* Posts by diodesign

3261 publicly visible posts • joined 21 Sep 2011

Of course a mystery website attacking city-run broadband was run by an ISP. Of course

diodesign (Written by Reg staff) Silver badge

"bored"

Funny way to spell banned.

C.

Ghost in the DCL shell: OpenVMS, touted as ultra reliable, had a local root hole for 30 years

diodesign (Written by Reg staff) Silver badge

Re: The sky is falling in

"Get a life."

Get another site to comment on.

C.

Cox blocked! ISP may avoid $25m legal bill for letting punters pirate music online

diodesign (Written by Reg staff) Silver badge

Re: headline

Hmmmm, I thought it was pretty obvious - but happy to make it more clear.

C.

Tech biz boss slipped Detroit's IT chief bungs in restaurant bathrooms to bag software deals, prosecutors claim

diodesign Silver badge

Re: Democrat Run for over 50 years!

match story.subject.politics

{

Republican => "Biased lefty commie Bernie Killary morons!!!",

Democrat => "Wow lol u guys slipped up here covering this up!!!",

_ => "El Reg sucks"

}

1 out of 10. Failed troll.

C.

You can't ignore Spectre. Look, it's pressing its nose against your screen

diodesign (Written by Reg staff) Silver badge

Re: apologist

"True, I suspect security was pretty low on the list in the '70s when the original 8086 was designed"

The security hole was introduced way after the 8086. Basically, Intel and others screwed up. They're trying to spin this away as a design side effect.

Like a plane crashing mid-flight is a side effect of a substantial fuel tank leak.

C.

diodesign (Written by Reg staff) Silver badge

Re: Jonathan Schwatrz

"Well, to be fair to Intel, they perfected prefetch as a performance boost..."

I think you missed the point of my post. I meant Meltdown/Spectre reveals an embarrassing cockup in Intel's processor designs (and Arm, AMD, etc for Spectre). Yeah yeah, prefetching and speculative exec and branch prediction speeds stuff up. That wasn't the point of my post.

The point is that chip engineers left security in the glovebox the day they parked up in the company lot and walked in to design those parts of the pipeline.

It's like a manager told them: "Speed. Security. Price. Pick one."

C.

diodesign (Written by Reg staff) Silver badge

Re: croky

>"Secrets" ? Who wants those "secrets" ? Does the "other end" even know I've got any "secrets" ?

By secrets, I mean: passwords and personal information. And yes, you have them in your computer. This is why it's good to patch - when good patches arrive, natch.

>Show me proof people are being attacked, left and right, thanks to Spectre and Meltdown.

No one's said people are. Relax guy. You're overreacting.

C.

diodesign (Written by Reg staff) Silver badge

Re: croky

"I mean, what's the probability for me to become a target ?"

Spectre is irritating because it's hard to fix and lets software read stuff it shouldn't. This means JavaScript in the browser can sniff out secrets from the kernel and other tabs. There are PoC exploits for this out there. It's important for ppl to update their stuff, hence the attention on the flaws.

Likewise Meltdown: malware will be along to lift stuff out of the kernel.

PS: For us, the biggest thing about it is the embarrassing design cockup and the messy fixes, rather than this being the total end of the world (because it isn't).

C.

When you play this song backwards, you can hear Satan. Play it forwards, and it hijacks Siri, Alexa

diodesign (Written by Reg staff) Silver badge

Re: On the topic of ultrasound...

"More likely the suppression is happening in the amplifier stage."

OK, I've slightly tweaked that.

C.

If you've ever wondered whether the FCC boss is a Big Cable stooge – well, wonder no more

diodesign (Written by Reg staff) Silver badge

Re: Big John

"I'm saying this article is written specifically to attract haters"

Well, no. It was written to highlight failings by a federal regulator's chairman. Scrutiny. Press. You know.

"That's evil."

Don't be so stupid. Why do you hang around here?

C.

Can't login to Skype? You're not alone. Chat app's been a bit crap for five days now

diodesign (Written by Reg staff) Silver badge

Blergh, we walked into that one.

C.

Elsewhere in the media

diodesign (Written by Reg staff) Silver badge

Re: Elsewhere in the media

Yeah, we reported on it in 2016 (Just search El Reg for 'DressCode'). Seems the thing is still around.

C.

Google slaps mute button on stupid ads that nag you to buy stuff you just looked at

diodesign (Written by Reg staff) Silver badge

Re: Nice PR

Show us on the doll where Google hurt you.

C.

It's 2018 and… wow, you're still using Firefox? All right then, patch these horrid bugs

diodesign (Written by Reg staff) Silver badge

Re: Seriously, whoever wrote this title...

...was me and I respectfully suggest you:

# apt-get install senseofhumor

C.

Look on the bright side, Pebble fans. At least your gizmo will work long enough for you to get beach body ready

diodesign (Written by Reg staff) Silver badge

Re: Mark 85

> Old story that is now surfacing or doesn't the company know what year it is?

No, it means it committed to supporting Pebble in 2017, and now into 2018.

C.

FYI: There's now an AI app that generates convincing fake smut vids using celebs' faces

diodesign (Written by Reg staff) Silver badge

Re: Too much Daily Mail for my liking

Mate, you're the one obsessing about it. Chill, or maybe seek help?

C.

Missing Obit for Ursula?

diodesign Silver badge

Re: Missing Obit for Ursula?

Ah it's in the works.

C.

H-1B visa hopefuls, green card holders are feeling the wrath of 'America first' Trump

diodesign (Written by Reg staff) Silver badge

Re: RobertLongshaft

"More anti trump propaganda"

Except for the parts where we said H-1B pushes down wages and pushes out American workers?

C.

Samba 4.8 to squish scaling bug that Tridge himself coded in 2009

diodesign (Written by Reg staff) Silver badge

Re: "....get Samba working on HP-UX....."?

"Samba has worked fine (well, as fine as it can) on HP-UX for years!"

Bear in mind this is HPE asking – according to the speaker, HPE (post-HP split) needed help getting Samba working (again).

C.

US govt shutdown lobs spanner in SpaceX's Falcon Heavy launch

diodesign (Written by Reg staff) Silver badge

Re: Re: Long live marketing

SLS is non-commercial (NASA). BFR doesn't exist. This is pretty black and white, ppl.

C.

Mozilla edict: 'Web-accessible' features need 'secure contexts'

diodesign (Written by Reg staff) Silver badge

Re: Dr Marvel's wonder liniment...

>It DOES NOT not prevent your ISP from tracking sites or pages you visit.

It does prevent ISPs from tracking pages. All the ISP sees is an encrypted connection to, say, a Wikipedia server. It has no idea which pages I'm reading.

And I'm not so sure about your other claims, either.

C.

NHS: Thanks for the free work, Linux nerds, now face our trademark cops

diodesign (Written by Reg staff) Silver badge

Re: DontFeedTheTrolls

Big publications – from the NYT with its huge army of copy editors to the Grauniad with a sizable editing team - still let through errors. We have 3 region editors (North America, Europe, APAC), 1 news editor (UK) and 1 sub-editor (UK).

It's frankly fucking amazing there aren't more errors slipping through on El Reg given the resources available. The current rate is pretty low. It's hard to find good editors who can do sperlinng, snarky headlines, and are experts in tech and science.

C.

diodesign (Written by Reg staff) Silver badge

Re: Good sub-ed needed....

Should be all good now. Software has bugs, articles have typos. We try to avoid them, but we can't catch them all.

C.

Court throws out BT's plans to reduce pension rates

diodesign (Written by Reg staff) Silver badge

Re: Re: Possible error?

Oops, thanks, fixed. Don't forget to email corrections@theregister.com if you spot anything wrong. We can't read every comment (there's too many) but we can read every email.

C.

Red Hat slams into reverse on CPU fix for Spectre design blunder

diodesign (Written by Reg staff) Silver badge

Re: danito

Pretty sure the microcode adds an MSR that can control CPU behavior to mitigate the vulnerability (ICBW) and there is exploit code. It's available for Meltdown and Spectre. It's generic.

C.

diodesign (Written by Reg staff) Silver badge

Re: Re: Why would techies be scratching their heads ?

Thanks! Article updated.

C.

DigitalOcean cuts cloud server pricing to stop rivals eating its lunch

diodesign (Written by Reg staff) Silver badge

Re: Not Apples for Apples

I recall a senior Digital Ocean person swearing blind DO doesn't oversubscribe.

C.

Someone is touting a mobile, PC spyware platform called Dark Caracal to governments

diodesign (Written by Reg staff) Silver badge

Re: israel_hands

Due to a technical cockup, an old draft of the piece went live instead of the final edit. We keep a history of all article revisions, and an early revision overwrote the latest one.

I just restored the final edit. The piece was edited hours ahead of publication, and set to go live at 8am PT / 4pm UTC. We don't publish stuff straight to the web - it gets edited by at least one editor.

Basically, someone with a browser tab open with an old version of the story clicked on 'save and close', rather than 'close', in our web publishing system, and overwrote the clean version. Oops. But it's fixed.

Don't forget to email corrections@theregister.com if you spot anything wrong.

C.

Meltdown, Spectre bug patch slowdown gets real – and what you can do about it

diodesign (Written by Reg staff) Silver badge

Re: Skyfall and Solace vulnerabilities?

Mythic Beasts is just the hosting company. And it's basically bollocks. It's 99% a hoax.

C.

Quality journalism

diodesign (Written by Reg staff) Silver badge

Re: Re: Quality journalism

"Gareth Corfield does then deletes comments to make it look as though he doesn't."

Not taking criticism from a moron who can't string a sentence together.

C.

diodesign (Written by Reg staff) Silver badge

Re: Quality journalism

Let me get this straight. You "just" want "lame clickbait churnalism once in a while?"

No, we don't do lame clickbait churnalism. So you'll "just" have to fsck off somewhere else for that. Ta.

C.

Kent woman to season festive dinner with her mother's ashes : what happened?

diodesign (Written by Reg staff) Silver badge

Re: nick_rampart

No.

C.

diodesign (Written by Reg staff) Silver badge

Re: moderation

Hi Nick,

I'll keep it short and sweet: thanks for the feedback.

C.

Oracle says SPARCv9 has Spectre CPU bug, patches coming soon

diodesign (Written by Reg staff) Silver badge

Re: It is a serious, fundamental design flaw

Yes, as we've repeatedly reported since January 2, and were the first to report. Read El Reg ;-)

C.

diodesign (Written by Reg staff) Silver badge

Re: Confused, SPARC vulnerable or not?

"Oracle believes that certain versions of Oracle Solaris on SPARCv9 are affected by the Spectre vulnerabilities"

and

"Oracle is working on producing the patches for all affected versions that are under Premier Support or Extended Support."

Pretty clear to us. SPARC v9, running Solaris, is vulnerable to Spectre.

C.

Google's 'QUIC' TCP alternative slow to excite anyone outside Google

diodesign (Written by Reg staff) Silver badge

Re: rjed

"QUIC is not been deployed yet because it is still not a standard !! IETF is working on it and has recently pushed back the dates (to end of 2018)"

Yeah, so as we said, only Google seems excited by it. Everyone else seems to be taking their sweet time - of course, they're allowed to do whatever they want. But the point is, only Google seems excited by it, mostly.

C.

Germans make an even bigger mess of naval procurement than Brits?

diodesign (Written by Reg staff) Silver badge

Re: Germans make an even bigger mess of naval procurement than Brits?

I think it's probably fair to say it's enough work for us to cover UK and US military goofs, let alone Germany's cock-ups, too... But thanks for the link.

C.

Celebgate latest: Fourth dirtbag 'fesses up to pillaging iCloud for stars' X-rated selfies

diodesign (Written by Reg staff) Silver badge

Re: Hate to think El Reg was going PC......

Eh, I dunno. We called it The Fappening in the past, and it just seemed the name had morphed to Celebgate.

And I'm all about a writing style that's like your mate at the local boozer. Just not so sure about playing into the hands of a bunch of 4chan degenerates jerking off over people's stolen private images, so to speak.

C.

diodesign (Written by Reg staff) Silver badge

Re: Known as Celebgate?

Call it what you want. Free country.

C.

UK's Just Eat faces probe after woman tweets chat-up texts from 'delivery guy'

diodesign (Written by Reg staff) Silver badge

Re: RLY!?!

