* Posts by TRT

9611 publicly visible posts • joined 11 Sep 2009

HMRC boss defends shift to AWS, says they got 50% knocked off

TRT Silver badge

Re: Competition is great!

Government sponsorship of private enterprise. 250% tariff.

Holy DUHK! Boffins name bug that could crack crypto wide open

TRT Silver badge

laundry list...

SOCKS vulnerability exploit.

Footie ballsup: Petition kicks off to fix 'geometrically impossible' street signs

TRT Silver badge

Response

The Government considers the current football symbol has a clear meaning and is understood by the public. Changing the design to show accurate geometry is not appropriate in this context.

The Department for Transport sets legislation on traffic signs for use by traffic authorities. The Traffic Signs Regulations and General Directions 2016 (TSRGD) sets out the design and conditions of use for traffic signs that may be used on roads in England, Scotland and Wales.

Traffic signs use symbols which enable drivers to take in the information quickly and understand the meaning of the sign. Symbols are often internationally recognised which is important for all road users, especially those who may be unfamiliar to the area.

In the case of a directional sign to a leisure facility (such as a football ground), the symbols used are a general representation of the activity being depicted. As such, drivers can then quickly understand the type of destination. The football ground symbol first appeared in TSRGD in 1994 and road users have become accustomed to its use.

The purpose of traffic signs is to “convey warnings, information, requirements, restrictions or prohibitions” (Section 64 of the Road Traffic Regulation Act 1984).

The Department for Transport commissioned research into road user’s understanding of traffic signs in 2011. This concluded that respondents “showed a good basic level of understanding as to what different types of sign meant” and recommended that signs should be kept simple.

The purpose of a traffic sign is not to raise public appreciation and awareness of geometry which is better dealt with in other ways. If the correct geometry were put onto a sign, it would only be visible close up and not from the distance at which drivers will see the sign. The detail of the geometry would also not be taken in by most drivers who were merely looking at the sign for direction. The higher level of attention needed to understand the geometry could distract a driver’s view away from the road for longer than necessary which could therefore increase the risk of an incident.

Additionally the public funding required to change every football sign nationally would place an unreasonable financial burden on local authorities. The Department could not justify the spending needed as an exercise to increase public awareness and appreciation of geometry.

For the reasons given, we will not be changing the football symbol used on a traffic sign.

Department for Transport

Credit insurance tightens for geek shack Maplin Electronics

TRT Silver badge

Re: We need an alternative to the jungle monopoly

I'd say Clas Olsen. Their product ranges overlap somewhat.

TRT Silver badge

Richer sounds...

The website has totally gone to shit. I'll have to pop down there and have a word with one of the coders.

TRT Silver badge

Re: Tandy

Used to work for them many moons ago. Great days. Great days.

TRT Silver badge

Re: Watford Electronics

The building is still there. It's been in a state for years with various shady operators going through it.

It's time to rebuild the world for robots

TRT Silver badge

Re: We redesigned the world for automobiles...

Helps in the event of a Dalek attack too.

TRT Silver badge

Re: "And forget a robot lifting a piece of paper off a desk any time soon."

I was just coming on here to point that out. After 6 years technical service at a college of printing, I ought to know what a robot can do with paper. Anyone want to buy a MBO K76 4KTL folding machine? Or a Muller Martini 4 hopper A5 inset, perfect bind and trim machine?

Wowee. Look at this server. Definitely keep critical data in there. Yup

TRT Silver badge

Re: I thought that was a Monty Python quote myself.

Lol. Yes, it could be. Maybe we should leave the political correctness at that?

So we are agreed, Europeans can have the RIGHT to data privacy, even if they can't have any actual privacy themselves; which is no-one's fault, not even the Americans.

