* Posts by Crazy Operations Guy

2513 publicly visible posts • joined 29 Jun 2009

Obama govt proposes 33% hike in cyber-security spending

Crazy Operations Guy

Considering how much has been spent on the F-35 project vs the fact that only 162 have been 'delivered', it works out to be just over $8 Billion per unit...

Of course, none of the 162 delivered are actually combat ready, but rather only usable for testing and evaluation. Oh, and they won't even have all the promised features until 2022, at the earliest. Even then, they'll still be experiencing some pretty spectacular problems such as the fact that the helmet is so heavy that any attempt to eject would snap the pilot's neck; a MiG from the early 80's can trounce it in a dogfight; overly-complicated power-plant causing numerous engine failures and maintenance headaches; the designs have been modified so much that there are very few parts actually compatible between the three variants...

AdBlock Plus, websites draft peace deal so ads can bypass blockade

Crazy Operations Guy

Re: "my sites are all perfectly usable in lynx."

"What's wrong with HTML 5? "

Plenty, for one, it tries to replace HTML4, JavaScript, and Flash and fails at everything.

Second, its becoming a full-on programming language, not a simple document mark-up language. I am an assembly/C programmer, I don't want to have to learn yet another full language to produce useful documentation.

Third, I hate the idea of mandatory codecs. A chunk of binary code that can run on my machine without my consent, hell no. I don't want my systems getting compromised because of a video tag pointing to a malformed video file.

Oh, and that site you pointed to, the only things that actually use HTML5 are the god-aweful glow effects on the text. It reminds me of a bad acid-trip while trapped in a warehouse full of old 80's pop-art...

Crazy Operations Guy

Re: "my sites are all perfectly usable in lynx."

"Never heard of the w3c checker? https://validator.w3.org/"

Oh I check the site against the validator all the time before it makes it to my web servers , I'm testing to ensure it is accessible and that everything is behaving as it should.

Crazy Operations Guy

Re: "my sites are all perfectly usable in lynx."

As are mine. I typically check my web servers by copying over the content tarballs, restarting the web server daemon, then opening up lynx and pointing it to localhost to test the deployment. My sites are very basic looking, but are easy to use. No JavaScript, no html5 crap, just pure HTML 4-strict and a little css. Anything graphical is just PNGs and JPEGs with descriptive alt-text. Graphs and charts are presented as both an image and a table with the data used to generate it.

For searching my sites, I have one big page of links to everything else on the site with instructions to people to just hit "ctrl-F" to find what they need or to use "site:<mydomain>" with the search engine of their choice. Just under each link is a list of the unique words for the inked page (Well, there is some curating of those terms, but not too much). Much like a table of contents and an index merged into one page. Sure its 5 MB, but its pure marked-up text, so with HTTP compression, it only ends up being around 1 MB of data going across the wire.

For my web-servers, I only have to dump my files into the /www/ directory, point chroot'ed nginx over to it and then just let it run. Nice to see a directory tree that contains only 5 files types: .html, .css, .jpeg, .png, and .htaccess. The systems only have 2 cores, 512 MB of RAM, and a 15 GB hard disk partitioned with a 10 GB /www/ directory. VPS and cloud servers with that kind of hardware end up being ridiculously cheap but still supports a decent number of simultaneous connections.

Imation flogs off IronKey to Kingston

Crazy Operations Guy

"Now, with activist investors in control"

Well, there goes the company...

My experience with 'activist investors' is that they are just re-branded 80's Wall Street assholes. They buy up the stock of a struggling company, go in and start scrapping anything without immediate value, then sell all their stock once the company reaches a specific price. They leave behind countless companies that are now on the verge of collapse, but what do they care? They have their sacks of money and another company in their sites, just waiting to ruin that one as well.

Reports: First death from meteorite impact recorded in India

Crazy Operations Guy

North Koreans?

I wouldn't be surprised if it turned out to a piece of that 'satellite' that the DPRK launched the other day, or at least a piece of the rocket itself that fell back to earth post-launch.

That's cute, Germany – China shows the world how fusion is done

Crazy Operations Guy

Re: Soon...

"Do you know of a nice site that lists atrocities by country, by year/period?"

