* Posts by Tom 38

4344 publicly visible posts • joined 21 Jul 2009

Let's recap reCAPTCHA gotcha: Our cunning AI can defeat Google's anti-bot tech, say uni boffins

Tom 38

Confused

Isn't reCAPTCHA itself a system for training a ML system? So they've trained an ML system to beat another ML?

Brave accuses Google of trampling Europe's GDPR with stealthy netizen-stalking adverts

Tom 38
Joke

Funny

I don't recall Google asking consent to do any such thing. I guess they are saying that people are somehow finding a magic page to opt in to this stuff?

The wheels on the bus go round and... Oh dear. Chancellor Sajid Javid unveils spending review

Tom 38

Re: "the opportunities created by Brexit".

Since joining the common market Britain has been in steady economic decline, we've lost many large companies, run up a huge trade defecit, seen our relative world standing fade, while in real terms our young people are poorer than they were. So in hindsight we didn't join for selfish gain, but to assist the economic development of other EU countries. So why complain now if leaving the EU causes some short term pain, from your short-termist selfish perspective?

Because, Mr AC, he wasn't saying its going to cause them pain. Something affecting our EU exports is going to cause job losses and recession here. Jacob Rees-Smug lounging on the front benches and Bloody Stupid Johnson calling Corbyn "Caracas" is not "winning", its the last death throws of the Tory party.

"No deal" would cause awful economic problems for the UK, and the probable break-up of the UK.

May's deal is like staying in the EU, but with none of the benefits.

PS: GDP growth since joining the EC. Oh look, we're all connected in one global economy, who the fuck knew.

AWS celebrates Labor Day weekend by roasting customer data in US-East-1 BBQ

Tom 38

Gonna get some downvotes for this, but if you use EBS, that sort of failure is to be expected. Amazon say if you have 1000 EBS volumes running for a year, you should expect one or two to fail and have to be restored from backup. Those numbers are obviously averages across all AWS DCs, whilst problems tend to be concentrated at particular DCs.

If you put data in there that you absolutely must have restored, you should either use a different storage or take snapshots as regularly as you need them to be. EBS is the equivalent of local disk storage, its not cross-AZ, if you require proper resilience in cloud you should be using something like S3, and design your systems appropriately to be able to use that sort of storage.

Bus pass or bus ass? Hackers peeved about public transport claim to have reverse engineered ticket app for free rides

Tom 38

reverse engineering the app

strings blob
is called reverse engineering these days?

Raspberry Pi head honcho Eben Upton talks thermals, stores and who's buying the kit

Tom 38

Re: Not to be mean but,

It won't work with properly compliant cables and chargers that provide dual cc-line. The way the Pi is wired, it advertises itself as an audio device, and so chargers/cables that detect how a device is advertised will not send power to it. Cheaper cables don't detect, and always send the power.

Ward's original blog post describing the issue explains it better, I'm probably misdescribing something.

The top three attributes for getting injured on e-scooters? Having no helmet, being drunk or drugged, oddly enough

Tom 38

Re: Scooter stoopid

That't false. With a bicycle you can make 10km long daily commutes to the office. With a scooter you can't travel those distances.

I was in Hackney Wick on Sunday, where there are many men with beards drinking craft beers*. There is also an electric skateboard shop called Wick Boards, and happened upon some bearded chaps setting out for a jaunt. I asked him what the range on one of these boards is, and was surprised to learn they can go up to 28km on a single charge, which is very much in the commute to work and back range.

* I also have a beard and drink craft beer. No connection to the store and my lady friend promptly told me that I will never be allowed to have one of these fancy looking boards :/

Whistleblowing saboteur costs us $167m bellows Tesla’s accountant

Tom 38

Re: Are you f**king kidding me?

All it means is that instead of the existing situation where at the moment you fill up with petrol, then park up and walk to the building, then hit the toilets and then get a coffee or food you change the first step to "plug in".

