* Posts by diodesign

3261 publicly visible posts • joined 21 Sep 2011

Remote code execution flaws lurk in countless routers, IoT gear, cameras using Realtek Wi-Fi module SDKs

diodesign (Written by Reg staff) Silver badge

Affected products

It's at the end of the linked-to advisory.

C.

84-year-old fined €250,000 for keeping Nazi war machines – including tank – in basement

diodesign (Written by Reg staff) Silver badge

Ah, shucks

No, thank you for reading and commenting!

C.

diodesign (Written by Reg staff) Silver badge

150,000th moderated comment

FYI: Congrats – you are the 150,000th comment I've manually moderated in the ~10 years I've been at The Register. The comment has the ID 4309021, so about the 4.3m'th comment we've shared.

When I started, we had to manually mod everything. Then automatic moderation was built, and still some had to be manually checked (mainly new and naughty users).

Phew.

C.

International Space Station actually spun one-and-a-half times by errant Russian module's thrusters

diodesign (Written by Reg staff) Silver badge

Like a broken record, baby, round round

Yeah, it did occur to us to do some kind of 'you spin me right round' reference but we may have worn out that gag. Shocking, I know, for a Reg editor to admit that. Exhibits A through E:

You spin me right round, baby, right round like an exploding asteroid, baby, right round round round

You spin me right round, storage, right round – like a ferrous-based platter baby, round round

(Picture caption in a Lara Croft game) You spin me right round, baby, right round...

(Picture caption of a galaxy) You spin me right round ... an artist's impression of the Milky Way

(Crosshead in an Audacity review) You spin me right round....

Plus, I've had many variations of Dead or Alive's smash hit on loop in my gym playlist so I don't think I can take any more spinning right round, like a record, baby, round round, you spin me right round, like a....

C.

Google says Pixel 6, 6 Pro coming this year with custom AI acceleration

diodesign (Written by Reg staff) Silver badge

Re: Handler

> crucial information is missing

It wasn't given, FWIW. We're not impressed by the info-lite approach to this launch.

> This Tensor chip, will I be able to buy it on Mouser or Digi-key? Is documentation going to be available?

Seriously doubt this all round. It's an SoC for this one product line.

> What kind of telemetry it is going to be sending to Google and what this chip is going to be doing with it?

The usual Android telemetry.

> How independent that third party is?

No idea.

C.

Microsoft made $167m a day in profit, every day, over the past 12 months

diodesign (Written by Reg staff) Silver badge

Re: Two tier Britain

This is income after taxes. Microsoft set aside $9.8bn for tax on an annual pre-tax profit of $71.1bn.

Microsoft had a global tax rate of 15% in Q4 FY2021, down from 17% a year ago.

C.

SSD belonging to Euro-cloud Scaleway was stolen from back of a truck, then turned up on YouTube

diodesign (Written by Reg staff) Silver badge

Re: I'm a bit sceptical

There's such a thing as "all publicity is good publicity" but I think this is an exception in this case.

The final YouTube video on this saga is here. It's all in French. If an English-speaking YTer picked this up, I would expect this to be all over the news more.

C.

Open-source dev and critic of Beijing claims Audacity owner Muse threatened him with deportation to China in row over copyright

diodesign (Written by Reg staff) Silver badge

Re: Is this really news?

Bringing up someone's immigration status and home government in an argument over APIs and copyright seemed newsworthy enough to the Reg team, nothing more, nothing less.

C.

Imagine a world where Apple shacked up with Xerox in the '80s: How might it look today?

diodesign (Written by Reg staff) Silver badge

'What is this rambling train-wreck of an article even about?'

It's a fictional history, a what-if piece. As in, what if history went another way in the 1980s.

C.

Treaty of Roam finally in ashes: O2 cracks, joins rivals, adds data roaming charges for heavy users in EU

diodesign (Written by Reg staff) Silver badge

Re: Something doesn't add up...

Yeah, there was a math failure. It's been fixed. Thanks to those who wrote in via corrections@ to let us know.

C.

Hubble Space Telescope may now depend on a computer that hasn't booted since 2009

diodesign (Written by Reg staff) Silver badge

"the main computer is borked"

The main computer is fine, it seems, it's the instrument/payload computer that's halting. So they hope to turn off the payload computer and turn on the backup payload computer.

C.

diodesign (Written by Reg staff) Silver badge

Er, yes, mate?

"The computer was replaced in 2009," and hasn't been turned on since it left the lab.

C.

Containers have security problems and flexibility issues. VMs will make them viable

diodesign (Written by Reg staff) Silver badge

"This is one pointless debate"

So pointless you contributed to it -- thanks!

C.