TRT Silver badge

Re: Or her

You think that the only attackers on the internet are script kiddies? We should be moving away from making gender assumptions, but often our unconscious bias leads us to reinforce a stereotype without any cause. Anyway, OK, so the OP mentioned scripts, but that's like saying the internal combustion engine is the tool of the boy racer - it is, but whilst you are building intelligent roads that detect under-body lighting, a panzer division has just rolled over your front lawn. It's no good saying "Oh, when you said build a defence against motorised vehicles, I thought you meant the Top Gear presenters, LOL!"

Opinions, like mileage, may vary; I stand by giving a gentle nudge to someone when his... her... THEIR unconscious bias shows its face. And I welcome anyone to do the same for me.

TRT Silver badge

How to hide something from the user. Put a section about it in the documentation.

TRT Silver badge

Kernels.

TRT Silver badge

would likely lead him to one of these servers

Or her.

'Screaming' man fined $149 for singing 'Everybody Dance Now'

TRT Silver badge

Re: But have you ever met a nice South African?

Never put a better bit of Botha on your knife?

TRT Silver badge

Re: A ridiculous waste of police...

[screech] Roxanne! You don't need to put on that red light.[/screech]

TRT Silver badge

Ah! Montreal you say...

He would have gotten away with it if he'd have screamed "Tout le monde danse maintenant".

TRT Silver badge

Yes. A bass-less accusation.

We talk to Tron artist Syd Mead: On the other side of the screen, it all looks so easy

TRT Silver badge

Re: Mr Weinstein

He wasn't keen on the idea of virtual actors for some reason.

Hate to break it to you, but billions of people can see Uranus tonight

TRT Silver badge

Re: There is so peak oil...

How else do you think I get my hair so perfect?

TRT Silver badge

Re: Herschell's first proposal

@Alien8n That's true enough. And the Hubble telescope would have been called Lucy. Up there. In the sky. With diamonds.

TRT Silver badge

Re: Herschell's first proposal

But when they discovered the annular dust clouds they'd have had to change it to Ringo.

TRT Silver badge

Re: Childish Name

What's all this focus on bottoms anyway? Why not go for something short and snappy? Like 'Twat'.

The case of the disappearing insect. Boffin tells Reg: We don't know why... but we must act

TRT Silver badge

Re: Professional entymologists

Yeah, I heard that one before. Do you want to come inside and see my flies?

TRT Silver badge

Starship Troopers...

without the deep space battle cruisers. :(

Boss visited the night shift and found a car in the data centre

TRT Silver badge

Re: Have you ever stumbled upon something that just doesn't belong in the data centre?

Ah, but were they electric windows, or handle wound?

Watch out for Microsoft Word DDE nasties: Now Freddie Mac menaced

TRT Silver badge

pivoting through Microsoft Excel

I see what you did there.

Have you heard the one about IoT network tech that uses SIM cards?

TRT Silver badge

Re: Eh?

Slightly different way of doing things, though. The SMS payload is one way, the control structure is two way. USSD has two way payload space. The difference is SMS BALANCE to 450, wait 5 seconds, receive a SMS text back with the information. Dial *#100# and the balance appears immediately and is displayed on screen, not saved.

There are already, and have been for ages, GPS trackers that send a SMS with their location information. There aren't any, that I know of, that use USSD to do that. I think this is a promising technology. Not sure how long it will last given the roll out of consumer led 3G/4G/5G etc.

The Google Home Mini: Great, right up until you want to smash it in fury

TRT Silver badge

Re: Oh, I don't know...

Excepting that it'll be rolling across a kerb and dropping down; trolley jacks / petrol tanks are expensive.

TRT Silver badge

lipread...

Open the garage door, Hal.

Hal, open the garage doors, goddam you!

TRT Silver badge

Re: Silly Valley

Speech circuits had decayed at that point. What he REALLY said was an explanation of why he had been less than helpful over their past adventures; "I'm Siri".

TRT Silver badge

Re: Something the article forgot to mention

Write once, read many. Forensically sealed. They want to make it stick.

TRT Silver badge

Re: Some friendly advice Kieran

Ah, Julie Christie. Sexy. Mind you, I did kind of get into trouble as a kiddy using a Rubik's snake and the neighbour's Tiny Tears.

TRT Silver badge

Re: Something the article forgot to mention

backed up at GCHQ?

TRT Silver badge

Re: "awkyguhgle proceed at warp 4"

A bit like "abracadabra" which activated the Al'mazin Home Delivery Top Hat service many millennia ago when the djinninet was the next big thing.

TRT Silver badge

Poor voice recognition...

Windy today, isn't it?

No, it's Thursday.

So am I. Let's have a cup of tea.

I'm sure that joke could be re-written with an IoT slant.

TRT Silver badge

Oh, I don't know...

The little widget for Google traffic that sits one page back on the iPhone screen you only go to when you swipe by accident actually told me something useful the other day.

"Heavy traffic nearby. Watford vs Arsenal today."

Which was great, as it gave me a two hour advance warning that my parking space was likely to be blocked in by the moronic drivers / football fans that seem to leave their vehicle wherever they want, including private parking spaces in any apartment block within 20 minutes walk of the football stadium. This meant that I made the choice of walking to the bus stop to get the bus up to town for the must-have-that-day shop and put off the out-of-town trip which needed the car until the day after.

TRT Silver badge

Re: Silly Valley

Orac's recalcitrant attitude was a theme in that series. Zen also had a function built-in by the creators to prevent it being of too much use and thus making the crew lazy. Perhaps Google is doing the same.

TRT Silver badge

Just wait until they learn to lipread.

Release the KRACKen patches: The good, the bad, and the ugly on this WPA2 Wi-Fi drama

TRT Silver badge

Re: MAC Filtering

MAC spoofing is also an integral part of the attack.

WPA2 KRACK attack smacks Wi-Fi security: Fundamental crypto crapto

TRT Silver badge

Re: Why do we still only have WPA2?

It was a well designed system. It still is. There was a tiny flaw in the thinking, though, in allowing for dropped packets during the handshake. There's no reason why, say, a retry attempt number couldn't be included as a second nonce in handshake 3.

TRT Silver badge

Once you've tricked the client into reusing the nonce, you still have to gather enough packets encrypted using that nonce to break the session key. This attack is still much harder to pull off than a WEP crack. The trick is going to be preventing the nonce being reset repeatedly.

TRT Silver badge

So long as you turned off WPA/WPA2 support on your clients you'll be OK.

TRT Silver badge

Re: I don't get how this works without the PSK...

Ah, well, yes. After reading the actual paper several times through it becomes clear that resetting the Nonce does so for both PTK and GTK, which is bad, very bad. The MIC then becomes trivial to reverse engineer and turns a rogue AP into a trusted AP. So it is as serious as they make out, even if it's tricky to pull off due to the need to hijack the airwaves. It could be mitigated further by including the radio channel characteristics in the KEK, but time division multiplexing would still allow a window for hijacking. Hmm... well, updates all round, I think!

TRT Silver badge

Re: Android 6.0+ Patch sometime in the future

KitKats come with a tin foil enclosure.

TRT Silver badge

Re: I don't get how this works without the PSK...

It seems to me that the video involved tricking the client (station) into communicating with the fake AP on a different radio channel then, and this is another thing I'm not clear about, either relaying the packets to the internet via another connection or relaying the packets to the genuine AP. But it's still not clear to me what can be achieved against a non-android 6+ client. You can harvest MAC addresses without MITMing, they broadcast the things, and you can gather timing and packet size data just by listening too. This attack seems to purely trick a client into trusting spurious multicast packets.

TRT Silver badge

I don't think that's going to help you much.

TRT Silver badge

You have to update the clients - these are the things that are most vulnerable.

TRT Silver badge

Re: WPA2-Enterprise

Explicitly stated so in the linked blog.

TRT Silver badge

Re: Mitigation

The attack is against the client, not so much the access point. It tricks the client into talking to a fake access point using a replay of a genuine exchange. So it needs to happen within range of home or work or wherever.