This is not my usual petrol station experience, which involves driving up, getting out, putting petrol in the car, paying at the pump and driving off. Toilet, drink, snack - three things which are better done anywhere other than a petrol station.

YouTube's radicalizing Alt-right trolls and Facebook's recruiting new language boffins

Tom 38

Re: Radicalization

Alt right is just a label thrown around far too easily at the moment, Peterson isn't Alt Right for starters IMHO, if anything he's more a centrist.

Almost everyone believes that they are themselves centrists, along with the people whose thoughts they identify with. I have no position on Peterson, but note that he has accepted ~C$200k funding from Rebel Media, a Canadian Breitbart clone.

Bloke who claimed he invented Bitcoin must hand over $5bn of e-dosh in court case. He can't. He's waiting for a time traveler to arrive

Tom 38

Re: Time

ts possible that Craig Wright is actually a time traveler.

My Physics teacher told me that we are all time travellers.

British Prime Minister Boris Johnson moves to shut Parliament

Tom 38

Re: So, to sum up. . .

I think you're a little confused on this referendum thing. How is left to the government and Parliament,

Nice to read a staunch Brexiteer admit that Parliament should decide how we exit.

Tom 38
Alert

Re: "TheChosen One" on "The Great One"

Link is missing a final "l" (".html")

Dixons hits back at McAfee's £30m antivirus sueball: Your AV didn't work on Windows 10S

Tom 38

Re: Windows 10S...as useful as a chocolate teapot

The most annoying thing is that you still have to support the POS that they bought without telling you. I spent 3 months struggling with a landfill HP Stream laptop that my lady friend bought from PC World - non expandable 32GB primary storage, with W10 and Office installed it had <1GB free space, every windows update would use all that space and then fail to install as there wasn't enough free space.

"Why did you buy it?"

"Its a nice blue colour, and the guy at the store said it was perfect for office and web"

"Let me take it back, its not fit for purpose"

"Oh no, I don't want to make a fuss"

Bought her a proper Dell refurb for £50 more.

My MacBook Woe: I got up close and personal with city's snatch'n'dash crooks (aka some bastard stole my laptop)

Tom 38

Re: That's horrible.

It used to be that Apple refused to spend money on product placement in TV/movies - like a point of principle*, but I guess that has probably changed - and any Apple kit that you saw was because the plot called for a laptop, and that's what they have around.

I'm much more annoyed/amused by Microsoft product placement, which happens a lot on CBS shows. "Oh my god, the killer is getting away. Let me open up my Surface Pro (close up of the folding) and use Bing to find the route he is taking to the dogs. Quick McGarrett, I've skyped you the co-ordinates!"

* Hey, they got to start having principles somewhere

Tom 38

Re: That's horrible.

I had this backpack that I was given in the late 90s, nasty quicksilver bag that I used whilst skiing, for everything basically. By 2018, it was tatty as fuck, but still good enough to carry my laptop to and from work and keep it dry. Because it was so tatty, I never had any problems going to the pub after work and leaving my bag in the corner of the pub.

However, because it was so tatty, my lady friend kept badgering me to get a new bag, and then she bought me a new bag because I didn't. Of course, I have to use the new bag. First time at the pub, someone nicks it (with me literally standing in front of it).

Web body mulls halving HTTPS cert lifetimes. That screaming in the distance is HTTPS cert sellers fearing orgs will bail for Let's Encrypt

Tom 38

Re: DV's only

Did you see yesterday that chrome will display EV certs the same as DV certs?

Canonical adds ZFS on root as experimental install option in Ubuntu

Tom 38

Re: @AC - The SFC can kiss my taint...

ZFS is filesystem, disk and archive/backup management wrapped up in one coherent and high performance package. Its like comparing a hand crank car to one with a start button.

What are these simpler, less complex tools? For every task I can think of for disk, filesystem, archival or backup task, the zfs way of doing it is simpler and requires only one tool. Even to get close to ZFS features under linux without ZFS you would have to use multiple complex tools.

Specifically for desktops, the ability to take snapshots for free - basically no compute or disk cost - allows you to take and discard thousands of snapshots. Oracle have for a while had a GNOME extension that acts as a time slider on the directory being viewed, and there exist tools for linux to do similar - although currently without the GUI integration that Oracle have done.

Once it starts making it in to more desktop installs, features like that will start to come more rapidly.

Talk about unintended consequences: GDPR is an identity thief's dream ticket to Europeans' data

Tom 38

Probably consent.

Tom 38

Re: Shirley

This is also why people mess up GDPR, because you also do not understand GDPR. Under Article 6, there are six legal basis for possessing personal data, only the first is that consent of the data subject has been requested.

The others are to fulfil contractual obligations with a data subject, to comply with a data controllers legal obligations, to protect the interests of a data subject, to perform a task in the public interest, and finally, for the legitimate interests of a data controller or third party.

If you are a marketing company, and you have a list of people to which you market things to, you do not have to obtain consent to retain this information; the personal data you possess is necessary for you to achieve the legitimate business goal of marketing to them.

If someone has a contract with you, you do not need to obtain consent to store and process their personal data if it is required for the operation of your business and fulfilment of that contract.

"Consent" is one of the worst reasons to keep data. All the others rely on the data controller having legitimate reasons for having and using that data, whilst "consent" simply means that you can keep any information you have obtained, regardless of whether you have a legitimate need under the other 5 reasons, once you have obtained their consent.

This is why companies were all asking for consent in the lead up to GDPR, so they did not have to fully audit what data they possessed (and come up with a valid reason under the other 5 reasons for having it), they simply asked for consent. All this "You must consent or you will never hear from us again" is total bollocks, they just didn't want to say "We store your email address so that we can contact you when there are issues with your account" for each piece of personal data stored.

Tom 38

You don't have to "have an account" to make a SAR.

Tom 38
Coat

I worked with a Lithuanian guy, who didn't quite have the English Business Idioms down pat, he would keep offering to "reach around" to people.

When the chips are down, buy a software biz: Broadcom snaffles Symantec for $10.7bn

Tom 38

I wonder which C-level at Symantec talked their shareholders out of $5 billion in value - what a genius. He/She will be a shoe-in for the next CEO job at HP.

Hack-age delivery! Wardialing, wardriving... Now warshipping: Wi-Fi-spying gizmos may lurk in future parcels

Tom 38

Re: I'm not so sure.

Employee parcels in our office go in one big room, and wait there to be collected. No-one is opening it.

Besides, you would want to make it look like something else. It should look like something that you ordered online, except you didn't. Inside the brown packaging box, you'd have some kind of shrink wrapped box containing the actual device ("huh, I didn't order a big box of vibrators, best check with H/SWMBO tonight/return it, I'll just hide it quickly so no-one in the office sees it")

So many ways to do this.

They're climbing through the Windows: CircleCI goes native on Microsoft's OS

Tom 38
WTF?

Re: This article could be so much better

Its an article on CI... It's as if it was an article on SQL Server and you're asking to define the term "table".

In the time it took you to write that, and for me to write this reply, I've run the google search "CI/CD" 123472342738 times. Guess what it says?!

CI - Continuous Integration - run tests when you make changes

CD - Continuous De{ployment,livery} - deploy/release software when your changes are accepted

More Linux than Windows: El Reg takes Docker Desktop for WSL 2 preview out for a spin

Tom 38
Linux

Re: Oil & Water

Its driven out of necessity. If you are a developer working on cloudy bits, you're going to spend a lot of time, building, running, debugging images. If that's what you're into, you will already be using a Linux or Mac as your dev machine, because that makes this all very easy.