Seven-year-old make-me-root bug in Linux service polkit patched

diodesign (Written by Reg staff) Silver badge

Kernel

Yeah, sorry, mea culpa. I hastily wrote the headline at the end of the day and used kernel and not service. It's fixed. Don't forget to email corrections@theregister.com if you spot anything wrong, though.

C.

RISC-V boffins lay out a plan for bringing the architecture to high-performance computing

diodesign (Written by Reg staff) Silver badge

Re: OpenRISC

The advantage of RISC-V over OpenRISC is that it has more momentum, more financial backing, more corporate and enthusiast interest, and (I'm pretty sure) more hardware available now or on the horizon. It's an Arm rival that seems to have gained traction.

OpenPOWER and OpenSPARC just seem out of reach. We do keep an eye out for them. I can imagine folks feel OP and OS are a little encumbered by their parents, IBM and Oracle, respectively.

Also, Intel just reportedly tried to buy a RISC-V startup for $2bn+. I don't see that happening with OR, OP, and OS outfits.

If there's a screw-up in the RISC-V world, then let us know if we don't spot it, and we'll write about it. We're pro-competition and we like tracking things that may challenge the status quo (eg, Arm). RISC-V is still so young that it's not in widespread use and the opportunity for that community to blow it hasn't come up yet.

There may be some technical limitations to OpenRISC v RISC-V. The people who created RV complained that OR still had branch delay slots (ew), the architecture and its software stacks weren't fully 64-bit ready, and the ISA encoding space gave too much room to immediate values, which is awkward.

Sure, I hope one day we get a chance to do a technical look at RISC-V v OpenRISC v OpenPOWER v OpenSPARC, but for now, the reason why we write about RISC-V is because we like an underdog. As Arm's CEO said, RISC-V keeps Arm on its toes, which is good for everyone. OpenRISC and OpenPOWER ain't doing that.

C.

Google says its artificial intelligence is faster and better than humans at laying out chips for artificial intelligence

diodesign (Written by Reg staff) Silver badge

Traditional algorithms

The neural network, Google says, outperforms human and industry automated tool placement.

So when you see in the article "beats humans" read it as "beats humans using their brains and their automated tools". I'll try to make that clearer.

Google's argument is that the neural net places macro blocks better than humans and their tools, and does it in hours, and not in a process that can take months to juggle around blocks and cells. Also, the AI can place the blocks in an unconventional manner: it seems to scatters them as needed, which some humans might not be so brave to do. The design looks like a mess but it's optimal.

FWIW it's been 15+ years since I've done any kind of chip design. In researching this piece, I read a pre-publication analysis of the paper by Andrew B. Kahng, a VLSI professor at UCSD, and for instance he mentions:

"The authors report that the agent places macro blocks sequentially, in decreasing order of size — which means that a block can be placed next even if it has no connections (physical or functional) to previously placed blocks.

"When blocks have the same size, the agent’s choice of the next block echoes the choices made by ‘cluster-growth’ methods, which were previously developed in efforts to automate floorplan design, but were abandoned several decades ago.

"It will be fascinating to see whether the authors’ use of massive computation and deep learning reveal that chip designers took a wrong turn in giving up on sequential and cluster-growth methods."

In other words, the AI works differently to humans and their automated tools, and that difference can be seen.

C.

Indian government to Twitter: Stop offshoring and outsourcing – or risk losing legal protections

diodesign (Written by Reg staff) Silver badge

Re: The world’s most-populous nation

Thanks -- it was fixed. But don't forget to email corrections@theregister.com if you spot anything wrong so we can fix it straight away.

C.

Global Fastly outage takes down many on the wibbly web – but El Reg remains standing

diodesign (Written by Reg staff) Silver badge

Re: UTC

Thanks, it was fixed. Please consider dropping corrections@theregister.com an email if you spot anything odd so we can take a look straight away.

C.

Chinese app binned by Beijing after asking what day it is on anniversary of Tiananmen Square massacre

diodesign (Written by Reg staff) Silver badge

Incident

Yeah, apologies: it's fixed. Was a bit more than an incident.

C.

Australian cops, FBI created backdoored chat app, told crims it was secure – then snooped on 9,000 users' plots

diodesign (Written by Reg staff) Silver badge

'What kinds of mobile phones would these be then?'

Mobile phones that can't make calls. There's a demand among drug traffickers for handhelds that have had their voice call capabilities, and other functions, removed for security and privacy reasons -- preferably physically removed, if possible. See Sky ECC, which was bundled on devices that had their microphones, cameras, and GPS receivers removed.

From the AFP announcement:

"The app AN0M was installed on mobile phones that were stripped of other capability. The mobile phones, which were bought on the black market, could not make calls or send emails. It could only send messages to another device that had the organised crime app. Criminals needed to know a criminal to get a device."

C.

Everything Apple announced: Tor-ish Safari anonymization. Cloaked iCloud addresses. Cloud CI/CD. And more

diodesign (Written by Reg staff) Silver badge

Not quite like Tor

Yeah, you kinda have to take Apple's word for it for now when its people say "no one, including Apple, can see both who you are and what sites you're visiting."

Presumably the Apple security guide [PDF] will be updated with details of Private Relay for cryptographers to study and assess. That guide is usually detailed enough to determine the viability of a design.

C.

UK's Labour Party calls for delay to NHS Digital's GP data slurp until patients can be properly informed

diodesign (Written by Reg staff) Silver badge

Re: Note to El Reg

Sure, OK, I'll see what I can do.

C.

Google's diversity strat lead who said Jews have 'insatiable appetite for war' is no longer diversity strat lead

diodesign (Written by Reg staff) Silver badge

'I wonder if anyone has checked to see if these are still his views.'

We've asked him. We'll let you know if he responds. Google PR and HR are going to be all over him, though.

C.

Are the forums broken?

diodesign (Written by Reg staff) Silver badge

Re: Are the forums broken?

We did some upgrades to the backend of our systems over the long weekend and that held up the processing and publishing of comments.

C.

Big Tech has a big problem with Florida passing a law that protects politicians from web moderation

diodesign (Written by Reg staff) Silver badge

California

You mean Florida, right?

C.

Arm has another 'most powerful CPU to date' – this time, the 64-bit-only Cortex-X2 for laptops and smartphones

diodesign (Written by Reg staff) Silver badge

Re: ARM A710 or ARM710

Yeah I know. The A510 kept making me think of the Acorn A540, too.

C.

diodesign (Written by Reg staff) Silver badge

Re: "It also supports 128-bit-length vectors"

Ah, see this article about the introduction of Arm's SVE, which can support SIMD vectors that are 128 to 2048 bits in length, though this implementation for smartphones goes to 128. x86 can go up to 512 bits (see AVX)

SVE started life as vector extensions for Arm supercomputers, and is now coming to client chips in the form of SVE2 (which includes SVE).

C.

10+ users can lead to washout: Data lakes struggle with SQL concurrency, says Gartner

diodesign (Written by Reg staff) Silver badge

No.

"This is an advertorial for Databricks"

No, it's not. Please don't accuse us of passing off sponsored copy as editorial -- paid-for articles are clearly marked as such.

C.

Virgin Galactic goes where it's gone twice before, for the first time in two years

diodesign (Written by Reg staff) Silver badge

Re: I didn't know El Reg was US-chauvinist

Yeah, yeah. It's now noted in the piece.

C.

More power for your Raspberry Pi: A new PoE+ HAT to sate power-hungry peripherals

diodesign (Written by Reg staff) Silver badge

Timelines

'IEEE 802.3at-2003' is just a typo on their end on their sales webage. The standards are: the original IEEE 802.3af-2003 and the updated 802.3at-2009.

Our article just uses 'at' (newer) and 'af' (original).

C.

diodesign (Written by Reg staff) Silver badge

Re: 802.3at/af...really?

The RPi people claim the PoE+ HAT supports 802.3af and 802.3at

C.

Google to revive RSS support in Chrome for Android

diodesign (Written by Reg staff) Silver badge

Disinterest v uninterest

Hi -- yeah, it's just a tick some writers and editors have, that they mean uninterested and they write disinterest. It's fixed. Don't forget to email corrections@theregister.com if you spot anything wrong, ta.

C.

Here's how we got persistent shell access on a Boeing 747 – Pen Test Partners

diodesign (Written by Reg staff) Silver badge

Very grouchy

Yes, it's in the tail end and it's now fixed. The piece does also say that it's impossible exploit in the wild, and it's more an interesting hack than anything else. If it was going to make planes fall out of the sky, we would say so.

We're not perfect. We make mistakes just like everyone else.

C.

diodesign (Written by Reg staff) Silver badge

Nose cone

Yup -- we've fixed that, ta. Don't forget to email corrections@ if you spot anything wrong so we can address it immediately.

C.

Microsoft hits Alt-F4 on Windows 10X: OS designed for dual-screen PCs axed

diodesign (Written by Reg staff) Silver badge

Dual screen

Nah mate, when we say dual-screen laptop or slabtop, we mean a laptop that has 2 screens and folds up, like two touchscreen tablets hinged together --- not a multiple monitor PC.

C.