No, but I'm sure there is one. If not, it really should be built... Might take a while to put together given the mass amount of terrible things we humans have done to each other. But then governments tend to cover those kinds of things up pretty well.

In all my research, it seems that the only place that hasn't committed a horrible war crime in the past century is Antarctica. I wonder if there is an opening for an IT guy at McMurdo...

Crazy Operations Guy

Re: Soon...

"I'm not keen on China's human rights record "

Well, have you seen the west's records on Human rights? Its not that much better... How is China's suppression of the Tibetan people all that worse than the British Raj? Or the USA's Trail of Tears, or France and their persecution of the Buddhists in Vietnam? Dutch colonies in Africa,Spain/Portugal in Central/South America... Then there was all the shit from WW1 and WW2, the proxy wars during the cold war...

In a purely objective point-of-view, China has performed slightly fewer atrocities per capita than the "west" or any other country that has found itself in the position of being more powerful than any other country. By no means am I defend China for their actions, I'm just simply pointing out that no country can claim to smell better than any other when we've all been rolling around in shit.

Crazy Operations Guy
Joke

Get your racist stereotypes straight people. Japan is the one that confuses r and L; China is the one that pluralizes singular words and uses the singular for plural words...

If you're going to be a little racist, at least do it right, sheez...

Head transplant candidate sells souvenirs to fund operation

Crazy Operations Guy

Re: I have seen the films

@ linicks

That is the most offensive and ignorant thing I've heard today, and I read through some excerpts of Trump's speeches and some NDP propaganda....

Bill for half a billion quid lands on Apple's desk in Facetime patent scrap

Crazy Operations Guy

Easy patent reform

Implement a requirement that the company holding the patent must also be producing, or actively developing a product that the patent covers, otherwise the patent is allowed for others to use.

Internet idiots make hoax bomb threats to UK, Aus, French schools

Crazy Operations Guy

Re: BTaaS - Bomb threats as a Service

Well, the oldest profession is "Servicing as a service", so not exactly new. I'm waiting until the rest of the service industry gets hold of this construct. "Cooking-as-a-service", "Driving as a service", "waste disposal as a service", etc...

Crazy Operations Guy

Re: $10 bet

"live in a country hostile to the West"

In which case, they'll be getting a surprise visit by some nice special ops soldiers or CIA folk. Or the west will just accuse the country of harboring terrorists and imposing sanctions until they hand over the idiots.

Lights out for Space Vehicle Number 23: UK smacked when US sat threw GPS out of whack

Crazy Operations Guy

Re: Chip Scale Atomic Clocks (CSAC) - $1500 price class

"So probably Apple would have to think it is worth including"

Well they have to do something other than slightly increase processing power and storage to get people to buy new iphones...

Crazy Operations Guy

Re: "A more effective backup for GPS is desperately needed."

Or the US military deciding to shut down the whole thing because they are at war.

Crazy Operations Guy

Re: 'precision docking of oil tankers, as well as navigation'

In docking, the ship just needs to get close enough to the dock that it can be completed by tugs pushing it in place or longshoremen with ropes and winches pulling it into place. Beside, any tugger should be familiar enough with their port and their ship to be able to guide ships into place without anything more than basic instruments.

I suppose this is a symptom of skills going rusty because the computer does all the work for them, much like modern aircraft were if something goes wrong, better hope the pilot can read the manual in time...

Safe Harbor ripped and replaced with Privacy Shield in last-minute US-Europe deal

Crazy Operations Guy

Re: And they managed

Probably because they could still snoop on people all they like since they'd be requesting data about a specific -account- not a specific -person-. They could reason that they weren't aware that the subject of the search was a European, as they were just investigating accounts that were tied to their investigation, the fact that an EU citizen happens to own that account is irrelevant.

US government's $6bn super firewall doesn't even monitor web traffic

Crazy Operations Guy

Don't forget the luxury team-building retreats to Dubrovnik or the industry trade shows in Maui. The expensive auditors to ensure that the development process is complying with all the random ISO standards and six-sigma training, then halfway through, trying to implement the "lean" methodology (Because something that works for Toyota is -totally- going to work fro a software product...)