However, if you're not really in to it, and you've just been told that you have to do cloudy stuff, you're probably not running Linux on your desktop. Its probably windows, and almost all of the tutorials, instructions and resources no longer work.

So this is MS saying "Hey, you don't need to switch to Linux/Mac, you can still run all this stuff under Windows, almost the same as you would under Linux".

(I'd recommend switching to Linux tbh)

Amazon Web Services doubled its footprint in the UK and will only get bigger, reckon analysts

Tom 38

The comprehensive research ranks the largest suppliers of software and IT services (SITS)

Really should be Software, Hosting and IT services.

New UK Home Sec invokes infosec nerd rage by calling for an end to end-to-end encryption

Tom 38

Didn't know he had a paper.

UK taxpayers funded Grand Theft Auto V maker to tune of £42m – while biz paid no corp tax and made billions

Tom 38

Re: Ah yes... the Big Lie that the English were subsidising the Scots

It's Scotland's Money when we talk about the oil, but then its all Our Money when it comes to talking about Barnett Formula eh. This country would be even more shit if tax revenues stayed where they were generated.

Rise of the Machines hair-raiser: The day IBM's Dot Matrix turned

Tom 38

Re: Try a Lathe

Craft, Design and Technology

FTC fines Facebook $5bn for making users believe they actually had control over their data

Tom 38

Facebook will also be ordered to detail events when 500 or more users' data has been compromised, along with its efforts to deal with the incident within 30 days of discovery.

If that data is subject to GDPR, they've got 72 hours to inform regulators and users when 1 or more users' data has been compromised. Good job BoJo is going to save us from this red-tape ridiculousness!

Boeing's 737 Max woes trigger BEEELLIONS in losses – and that's just for the latest quarter

Tom 38
Trollface

Waiting for Trump to declare that Airbus is a threat to national security

British ISPs throw in the towel, give up sending out toothless copyright infringement warnings

Tom 38

Re: "Under VCAP, ... collect IP addresses of prolific prates."

They join the torrent and ask for peers. Or rather, they pay a company to do that for them and give them lists of IP addresses for films they distribute.

The Empire Strikes Back: Trump discovers $10bn JEDI cloud deal may go to nemesis Jeff Bezos, demands probe

Tom 38

Re: Fair Play to the Felly

Journalists, writing about the odious things a politician does? How fucking dare they start fights like that. They should suck at his teat and never be critical of the God-Emperor Trump. I think they should just get rid of term limits now, and turn the presidency in to a hereditary-life role - Ivanka next!

2025: HELLO? WHAT? I CAN'T HEAR YOU, I'M ON THE TUBE. FULL 4G NOW. NAH, IT'S CRAP

Tom 38

Re: Keep the tubes quiet

The eastern part of the Jubilee is the modern extension, as lines go I think that's pretty quiet. Central between Liverpool St and Stratford (but particularly Liverpool St to Bethnal Green), you can feel your hearing being damaged as you go round the most stupidly shaped tunnel in the world. Straight lines; we've heard of them.

Banks bid legacy tech farewell as they sail to the cloud – but now all that infrastructure is in hands of the big three

Tom 38

Until bits get magically transported from one CPU to the next, however you provide your services is at risk of having their connectivity removed, whether that's cloud or on-prem.

If your service is mission critical, you should have it in multiple regions and availability zones - each which has multiple independent power, cooling and backhaul and be physically separated - and design your applications and data storage around not relying on any one region/AZ being up.

"Cloud" is more than running your programs on other people's computers.

Tom 38

AWS goes down

"AWS" goes down? All the AZs in all regions all at the same time? Hundreds of DCs simultaneously lose power?

Where do you think this compute load was running before? Why do you think cloud is more of a SPOF than running your own DC or two?

There is a load of shite talked about cloud, mostly by the "cloud! cloud! cloud!" pushers, but almost as much from the "cloud is just a huge SPOF" and "cloud just means other peoples computers" crowd.