Reports link Bill Gates' departure from Microsoft board in 2020 with probe into employee affair

diodesign (Written by Reg staff) Silver badge

"Bill had a relationship with the late Jeffrey Epstein"

Yea, it's in our article, my guy.

C.

diodesign (Written by Reg staff) Silver badge

Re: French Gates?

For the avoidance of doubt, It's Bill (Henry) Gates and Melinda French Gates -- the French Gates refers to the wife as that's the name on her Twitters.

C.

China says its first Mars rover Zhurong has landed on the Red Planet

diodesign (Written by Reg staff) Silver badge

Time

Yeah, that's at 11.13pm UTC today. Don't forget to email corrections@theregister.com please if you spot anything wrong, ta.

And thanks to those who did -- it was fixed straight away.

C.

India’s massive COVID-19 wave slows VMware desktop hypervisor development

diodesign (Written by Reg staff) Silver badge

Re: Clarification please

The latter (the M1 MB Air has no fans FWIW). From the blog post:

"I have 7 ARM VMs booted at once… 2 are CLI only (Photon and BSD), the others are full desktops… each is configured with 4CPU and 8GB of RAM. 6 different Linux flavors and 1 FreeBSD… MacBook Air. On battery. No fans. Yep."

C.

BadAlloc: Microsoft looked at memory allocation code in tons of devices and found this one common security flaw

diodesign (Written by Reg staff) Silver badge

"Does it have trapping arithmetic operations?"

Rust performs overflow checking and panics if it happens for debug builds of projects. Non-debug release builds do not panic.

You should use the built-in checked_ methods for things like this, eg checked_add. They're available for all the primitive types, at least.

C.

Here's what Russia's SVR spy agency does when it breaks into your network, says US CISA infosec agency

diodesign (Written by Reg staff) Silver badge

Re: Counterpart

We're not Russian media but this right here is perhaps what it may look like -- coverage of 5EYES piling into Russia.

And here. And pretty much everything written about Edward Snowden and the CIA Wikileaks materials.

C.

FCC gives SpaceX the go-ahead to drop Starlink satellite orbits by 500 kilometres or so

diodesign (Written by Reg staff) Silver badge

4,409 to 4,408

It's not a typo: the FCC's reduced the max size of the constellation by one and allowed some of them to operate at a lower altitude. There's about 1,200 in orbit now, and 12,000 or more planned eventually, which will be launched in stages.

C.

It doesn't really matter how many of us gripe about Google, nothing can stop it printing billions of dollars

diodesign (Written by Reg staff) Silver badge

Narrative

For the avoidance of doubt, we're being flippant in the framing of this article.

C.

Why is DevClass a separate website?

diodesign (Written by Reg staff) Silver badge

Re: Why is DevClass a separate website?

There's a group of readers and advertisers heavily into just DevOps, CI/CD, software development, and containerization, and DevClass is there to serve them. El Reg isn't everyone's cup of tea, so we created a space for them.

Having said that, we'll be more closely integrating our sister sites (like DevClass) into The Reg sometime soon, which means your Reg account will work across them, allowing you to post comments, etc. And make DC stories easier to find on the Reg home and section pages.

C.

Computer security world in mourning over death of Dan Kaminsky, aged 42

diodesign (Written by Reg staff) Silver badge

Re: Twitter

It was more to show that there was a wide respect for Dan.

C.

From cash machines to commercial kitchen appliances, Doom really will run on almost anything

diodesign (Written by Reg staff) Silver badge

Re: Doom on a pregnancy test

Ah yeah, that's true -- I've tweaked the story to reflect this.

C.

If you have a QNAP NAS, stop what you're doing right now and install latest updates. Do it before Qlocker gets you

diodesign (Written by Reg staff) Silver badge

Infection vector

I've asked QNAP how exactly are vulnerable boxes being found by the ransomware. Presumably it's by scanning the internet for public-facing NAS machines, though I hate to assume that's the only way in.

C.

University duo thought it would be cool to sneak bad code into Linux as an experiment. Of course, it absolutely backfired

diodesign (Written by Reg staff) Silver badge

Code commits

Off the top of my head, some code was committed to development trees but nowhere near branches for release.

C.

Not saying you should but we're told it's possible to land serverless app a '$40k/month bill using a 1,000-node botnet'

diodesign (Written by Reg staff) Silver badge

Headline

As in, 'land a serverless app a $40k/month bill'. Just keeping the headline snappy. Too many 'a's make it a mouthful.

If you can't parse a headline, the good news is that the article will immediately explain it.

C.

diodesign (Written by Reg staff) Silver badge

"If it is linear"

The paper was in error, the authors fixed their version, and let us know -- we've now corrected the quote.

C.