* Posts by CD001

925 publicly visible posts • joined 23 Jun 2009

Page:

Met launches net café spy operation

CD001

A Title

Hi, America called from the 1950s and would quite like its McCarthyism back please.

Train rebrand costs us dear

CD001

Hmmm

£30k for the website...

Generate a new CSR (assuming the domain's changed) - 2 minutes work.

Make the SSL Cert alterations with the signing authority - fill in a form and make a phone call.

Create a couple of new HTML templates and roll them out across the website and CMS - 30 man-hours tops if you're doing it properly, design, code, checking W3C/IE compatibility and running some WAI conformance QA checks.

That's assuming that the site is using something like an MVC so that the GUI is nicely separate from the controllers of course.

China hits back at Google's uncensored Hong Kong servers

CD001

Hmmmm

Now while I don't agree with WHAT the Chinese government is blocking (silencing the dissenting voices) I think they have the right to impose content filtering... every country does to some greater or lesser extent.

It might be neo-nazi sites in Germany or kiddy-fiddling sites in the UK it makes no odds - Google are basically saying that they refuse to operate under local legislation in China - how can that be right?

As Flybert said - if you want the international community to attempt to impose regime change in China try to get them to impose a trade embargo... and be prepared to pay the extra. Don't say that it's alright for Google to break Chinese law because you happen to disagree with it... it'll hardly work if you're nicked for smoking weed and say "well I don't agree with the law - so I'm ignoring it".

Google Apps punts kill-Microsoft-Exchange-now tool

CD001

OOo

Sort of agree that OOo is a "low rent" version of MSO ... however I find it much easier to align images (dropping screen grabs into help docs) as I want them in Writer than any version of Word.

And I can actually find things in OOo - the problem with the ribbon interface in MSO 2007 is that to keep things tidy they've stuffed some things in (what I find to be) very strange places, "macros" under "view" for instance or "headers and footers" under "insert" rather than "page layout".

And since about the only thing I use a Word Processor for is cobbling together help documentation for apps I've written - the native PDF export in OOo is a total must-have. So for the limited amount of work I actually do in "Office" documents, for me, OOo IS better than MSO.

Ex-worker blamed for car immobilisation hack

CD001

Who ever thought...

... that this would be a good idea - take a couple of tonnes of metal (we're talking American cars here) and wire and engine immobiliser into the world's most insecure network?

Did nobody at any point think, "hang on a minute..." ?

Facebook users warned over stalk-my-profile scam

CD001

IRL

I go out in the real world occasionally - it's all very nice but Farcebook doesn't give me a hangover ;)

Virgin contractors grip up for more cuts

CD001

depends

Depends on the contractor - I've seen contractors who's only genuine skill seems to be a PHD in bullshit manage to flimflam clueless managers out of six figures... I would argue they were overpaid since once they'd fucked off it was left to the permies to go in and fix the bloody mess afterwards.

Doesn't matter whether you're a permie or a contractor it's all about attitude - you can find work-shy, bone idle permies just as easily as BS/rip-off merchant contractors... yup folks, there are twats in every walk of life.

Bloggers spring 'baccy happy landlord from slammer

CD001

Lock-in

I thought they got away with "lock-ins" because if it's locked up then it's no longer a "public house" but a private residence (assuming the landlord lives above the pub) - and that being the case smoking should be ok?

Granted you can't sell booze in a private residence but I guess you could ask your "mates" to chip in to cover the cost. At least that's what has happened in smaller local pubs (that I shall refrain from naming here) that I've known.

CD001

Yeah

... coz stale pee from the toilets mingled with BO from sweaty, overweight mules on the "dancefloor" is infinitely preferable to stale tobacco odours?

I can see the point of a smoking ban in "gastro-pubs" but the kind of sticky-floored, sweaty, tawdry rock/metal establishments I tend to frequent of a Friday night actually smelt better before the smoking ban.

Mind - since there seems to be a disproportionately high number of smokers amongst that crowd the "beer garden" (read loading/unloading yard out the back), if there is one, tends to be packed... well, when the weather's nice anyway otherwise people don't go out.

UK.gov urged to slash DNA retention plan

CD001

EVERYBODY VOTE

And have everybody write "no confidence" (or "I have no confidence in the ability of any of these morons to run run a country" - a literal vote of no confidence - *b'dum ching*) across the whole ballot paper - unlike not voting, spoiled votes still have to be counted.

Daily Mail reader out-tw*ts the Tw*t-O-Tron

CD001

or maybe

The "Fascist bastards" just spotted "Pritesh Hathalia from Leicester" and hit downvote without reading the post...