I wish I was being facetious, but that happened to me last year. A project that was supposed to be 6 weeks (which I almost finished in week 3) but has been going on for 8 months now because the managers keep going to seminars about how to get projects back on track by using some new, cutting edge process...

Crazy Operations Guy

Re: "... six per cent coverage ... for $6bn"

I've always seen it as a bath-tub curve. The first 5% is near impossible since the product is untested and there is still a bit of a teething phase, the next 90% flies by without issue, then the last 5% would be those weird corner cases and mission-critical stuff that can't be down for changes. And it always seems to be that that last 5% is the group that needs it the most, such as the systems that everything is dependent on and thus needs the most protection, but you can't take it down because everyone is depending on it being accessible constantly...

Crazy Operations Guy

Off-the-sehlf system

For even $57 dollars, I could throw together OpenBSD, Squid, Bro, OpenSMTPD, and ClamAV on a basic, off-the-shelf piece of hardware that actually does what the project should've been capable of doing. Point the machines to update from an internal server for the super-secret signatures they are checking for and you're good to go.

A quad-core box, 32 GB of RAM, and 640+ GB of disk would be enough for such a system. (Pricing such a thing on NewEgg comes out to about $750). Those applications support clustering, so there's your reliability and scale.

Chip company FTDI accused of bricking counterfeits again

Crazy Operations Guy

Re: Always mount a scratch monkey

Mounting a scratch monkey, isn't that how AIDS spread to humans?

Crazy Operations Guy

Re: "That's not recommended for performance-intensive drivers"

Its RS-232, I'd hardly call 192 kbps 'high-performance'.

Dutch cops train anti-drone eagle squadron

Crazy Operations Guy

Re: Won't someone think of the eaglets?

Ah yeah, the old punt rifles. Because who couldn't use a rifle with a 3-meter barrel that fired a 2.5 caliber shell?

Hackers mirror 250GB of NASA files on the web

Crazy Operations Guy

Terminator seeds

I'm not sure how to feel about the concept, on one hand, making people buy seeds over and over again is an asshole thing to do; but on the other hand, it is responsible to do so in case something goes wrong with the genome and turns the crops into an inedible weed that chokes out all other crops that would require a massive effort to eradicate.

Random ideas sought to improve cryptography

Crazy Operations Guy

Distribution vs. randomness

I'm addressing the issue of randomness vs distribution in my next by measuring the percentage of cache hits when the processor is updating the counts. Since the counts are stored at memory address: 0_<prefix><32-bit Number>00, numbers within that same block of 3 million results (The count for each number takes 4 bytes of RAM and the processor has 12 MB of cache).

In the case of sequential numbers, I'd theoretically see a cache hit-rate of 99.99997% on the second chip. I'd also see a block of a specific color stream across the images as I'm checking them. I'm also looking at the intermediate images to see if there are any purely uniform spots. I expect to see a small amount of deviation in each image.

But then, any sort of sequential chicanery would be noticed almost immediately by anyone running a basic check on the RNG, what I'm focusing on is long-term randomness of an RNG.

Crazy Operations Guy

Re: And...?

I'm working on publishing my resulting in the next few months once I get a statistically significant sample (So far each number is only averaging 40-45 hits). I've only just started, after all. I'm hoping to get some funding to run a bunch of tests in parallel and get some help with collating the data (My work commitments have been taking priority)

Crazy Operations Guy

For the past year, I've been running tests on a couple random number generators. I grab a random 32-bit integer form it, each number is plotted on a 65,536 x 65,536 bitmap. Each time a number comes up, its pixel's color is bumped up by one. Every so often, the bitmap gets saved to an external storage array so that the image can be viewed from another machine, any number that is favored by the RNG will show up as a different color in the resulting image.

Doesn't require all that many resources to run such a test 16 GB RAM to store the results, so another 8 for the OS and the RNG itself would be more than enough. The bottleneck ends up being the RNG itself. So a quad-core system with 32 GB of RAM and 100 MB/s of storage could create an image every 5 minutes. I've been running my tests on just such a machine (A pair of old HP DL360 G5 with a shared HP MSA2000 G3 storage array, the second server is there to share out the images without bothering the testing machine).

Why a detachable cabin probably won’t save your life in a plane crash

Crazy Operations Guy

Re: Personal parachute

Most LA/ULAs that I've seen with parachutes, its on the plane itself, not the pilot.

Reg readers battle to claim 'my silicon's older than yours' crown

Crazy Operations Guy

My father was an IBM reseller

When I was born, he powered up a fresh out-of-the-box PC/AT (The model was discontinued a month beforehand, so he got it cheap as chips). I was born at home, so leaving the thing on for my childhood was no problem. The problem was keeping the thing going when I moved out, my new place was only an hour and a half away. So we took an array of lantern batteries to generate 24 volts and enough watt-hours to last the trip and then some. Wire it up with a couple 7805/ 7812 power regulators and we were good to go. Next step was to pop the case open and and strip the power supply cables to get enough bare wire to plug in some alligator clamps. Once we got that far, I unplugged the box from the wall and the batteries, thankfully, keep the machine running without the machine resetting.

So for two hours I had this big mess of a computer on my lap for the drive to my new place while the thing still chugged away. Had just enough juice to get it onto my desk and plugged into a UPS before the batteries wilted too much.

The machine is still running 4.2BSD with a 64-bit time_t to avoid the 2038 problem. Since the model was being discontinued, it came with the full 16 MB of RAM, proc set at 8 Mhz and a pair of 20-MB disks. It also came with a debugging card that allowed halting the processor and peripherals which allowed for twiddling bits while the CPU just halted and wouldn't realize what had happened when the clock was resumed.

BOFH: In-depth IT training needs a single-malt distillery

Crazy Operations Guy

Wouldn't the RAM be soldered on as a BGA part? In which case the PFY would need a hot-air re-work gun.

Open source plugin aims to defeat link rot

Crazy Operations Guy

Re: "1.1.1.1"

How the fuck is 1.1.1.1 safer? Its an actual IP address and is owned by the US DoD and was later given to ICANN / APNIC for testing so there very well could be something alive that responds to that IP. Or someone could poison BGP and start hosting attacks on that IP block. Much better to just point it to 127.0.0.2 if you really are afraid that you have a webserver running on your local machine that you don't know about (Which if you do, you have much, much bigger problems to worry about)

Major Hollywood studio eyes Paint Drying sequel

Crazy Operations Guy

If I were making it

I'd throw in single frames of child friendly images, then start a rumor that there is hard-core pornography in there so that the ratings board has to watch it very intently to make sure there isn't. Then I'd release a second one with such filth in it, but make sure no one knows about it until its gets its kid-friendly rating, at which point kick the "Think of the Children" brigade into high gear.

Maybe follow that up with a sequel of a camp fire burning and mix in some images of extreme violence into the flames. Mix it just enough that watching it normally wouldn't produce the images and only staring intently at it would do so (probably flicker the pixels so that the image is split into many fragments spread across frames so that the image is assembled in the viewer's brain by retinal after-images).

Yes, I have a twisted and depraved mind, but I only use it for good, like torturing the people that believe that someone getting disemboweled is OK to show to children, but breasts are reserved for adults and even a glimpse of genitals makes it pornography...

Virginia man charged in intriguing 'suspicious bacon' case

Crazy Operations Guy

Re: Stop the Fighting: American -v- British Bacon

"Firstly, True American cheeses can be damned good."

Certainly not denying that, one of the best pieces of cheddar I ever had came from a dairy in the US. Its that weird waxy, bright yellow stuff that is labeled "American Cheese" that , for some reason, doesn't spoil, that I find grotesque. Our bodies harvest nutrients, proteins, etc. from food in a very similar manner to spoilage, so if something doesn't spoil, is it also not digestible?

Crazy Operations Guy

Re: Felony wearing of a mask in Public?

Virginia borders Washington DC, where anything even remotely related to "terrorism" is considered illegal.

Well, terrorism in the sense that a brown person devotedly following their religion is a terrorist, but a white guy screaming about how we should kill all the gays and bomb abortion clinics is just a patriot exercising "Freedom of Religion / speech"

Pentagon fastens lasers to military drones to zap missiles out of the skies

Crazy Operations Guy

Well, it only needs one or two shots to deal with the missile. And as a last resort, it could just kamikaze itself into the missile, its not like anyone gives a crap about the loss of a drone when it prevented the deaths of millions.