Mate, none of what you said above is cool. If you're delivering stuff to someone, serving them food, any kind of day-to-day thing, taking their phone number and texting them weird flirty stuff is awful. The number was provided for business purposes, not to set up a date.

It's one thing to ask a person for their number in a social setting. It's another to delve into a customer record and pull out a contact detail and pester them.

Now imagine this happening every week - it could be on twitter, uber, just eat, work email. It gets old really quick and it's just creepy and sad. If you want to ask someone out, do it properly.

C.

Brace yourselves for the 'terabyte (sic) of death', warns US army IT boss

diodesign (Written by Reg staff) Silver badge

Re: slang v gospel

"you breeze by his 600 gig"

We were charitably hoping he meant 600 gigabit per second.

C.

1 in 5 STEM bros whinge they can't catch a break in tech world they run

diodesign (Written by Reg staff) Silver badge

Re: An interesting statistic on your box of morning cornflakes

"The racial makeup of Cupertino"

Cupertino is a small city in California that happens to have Apple HQ next to it. People who work at Apple, by and large, don't live in Cupertino. They live all over the Bay Area and the world.

No idea what point you're trying to make, anonymous coward.

C.

Nebula spotted with more super-sized bodies than a gym on Jan 2nd

diodesign (Written by Reg staff) Silver badge

Re: Terje

Thanks - I'll tweak the article. Sorry, we were mostly working on chip stuff this week and brains were tired. Don't forget to email corrections@theregister.com if you spot anything wrong. We don't have time to read every comment.

C.

We translated Intel's crap attempt to spin its way out of CPU security bug PR nightmare

diodesign (Written by Reg staff) Silver badge

Re: "Isn't making it go mainstream before this date kind of a bad thing?"

We asked Intel what was going on, twice, and had no response - not even a no comment, or an off-the-record explanation. We were certain with what we had - given the LKML discussions and information from other sources - so, why not warn the world that big changes are coming?

We offered no exploit code. Just a heads up that important alterations were being made to crucial bits of software. It's not our job to do companies' PR. We can't read minds.

And these changes were being done in the open, so any bad people paying attention could have known what we knew or more, and started exploiting it.

A lot of vendors hold us at arm's length, hoping we'll go away. We regularly get the silent treatment from various - but not all - companies. We're not going to sit on stories just because we get a no comment/no reply. Turned out this one was quite a big one. We had no idea it would be this big.

C.

diodesign (Written by Reg staff) Silver badge

Re: Late to the party

We made it go mainstream. Our Tuesday report was the basis of Bloomberg, Reuters, NYT, CNBC and BBC coverage - we were even cited and linked.

I dunno how many people saw your speculation pre-Tuesday but our articles this week are seven-figures in terms of page views.

C.

Kernel-memory-leaking Intel processor design flaw forces Linux, Windows redesign

diodesign (Written by Reg staff) Silver badge

Re: Shouldn't we be upset with The Register for broadcasting this?

>apparently against the wishes and advice of everyone involved

No one we contacted for comment told us to stop.

C.

diodesign (Written by Reg staff) Silver badge

Re: This is being very over exaggerated

Gaming is pretty much unaffected - it doesn't involve the kernel, you're talking direct to the GPU. Most desktop apps are not IO intensive so you won't see a big hit. It's not great news for stuff that slams the disk and network, or works in real time - however, as we said, if you have PCID supported, the hit is minimized.

C.

diodesign (Written by Reg staff) Silver badge

Re: A pretty good writeup I think

I think we're both right - but i disagree that the CPU is in charge. The CPU isn't in charge of anything, it's just obeying code. Who is in charge - the horse or the person riding the horse? ;)

C.

diodesign (Written by Reg staff) Silver badge

Re: Hmmm...

The KPTI Linux patches are applied to all Intel x86 CPUs. AMD submitted a patch to stop it being automatically enabled on its chips. It is possible to turn off KPTI during boot up.

C.

To Puerto Ricans: A Register apology

diodesign (Written by Reg staff) Silver badge

Re: Big John

"The author tried this same shiza a couple weeks ago"

Stop being such a snowflake, dear.

C.