One would hope that the comment was meant to be ironic and intended to show up the stupidity of the great British public - 119 downvotes would show quite clearly that at least 119 people didn't get it. I would like to think that - however I don't have that much faith in humanity.

Microsoft rejiggers EU browser ballot after complaints

CD001

actually

If you've ever placed an advert in a magazine you'd know that right-hand pages are more expensive than left... this is because as the eye (in Western civilisation) reads left to right the last thing you see is the furthest right and is therefore more likely to jump out at you or stick in the mind.

The same holds true for UI design so I'd guess having IE appear in this far right spot would actually weight it favourably, slightly. (don't believe me, look at the post icons below and see if you spot the hand grenade first or Paris).

Since you would have to deliberately tweak your "random" pattern to generate this behaviour I'd say it was unlikely to be accidental.

Microsoft sends flowers to IE6 funeral

CD001

I would argue

Since the issues that arise from IE6 are mostly cosmetic they should ONLY affect designers (HTML/CSS) the only time developers would be hit by them is if they're chucking together a rich client application and the AJAX or JavaScript falls over.

If you ask me, (X)HTML and CSS fall squarely into the "designer" remit - even JavaScript if it's just used for fluff - that's why they're WEB designers not GRAPHIC designers.

Hull Daily Mail pulls porncoder comments

CD001
Happy

missed opportunity

... to ironically lock the comments on this story :)

Mozilla lays foundation for web's next 100 years

CD001

100 years

... is a very, very long time in tech.

For all we know in 100 years time we could be plugging the 'net directly into our noggins via some kind of cortical implant like the cyberpunks have been saying for a couple of decades. The whole idea of desktop, monitor and browser, or even an icon driven GUI, may be as quaint and old fashioned as driving around in a model T ford might be today.

I'd be surprised if desktops are even the predominant machine that most people use to connect to the Internet in 10 years let alone 100 - netbooks, smartphones and games consoles for instance. So removing the "technological, corporate and cultural choke points" is already happening - albeit slowly.

On the server side there's already a mix of OSs and technologies so I'm not quite sure what Mozilla are aiming at here... a bit of paper that says "Icanwritecodezors" (my fwendz sez so) and a "yes, I would like to be anally raped by your legal team" icon?

Photographers rue Mandy's copyright landgrab

CD001

Actually

----

Not Licensed for UK Use until XXX is revoked

----

That's a BLOODY GOOD IDEA! :)

'Severe' OpenSSL vuln busts public key crypto

CD001

81 cluster P4s

--------------------------------------------------

They applied the technique to an embedded hardware device consisting of a Sparc processor running a Linux operating system and were able to extract its 1024-bit private key in 104 hours.

--------------------------------------------------

Does that 104 hours include the 100 hours it took to glitch the power supply in the first place, or is that merely 100 computing hours used to rebuild they private key from the 8800 malformed messages?

Even if that is 100+ hours CPU time, it's only on 81 old P4s - if you could feed it to a botnet of a million or more machines you've brought that time down to seconds.

Glitching the power supply takes the time but the processing power is out there if you're prepared to (ab)use it for the rest.

Street View spymobiles invade CeBIT

CD001

ye-es

... except Opel is owned by General Motors at the moment. Maybe they're trying to show some kind of German/American love child can succeed - well, I say succeed - barely avoid going into administration whilst totally fskin the European component of the company up the arse while they're at it?

Actually - maybe it's the ideal choice of motor?

Hacking human gullibility with social penetration

CD001

Thing is though...

If someone has access to the "passwords" file on your machine, you're pretty much hosed anyway - especially if that file is already encrypted, password protected and stored in a hidden volume (granted the odds on that happening are slim to none).

I read once that the "best" thing to do would be to use passwords you've not a hope in hell of remembering with upper and lower case letters, numbers, symbols, whatever - write them down on a bit of paper and keep it in your wallet.

If you lose your wallet you've already got the hassle of getting all your plastic cancelled so you're just adding "change passwords" to you list of things you've already got to do.

Street View threatens to throw Eurostrop

CD001

I'm sorry...

I have testicles I am genetically incapable of asking for directions!

iPhone ego clash costs Flash at Virgin America

CD001

300 validation errors

I was going to say - what does 300 errors mean exactly - most validators cascade them so if you forget to close a single tag it can flag up many, many errors because of the the tags nested inside that tag - and even then these are only "warning" level not "error" level errors...

... but then I looked at the source code of the parent document (yes, it uses iframes) and saw 175 errors - one of which was not including a <body> tag. I mean WTF? This is why, despite being a web developer myself, I despise most web developers.

