* Posts by Richard 26

187 publicly visible posts • joined 21 Jun 2010

Page:

BBC suspends CTO after £100m is wasted on doomed IT system

Richard 26

Re: Oh the humanity

'Suspended on full pay? How TF is that a punishment?'

It's not. Whilst it might be satisfying if the BBC told him to clear his desk today, they would be paying him off for unfair dismissal tomorrow.

Crap computers in a crap box: Smart-meter blackouts risk to UK

Richard 26

Re: Whilst I can see the value.....

"We (the consumers) are paying for these meters so the power companies can employ less people to read meters. "

We aren't paying for them, the electricity companies are paying for them.

jQuery 2.0 kicks old Internet Explorer versions to the curb

Richard 26
Stop

Re: IE8 / XP

"In my view with the current market share of IE7 and IE8 that means jQuery 2 is unlikely to be of use in a real-world setting for some time."

When you say real-world, what you actually mean is for public web sites. If you RTFRN, that's not what jQuery 2 is intended for as yet. It's largely for apps and other controlled environments.

UK Supreme Court backs news leech in copyright fight

Richard 26

Re: Seems a little sarcastic

"I guess you could pass that onto a third party with one of those "render and send me the page image" type browsers that use an intermediary server."

Which worst case would be an unauthorized derivative work...

Anons torn over naming 'n' shaming of 17yo's gang-rape suspects

Richard 26

Re: Rape IS a hard crime to prove... BULLSH*T! @Black Betty

Sadly, it's even harder than that to get a conviction when the victim isn't available to testify.

Under the microscope: The bug that caught PayPal with its pants down

Richard 26

The problem is not with SQL itself, rather that most SQL is generated dynamically from another language, and that the simplest way to do it is by passing a string. This leads to similar vulnerabilities as calling system() e.g. embedding a semicolon as statement separator.

SSH an ill-managed mess says SSH author Tatu Ylonen

Richard 26

Re: Missed Opportunity

"Chirgwin has it right, though: all of Ylonen's recommendations look to be common sense security practices"

It's draft-ylonen-sshkeybcp-01, so presumably it's on the BCP track, so it's kind of the point that it codifies good practice.

Australian Feds charge 17-year-old 'Anon' with four crimes

Richard 26
FAIL

Re: Kid vandalises shop window.

"Commit the same crime digitally, and it's up to 25 years in the big house?"

That is what happens when you are considering an (alleged) serial offender, and play the stupid game of assuming the maximum sentence for each offence, and that they'll be served consecutively.

And if you are, at least get it right and multiply by the number of counts:

6 x 10 + 1 x 10 + 1 x 3 + 12 x 2 = 97 years.

Researcher sets up illegal 420,000 node botnet for IPv4 internet map

Richard 26

Re: @JDX

@AC 13:51 Loyal Commenter is quite correct, trespassing isn't generally a crime in the UK , it's a civil matter.

Ten serious sci-fi films for the sentient fan

Richard 26

Re: More films...

The thing I loved about eXistenZ was that it made a virtue out of its own weaknesses. They were very sparing of CGI because the game world looks almost exactly like the real one. Most of the time, the plot was a bit rubbish, and the acting poor but that was OK because they were in a video game.

Oklahoma woman cuffed with loaded .22 in pork holster

Richard 26

Re: Pork holster.

So there was some truth in the 'Processed Meat Linked To Early Death' story after all.

BT to slap overalls on 1,000 new bods in fibre broadband boost

Richard 26
IT Angle

Re: Engineer

You can become a chartered engineer through BCS.

New blow for Microsoft Surface: Touch Chromebooks 'on sale in 2013'

Richard 26
Headmaster

Re: cum?

In Latin it means with. However, Chambers says (inter alia): 'used in combination to indicate dual function, nature etc. e.g. kitchen-cum-dining room'. So not just nearly but spot on (IMHO).

Chip daddy Mead: 'A bunch of big egos' are strangling science

Richard 26

Re: I am not happy

People spent years trying to prove from first principles why alpha was exactly 1/137. The trouble is, it isn't. It's roughly 1/137.03599907 Staring at the number and hoping to understand the cosmic significance of it all is pure kabbalism, not physics.

'We are not concerned about your patents at all' - Jobs

Richard 26

"Microsoft proposed the tablet computer in 2001 which was a good idea, they just didn't have the right idea about technology and how to bring that vision to the masses."

So, only a decade or so after Apple then; and even Apple couldn't get the Newton to sell. Touchscreen driven ARM device - there's just no market for them.

Brit mastermind of Anonymous PayPal attack gets 18 months' porridge

Richard 26

Re: Not a terrible lot of facts in the reporting

"Of course, I wouldn't want to suggest his light sentence had anything to do with him singing like a canary."

18months is fairly near the top end of what you get from computer crimes, http://www.computerevidence.co.uk/Cases/CMA.htm

Oz library finds Lance Armstrong books a new home: The fiction section

Richard 26

"and as for NASA letting him anywhere near the moon, well, what can I say."

It's a wonderful world?

Linux kernel dumps 386 chip support

Richard 26

Attribution?

"This tree removes ancient-386-CPUs support and thus zaps quite a bit of complexity," are Ingo Molnar's words.

Business sues for $750,000 over bad Yelp review

Richard 26

Re: jobs not paid for

It's the same in the UK, with a maximum of £5 000; the problem is when you are owed (say) £10 000, it falls between the maximum you get via small claims and what it is worth suing for in full formal proceedings.

Rare critical Word vuln is the star of December Patch Tuesday

Richard 26

Re: And they said they re-wrote Office from the ground up for RT

Microsoft really need an electrician to check that floating ground of theirs.

