* Posts by Ken Hagan

8168 publicly visible posts • joined 14 Jun 2007

‘Secure’ criminal justice email system relies on obsolete protocols

Ken Hagan Gold badge

There are also other problems with the email system

From earlier this year: "Wandsworth Prison escapee Neil Moore faked bail email"

http://www.bbc.co.uk/news/uk-england-london-32095189

Ken Hagan Gold badge

The real tragedy here...

If you tipped off a front bench opposition bod that they could make the home secretary look negligent, clueless or asleep at the wheel then they'd probably ignore you because they don't understand this stuff either.

Edge out rivals? No! Firefox boss BLASTS Microsoft's Windows 10 browser brouhaha

Ken Hagan Gold badge

Re: What about Apple

That's right. One rule for the OS vendor with 90% of the market, trying to use that monopoly to create or sustain a new monopoly in a different area...

...and one rule for the OS vendor with about one tenth of that share, who has no monopoly to leverage.

Ken Hagan Gold badge

Re: Firefox 'owns' HTML

I think I read somewhere, a while back, possible in these forums, that there were significant (i.e., annoying) differences between Firefox HTML and Microsoft HTML. It's probably best if the documents are clearly labelled.

Google, Oracle's endless Java copyright battle extended to ... 2016

Ken Hagan Gold badge

Re: Listen up, Google

"You can probably even provide a utility which will automatically translate app source code API calls to the native Linux ones, and probably even do the same for the binaries, so the "legacy apps" transition problem doesn't have to be a big issue."

You could even write a little "layer" that did this at run-time, so that existing apps didn't have to be modified. You could call it an "implementation".

Let's all binge on Blake’s 7 and help save the BBC ... from itself

Ken Hagan Gold badge

Doable in seconds sounds nice, but actually I don't care how long it takes as long as it doesn't involve Flash. I'm not dead yet and I'm willing to wait for a solution that isn't infectious.

Windows 10: A sysadmin speaks his brains – and says MEH

Ken Hagan Gold badge

Thanks. MS actually pulled that update and didn't issue a replacement until this year: https://technet.microsoft.com/en-us/library/security/3033929.aspx

but I stand corrected. Apologies for the FUD but we hit this problem at work around Christmas and reluctantly concluded that Win7 was on life-support, but the re-issue makes using Win7 feasible again until the official end-of-life ... whenever that turns out to be.

Ken Hagan Gold badge

"Windows 10 got much better scaling on 4k. The tools down voting obviously haven't tried either."

Or, er, perhaps they have? Win10 hasn't even got most of the Control Panel snap-ins scaling properly. (Oi! Microsoft, all you need to do is set a GUID in the manifest, re-link, and do a visual inspection. You were the ones who changed the rules -- about 8 years ago. Pull yer fingers out and get on with it.) Still, it's all supposed to be lovely Metro apps going forwards, so what does it matter if the old desktop users get shitty service, eh?

Ken Hagan Gold badge

Rebooting after updates

"Why does Windows do this?"

Essentially because of one bad call back in the late 80s plus one ever-present constraint on MS that doesn't apply to Linux. Oh ... and the fact that MS can't be arsed to fix it.

The bad call was Win32's design choice to map executables into the address space rather than copying them. This meant that the underlying file remained "in use" until every stopped using it. In the case of widely used DLLs, the only realistic way to force that stop was to reboot the system. The saving was only ever minimal and would have been a saving in the system page file rather than real RAM in any case and this design choice clearly could have been made the other way. (UNIX does it differently.)

The constraint is that MS caters for the closed source market. A new release of Windows cannot break existing applications, or else no-one will upgrade. Since MS can't fix badly behaved applications from third parties (who may no longer exist), they have to maintain the semantics of bad design choices from several decades ago. You can be sure that there are widely-used applications out there that would be broken if it were possible to upgrade an executable file (particularly a DLL) while it is in use. (Amongst other things, it opens the possibility of having two versions of the same program or library running at once and they might share data with each other.)

Some other OSes have this constraint, too, but Linux doesn't. In fact, Linux had (is this still the case?) a reputation for introducing gratuitous breakage from one kernel version to another precisely to pressurise driver vendors into open-sourcing their drivers so that Linus and his friends could keep them running long after the original vendor lost interest.

In the case of system DLLs, which are the over-whelming cause of needing a system reboot after Windows Updates, I could imagine a simple EXE header flag that fixes the problem. Flags already exist to copy (rather than map) an executable if that EXE is on a removable or network drive. MS have never bothered to add a third such flag for "just copy, always, ffs" but if they ever did then the problem would largely go away. (You'd still be unable to fix old third-party stuff, but Windows Updates rarely touch third-party stuff anyway, for obvious reasons.)

Ken Hagan Gold badge

"Win 7 is supported for another ~5 years, ..."

Not really. Win7 doesn't support SHA2-signing in the kernel and CAs are increasingly unwilling to issue SHA1 certs, so you *will* start finding that the new printer, camera, scanner, whatever that you want to plug into the box doesn't have a Win7 driver.

Also, support doesn't mean fixes for broken stuff. It means patches for non-ignorably-bad security vulnerabilities.

Also, Win8 falls out of support next January on the grounds that Win8.1 was free. There is every chance that MS might eventually make a similar announcement for Win7. This would cost them nothing and save them the burden of solving the above problems.

I don't expect Win7 to be a serious option beyond 2017 or so. Anyone running an enterprise with a lot of Win7 boxes should be looking *very* seriously now about how, not when, they are going to migrate them. Fortunately, as Trevor says, Win10 with Classic Shell on top is just about usable.

MORE Windows 10 bugs! Too many Start menu apps BREAK it

Ken Hagan Gold badge

Re: the 640k quote

Ironically enough, Bill's company went on to produce a real-mode memory manager for Windows that blew the 640K limit away (even on machines with only 1MB of installed memory) at a cost of only one tenth of that space (if memory serves me, the original KERNEL.EXE was a few dozen kilobytes). You didn't even need a 286. You just needed to be very patient.

So maybe this hypothetical billg should have stuck to his guns on 320KB and used the extra space to run a proper OS kernel. But then, that would have meant finding one that he could re-badge in time. (Not to pour scorn on Bill's own programming talents, but it is well-known that he just said "yes" to IBM and *then* had just a week or two to actually come up with an OS.)

Ken Hagan Gold badge

Re: I have 600

"How the did this not show up in testing or is it a new fail?"

It could easily have survived the whole beta program unless someone explicitly tests for it.

Most beta testers are smart enough not to use their main machine as a test box. I've been running the beta on a variety of boxes, but all of them disposable and I haven't installed a full complement of apps on any of them. I'd guess also that 512 is significantly above the average -- probably several standard deviations above. It's well beyond what most of us would regard as a realistic number of installed apps, even allowing for several shortcuts per product.

(Then again, Trevor's just told us he has 4000 tabs open in his browser. I wonder where that lies in the distribution. My first reaction was "is that even possible?" but on a 64-bit machine it probably is. (On a 32-bit kernel I think you'd start to run out of threads or processes.))

So what the BLINKING BONKERS has gone wrong in the eurozone?

Ken Hagan Gold badge

"After WWII we should have ripped the industry out of Germany and returned it to the stone age"

After WW2? My reading of the final year of the war is that the aforementioned task was pretty much complete by the time of the surrender. The usual charge against Bomber Command is that they'd basically bombed the entire country back to the stone age, and *then* two collosal armies has swept across from either side annihilating everything in their path on a house-by-house basis.

In most other conflicts, the loser has surrendered before that point. (The question of why Germany didn't surrender is quite interesting, though perhaps not humanity's finest hour.) If you want a better example of returning somewhere to the stone age, you probably have to go back to Trajan, or perhaps the stone age.

Ken Hagan Gold badge

Re: https://projects.propublica.org/bailout/

Very interesting. If the same is true for the UK, then my next question would be "Why are we broke?". After all, if we were OK (in 2007) and have since made a profit on bailing out the banks, we should still be OK, right?

Ken Hagan Gold badge

Re: The 1930s

I don't have AdBlock for any site. The vast majority of sites are perfectly usable, the vast majority of the time. Every so often, some poor site gets afflicted with some rude ad that splats itself all over the page, but if you are browsing on a desktop PC then the ads are pretty ignorable most of the time.

I think I'd be much more concerned if I surfed a lot on a phone, where there frankly aren't enough pixels to start with and certainly no surplus to waste on ads. But I don't.

So if you are a long-time AdBlock user, I suggest you try switching it off for a while every year or so. You will notice the difference, but you may equally be able to live with it (at least on a desktop screen) and it isn't in *your* long-term interest to make it impossible to finance a web-site without taking subscriptions.

Ken Hagan Gold badge

"It wouldn't have been all that bad an idea if the shareholders had lost rather more of their money than they did, just to warn for the future, but the idea that it would be OK for us to wake up and find smoking rubble where we'd once had a payment and banking system was firmly kyboshed."

Around the time of the Lehmans collapse, the standard (OK, Robert Peston) explanation for the crisis was that no-one knew where the bad debts lay and so no-one was lending to anyone else. We knew what the bad debts were (the sub-prime thingies) but each bank was keeping schtum about their holdings in that respect. It struck me at the time that this secrecy was magnifying the problem and that if the truth had been known then only a few banks (holding the debts) would have collapsed and the rest (who were quite solvent) would have taken over the business.

There were certainly banks who resisted the loans that were eventually forced upon them by central government. (Forced, that is, to avoid exposing the *other* banks as ones that actually needed the money.) There was also a large group of mutuals who everyone accepted were almost certainly solvent because they hadn't been allowed to play with the poisonous debts in the first place. Both of these groups were implicitly but massively penalised by the bail-out.

So do we now know where the debts laid? If so, has anyone worked out the consequences of central government forcing banks to declare their positions rather than forcing the taxpayer to burn squillions in a bail-out that was designed to preserve banking secrecy? If not, then I'm afraid that "waking up to find smoking rubble" is actually unproven and the biggest financial crisis in many years might turn out to have been self-inflicted.

YOU! DEGRASSE! It's time to make Pluto a proper planet again, says NASA boffin

Ken Hagan Gold badge

Re: Purely physical critera

Charles 9: You seem to be implying that the IAU's decision on Pluto was principally motivated by a desire that there should be no more planets, ever. That seems, er, not just irrational but rather disturbed? Apparently it is so important to pull up the ladder that it didn't matter that Pluto was left behind in the rush.

No matter. Time will tell. Future generations will land on these objects and go exploring. They will want a single, short word to refer to the object they are exploring. My money's on "planet", because "moon" implies a larger near neighbour and no-one (and certainly not the IAU) is even trying to come up with a third alternative.

Ken Hagan Gold badge

Re: It's no big deal

The problem is that not content with driving a coach and horses through established pop culture, the IAU drove through the English language as well. A dwarf planet is defined to be not a planet. "Dwarf" is not an adjective. "Dwarf planet" is a double-barrelled noun.

Ken Hagan Gold badge

Re: Nomen est omen

I think you'll find that people have been cooking for quite a lot longer than they've been classifying things in biology. So the culinary definition got there first and the biologists borrowed it *knowing* that it didn't cover exactly the same ground as they wanted, but it was close enough.

Ken Hagan Gold badge

Re: Moon?

That episode isn't canon. A special meeting of the International Who Fanclub declared that despite airing as part of an the official series, it had failed to clear its plot of debris.

Ken Hagan Gold badge

You appear to have argued the case for the opposite of your conclusion.

Why is it a problem that you can't yet write down a list of all planets in your textbook? Why should Mercury and Pluto be classified as different kinds of object because of their historical discovery?

Well some people in the 21st century screamed about their textbooks, so we messed up the whole classification system just to shut them up, er...

Ken Hagan Gold badge

Re: Moon?