It's not like it's hard to write decent, standards compliant (X)HTML and if you know what you're doing, apart from the odd typo, anything you write will be standards compliant before you even worry about validating it (validation is just for spotting the typos). It is, after all, easier to remember the standard code than the kludges.

So you're going at it arse about face - code to standards and then if you HAVE to, apply IE6 kludges afterwards - to be fair to MS, IE7 and 8 will work if you code to XHTML1 (transitional they don't like the "application/xhtml+xml" Content-Type for strict) and CSS2 - it's only JavaScript (and CSS3) that really causes headaches.

Mozilla orders Jäger shot for Firefox engine

CD001

does this mean

that experts in the field are Jägermeisters? Or is that just their preferred tipple?

Oz censorship debate censored on Comms minister's website

CD001
Linux

Actually

<?= $searchTermList ?>

Is, in fact, perfectly valid in PHP providing you've allowed "short tags" in the .ini file - <?= is just shorthand for <?php echo - it's basically identical to ASPs <%=

So I take your pendant and raise you one web-geek-Über-pedant.

UK.gov IT minister makes open source gaffe over browsers

CD001

because

------

One thing we can be sure of is that minister = idiot. Why do prime ministers always find the person least suited to each ministerial job.

------

All ministerial positions work that way... therefore:

The Prime Minister is the most unqualified minister to do the Prime Minister's job - there is no-one better at being worse qualified for Prime Minister than the Prime Minister - they are, if you will, the lowest of the low.

Therefore, by definition, they cannot fail BUT to appoint the worst possible minister for any other given position if they did they'd no longer be the most unsuitable Prime Minister and we'd have to have a referendum to appoint someone who is actually incapable of making the correct decision about anything... ever (including resigning).

Microsoft: Oracle will take us back to 1970s hell

CD001

thin clients

Sooo... they're going to take us back to the dreaded days of mainframes and thin clients?

Like that's a bad thing... just substitute "mainframe" for "cloud" and "thin client" for "netbook" or "smart phone" and it's pretty obvious there's a demand for this stuff - let the servers do the grunt work and the clients do the GUI.

Of course, it all falls over if you don't have a decent net-connection... maybe that's the "hell" being referred to.

Virgin to offer 100Mb/s broadband by year's end

CD001

indeed

Even their customer service is of "two halves" - I think I've only ever rang them a couple of times (and I was a Telewest customer originally).

Most recently was a couple of calls with regards to billing. The first (in the evening), yup, a call centre in India who whilst being quite polite were not able to actually do much if it was outside the script.

Then, when working from home (so rang through the day) I got through to a UK call centre - and had the issue sorted in minutes.

I was querying, with a hint of harrumphing, a deal on the website that meant that new customers got a much better rate (if they took the deal) than existing customers... I was told about an upgrade available for existing customers that matched it - which in my case meant upgrading from the L size TV to XL (with V+) and from the 10Mb to 20Mb broadband connection for only £5 a month more than I was paying plus (discounted) V+ installation... which we went for.

Unfortunately since the other half has had series link and all the V+ "Catch up on demand" type stuff - I've barely managed to get 5 minutes of TV/PS3 time in... NCIS, CSI, etc....

I think the moral of the story is that, if you're an existing customer and you have to call them, do so through the day and use just a hint of harrumphing.

Cable is great - it's just VM that's a bit flakey at times.

CD001

agreed

... I'm only on the 20Mb service but even on that you notice how well/poorly the service you are connecting to can cope - Steam normally copes very well >2MB/s (>16Mb/s approx) - whereas other sites/services have been <1MB/s.

It's nice to play TF2 with between about 5 and 15 milliseconds latency though :)

Attack code for Firefox zero-day goes wild, says researcher

CD001

voted down...

... in an ironic fashion.

PHPers prefer Windows desktop to Linux

CD001

hmmm

Give you Photoshop on Windows but I generally use Netbeans as my IDE, being Java based it's compatible with WIndows, Linux, OSX and so on - and with OSX you'd still have Photoshop... although you would have to put up with that god-awful Mac GUI (fuse lit, runs for cover).

CD001

meh

Used them all - seems to me like you've not touched PHP since version 4.

C# is for Java Programmers who love MS a bit too much.

Python is a god-awful hybrid language that can't decide whether it wants to be syntactically like C or BASIC unless you want to script up some Civ 4 tweaks, leave well alone.

Ruby is nicely OO but once you hit the web with Rails the interpreter has always been piss-poor (well it was when I last used it).

I'll give you C++ though - even though that seems overkill for web-apps.

If it's on the web, odds are it's either .NET on Windows or PHP, ideally with a framework (like Yii or Zend) running on FreeBSD (oki, maybe JSP/Glassfish or similar). To be honest I'd take PHP/FreeBSD over .NET/Windows in an online environment any day - for FreeBSD's superior netcode if nothing else.

On the desktop though - it entirely comes down to what your company is prepared to support... ours won't even let the in-house graphic designers have Macs so the odds on me being allowed to kick up something like FreeBSD/Konqueror - yeah, ain't happening.

Experts reboot list of 25 most dangerous coding errors

CD001

some of this stuff...

I just looked at the examples on some of these - like the PHP include/require one - and thought, "oki - that might be a serious vulnerability but who the hell in their right mind would actually do that?"

Then I remembered some of the god-awful, shonky, half-arsed, crap PHP code I've seen over the years and sighed. If web-devs want to stop being mocked by "real programmers" it might help if they actually put some effort into learning their trade properly - there are some very good web-devs but there also seem to be quite a few feckless tossers who really couldn't care less.

Having said that though, "real programmers" often make the same mistakes as many "web-devs" (when they're forced to write web-apps); lack of ability to write good (X)HTML/CSS and forgetting they're coding in a warzone where they have no control over user-environment or interface software (browser) and everyone from here to Dubai and back again can have a crack at breaking your system.

Paranoia is not a mental health problem when you code for the web - it should be a way of life :)

Your ideal web-dev should be an expert in server/client architecture, able to write, optimise and load-balance applications, be a security expert and part time lawyer (your system needs for conform the DPA and DDA legislation in the UK)... so it's not surprising maybe that the good ones are really good (and rare) whilst the poor ones are awful (and in plentiful supply); considering a web-dev will earn maybe 50-66% of that of a Java programmer for example...

Surprise Adobe update grapples with critical flaws

CD001

tackles a brace of serious flaws

So, that would be 2 then?

'Electronic fags' are useless - US prof's startling claim

CD001

sign me up

Sign me up as a guinea pig / alpha tester of your new Caffotine(tm) - sounds just the ticket to me :)

MTV Mexico pulls South Park episode

CD001

there, there...

There, there Ms Bee, it's alright - have a large hot chocolate laced with Baileys and everything will be fine.

Oracle in MySQL, OpenOffice autonomy vow

CD001

maybe, maybe not

> I cannot understand how anyone cannot see Oracle owning mySQL as anything other than an attempt to control the market.

I'm not sure Oracle are that naive - it would be hard to "control" the market with MS's SQL Server, Postgres, MariaDB and lord knows how many other DB servers out there - but yes, I can see an "up-sell" opportunity for them there as well as providing a commercial support package. Since Oracle have been involved with MySQL for a long time now (InnoDB) and have arguably improved the product it's a sensible acquisition, maybe even a land-grab but an attempt to control the market might be a little unrealistic at this stage.

Besides, with the plethora of MVC frameworks available to PHP now (as PHP websites/apps are probably the things that most commonly utilise MySQL) switching DB is a fairly simple matter... as long as you're already using a framework of course.

Verified by Visa bitchslapped by Cambridge researchers

CD001

A few points

Yes it's a PITA but many merchants, including us, had little choice but to implement it or stop accepting Maestro transactions - it is now mandatory for anyone processing Maestro transactions to use Mastercard SecureCode for those transactions (and has been since June 2009 ... although the original deadline was June 2007, nobody implemented it and it slipped).

Last year, however, Mastercard put pressure on the merchant banks and we received a lovely letter from ours saying that if we didn't implement 3D Secure (for Maestro transactions) in the next 2 month's we could be liable for a £20,000 a month fine - however, if we DID participate in the 3D Secure scheme then we'd get a greatly reduced cost-per-transaction rate for ALL transactions made using 3D Secure... so since we had to implement it anyway...

The thing is though - it does NOT push liability back to the customer, but to the customer's bank (arguably this could result in higher bank charges and the customer paying in the end but still... ); it doesn't make the customer any more liable than they were before. For once, the banks aren't entirely to blame - they're accepting slightly higher liability - it's the credit card companies (Visa and Mastercard) that pushed the change because, previously, THEY were liable for fraudulent transactions - there was no real incentive for the banks themselves to get their shit together.

About the only up-side, really, for the 3D Secure system is that any merchant participating in the scheme must comply to PCI regulations - part of which covers a certain (minimal) level of security and penetration testing - which means the legitimate sites might be a teeeeeeeeny little bit more secure (if they're small operations) and Bob Haxxor of badsite.com has to just work a little bit harder to make his site look convincing - oh and it takes an extra couple of minutes to get access to the card holder's date of birth so that you can use that stolen credit card.

So it _is_ more secure - in the way that attaching a parachute with two strands of hair might be safer than just one - but it tries to imply a much greater level of security than it actually imbues which is never good.

Wrists playing up? You're shagging too much

CD001

Re: Two Backs?

It would make more sense for "the beast with two backs" to refer to missionary position since the two "fronts" would be together in the middle leaving a back on both the back and front of the new conjoined beastie? no?

Guinness to hit three quid a pint

CD001

yeah...

----

Without doubt it is the supermarkets causing the binge-drinking problems and they need their knuckles wrapped.

----

Yeah, because on a Friday/Saturday night the pissed up masses brawling, pissing and vomiting in the street have just come from Tesco.

It's official: Blogging is a dangerous business

CD001

hmmm

I like your thinking - but in the UK that leaves 4 real choices...

1: Labour

2: Tories

3: Emigrate

4: Suicide

Very few people vote FOR either Labour or the Tories but simply AGAINST whichever bunch of monkeys they hate most at the moment, I've met very few people who actually have the faintest idea what either party's manifesto actually is; they're not voting for any particular ideas or policies but voting blue because they hate red.

Option 3 looks better every day... maybe Switzerland, at least you're in the right country to get some assistance with option 4 if it really gets bad enough.

UK prosecutors drop 'tiger' sex video case

CD001

Kangaroo

Isn't a weird manimal mutant kangaroo at that?

Firefox 3.7 to feel need for speed with multicore boost

CD001

oh?

----

IE8 starts up faster than FF

----

Not really, IE8 draws a window on the screen faster than FF but then sits there for six months while it thinks about loading your homepage - loading up the GUI is not the same as loading up the program - I've managed to hang IE on a few occasions by trying to cancel the homepage load and go somewhere else (then it refuses to load anything).

Even when IE IS loaded up - the time it takes to open a new tab could almost be measured on a geological scale - several species of weird lizard-men could evolve and become extinct in the amount of time it takes to open a new tab in IE.

You're right though, Firefox isn't perfect, I really hate the way it handles caching for instance and in many ways Opera is better (especially once you've tweaked opera:config) but, like you, I use too many Firefox add-ons to change unless I have to.

Paramount prepares to scale Dune

CD001

Duniverse...

That sounds like a pretty good idea for an MMOG if you ask me :)

UK Border Agency delights with festive e-card

CD001
Go

Title...

I'm noticing a recurring theme in your titles Mr Spoon... I assume however that you only like them when they're green.

RockYou password snafu exposes webmail accounts

CD001
Badgers

The clue is in the title

------

It's unclear why RockYou left passwords on its systems without encrypting them in the first place.

------

Clueless developer - seems to cover all bases, it's not like they're uncommon - web 2.0 is made of them... and badgers of course.

EC drops Microsoft browser probe

CD001

dumdedum

----

There will also be an option for OEMs and customers to switch off IE and make a different browser the default option in Windows.

----

Which, really, is all that needed doing... assuming you could get MS not to strong-arm the OEMs of course.

Digital Dividend could cost cable TV dear

CD001

and in...

... flats and preservation areas where you're not allowed to install satellite dishes, oh and it's less prone to break-up because of (extremely) adverse atmospheric conditions (it just breaks up because of the crappy, heavily compressed MPEG2 encoding on certain channels) - and I'll take cable broadband over DSL any day of the week.

I have cable and my parents have Sky *shrugs* - each has their pros and cons.

Critics aim to sink Titanic ice cubes

CD001

WTC Jenga

Wrong, but funny :)

DVLA data powers likely to be abused by foreign officials

CD001

lobby

Lobby the gov/DVLA to AES encrypt the entire database and allow this access to it... just not the decryption key.

Gov retreats on vetting database but ain't climbing down

CD001

So the answer is...

... that any prospective parent needs to be vetted and entered into the database before they're allowed to breed. Ideally there should be an aptitude test beforehand and perhaps some kind of "license to breed", possibly even sterilisation of those that fail the aptitude test, just to be on the safe side.

Of course, if I was running the tests I would automatically fail every politician for starting the whole twuntish thing in the first place.

Parcelforce to drop Windows 7 compatibility through letterbox in New Year

CD001

exactly

That's exactly what I was thinking - I'm a web-monkey and I cannot think how you'd manage to make a site incompatible with certain OSs WITHOUT doing it on purpose... in fact about the only way I could think of doing it, other than a simple UserAgent based block, would be via a Java Applet or ActiveX control (which would bork anything other than IE anyway).

Page: