Posts by diodesign 3261 publicly visible posts • joined 21 Sep 2011
Look, we talked it over in the office. There are parts that are baffling - why can't the cops or Feds just question the guy, or check phone records, the usual stuff.
But then in this day and age, nothing surprises us anymore: incompetence and misfortune and difficulties strike at every level.
The article is presented as is: reporting what she has claimed, and what she wants implemented, which to us seem pretty basic measures.
C.
I wouldn't be so quick to judge the mental state of someone who went through the ordeal they described.
Also, talking to the police involves formal interviews, lawyers, identifying the suspect, collecting of DNA evidence, perhaps even court appearances - not particularly nice experiences versus lodging a complaint to an app maker.
C.
Uber claims it is not covered by the law. In its SEC paperwork, it describes drivers as customers: people using its app marketplace to sell rides to others.
This is partly how it plans to challenge the law: insist its operation doesn't fall under the law, then fight to ensure it does not fall under the law.
C.
Lucky you - quite a lot of Android users are still waiting for v10...
Also: don't forget to email corrections@theregister.co.uk if you think we've got something wrong. We can't read every comment, so we may miss this sort of thing. I've made it clear Android 10 is just out.
C.
No, it's a brain burp on our end. We meant unprotected DNS queries, not HTTP. HTTP on the mind. It's fixed.
Don't forget to email corrections@theregister.co.uk if you see anything wrong, and we'll fix it up right away. It's hard to spot requests for clarifications buried in the comments hours after publication: there's so much for us to go through while we're trying to get articles out the door.
C.
Sadly I think you've misunderstood. To exploit priv esc bugs, you need to already have access to the machine - the ability to write to the filesystem, in one case. At that point, you can do bad stuff anyway, like execute arbitrary code as the user.
To be clear, this is priv esc because you can either go from arbitrary file write to code exec, or user-level code exec to admin code exec if Steam is running as admin. If you already have admin code exec access to the box, this vulnerability is irrelevant.
What we're saying is, it's not as dangerous as an RCE like the RDP bugs. It's not great, it's not terrible.
C.
According to the FCC, the equivalent TTL was infinity. These packets are not standard TCP packets, I believe, they are proprietary Infinera packets, at least over the management channel, anyway.
Each time one of the bad packets hit a node, the node spammed *all* neighboring nodes with the same packets due to the broadcast address. That's the main problem, not the TTL, IMHO.
C.
Indeed it is. And it's very nice Perl. Our tools are listed here:
https://www.theregister.co.uk/about/company/website/
C.
Ah right, ok. She might be thinking of PCIe 4 expandability. I dunno.
In any case, I'm kinda more concerned about second-gen Epyc's RAM latency, which are offset by the large caches and prefetchers.
C.
Don't take sub-headlines too literally - they are short on space and high on flippancy. It means tech in the context of AWS: whether Amazon's cloud is insecure by design because it may be that it's too easy for customers to lose control of their data. It's just a thought, not a solid accusation.
C.
I wouldn't worry about aircraft and spacecraft. Here's how Wind River characterized it:
"Connected devices leveraging standard VxWorks releases that include the IPnet stack are impacted by the discovered vulnerabilities. They primarily include enterprise devices located at the perimeter of organizational networks that are internet-facing such as modems, routers, firewalls, and printers, as well as some industrial and medical devices."
It's not great, it's not terrible. Not as terrible as some other publications have wailed.
C.
Oh yes, we forgot to emphasis that - just assumed everyone was on the same wavelength. RISC-V, as an ISA and community, is still very new compared to incumbents, and today's available silicon is currently up to about Arm Cortex-A50-series performance.
So there's everything to play for. Don't forget: Arm's CEO late last year told a room of journos, including those from El Reg, RISC-V was keeping Arm's engineers and salespeople "on their toes."
C.
Hm, I see where you're coming from. We'll keep it in mind in future.
(Edit: Tweaked the article to include your counterpoints. Completely accept that IPv6 is vast, that it didn't break despite this error which is a good thing, and that more specific routes would have been used. As watchers of IT blunders on a daily basis, who see failures developing a mile off, we were concerned that no alarm was raised, and no fix was applied, for several days, which makes us contemplate more problems in future.)
C.
It's not that smooth in the US. Venmo is a thing because it's faster than anything else available. It also means someone can pick up the tab for a table of six and then request each person's share from them individually - the restaurant will not let you split it more than once.
C.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
