law fight

ElReg!comments!Pierre

"With both Uber and Google out to get him"

You got that part wrong. Google is out to get Uber, and Uber threw Levandowski at them to try and distract them. The guy may have to face the music at some point, but the present case is how Uber had him steal documents from Waymo, set up a proxy company for him (Otto) and bought it when they thought noone was looking. Levandowski is not even a codefendant in this case, contrarily to what Uber wants the world to believe.

ElReg!comments!Pierre

Re: Let me see.

Well, as I see it the judge ordered Uber (not the ingeneer) to give a detailed account of its interaction with Levandowski. Uber immediately shifted all the pressure to Levandowski by ordering him, among other things, to waive his constitutional protection of face the axe. So he got fired, and now seeks to not serve as Uber's scapegoat, which I can understand (I mean, he may or may not be a weasel of little morals, but ultimately the criminal blame for IP theft should lay on Uber. The case that Waymo may have against Levandowski would certainly be a civil matter.)

'My PC needs to lose weight' says user with FAT filesystem

ElReg!comments!Pierre

Re: Scuzzy.

Seems I missed a minute word in your post then. Scusi.

ElReg!comments!Pierre

"I used to send back laptops back from repair *lighter* than they came in.

You're Simon and I claim my 5 quids.

ElReg!comments!Pierre

FAT is still used widely

Only not very often for main storage (except for that one secretary who insist on using her 32 Gb USB key as her main storage. She'll realize the errors of her ways when it fails, of course, but it will be too late...)

ElReg!comments!Pierre

Scuh-zee IS the official pronunciation in some circles

at least westside of the Pond, where they like to vocalize acronyms. Pet peeve of mine is MQAE pronounced "mek".

At the feet of the Great Monad, or, How the functional programming craze plays out

ElReg!comments!Pierre

As a scientist, I only program functions...

... then I only call them using OO syntax. That'll teach them.

Uber fires robo car exec for insubordination

ElReg!comments!Pierre

Re: Dropped

Merriam-Webster also think this is correct, so American English is covered too I would think.

Either that, or the author really meant "dropped the ox", which would be blunter but not significantly less painful, one would suppose.

Boffins spot 'faceless fish' in strange alien environment

ElReg!comments!Pierre

Certainly looks like something that...

... filtered down from stars before the dawn of man, sank beneath the waves, and will rise again when the stars are right

Life is... pushing all the right buttons on the wrong remote control

ElReg!comments!Pierre
Trollface

Just the one remote, and a keyboard

I am well past caring about remotes. I am past caring about TV too, for that matter. I just have the one damn rubber-nubby thing that controls the "box" for when I (or most likely, the SO) want to watch TV, everything else I control from the keyboard. Truth be told, I don't own a "smart" TV. I don't own a "TV" actually. I do own a 300-quids 3-D-compatible projector mounted on a 7-quids contruction-floodfill tripod, connected to a 50-quids 5.1 soundystem, a blank wall and a RasPy with an external DVD player and a keyboard. TV, internet content and DVD play equally well on my 2x3 m screen...

Home-made home cinema: 400 quids. Screening "Tideland" in total immersion for your old mother: priceless.

I can't fathom what is the rage with overexpensive "TV sets" (unless you do love juggling remotes, squinting at tiny 80 inches displays, and tinny sound)

Pirates hack was a hoax, says Disney boss

ElReg!comments!Pierre
Coat

THEY! GOT! JAVIER! BARDEM!

Let's hope he won't follow suit to formerly great actors, such as Johnny Depp or (even more sadly) Heath Ledger. Wait, did I get "hack" wrong?

Init freedom declared as systemd-free Devuan hits stable 1.0.0 status

ElReg!comments!Pierre

Re: Hell yeah!

I've been running Devuan (on all my personnal and some work machines) for quite a while now, and I couldn't agree more. Debian without systemd works, too (with popularity-contest installed of course), but it often causes trouble in upgrades, while the Devuan project nicely filters sneaky systemd-as-a-dependancy problems.

Venezuela increases internet censorship and surveillance in crisis

ElReg!comments!Pierre

Re: gallow's humor but

> Capitalism, the thing that made us all much richer while making a few very rich indeed, the swine.

I think you'll find that reality is a bit more subtle than that, unless you waive the 43.1 million people in the US who live under the poverty threshold (that's 1 in 8 households, according to the Census bureau, and the figure is likely much higher due to under-the-radar illegal residents). It's 10 million more than the entire population of Venezuela.

I'm sure you'll have noticed how the pro- and anti- Maduro demonstrations don't gather the same socio-economical categories. And how Us media coverage on Brazil and Venezuela increased dramatically after these countries decided to regain control of their oil reserves...