Man facing rare refusal-to-unlock-encryption charge: Court date set

Richard 26

Re: RE: and a paediatrician

Whoosh - http://www.guardian.co.uk/uk/2000/aug/30/childprotection.society

Richard 26

Re: Making a stand.... or just thick ?

Assuming it's the same guy http://www.kentonline.co.uk/kentonline/news/2012/may/17/call_of_duty.aspx ,

getting 25+ convictions by the age of 20 counts as a bit thick.

Petition for Alan Turing on £10 note breaks 20,000 signatures

Richard 26

Funny you should say that:

"Some of those who have been nominated, but have yet to make the grade, are David Beckham, Sir Jimmy Savile, Princess Diana and Sir Terry Wogan."

http://www.bbc.co.uk/news/business-15522387

Huawei, ZTE probe showed no evidence of spying

Richard 26
Black Helicopters

Re: Sauce for the gander

Huawei came in for a pasting at Defcon 2012 because their equipment was so vulnerable. Have a look at the presentations before you make up your mind that it's all just US protectionism.

I don't find it difficult to believe that a Chinese firm hasn't really caught up with the 21st century, and realized that hackers are going to take their code apart and document vulnerabilities whether they like it or not. It took many US firms decades to learn that lesson; I doubt it will take them that long.

New broadband minister snubs 'ugly' fibre cabinet gripes

Richard 26

Re: Pictures?

BT cabinet in leafy suburb coming up:

http://davidmunro.blogspot.co.uk/2011/10/bt-cabinet-at-bourne-cross-roads.html

West Yorkshire Gay Police Association in email list leak FAIL

Richard 26

Re: Tip of the Iceberg

Date Registered: 09 September 2000 Registration Expires: 08 September 2012

Data Controller: COMMISSIONER FOR THE METROPOLIS

Address:

METROPOLITAN POLICE SERVICE

NEW SCOTLAND YARD

BROADWAY

LONDON

SW1H 0BG

Radiation TERROR on Scottish beach! Except it's quite safe

Richard 26

Re: ALARP not ALARA

As AndyC says it's ALARP not ALARA, and it's fundamental to UK Health and Safety law, and the idea that radiation is treated differently from other hazards in law is untrue.

"The concept of “reasonably practicable” lies at the heart of the British health and safety system." http://www.hse.gov.uk/risk/theory/alarpglance.htm

Web credential authority rebuked for 'poor' security

Richard 26
FAIL

512 bits is just shameful

"Its use of 512-bit keys, for instance, stand in stark contrast to the minimum requirement that keys contain twice that length."

And really, if you're still using 1024 bits, you really shouldn't be any more.

"Why is Entrust, along with all of the other publicly trusted certification authorities, moving to 2048-bit RSA keys [by the end of 2010]?" http://www.entrust.net/knowledge-base/technote.cfm?tn=7710

Oracle updates Java to stop SSL-chewing BEAST

Richard 26
Unhappy

Re: ?all at once?

I think that's just wrong. The problem is that not all browsers support TLS 1.1 ; according to SANS Chrome, Firefox and Safari lacked support at the time of writing.

(http://isc.sans.edu/diary.html?storyid=11629).

Saying it's not hard to negotiate, or display a warning is true but putting the cart before the horse.

Trusteer rebuffs bank security bypass claims

Richard 26
FAIL

Irresponsible?

Looking on the web, the conference was on the 1st-2nd September, the Times article on the 1st October. Whilst one can argue endlessly about 'responsible disclosure', blaming the Times for reporting on a vulnerability publicly disclosed a month earlier is a bit silly.

Judge cracks down on Bayesian stats dodginess in court

Richard 26

Bayesian statistics

As Gareth says, it was mainly a failure to apply Bayesian statistics that led to the wrongful conviction in the case we aren't going to mention.

Cloud storage survey FAIL: May have to, er, back up

Richard 26

Drive prices?

The trouble is that drive prices are falling so fast, that they are an almost insignificant part of your overall storage cost. Drives are cheap: SANs, backups, replication... not so much.

Alleged LulzSec hacker still inside

Richard 26
Thumb Up

Extradition

@Matt Hawkins: Funny you should say that...

http://www.parliament.uk/business/committees/committees-a-z/joint-select/human-rights-committee/news/extradition/

Top-secret US lab infiltrated by spear phishers – again

Richard 26
FAIL

No Internet access?

Research institutes are always 'top-secret labs' to hacks. Whilst it may very well be true that there is some highly classified research going on in some corner of the lab, the way you deal with it is to have proper controls between the classified and non-classified parts. Like a big air gap, razor wire, killer bees....

It's national research facilities like, for example, the National Supercomputer Centre (which is located there) that the Internet was made for.

UK's Supreme Court greenlights Twitter usage

Richard 26
Go

The higher the court, the more arcane the arguments

The arguments used in court can be arcane, particularly when the case is about a narrow technical interpretation. However, sometimes the judgements are about broader principles.

For example, I offer the summary of R v Chaytor and others: http://www.supremecourt.gov.uk/docs/UKSC_2010_0195_ps.pdf where at issue is the limits of parliamentary privilege provided by the Bill of Rights.

eBay shill bidder gets £5,000 fine

Richard 26

Re: The laws an ass

"There's something wrong with the law when the guy gets fined £5000 and 250 hours community service, when its pretty likely he would have got off with less for a serious physical assault."

This is for ten separate offences. I take the point that the assault case guy seemed to get off lightly but that doesn't seem to me to be a good reason to go easy on a serial fraudster.

BCS trustee threatens rebels with libel action

Richard 26
IT Angle

Re: Umm

It doesn't stand for British Computer Society, in the same way that BP doesn't stand for British Petroleum.

Page: