* Posts by tom dial

2187 publicly visible posts • joined 16 Jan 2011

NSA alleges 'BIOS plot to destroy PCs'

tom dial Silver badge

Re: @tom dial

The US (and Canada) have police and military agencies with missions that include protecting residents against various internal and external threats. Their activities inevitably interfere with or limit the actions of those residents and others and cost a lot of money. Contrary to your assertion, it is perfectly reasonable to discuss the extent of those limits, the cost of operating those agencies, and whether they are effective in carrying out their assigned mission.

It is not clear how failure to have universal background checks on private citizen gun purchases or to restrict ownership of semiautomatic weapons is evidence of a tyrannical regime; the natural interpretation would seem to be quite the opposite. Ownership of automatic weapons has, in fact, been tightly controlled for a very long time in the US.

Targeted killing of civilians, citizens or not, is to be condemned, as is perpetual imprisonment without due process. It is not, however very common and to describe it as the norm for the US is a rather extreme overstatement.

"The people with sand and more sand" killed quite a few, almost all civilians, in New York, Washington, Pennsylvania, London, and Madrid between late 2001 and mid 2005. I don't offer that to justify anything but the proposition that they may be worth worrying about, just a bit.

tom dial Silver badge

Re: @tom dial

I don't think I said anything to suggest I approve of it, or think it is warranted or effective. Neither have I seen much evidence that the bad things mentioned are common. Tax audits because of a political group? Not much to do with the NSA, much more to do with the FBI and municipal police departments. Email raided because a journalist/working with whistleblowers? Certainly that's possible, but again has little to do with the NSA and a lot to do with prosecutors and the FBI or local authorities.

I cannot say whether your metadata or mine would correlate with a target and raise suspicion, and that is a serious problem that can be addressed either by not doing the analysis at all or by ensuring that such things as entry into "no fly" databases rely on much more careful investigation than sometimes seems to be the case. I could be satisfied with either, keeping in mind that the alternative in which service providers are required to retain metadata for access by law enforcement agencies may not represent much of an increase in our security over what we have at present.

tom dial Silver badge

Re: Sadly Trevor

The reports that I saw were unclear about whether the targets in these cases were "US Persons". Those targets, however were smuggling illegal drugs into the country, not out or within. Accordingly it is possible or even likely that the intercepts were proper and the attempt at secrecy was aimed at protecting intelligence sources and methods.

tom dial Silver badge

Re: @Marshalltown

While I agree there is substantial reason for concern, and wish there were a reasonable way tthat the confident claims of terrorist attack prevention could be verified, it is true that most terror attacks in the recent past have been in Africa and the Middle East, not in Europe and the Americas. Moreover, those attacks were not made with sand and sticks but with machine guns and high explosives.

Whether the probability of some kind of terrorist attack is significant certainly is worth discussion, and so is whether the surveillance being done in the name of reducing it is cost effective. So also is the size of the risk associated with NSA (and CSEC, GCHQ, ASD, and GCSB, among others) surveillance activities. I think we agree on the first two, but probably not on the third.

A tyrannical regime certainly would engage in such data collection and probably more, but it is logically incorrect to conclude that the existence of these programs implies that the responsible government is a tyranny. In the US I see more reason for concern about moral panics such as the war on drugs and the abuse of normal prosecutorial authority exemplified by the Aaron Swartz, Jammie Thomas, and Amish Beard Cutter cases.

tom dial Silver badge
Stop

Re: Sadly Trevor (reality check)

"That means that pretty much 7 billion are also tracked."

NSA has in the neighborhood of 35,000 employees. It is not credible that each of them (managers to secretaries and machine repairpersons) tracks an average of 200,000 people in any sense that even remotely approaches meaningful. Not by at least two orders of magnitude.

Google's patent chief slammed the US patent office – now she's the agency's acting director

tom dial Silver badge

Re: "the ability and extent to which software can be patented"

So while you could not patent an improved mathematical algorithm for, say, solving the general transportation problem in linear time, you should be able to patent a device containing a logic interpreter controlled by a list of instructions to do so?

Snowden latest: NSA stalks the human race using Google, ad cookies

tom dial Silver badge

Has anything been done that could not have been done by attaching a sniffer to a router?

Given that, is there any reason whatever to think that the authorities in country X do not have sniffers attached at all appropriate points in country X ( and possibly a few others)?

A sensible level of paranoia dictates answers of "No" to each.

It is a fact that Edward Snowden, major snitch, has outed the USNSA and other Five Eyes signals intelligence agencies, but it also is a fact (almost to a certainty) that those in country X are being spied on by their own governments to the same extent as or more than they are being tracked by any of the Five Eyes governments. And it is a fact that their governments, unlike others, have police powers that the NSA and its associates do not. The US NSA could go out of business tomorrow without effectively changing the fact of surveillance for most people.

A distaste for US/GB/Canada/Australia/New Zealand communication surveillance is quite understandable, but is not an excuse for ignoring the fundamental problem.

NO XMAS PRESENTS FOR Google Now and Siri: Chirpy scamps get a C+

tom dial Silver badge

Of course the NSA won't either. Most targets are not subject to US jurisdiction at all and essentially all of what NSA collects would be clearly inadmissible in a US court.

I'm not endorsing what NSA does, and agree fully that the information it collects could be misused, but it is worthwhile to keep a sense of proportion and context. I suspect most people are more threatened, in fact, by the policeman in the patrol car just behind them who just ran their plate for warrants and violations.

Oracle showers gold on OpenStack, dreams of open-source splashback

tom dial Silver badge

Re: Oracle?

Am I wrong or did Microsoft not "contribute" to Samba by making the technical documentation available, for a fee, under compulsion of a court order? If so, that sound much like the best we may expect of Oracle.

TPP leak: US babies following bathwater down the drain

tom dial Silver badge

"There is now gloom about whether the next round of negotiations ..."

Their gloom is my cheer. The proposed "intellectual property" regime would be more oppressive than any NSA activity we know about, notwithstanding that it would be all open and aboveboard.

Developer CEO 'liable for copyright infringement' over unlawful tool

tom dial Silver badge

Re: Exclusive rights

Well, and enabling a user to bypass technical contraints on copyright infringement probably does not result in many instances in which the theft, so called, of intellectual property, so called, results in actual loss of a sale. So the "theft" is in the same hypothetical class as the injury that might result from overspeed.

US Supreme Court to preside over software patents case

tom dial Silver badge

Re: Another 5-4 decision

"Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise fhereof; or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances."

A corporation is a usually peaceable organization and most of "the press" is corporations. Crossroads GPS is not materially different from much of what we think of as the press, and probably presents a view slanted to more or less the same degree, although in a quite different direction, as Mother Jones or Glenn Greenwald. A plain reading of the First Amendment suggests that any legal restriction whatever on political reporting or advocacy, including campaign expenditures and lobbying, is at best highly suspect, and quite possibly a violation of someone's constitutional rights.

Fiendish CryptoLocker ransomware survives hacktivists' takedown

tom dial Silver badge

Re: Interesting

Whether you're at a Customs checkpoint or stopped for a traffic offense it is unwise to sass the officials. You might win in the end at considerable inconvenience and expense; or you might not, probably at greater inconvenience and expense.

Creepy US spy agency flings WORLD SLURPING OCTOPUS into orbit

tom dial Silver badge

Someone at NRO has a sense of humor. We knew they were there (or should have); there is no reason to try to hide it. I tend to agree with Cubical Drone @ 1553.

Microsoft: C'mon, you can trust us... look at our gov spook-busting plans

tom dial Silver badge

Re: Keys

"... NSA an most agencies have the SSL master keys."

Proof?

tom dial Silver badge

NSA was reported to have a key provisioning service that could provide their analysts with keys *they had* but I don't recall a listing of those keys and do not think anything was said to indicate that Microsoft or anyone else had voluntarily shared keys with them.

Hear that? It's the sound of BadBIOS wannabe chatting over air gaps

tom dial Silver badge

Re: Not that easy to stop

I wonder if a small strip of duct tape over the microphone opening would do the trick.

tom dial Silver badge

Re: Bullshit.

How was the communication software installed on the systems? On its face some type of physical access would be needed on at least some of the communicating machines.

This idea seems to have marginal utility in that once the appropriate software is installed on both the isolated network and a nearby internet connected one, there would be potential for inbound control and outbound data transfer. The obvious countermeasure, in addition to removing or disabling audio input on the airgapped machnes would be to remove internet connected machines from the immediate area. I seem to recall that high audio frequencies don't turn corners very well and probably don't go through closed doors without serious attenuation.

This seems an interesting oddity but probably not very useful in practice.

'Copyrighted' Java APIs deserve same protection as HARRY POTTER, Oracle tells court

tom dial Silver badge

According to my understanding it has quite a bit to do with interoperability, at least at the development level. Developers can use the Java language and related tools to develop for Android devices so long as they limit themselves to the Java APIs that Dalvik implements. That is a huge gain for them and for all users of Android devices. It hurt Oracle to the extent that they were planning to recover part of their Sun purchase price by licensing the mobile version of Java.

My recollection is that Google did not consider the mobile JVM fit for their purpose, and Oracle declined to license the full JVM for mobile use, at least at rates agreeable to Google. So Google did a reimplementation of the part of the API they felt they needed, similar to what Compaq did with the PC BIOS. To the great benefit of a great many

NSA collects up to FIVE BILLION mobile phone locations daily

tom dial Silver badge

So the Germans are doing it too. So much for privacy laws.

Stuxnet 2 in the works, claims Iranian news agency

tom dial Silver badge

Re: Who the hell cares what any Iranian News Agency has to say?

$1M ~8-10 people working for one year. The ARPANET packet switching IMP program was developed by three people in about a year. Since it was under a US Government contrac, I expect the billed amount was about an order of magnitude more than the implied $300 - 400Kt, though.

REVEALED: How YOU PAY extra for iPHONES - even if you DON'T HAVE ONE

tom dial Silver badge

"If you subsidised a Samsung Galaxy for €100 then you were obliged to subsidise Apple for at least €100 per iPhone. You would be penalised for breaching that - either by paying Apple or paying in the equivalent marketing."

This sounds quit a lot like what Apple and the publishers were found guilty for trying in the eBook market.

Our irony meter exploded: Apple moans ebook price-fixing watchdog is too EXPENSIVE

tom dial Silver badge

The way I red it, he's assigning the work to himself, in his other role as a consultant, for an additional 15% fee, something that would be a clear conflict of interest if not for the fact that attorneys, as officers of the court are defined to be incapable of having a conflict of interest, or so I understood in a slightly different context a number of years ago.

Hard to feel sorry for Apple, though.

DEATH-PROOF your old XP netbook: 5 OSes to bring it back to life

tom dial Silver badge

I've been running Debian on an Asus netbook for a few years now and it seems generally as adequate as the XP it came with. The install then was a bit hands on due to wifi driver needs, but I think that's been remedied. Not sure why this is such an absurd idea. The minecraft installation instructions are simple enough and appear to work (same for Ubuntu and Debian), and the applications ought to be fit for a 12yo in middle school.

Not as cool as an iPad, though a few orders of magnitude more useful

Weird PHP-poking Linux worm slithers into home routers, Internet of Things

tom dial Silver badge

Re: Re:But hey, you don't care when having a good rant?

Made up statistic for today, Thursday, November 28, 2013:

83 % of Register posters can rant successfully in three or fewer lines.

NSA spied on 'radicalisers' porn surfing so as to discredit them, reveals Snowden

tom dial Silver badge

Re: I thought the usual method was

But here you are just making things up. The Register article and the Greenwald article on which it is based described a program to find actual information.

There is enough reason for concern about the potential for national security agencies to misbehave without adding unsubstantiated fantasies to the list of "offenses".

tom dial Silver badge
Stop

Re: massive blackmail database being compiled...

Nothing in either this article or Greenwald's in the Huffington Post even remotely suggests that this is true.

The general drift of the documents released, many of which describe the controls on collection and self-reported errors, provides no support for these expansive claims.

tom dial Silver badge

Re: @Mayhem Chickens et al

It may be worth mentioning, also, that all but at most one or two in every hundred of the jihadi victims are Muslims engaged in their normal activities, or at worship, or many times attempting to assist other victims, or attending funerals of friends and family killed in earlier attacks.

Wintel must welcome Androitel and Chromtel into cosy menage – Intel

tom dial Silver badge

Re: +1

Both the Motorola and National Semiconductor devices were far better than the rubbishy x86, hobbled as it was by register scarcity and backward compatibility to calculator chips. What a loss that they were too late for IBM to pick one of them for the PC.

tom dial Silver badge

Re: ooooouch

Given the last uptake rate I saw for the Surface, I think it's the relative market share, not MS perfidy, that got Intel thinking about Windows alternatives in the tablet category.

Xbox One site belly-up in global Microsoft cloud catastrophe

tom dial Silver badge

Re: can Windows fork() processes yet?

Yep, a thread or two inside the same process so they can gleefully trample each other to death, neatly sidestepping the advantages delivered by multiple address spaces.

Multiple threads have a place; IBM had them in their mainframe OS at least as far back as MVS (1974 or earlier) and used them extensively in products like CICS and DB2. Separate address spaces provide protection from other processes and, for many applicatons, a far simpler, if less flexible, programming environment. Both techniques are useful, each in its place.

Apple Schill-er: 'I was shocked - SHOCKED! They went and copied the iPhone'

tom dial Silver badge

Re: Speaking as a recent apple convert....

@ukgnome: I do not own Apple equipment, so can't comment on the user experience. If it is as superior as you say, Apple will be taking market share from Samsung and the other Android based devices, and have no need to seek monopoly rents based on a broken patent environment.

On the other hand, the dominance of the Androids is powerful evidence that the overwhelming majority of purchasers value the lower-priced "poop" more than the golden "user experience" - at the time they sign a contract. Two years on we will know from the sales figures whether they changed their minds. For whatever it's worth, my (Verizon) Android serves me satisfactorily, and having recently moved to a new city I find the map and navigation applications especially useful.

US House and Senate push patent troll bills

tom dial Silver badge
Flame

Seems they already dropped a provision something like this in the House - Thanks, IBM and MS, for your concern.

tom dial Silver badge

Something I think might be useful, in addition to the obvious one of forcing disclosure of patents that are alleged to be infringed is a requirement to allow a defendant who wishes to pursue a patent challenge to completion before a lawsuit can be tried. I seem to recall that some years back RIM was put in a bind where they had to choose between paying a half billion dollars or so and shutting down in the US, based on infringement of one or more patents that ultimately were revoked.

US Patent Office disputes crucial scroll-and-bounce Apple tech – Samsung demands patent trial halt

tom dial Silver badge

Re: "scrolling and bouncing" is patentable?

"... on a touch screen"

or

" ... on a portable electronic device"

Such is the BS that is patentable.

ETERNAL PATENT WAR: Apple and Samsung locked in battle again

tom dial Silver badge

Re: Sigh

Enough paranoid fantasy.

First, there is not the slightest reason to think the Federal government, let alone the NSA, had any reason in the past to be interested in the identity of anyone associated with Groklaw, quite a number of whom were openly identified anyhow. SCO (RIP), Oracle, and Apple are not the government, nor is there any evidence that any of them is in position to make claims on government police or military powers. And the proposition that potential Groklaw coverage of national security law would be harmful to the government's case is preposterous in view of Groklaw's fairness throughout its history.

Second, Groklaw is hosted on ibiblio, at the University of North Carolina, in the US. IF the NSA cared in the least about tracking those associated with Groklaw, they probably would have done it in a day or two, and by now it would be far too late for remedial action..

tom dial Silver badge

Re: Sigh

Concur fully. Groklaw could have been a forum to provide sensible guidance and analysis through the thicket of US national security law, which unquestionably is far more complex and subtle than anything, in any of the media, suggests.

I have seen nothing yet that even remotely approaches what Groklaw could have become.

Yet ANOTHER IE 0-day hole found: Malware-flingers already using it for drive-by badness

tom dial Silver badge
Stop

Re: who cares ?

A substantial fraction of US Government computers, and probably also those in the UK and many other countries, run XP. Along with that, a very large fraction of those who haven't bought a new machine since Vista release, and a substantal fraction of those who could have purchased their machine with Vista but chose, rather sensibly, to accept the "downgrade" to XP. Those may total to a mere several hundred million PCs, but that hardly qualifies as "nobody".

I notice that on many of the HP systems now on offer, the descriptions prominently offer the option of a "downgrade" to Windows 7.

GIMP flees SourceForge over dodgy ads and installer

tom dial Silver badge

I had no clue about this until momentarily disabling Adblock Plus. Amazing.

'Shared databases are crap' Oracle reveals shared database management suite

tom dial Silver badge

Re: I dont get it...

The last time I looked at Oracle DBMS licensing, it was by the CPU, with a fudge variable that depended on the CPU archictecture. They didn't care how many instances you ran from the installed software, and where I was we commonly ran as many as the memory and CPU capacity of the machine would support.

(There also were named user licenses, but those only made sense for special cases).

How Google paved the way for NSA's intercepts - just as The Register predicted 9 years ago

tom dial Silver badge

Re: I expect to get a zillion downvotes but...

Maybe the framers of the Constitution distrusted the popular vote less than they distrusted each other, but they didn't trust the popular vote very much. As the Constitution was written, neither the President nor the Senator were elected by popular vote, only the Representatives.

The Senate election procedure was changed in a snit over purchased state legislators or something similar, and the "progressives", so called, full of knowledge about how well the Senate works, are agitating for elimination of the Electoral College so that those of us North of Texas, East of California, Oregon, and Washington (state), and Southeast of New England may be relieved of participation in the matter of choosing the President.

Lavabit, secure email? Hardly, says infosec wizard Moxie Marlinspike

tom dial Silver badge

Re: This Annoyed the Hell out of Me

The law will not be changed to eliminate issue of sealed warrants and subpoenas that forbid disclosure. We are not talking here about a National Security Letter. (Actually, I'm not sure the highly indignant Senators or Representatives are, either).

TLS combined with DNSSEC would seem useful, but a government agency armed with a copy of the server certificate and warrant may be able to monkey with DNSSEC.

PGP is a bit messy, and not nice with web mail, but really not that awful. And the more you control directly, and the fewer entities you have to trust, the less open your message is to compromise.

tom dial Silver badge

The article seems to say that the only effective protection Lavabit offered depended on its certificate private key. Which the FBI (not NSA) obtained a warrant for.

PGP (or GPG) may be a bit of a pain, as is sidestepping webmail, but requires you to trust only the recipient (or the sender, if you are the recipient). And, of course, the PGP/GPG implementer, and the OS in use, and the compiler used to prepare it, and so on.

Ladar Levison may be more trustworthy than Google or Microsoft, but I really don't know any of them, and don't have, on personal knowledge, reason to trust any of them more or less than the others.

New wonder slab slurps Wi-Fi, converts it into juice for gadgets, boast boffins

tom dial Silver badge

Re: Let's look at this...

Which works if you surround the antenna(s) with energy collectors and capture the entire signal, making it fairly useless for its intended purpose.

tom dial Silver badge

It would be very interesting to see some numbers - say the absolute amount of power extracted from a 100mw broadcast signal at a distance of 30 or 40 meters. My hunch says that at 100% conversion efficiency it would be at least an order of magnitude less than negligible - that if you used the 10 or so wifi sites you can detect from an average urban location, you would get no useful power. I am willing to be proved a fool on this, though.

The seven I can see right now from my house all are less than one nanowatt.

Smut-spreading copyright trolls told to return cash extracted from victims

tom dial Silver badge

For a complete - quite funny - telling of the full story see

http://www.popehat.com/2013/11/06/another-hammer-drops-on-prenda-law/ (and links referenced there).

Snowden: Hey fellow NSA worker, mind if I copy your PASSWORD?

tom dial Silver badge

Re: Retrospective Reuters arse-covering ..

"[A] competent tech admin don't (sic) need passwords."

He needs passwords if he plans to access data which he is not permitted and knows that there is auditing in place that he cannot disable without being noticed. For example. What he needs is login details of people who plausibly could be accessing the data.

He could need login credentials to access systems to which he was not authorized. In that case, he might need credentials for administrative accounts. I seem to recall that shortly after Snowden's resignation, NSA announced a radical reduction in the number of administrators. These may be related.

It may *just* be possible that the employees whose trust Mr. Snowden abused had the honesty to come forward and own up to their error. In the end, though, they probably would have been questioned and with reasonable probability found out.

tom dial Silver badge

Re: Golden Rule

DoD password rules for administrator rules, as I recall from a few years ago:

Minimum length 13

Two or more upper case letters

Two or more lower case letters

Two or more numerals

Two or more punctuation characters

Changed no less often than every 60 days

Different from all of the last 10 passwords

Different from all passwords used in the last year

Put your story to that.

tom dial Silver badge

Re: trust us

NSA security lapses notwithstanding, it is not clear (yet) that Snowden took anything but the metadata - the slides and documents that describe the data being collected and its processing. From the NSA perspective that's undoubtedly quite awful, maybe worse than the collected data. For those about whom data was collected that could be good news, if you trust that he didn't have access to it, or chose not to bother.

Mention of borrowed passwords, though, suggests he took pains to gain access to systems that contained the collected data, so I would guess some of that went with him as well.

Privacy warriors haul NSA into court, demand swift end to mass call snooping

tom dial Silver badge

The drift of essentially all comments is that the Section 215 telephone metadata collection is plainly illegal and unconstitutional. As btrower observed, that will be determined in court; and until then, at least, it is lawful. Indeed, much of the evidence that it is being done derives from the warrants, issued by a federal court, that orders it, together with various US Department of Justice documents that prescribe limits on data collection generally.

It also is stated almost universally that it is clearly unconstitutional. That raises the question of whose rights are being violated. The data in question are records collected by the carriers, for business and system management purposes, of services they provided for their customers. It appears that case law, going back quite a few years, generally supports the notion that the customer has no special rights pertaining to it, so it may be the carrier's rights that are infringed. And, indeed, it is upon the carriers that the warrants are served, which makes sense as they are the only ones other than the mostly unknown customers who have the records. There may be laws requiring the carriers to stand in for their customers in such matters, but I would guess not. We may wish to consider some, but I would expect the RIAA and MPAA to fight against that to the bitter end.

I'm enough of a First Amendment hardliner to dismiss the whines about corporations not being people, but still find it a bit of a stretch to think of Section 215 as a restraint on freedom of speech or of the right to assemble and petition the government. And although I also support the EFF, I think it might be more useful to do the latter and address the issue with Senators and Congressmen directly, as they presently seem open to that, at least for public relations purposes.