But isn't this something the X-37 could do? Those things run for over a year, so stick a bunch up in space and have them orbit over the most likely apogees for ICBMs and shoot them when they get close enough.

But I really only want to see anti-ICBM systems developed if it means that we start getting rid of the nukes we waste hundreds of billions of dollars a year to keep around, we're never going to fire them. The whole concept of "Nuclear deterrent" is about as stupid an idea as strapping hundreds of grenades to yourself and carrying them everywhere to dissuade anyone from trying to kill you: if someone is going to be the first to use, they don't care about the results and a lot of innocent bystanders are going to die pointlessly.

IRS 'inadvertently' wiped hard drive Microsoft demanded in audit row

Crazy Operations Guy

I'm just happy to know that they'll be first up against the wall when the revolution comes. I understand the need for the IRS and have sympathy for sot of the hapless drones that work there, but the corrupt ones who abuse their power like this really get my goat...

I suppose my sympathy for those workers is due to all the hatred they get from the average citizen when its the law-makers with their badly-written tax laws that deserve the hate. I wish it were just a simple "An entity gains money from another entity, that entity now owes 20% of that in tax", no more of this "If you make between X and Y dollars per you year, you owe Z dollars, but if you happen to fall under rule A, you now owe 1.1*Z dollars, however, if you fall under exception b addendum c but not addendum d, you only owe 0.95*Z dollars".

I want to live in a world were "Tax Account" is no longer a valid occupation and the government doesn't need to produce "EZ" versions of your tax return and you just have to trust that you aren't getting screwed over by taking the easy route (rather than getting screwed over by some guy charging you to do it for you).

I would have no problem with taxes if it was a simple as seeing that 30% was taken from each paycheck and that would be the only time I ever dealt with the IRS.

Crazy Operations Guy

Re: Huh?

Why do they even re-use disks? Hard disk are ridiculously cheap nowadays, so why wouldn't they just pop the drive out of the machine when the employee left, placed it in a sealed anti-static bag, cataloged it and kept it in a warehouse somewhere.

They should also have something running on the local machine that anything* the user creates is backed up to a central file server and preserved on a backup until the sun goes dark. Government records need to be preserved to prevent shenanigans like this from happening, I want to know that 200 years from now, an archivist can dig through old files and know that "Carol in payroll had a birthday so there is left over cake in the break room". If a government employee shits in the woods, I want a record of it so we can hold them accountable for everything they do in the name of the government.

*Well, obviously temporary files / miscellaneous auto-created system files should get a pass, because there is no point in keep billions of copies of 'desktop.ini' and ~document.docx around.

Microsoft legal eagle explains why the Irish Warrant Fight covers your back

Crazy Operations Guy

Re: I'm confused

We really need to build an A, B, and C ark, except we'd leave the B ark on earth and let the politicians and other useless cruft to argue over scraps of a dying planet while we build a new one correctly from the ground-up.

IBM, Ustream-BM, we can't believe Ustream is now owned by IBM

Crazy Operations Guy

"IBM, Ustream-BM"

Might want to lay off the curry for a while then...

It's 2016 and idiots still use '123456' as their password

Crazy Operations Guy

File names

For most stuff, I just use the filename of the song I happen to be listening to at the time. For a while, my password at work was "Space oddity.mp3". Uppercase, lowercase, a symbol, a space, and a number. I just wrote 'password - Tom' on a sticky note for reference (I have many such sticky-notes around my desk, anyone that sees it would just think that I need to give a password to Tom or something).

Crazy Operations Guy

Re: A favorite is to dress up for an interview,

For security audits, I have an orange vest, big metal clipboard, and a white hardhat with the local utility company's logo on it (Actually just a sticker I got from a bowl they have in the lobby for the children) I've gotten IT managers to let me into datacenters with that getup. I keep a tablet in the clipboard and a USB-to-SATA adapter as well. So I can pop in to the DC, shut off a domain controller, and copy the authentication DB files to the hard drive.

Bridgeworks reveals VMware-like tech for TCP/IP cable virty'ing

Crazy Operations Guy

Solving the wrong problem

Any rational file transfer systems isn't going to send one packet at a time, rather it would send a large blob of packets at once, then wait for an ACK back on the full blob (IE, "received packets 1-28,30-56,60-63") and then send a new blob of packets with the missing ones from the previous batch thrown in. Its criminally inefficient when the system knows that its going to millions of packets, but waits for an individual ACK from every single one of them...

Almost like protocol authors have completely forgot that UDP was a thing.

Cat vids return to Pakistan as YouTube turns on censor-matic

Crazy Operations Guy

Saudi Arabia doesn't have an age-of-consent nor a minimum age to marry... You only require parental consent. And given that in many areas of the country, women and children are property, it isn't all that rare that parents will give their daughter to someone as a gift.

A former coworker of mine found out about that after getting some guys daughter to celebrate the signing of a multi-billion dollar partnership deal between our company and theirs. Once he returned to the US, he enrolled her in a boarding school and emancipated her (She was 12 at the time). The whole deal actually hinges on their staying married. Good thing for them that adultery and cohabitation aren't illegal here...

How to get root on a Linux box, step 1: Make four billion system calls

Crazy Operations Guy

CGI

Would it be possible to exploit this with a CGI on a webserver, like the bash bug from a few months ago?

Internet of Things 'smart' devices are dumb by design

Crazy Operations Guy

Home cloud?

I wish the industry could come together and make a standard for some kind of personal cloud gateway type device. Build some kind of discovery protocol so that all IoT traffic passes through a single device so that the traffic can be secured properly and monitored. Even build in a bit to allow devices to communicate through such a device rather than going up to the cloud and back.

GCHQ summer schools to pay teenage hackers £250 a week

Crazy Operations Guy

Can't buy loyalty

Its not the money that is scaring away potential applicants, its the bad reputation of the organizations. If these organizations start doing good, like protecting the nation from malware, scammers, spam, identity thieves, and attacks, then they'll see people lining up just to submit their applications. Set up a wing to analyze malware and release code to destroy it; identify botnets and start blocking the C+C servers. Or at the very least, just be transparent about what is happening with the data they gather.

Make it an organization that people could brag about to anyone and be responded to with praise and your only employment problem would be trying to not drown in the flood of competent applicants.

Kiev airport goes dark after 'BlackEnergy-linked' power outage

Crazy Operations Guy

"Can't GCHQ or even NSA spare Ukraine a few experts"

I wouldn't trust their 'experts'. They couldn't even protect themselves from IT contractors lifting gigabytes worth of classified data from their networks...

But this is a problem that any rational security engineer could fix. Simple separation and packet inspection would go a long way to fixing things. Other than a few heavily monitored end-points, no data should be entering the operations network and only a few well defined pieces of data should leave it.

Facebook is no charity, and the ‘free’ in Free Basics comes at a price

Crazy Operations Guy

He has the money to build a proper network

Why doesn't he just use some of his massive fortune to build a proper network and give everyone free, unrestricted internet access? Build a massive grid of 3G* cell phone towers connected through microwave links and powered by solar/wind.

*3G because the equipment is quite cheap compared to 4G while providing enough speed for compressed internet traffic. Plus cell providers are flush with 3G cell phones that customers have traded in. Or maybe just create a purpose-built phone for such a market: replace the back-plate with a solar panel, make the OS very simple and easy to use, use a custom-built SoC with built-in hardware compression, a mechanical keyboard, and a modest resources.

PDF redaction is hard, NSW Medical Council finds out - the hard way

Crazy Operations Guy

Needs to be a feature

Why hasn't Adobe just added a 'redact' tool to Acrobat (Or whatever the hell they're calling it now). A simple rectangle selector that removes the data it covers from all layers and any metadata. Maybe even add a bit of intelligence to it and ask to redact all other instances of the string the user just covered up.

Swivel on this: German boffins build nanoscale screwing engine for sluggish sperm

Crazy Operations Guy

why German has failed to become as popular a language as English or Spanish

I think the reason that English and Spanish are more prevalent has more to do with all the genocide that the Brits and the Spaniards committed around the world than it has with the language itself...