If the Earth was less massive, the Moon would be a double planet. Same object, but the difference lies elsewhere. If Titan orbited the sun, it would be a planet. Same object, but the difference lies elsewhere. Meanwhile, Jupiter and Mercury are both planets. Vastly different objects, but the similarity lies elsewhere.

As long as you insist on using one word to describe both the object and its position, you can't escape this nonsense, since an object and its position are only weakly correlated (by whatever rules govern the origin of solar systems).

Personally I'm quite happy to describe Pluto, Titan and the Moon as planets when I'm concerned with their geology, moons when I'm concerned with their orbit. (Pluto is a "double moon", a satellite of both the Sun and Neptune. There's no word for it, but it *is* rather awesome, so there should be. In fact, perhaps that's what the word "Plutoid" should mean.)

John McAfee: Ashley Madison hack may ‘destabilise society’

Ken Hagan Gold badge

Re: Grudge

"I would suggest they look for a computer expert whose spouse had a affair they helped arrange."

Sadly, on John's evidence, you can scrub the "computer expert" from that profile and if AM's pre-hack publicity (about how great they are) is to be believed then that means a shortlist of a few tens of millions. The investigation could take a while.

Universal Pictures finds pirated Jurassic World on own localhost, fires off a DMCA takedown

Ken Hagan Gold badge

Re: You've all been 'nudged'

What film? All I'm talking about is how unbelievably clueless Universal Pictures are. Was there a film somewhere in this story?

Ken Hagan Gold badge

"Also on the list is http://127.0.0.1:4001/#/fr/."

To me that looks like an illicit web server. Whilst it is obviously not appropriate for a take-down notice, it does indicate that localhost *might* have some malware on it that *might* be distributing the master copy, which *might* indicate that the evil pirates are insiders.

Microsoft: Stop using Microsoft Silverlight. (Everyone else has)

Ken Hagan Gold badge

Re: How times have changed

It wasn't *that* recent. It has been a few years since MS declared that Silverlight was dead and would receive no major development love. I think Netflix adopted it a couple of months before the announcement. How we laughed. And then it hung around for years and years.

Ken Hagan Gold badge
Flame

"The Web. The only area of computing that's actually going *backwards* in time."

You forgot to mention desktop UIs, and the idea that a PC might belong to the person who fucking paid for it rather than the company they "rent" it off.

The whole damn industry's going backwards.

Ken Hagan Gold badge

@Pascal: You forgot to mention that the cafe's own crockery is so filthy that you might catch something off it.

Microsoft sprints to finish, emits possible Windows 10 RC build

Ken Hagan Gold badge

Re: Winaero

You should try 150% text scaling. There's *lots* of parts of Windows that don't support that. (They show up with the fuzzy magnification that means you haven't set the flags right on the EXE.) This is now, what?, 8 years after Vista defined the rules in this regard and still there are parts of the core UI that haven't had the five minutes or so of attention to make them work.

And I notice today that whilst Win8 knows where the bottom-right corner of a Window is, Win10 doesn't. (Mouse the mouse down to the bottom-right corner and explore just where the cursor changes to the NW-SE diagonal arrow. On Win10, it behaves as though there is a thick invisible border and the cursor changes when you hit that border, a few millimetres away from the actual window. On Win8, the cursor doesn't change until you actually hit the visible portion of the window frame.)

Other things left un-polished? If you have an application that uses the MDI model, such as Microsoft's own MMC.EXE, the child frames are styled as Win7 whereas the parent frame is styled as in Win8. Try it -- but bring a barf bag.

Ken Hagan Gold badge

So I grabbed myself a copy and I was immediately strong-armed into giving up my domain account and password in favour of a Microsoft account and (somewhat weaker) password. Fine, that was expected. But part-way through the process I was invited to create a PIN that would replace even that. There was a little link saying "How the fsck can a diddly PIN be more secure?", so I clicked on it and I was told that a PIN would be safer than my existing password because I'd be choosing a PIN just for this device.

Words failed me. Apparently Microsoft have decided that the last ten years have seen a gradual step up in Windows security and a gradual step down in market share, so clearly the way to make Win10 a success is to persuade everyone to protect their devices with the same low-entropy PIN that they use on their bank cards.

Thanks for open sourcing .NET say Point of Sale villains

Ken Hagan Gold badge

"...now that Microsoft made it available as an open-source platform have put it out to grass, more developers are expected to use it for their applications drop it like it's a turd that just talked back at you..."

FTFY

Thunder-faced Mozilla lifts Flash Firefox block after 0-days plugged

Ken Hagan Gold badge

Has anyone got any experience of feeding a dishonest user-agent string to the BBC site and getting a flash-free experience on a Windows box? That would probably be even more useful than advising everyone to enable the click-to-activate feature.

India ponders home-baked chips for defence and nuke plants

Ken Hagan Gold badge

Re: Baking != design

Not quite. You need to see the design. It doesn't need to be yours. I can imagine a completely open design that was "good enough" being favoured by many countries over a closed x86 product.

Mozilla's ‘Great or Dead’ philosophy may save bloated blimp Firefox

Ken Hagan Gold badge
Happy

"almost the only browser not using the WebKit"

Awesome use of the word "almost" there.

Run Windows 10 on your existing PC you say, Microsoft? Hmmm.

Ken Hagan Gold badge

Drivers

I had a couple of pieces of USB-based hardware that worked fine on Win7 and refused point blank to work on Win8. Since MS provide the actual USB stack (y'know, the bit that actually talks to the effing hardware?) and the kernel major version number hasn't changed for 7, 8, 8.1 and (early betas of) 10, I have to conclude that the device itself changed its higher-level protocol whilst I was installing Win8.

After all, it couldn't be a case of some numpty testing for equality of version number rather than for the existence of an interface, and neither could it be the fine hardware vendor taking the opportunity to stiff me for a new scanner. No, no.

Fortunately, the majority of hardware vendors get this right and MS can in most cases arrange to lie to the numpties who don't, but there's always one so I'd echo the advice to check your hardware before upgrading. (Edit: particularly if it is a Canon.)

Large Hadron SMASHER: Boffins BLOW OPEN the PENTAQUARK's secrets

Ken Hagan Gold badge

"But the brain has no pain receptors?"

But it sits on the shoulders of a very large number of them.

Ken Hagan Gold badge

Re: Newton Quote

"Are there other bits of physics where an early decision based on incomplete information has led to awkward numbers?"

Spin, I suppose, might be more cleanly expressed if fermions had odd spin and bosons had even spin. Beyond that, not much as far as we (yet) know. (Quark color values may yet surprise us.)

Of course, at a trivial level, all the fundamental constants are horrible non-integral numbers of the units that we devised and standardised before we knew about the constants (length, time and c being the classic example), but I don't think that's what you meant.

Ken Hagan Gold badge

Re: Five

"If I have seen further than others, it is because I was looking the wrong way and got lucky."

Microsoft nixes A-V updates for XP, exposes 180 MEEELLION luddites

Ken Hagan Gold badge

Re: How does this change ANYTHING?

Anyone still running XP online is *now* protected by whatever defences are provided by the root kit that took over their PC last year.

Microsoft have (through 2k3 support) been publishing zero-days for XP for over a year now. The act of connecting to the interwebs to update your Security Essentials package is probably riskier than leaving the machine offline. (In the latter case, you are limited to things that you import by hand and you have some control over those.)

Cell division: The engine of life – and of CANCER. Now some of its secrets are revealed

Ken Hagan Gold badge

Re: a kinetochore is

Sounds awesome! Where do I sign up?

(Even if these were the *only* things I could do by telekinesis, it still sounds awesome.)

Mighty CHASMS, craters FOUND ON MOON of Pluto

Ken Hagan Gold badge

Re: Excited

To a first approximation, being born later in history is a good thing (the approximation is even better for some sections of the population.), but you can't put it off indefinitely or you miss out on all the fun. This is a pretty good time for the sort of people who are reading this site.

PLUTO FLYBY: Here's your IT angle, all you stargazing pedants

Ken Hagan Gold badge

Re: "...approximately 2,000 bits per second..."

"Where are the relay stations doing long elliptical orbits past Saturn?"

Unless they have dishes that are about half the (linear) size of the receiving dish on Earth, they wouldn't help. (Actually, that's the break-even point. To *help*, they'd need to be even bigger.) Also bear in mind that anything on a long elliptical orbit spends most of its time in a totally unhelpful location. You'd need *lots* of *big* dishes. Similar considerations apply to any interplanetary internet you care to imagine.

It seems to me that what we actually need is a better power source, so that the original signal can be several orders of magnitude larger. Or maybe some very carefully steered laser link, so that the limited power is directed more efficiently in the right direction.

PC sales go OFF A CLIFF to under 300 million a year

Ken Hagan Gold badge

Re: Guess again.

Actually, you *can* blame Windows 10 for that. For the last six months, anyone who wants to see has been able to look at what Win10 will be like. Apparently, the experience has been enough to convince a few that Sinofsky's vandalism is irreparable and so they might as well buy that Apple machine and see how well it actually works for them.

PLUTO SPACE WHALE starts to give up its secrets

Ken Hagan Gold badge

Re: Call me simple

That's why we need words that describe *what* and object is and different words to describe *where* an object is. (Suggestion: let the geologists choose the first set of words and the astronomers choose the second set.)

Pluto's orbit is actually a rather neat feature of orbital mechanics. It's in a resonance with Neptune, which means that the Plutonian system is in a region of space near Neptune that Neptune cannot clear. It's not a moon of Neptune, but the relationship has something of the same flavour.

Flash HOLED AGAIN TWICE below waterline in fresh Hacking Team reveals

Ken Hagan Gold badge

"Why is the BBC still using flash ... ?"

...because Murdoch hasn't figured out he can run a smear campaign based on the fact that the BBC site is "forcing" the use of a known malware vector.

What do you MEAN, 'Click on the thing which looks like a Mondrian?'

Ken Hagan Gold badge

Re: Call me a cab . . .

It's called a "turn in the road" because you are not penalised for needing 5, 7 or 85 points rather than three. Mind you, if you need 85 then you might be penalised for "failing to make reasonable progress".

Decision time: Uninstall Adobe Flash or install yet another critical patch

Ken Hagan Gold badge
Childcatcher

Won't somebody think of the children?

Have we now reached the point where sites that *use* Flash (and thereby encourage non-nerds to have it installed and active) should be named and shamed as internet sociopaths?

North America down to its last ~130,000 IPv4 addresses

Ken Hagan Gold badge

Re: Canecutter - 2 things wrong with IPV6

As normally deployed, the 128-bit address space is actually only 64-bits public. If your ISP gives you a /56, they're giving you 256 networks to play with. That's more than the 1 you need, but it is a far smaller chunk of the IPv6 unicast space than even a single IPv4 address is of that space, so calling it "wasteful" is harsh.

Also, and partly in response to another poster's remarks about routing tables, one of the reasons why they went for a 128-bit space was so that they had bits to waste. The idea is that quite a few routing decisions can be made without complex tables at all, just by inspecting prefixes. Ironically, the protocol that now needs massive tables is IPv4, which owing to the balkanisation of the address space now requires brute-force-sized routing tables in some places. There was an El Reg article about this a few months back, but I can't remember enough of the details to google it.

Microsoft: This Windows 10 build has 'NO significant known issues'

Ken Hagan Gold badge

Re: Hallelujah - File Explorer's file path limit is not 256 any more !

I suggest you read the documentation. The limit most certainly *is* Win32's and the "\\?\" prefixing is documented as a way to skip Win32's validation and pass the filename blindly to the lower level. It sounds like you've failed to distinguish between the Win32 personality and the NT OS layer. MAX_PATH continues to apply to the Unicode APIs if you don't use the prefix and I don't think I've ever met and end-user who did.