Facebook's Libra is a terrorist's best friend, thunders US Treasury: Crypto-coins dubbed 'national security risk'

Tom 38

Try bartering for drugs and see how far you get.

Petty dealers (particularly weed) do this all the time, they exchange their time to bag and sell a portion of a weight, and keep/sell the rest themselves, paying the upstream dealer their share afterwards.

Years late to the SMB1-killing party, Samba finally dumps the unsafe file-sharing protocol version by default

Tom 38

Re: "Most people had dial-up"

Sorry to interrupt the Yorkshiremen sketch, but a lot of the programs I got were from magazine listings, you'd sit there for hours typing in to get some really quite crappy games.

Big Purple Hat is on as IBM closes acquisition of enterprise Linux firm

Tom 38

Re: Abandon Ship...

We've switched all our servers to AmigaOS 1.3!

UK privacy watchdog threatens British Airways with 747-sized fine for massive personal data blurt

Tom 38

Re: Hmm

But if we want users then data will be collected and there is always a possibility of compromise. All you can do is best practices.

Which they didn't do, which is why they get the big fine, and about fucking time.

Tom 38

Re: Hmm

BA haven't been stolen from, because they didn't own the data that was taken. BA have been fined because they were unreliable guardians of that data.

DeepNude's makers tried to deep-six their pervy AI app. Web creeps have other ideas: Cracked copies shared online as code decompiled

Tom 38

Re: This is only the start

retraining the thing to do the same to men of all ages, with the aim of being able to embarrass and undermine prominent politicians

Alas, there is no readily available training set of "middle aged men in suits, clothed/unclothed, same pose", whilst the "attractive 20-30s woman, clothed/unclothed, same pose" is almost limitless.

Former UK PM Tony Blair urges governments to sort out online ID

Tom 38

Re: One of my favourite quotes ever

Is it not? He's arguing that "New Labour ruined Britain", and his argument is that Tony Blair is stupid. How is that not an ad-hominem?

Tom 38

Re: One of my favourite quotes ever

Isn't what Peter Hitchens said itself an ad-hominem? Its ad-hominem all the way down!

You know whose kit for 5G is Huawei better? Go on, have a guess, says UK mobile player Three

Tom 38

They already aren't allowed to put it in sensitive areas (edge and not core).

It's all bullshit anyway, the only sensitive thing is qualcomm's ego.

Cyber-IOU notes. Voucher hell on wheels. However you want to define Facebook's Libra, the most ridiculous part is its privacy promise

Tom 38

Re: So what is the blockchain for?

ZFS is a Merkle tree of blocks. Blockchain is a Merkle tree of blocks. ZFS is not blockchain.

I am a collection of cells. An amoeba is a collection of cells. I am not an amoeba.

Tom 38

Re: So what is the blockchain for?

ZFS is not blockchain.

O2 wolfs down entire 4G spectrum as pals fiddle with their shiny 5G band

Tom 38
Angel

Re: Empire

interlectual property theft

...

Oh dear. Secret Huawei enterprise router snoop 'backdoor' was Telnet service, sighs Vodafone

Tom 38

Re: "We all want to see hard proof—" No, we don't.

In your analogy, being injected in the toe is as lethal as being injected in the jugular, because they both flow to the heart. In reality, the "heart" is the security services infrastructure. How does their information flow to my phone so that the "injection" can poison it?

Remember Windows Media Center? Well, the SDK is now on GitHub to be poked at your leisure

Tom 38

Why would you need a powerful PC? I ran a mythtv instance for many years around that time, and it certainly didn't run in to thousands in build costs. The most powerful component you needed was a video card capable of vdpau (feature set B) - I used a GeForce 8400 GS Rev. 2 with a fanless heatsink, £20 in 2007 - and a CPU and hard drive capable of reading and writing at bitrates not greater than 20Mbit. The first one I built used junk bits from my desktop PC, and a few quiet fans.