Sysadmin finds insecure printer, remotely prints 'Fix Me!' notice

ElReg!comments!Pierre
Devil

Noice, mate

A few years ago went on a mostly unplanned roadtrip in an asian country which shall remain unnamed, although it IS very elongated and does sport some recent fortification line across the middle. Although technically on holidays I was keeping in touch with salary central every day, and I also used the web to book (and pay for) accomodation for the next night, meaning "sensitive" network communications pretty much every evening. One evening, I noticed that the wireless network for the boutique hotel I was staying in was open to the world, with the access points' admin credentials factory-set, and a wee bit of poking revealed that they were doing all the admin from a laptop connected to the same WiFi. I raised the concern with the staff who told me "no problem, very secure". Later that evening, while the handbrake was under the shower, I logged into all of the APs I could get from the room and set their WiFi passwords to "CHANGE_ADMIN_PASS". Half an hour later I heard some noise along the staircase. The next morning, I noticed that the admin credentials on the APs were no longer the factory-set ones. I got a few dark looks; I did leave a substantial tip, because I felt like a jackass, but their network is a bit more secure now. Not sure if angel or demon.

8 out of 10 cats fear statistics – AI doesn't have this problem

ElReg!comments!Pierre

Statistics rulez

Let's not forget that Nethack is almost entirely statistics, wrapped in a thin layer of "UI"...

(well, technically the code is probabilities, but the observed effects are stats)

Project Gollum: Because NHS Caring means NHS Sharing

ElReg!comments!Pierre

Serif font? UX nightmare?

The UI is sans serif, and the text is in serif, as it bloody well should. Bong is slipping!

Quick, better lock down that CISO role. Salaries have apparently hit €1m

ElReg!comments!Pierre

Meaningless if...

... the punters are hired to add some security as an afterthought on intrinsically insecure procedures. ITSec is not a million-dollar CISO, it's a corporate culture.

No laptop ban on Euro flights to US... yet

ElReg!comments!Pierre

Re: I keep thinking

Well, no-flight policies ARE designed by ejits. The 100 mL rule stems from some murkin ejit failing to understand basic physics, and it's still in place after all that time. But that wasn't my point: evidently the airhead-in-chief didn't come up with this rule (pro'lly too busy grabbing small felines); he did, however, publish the 2-part tweet mentionned in the article. If there's anything more pityful than policy-by-tweet, it's policy-by-multipart-tweet.

ElReg!comments!Pierre

Absolute right

Of course the Russians have the absolute right to ignore a bumbling ejit, too. Or perhaps they forgot to follow him on twitter?

Bloke charged under UK terror law for refusing to cough up passwords

ElReg!comments!Pierre

Re: "used only in extreme terrorism cases"

> CAGE has plenty of form as apologists for active extremists.

It doesn't matter. This law is overreaching, and we can hope that cases such as this one may put it to test so that we ordinary citizens can know what we risk if we fail to provide the plods with a working password (whatever the reason may be, including genuinely having forgotten it).

ElReg!comments!Pierre

Re: Device with multiple partitions

Of course you can. Some people do. If memory serves TrueCrypt had a handy option just for that, I don't know if bitlocker does, but you could equally well set it up yourself.

NASA nixes Trump's moonshot plan

ElReg!comments!Pierre

Re: "the rocket that takes the United States to Mars"

The GREATEST.

(note: also embark a load of broads for grabbing purposes, as the journey may be very long.)

ElReg!comments!Pierre

EM-1, EM-2? Pah!

What a waste of perfectly good acronyms! I say re-dub them EMO (manned by Bieber fans perhaps?) and EMT (as the relationships with China and/or Russia may dictate, especially after the first broadcasts from the former mission).

PC repair chap lets tech support scammer log on to his PC. His Linux PC

ElReg!comments!Pierre

Re: ISP reports...

> equally fruitless.

Yup.

I was only talking about reporting IPs here, but I also sometimes report "cloud" accounts, with the same results usually. One exception being an answer from Yahoo! to a spam report (a lot of volume from a single yahoo account, a yahoo IP but various other reply-tos). The content of that answer? The reply-to is not on our systems, contact them instead. Yeah right, thanks a lot.

ElReg!comments!Pierre

ISP reports...

... are typically useless. I file them regularly and I never got any answer or acknowlegement ever. The crappola ISPs these people use probably pipe abuse@ to /dev/null (in a couple case I even got a "recipient does not exist" response)

Samsung was just Tizen – homegrown Linux again pitched at n00bs

ElReg!comments!Pierre

"for n00bz?"

That may be the case, but certainly not because of the hardware limitation. Heck, my 2 main work computer have less RAM than that, and comparable clock speed. My smartphone has about the same specs (a bit lighter on the CPU front) and still runs a virtie Debian that does pretty much all you can expect from a pocket computer. I don't see how hardware limitations could be seen as a bad point for the OS; quite the contrary actually: if it's running well on low-spec hardware, surely it's a sign of efficiency? (now Tizen may or may not be a piece of crap, but that's a different matter entirely).

Oracle crushed in defeat as Java world votes 'No' to modular overhaul

ElReg!comments!Pierre

"lack of openness" from Oracle?

Who would have thought.

Huge flying arse makes successful test flight

ElReg!comments!Pierre

I'll just leave this here

http://airships.paulgazis.com/001/FlyingCloud001.htm

Well this is awkward. As Microsoft was bragging about Office at Build, Office 365 went down

ElReg!comments!Pierre

Re: Cloud just means...

it goes down faster than a Geodie chick's knickers on a Saturday night. Some manglement here decided to go full-365, and the poor sods tasks with doing the demos report that it is down for 1/3 of their _planned, with MS_ demos. That's an "enterprise" contract, too.

China launches aircraft carrier the length of 13.6 brontosauruses

ElReg!comments!Pierre

Re: Bollocks

There seems to be a bug in El Reg's unit conversion page : It clocks the brontosausus at 138 m instead of the more reasonnable 22 m.

ElReg!comments!Pierre

Lies!

I think you'll find that Her Majesty's aircraft carriers are perfectly able to launch and recover helicopters, as well as any and all of these fun drones from Maplin.

Super-secure Pi-stuffed nomx email server box given a good probing

ElReg!comments!Pierre

Re: "Everything else is insecure"

Well, "everything else is insecure" seems a pretty good assumption to make. As long as you don't add "but our kit is secure"...

(You can't) buy one now! The flying car makes its perennial return

ElReg!comments!Pierre

Of calories and flying cars

Turning the heating down by 1 degC in the winter will burn more calories than any reasonnable amount of exercise while saving a bit of cash. Win-win!

The thing with flying cars is that while the concept might sound appealing, the idear really is appaling. Most people already fail at navigating their car properly in 2-D, imagine the disaster if flying cars ever bacame a thing. Thankfully it's ulikely to happen, because no-one in their right mind actually wants one. It's expensive, cubersome and extremely impractical. People who want to fly for fun can get an ultralight at a fraction of the price, and people who want to skip jams can get a 2-wheeled death machine at a (very) small fraction of the price and with less danger to themselves and others. Plus, these actually work.

Ambient light sensors can steal data, says security researcher

ElReg!comments!Pierre

Hard to buy the QR code argument

But I certainly would find a bit usettling that a website could have access to the light sensor, camera or accelerometer without asking for permission (and no, I don't browse THAT kind of website from my phone, before you ask). I mean, cam and accelerometer -with the permission of the user- might be OK for games and whatnot, but light sensor? What would be the legitimate, non-privacy-busting use?

Debian bins keys assigned to arrested Russian contributor

ElReg!comments!Pierre

'twas a bit more than organizing protests

What I read was that he was arrested afters comments calling for violence were posted from his IP (calls for Molotov cocktails, if memory serves). As he is running a TOR exit node, it is entirely possible that the calls were made by someone else entirely. In fact, if he can prove that he was not at home at the time, and if the Russian judiciary is less dense than it's murkin counterpart, he should be in the clear. Wich, of course, means that he's screwed.

Don't be an ass, don't use TOR for illegal activity, especially when you know you'll need an exit node (i.e. TOR-to-clearweb)

Note that French law makes the leasee of an IP legally responsible for every bit of traffic bound to that IP, better secure your WiFi APs and not run an exit node there...

Callisto Group snoopers wreak havoc with leaked HackingTeam spyware

ElReg!comments!Pierre

Said vs Heard

What he said: "This should remind governments that we don't have monopolies on these technologies, and that mercenaries, hostile nation states, and other threats won't hesitate to use these surveillance powers against us"

What they heard: "We need more powerful / pervasive surveillance if we want to stay ahead"

DTMF replay phreaked out the Dallas tornado alarm, say researchers

ElReg!comments!Pierre

Disgruntled insider, or hopeful insider?

From the previous article on the hack:

Mayor Mike Rawlings:

"This is yet another serious example of the need for us to upgrade and better safeguard our city's technology infrastructure. It's a costly proposition, which is why every dollar of taxpayer money must be spent with critical needs such as this in mind."

Tor loses a node in Russia after activist's arrest in Moscow

ElReg!comments!Pierre

I think you'll find it's quite the opposite. Molotov was the politician "responsible" for the invasion of Finland (or more precisely for the allegation that the bombings were actually humanitarian food drops), and the "Molotov cocktail" was the Finns' response.