* Posts by Kiwi

4368 publicly visible posts • joined 26 Sep 2011

White House mulls just banning strong end-to-end crypto. Plus: More bad stuff in infosec land

Kiwi
Coat

Re: All anti-encryption efforts

They'd use something like this:

The elephant flies south in winter, repeat, the elephant flies south in winter.

I wouldn't..

The 80's TV series "Scarecrow and Mrs King" IIRC used a cooking show to pass messages. The recipe was a perfectly normal recipe, but it was the type of recipe (eg chicken or beef or soup) and amounts used that gave the details (I just vaguely remember the show so could be way off on details). IIRC the person running the show didn't even know she was being used to pass messages, she was just a TV cook making the dishes she was told to by the producers/writers.

I'd use that or other methods - like if Boris Daniels on Facebook (sorry BD, you're now every one of you on every watchlist even though I just grabbed 'Boris' from above and 'Daniels' was the first surname that came to mind) posts a message then yes, go with the attack, but if Jack Daniels (and there's a whole company now on the watch lists) posts the exact same message, the attack plan is aborted, or a different target used and so on. And the messages would appear completely innocent to anyone else, and just be made to fit in with the flow of posts.

I wouldn't say "We attack the 3rd bathroom on the 4th floor of the pentagon at dawn with diarrhoeic elephants (blame spellcheck) at 5am on the 6th"[1], I'd say "Hey, my 3yo daughter[location pt 1- could be "son", "girl", "boy", "kid", "brat" etc] is about to have her 4th birthday [location pt 2 - could be 'birthday party', 'anniversary' and other things beyond my thinkspace right now] on the 5th [time]. We'll need 6[date]-8 adults to help chapperone[weapon choice] the kids, if any one wants to volunteer".

[1] Unless that was the actual plan to say that directly, but pretending it's an example message when it's the actual message - if you see members of the GOP who seem to be full of crap arriving at the Pentagon in a few days, then be GONE or you may see what they have PENTUP.... (where's that bloody jacket? I need to be gone before they get over my bad puns and beat the crap out of me!)

Kiwi
Trollface

Why not simply ban communication?

Coz then we'd never learn what a hero chump is!

Who'd worship him if no one can talk about him?

Kiwi
Holmes

Re: Ban tornadoes and earthquakes as well

Might as well ban tornadoes and earthquakes as well, since it makes as much sense. Enforcing a ban on encryption is idiotic and impossible. Criminals certainly won't comply, nor would nearly anyone else.

There are acts like speeding and possession of drugs which are 'strict liability offences', also things like having a copy of the manifesto of that nutter from Christchurch, various things like that - an outright ban doesn't stop everyone from having/doing them, but it does make it a criminal offence to be caught with them, and that helps limit the number of people doing them.

Used to be you could drive with considerable amounts of alcohol in your system, and everyone was OK with that. Then the gubbermints made it illegal, but everyone was still OK with it. Then society was changed so now no-one is OK with it, and everyone is OK with someone 'dobbing in' an offender.

Used to be OK to take an interest in guns, ammo and pyrotechnics - now it's OK to report "suspicious. terrorist behaviour ". Crims and thinkers will still be interested in those things, but give your neighbour even a whiff that you have an interest in the physics behind rapidly expanding gasses and they'll be 'doing their civic duty', and making sure everyone knows how they're the hero who potentially stopped a dangerous terrywrist.

The government has to do 2 things - 1) ban strong encryption and 2) make heros of those who "help them in the fight against" 'terrorism' or 'child porn' or 'drugs' or whatever is standing in for EastAsia today.

Enforcing the ban - fully agree in it being idiotic, and it will present big problems and provide immense harm for the country that does it. But impossible? No, they'll trick us into doing that for them.

Kiwi
Paris Hilton

I'll support Congress, Presidents, Governments etc passing any new law they like under one condition - the law only applies to them for the first 12 months of coming into force. We'll see how long such laws survive

They'll last a very long time. Free travel for life, tax exempt for family and friends for life, the ability to issue a pardon to whoever they want whenever they want for whatever they want - for life (think of the money and favours that power would earn them), instant automatic ownership of any property they want (unless someone else in the same scheme has already claimed ownership).

No, you'll have to limit it to any laws that would be harmful to the man-in-the-street - and even then I can see a dozen ways they'd bring in the stuff I listed above. But there must be a way to close most of the loopholes (perhaps a clause that says "if you find a loophole in this law, the public gets to vote on if we get to put one in your head"?)

Kiwi
Boffin

Also I though a major point of WSUS was to allow the rapid and near-automated deployment of a wipe/image cycle over a big estate of Windows machines?

Hell, you don't even need that much! When I had my shop I part-installed several instances of XP, Vista and 7. At the last installation reboot I powered off the machine, copied the disk into an image, and shoved the image onto the network behind a PXE-bootable cloning tool that could see the images. Clone the mostly-installed Windows to a new HDD, twiddle the partition sizes (pre-copy), good to go. (Could also use a Linux USB stick and gparted etc if the original plan didn't work).

I do the same with VMs. Create a standard then clone that for actual use. (Probably harks back to my bad old days of copying audio tapes - make one copy of the original and put the original away, copy the copy, then only use the copy of the copy...)

Of course, if they used a real OS, not that poofy pinko Windows, then they'd not have had the issue in the first place and could've rebuilt their systems from scratch in less time than it took to write the acceptance speech... (surely there'll be an award for bravely bowing to the criminal's demands, right?)

Kiwi

Re: Usual Story

Suicide's a tough one to pin down because those bent on doing it resort to what's available. The US is middle of the pack whereas two of the worst (Japan and especially South Korea) have very tight gun controls.

I've heard it said that those who jump off a bridge to kill themselves yet survive realise on the way down how they can fix their problems and how they've made a very bad mistake.

As the AC below mentioned, with guns it's much easier to kill yourself. I myself have been that low and have quite literally been standing on a cliff edge trying to determine if it was high enough or would I have a painful wait till the rising tide took me. If I'd had easy access to a gun I am quite certain that moment would've ended my life - a very bad argument 15 years ago with a very close friend that left me so upset I wanted to end it all.

As was said, other methods have a higher 'bar for entry' and a lower success rate, and suicide probably very often is a heat-of-the-moment thing where, given the chance to think things over, the victim realises there's alternatives. I've known many who've tried and thankfully failed. In the cases I've known (including myself), 'sleeping on it' or delaying things has often lead to easy solutions (or realising the problem wasn't bad and perhaps could even be ignored) - given the chance to think things over we realise just how stupid/selfish we were. Guns don't give you that option :(

Kiwi

Re: Governments don't like to think of themselves as repressive

So it's actually quite difficult for a democratic government to be truly repressive.

Actually it's trivial for a government to be repressive. I grew up under the anti-gay laws in the 70's and 80's, but for a much better example of 'repression' - just look at the sheer amount of anti 'freedom of speech' stuff that's coming in now. Not just in law, but also in social media - Have a very popular YT video and say you felt uncomfortable seeing a whole lot of guys prancing around nearly naked in public? Sorry, no more YT for you. Want to speak out against the terror that's being promoted with 'Climate Change' (and I mean 'terror' as in "we have to urgently do something very drastic right now without stopping to think about it, regardless of the cost or harm"[1]), or even promote different ways to combat climate issues? Sorry, not allowed.

I want to be able to speak my mind, pro-gay pro-life young-earth Creationist pro-carbon anti-pollution pro-clean energy. That means if you're anti-Christian, pro-babymurder, pro-climate change, viciously anti-gay then I have to let you have a platform as well. But today - well look at what we have going on. It is socially unacceptable to speak out against or for certain things, and we have a large portion of the public screaming for law changes to make expressing the opposing side's view illegal.

The government merely has to give society what society is screaming for, and very soon they'll be cheered for executing people who're standing up for the views our fathers and grandfathers went to war to support only a couple of generations ago :(

[1] Wise up - "Carbon Zero" = "Life Zero" - get rid of plastics and other pollutants sure, but we depend on carbon nearly as much as we depend on clean water - take either one out of the environment and all life on earth dies

Kiwi
Coat

That.s the real reason they need to be kept under check.

See also politicians.

Actually, I'd really rather not keep politicians under check..

Reminds me, I need to dig a new longdrop....

Kiwi

I’m sure most of the boys and girls at GCHQ think they’re good guys and gals but I see them with at best grey hats.

Actually TBH I think almost all of them are white hats.

Unfortunately, they work in a dark environment with dark stuff and shady characters, and that darkness stains their hats to the point they wouldn't even recognise themselves if they looked in the mirror - in fact many probably think there's a portrait in their bathrooms of their darkest enemy, not ever even contemplating it's a mirror :)

Kiwi

Re: Or...

What you do is get a warrant and attack one endpoint or the other. But that involves real police work, and these jokers are allergic.

Yup.

How many crime 'rings' have been undone because one person came to the attention of the police, and that same one person , despite having the best tools and training etc, kept easily locatable contact lists and other stuff in convenient locations on their computer or around their home?[1]

I can't recall a single actual case where listening to every conversation and breaking crypto would've prevented a crime, but I can think of many where 'stupid is as stupid does' ended a "vast criminal empire".

[1] This is why I'd never be a criminal mastermind, I draw way too much attention publicly and probably exist one every watch list ever conceived. Probably makes me a good waste of resources as well, as while they again pore over[2] all of my El Reg posts in case there really is something of interest after all, someone else is being ignored who perhaps warrants a bit of extra attention.

[2] I see I'm far from the only one to have pondered if it's 'pore' or 'pour', and duckduck'ed to confirm.

Kiwi
Coat

New standard for encryption - the USA method. The Useless, Stupid Algorithm method.

And why not? It seems to have worked well for their prez!...

Kiwi

Re: Goodies and Baddies

scaling them to deal with the Internet is the unsolved problem.

Actually I think the solution has been dealt with and has been obvious for a very long time.

Deal only with real information, treat the rest as noise. 'Terrywrists' have all sorts of ways of hiding their true intentions - look at what we had here in Christchurch just a few months back. The entire "5 Eyes" system could not pick him up (assuming of course he really was as claimed) despite any chatter there may have been (including his travel history, 'social media postings' etc etc).

A single person can do a lot of damage without raising alarms (he says, as watchers start to turn their eyes towards him wondering how much he knows and what he is capable of). I have a background in chemistry and electronics, making a bomb with a timer isn't beyond me - in fact in the last few days I've read an article on the Wellington Trades Hall bombing and where it's claimed the bomb used a lot of skill to make to me it's trivial - a battery, an old oven timer (used to arm the bomb after a certain amount of time had passed) and a mercury switch to trigger it when someone picked up the briefcase it was in. An unidentified explosive (probably household kitchen chemicals I expect) and common soft-drink bottles filled with petrol for an incendiary effect. Most people here could build this in an afternoon without much thought. I don't know/don't recall what the detonator was, but my experience with electrical accidents (and seeing ceramic capacitors go up in showers of sparks, signal diodes glowing hot enough to scorch the underlying circuit board, Philips K9 tv's with flame-burnt boards where a dry joint on a power transformer drew an arc that caused enough heat for the board to ignite (and knowing of at least 2 house fires to have been caused by the same fault) - I know lots of ways electronics turn flammable.

I could also find people with similar interests and never actually discuss plans or meetings online (sorry Charles, I grew up gay when it was illegal (and I could've been committed to a psych institute just for having the feelings) and I grew up gay in a very small conservative town - yet I did alright for "fun" - I know full well how to get around the 'first contact problem'). The local library likely still has many books on chemistry where I could learn to make explosives but if not, you know the "Material Safety Data Sheets" that come with certain chemical products? Well, if you ever want to get some ideas for 'interesting accidents in your kitchen', just start looking up some of those. A big part of the "safety" is warning you what NOT to mix with certain chemicals, or how NOT to store them - and why (at least when I last read any).

TL;DR Trying to track what everyone is saying is bad, tracking only those who pose a real interest is what gets you important knowledge. Most people's browsing history - even those interested in 'fun pyrotechnics you can make in your kitchen' is just going to be noise that detracts from searching for the real threats, so the simple solution is not to even collect that data. The internet is just a smoke-screen that should always have been ignored, traditional intel methods are the only things that work.

Kiwi
WTF?

Re: Sigh

You commit a crime, you can expect to lose access to your kids.

So the kids should be put into those situations for the perceived crimes of their parents?

Before and form of 'due process' or judgement is involved to even determine if there was a crime? Before the parents have been found guilty?

Please tell me you don't think that because someone may somehow "trivialise the holocaust" by comparing it to this current activity that the current stuff is somehow justified?

Kiwi

Re: Sigh

Now if "they" encryption, will all government officials elected and otherwise follow suit? They damn well should, actually they should be the first.

My feelings on the politicians who are supporting NZ's current 'euthanasia' bill - the politicians who support it should lead by example.

My reason for being against this bill is simply due to the number of "utterly useless" people who "should be put out of our their misery" who have much to offer. The law may initially be set for only those in the last stages of a terminal illness, but give it a week and there'll be people clamouring all over ways to get the law altered to let in a different class of people.

[Ok, so do I get a prize or a boot for drifting so far off topic? :( ]

Kiwi
Black Helicopters

Re: Banning counting to 4.

By all means. Ban the use case. But to ban the actual existence of, numbers, is troublesome.

An outright ban may not work - aside from the financial upheaval a lot of companies would suffer, and the US as a whole (think Amazon and Ebay no longer being able to do online transactions while ALiExpress is free to continue), the first political party to offer to change the law would be gauranteed a win at the next election, even if it's some dude in mom's basement who never did anything more political than choosing pepsi over coke[1] before forming a party.

No, what will be more effective is to associate it with whoever is the current nasty (TNOTD); the current enemy. It could even be done on a state-by-state basis - I'm sure in California if you say "Only fags and paedos use encryption" its use would probably quadruple over night, but in other states that would see the next person to even turn on a computer getting lynched. Perhaps "Big Oil supports encryption" would work in Cali? Or "Big Beef"? "Farmers use encryption so you don't know which of their cute baby lambs is about to be sent to the meatworks to be tortured to death"? Dunno - but you get the idea.

You could use the Creation/"evilution" divide in other areas.. "Evil cretinous Creationists use encryption to discuss with each other how they can corrupt your kids" on one side and "Evil demonic evilutionists use encryption to keep their secrets from good God-fearing christians about how they're planning to plant anti-Creation corruption in school textbooks!" on the other.

Associate it with the enemy of the state[2], and associate it's use with supporting that enemy, and you won't really need to ban it - people can be very easily manipulated into supporting certain things. 50 years ago it was right to beat up gays, today it's right to beat up those who merely use the wrong words around gays. Us humans are very quick to viciously support what we believe is right, and many of us will simply follow the majority belief without even noticing how, over a few years or a few hours, subtle changes to TV programming and other things has 180'd our beliefs on a certain subject. We beat electricity at taking the path of least resistance (or is it 'the path of least intelligence'?)

Make society think encryption is bad, and whoever speaks out in support of it has a secret agenda to hide the enemie's actions, and we'll trample each other in our rush to stop them speaking on anything ever again :(

[1] The order is no inference of preference - I actually dislike both brands equally.

[2] 'state' as in Florida, Cali etc etc, not 'state' as in nation

Kiwi
Alert

Most likely the other "western" governments will follow the US and jump off the same cliff.

That's not what I'm afraid of.

I'm afraid out lot will follow in the pre-decessors footsteps and rush through badly written very poorly understood legislation in efforts to be the first 'Western Government' to use this kind of legislation.

(Sadly to be closely followed by "First first-world nation to become 4th-world overnight when hackers steal all our stuff! :( )

(El Reg - we don't seem to have a "I am very worried about where this is headed!" icon. Is that because you're fearful it'd burn out from over-use in threads such as this?)

The seven deadly sins of the 2010s: No, not pride, sloth, etc. The seven UI 'dark patterns' that trick you into buying stuff

Kiwi

Re: Two such patterns missed completely

Big green store in the fair land of Oz perchance ?

Name rhymes with "scummings"?

We have them here as well. Same website issues.

Oddly enough, I have a tendency to visit local suppliers first. Sometimes visit their site in desperation, only to visit a bricks&mortar site to chat to a real person the next day in even more desperation.

Kiwi

Re: It's all obvious when you know them

or even "I was passing and I had some tarmac left on the wagon, do you want to do your drive while I'm here?" Same thing.

Twice fallen for that - and very gladly.

The first, got a driveway re-done at a rental I was at. Cost me less than a weeks rent but the owner was very pleased so gave me a few weeks off - literally was a messy driveway in severe need of attention and a load of asphalt that was surplus to requirements.

Second was a carpet installer doing a shop fit-out where the previous tenant had re-done the carpets and not lasted long. This week one of my charges gets a new carpet (2nd hand but great condition and a few days use) throughout her home for next to nothing, just in time for winter. Probably the savings in heating costs alone will pay for it in a couple of weeks.

The big trick is spotting the "too good to be true" and the "incredibly lucky to be in the right place at the right time" deals, and not losing out either way [wanders off grumbling about missed opportunities ]

Kiwi

So some consumers may approve of scarcity signalling on sites they afford some trust, particularly if they feel confident in their ability to weigh a scarcity signal rationally.

I am one such person.

I maintain some ancient vehicles (ie >20yrs old). Where I can I buy new[1] parts. Knowing a particular critical part is about to become unavailable may mean I buy some spares this week instead of next month.

Where possible I also do a simple test on the scarcity/time limits. If I see the numbers falling on my normal browser, I'll use a different browser (VM, mate's computer etc) to visit the site. If the numbers are matching the original (Like NordVPN's everlasting 3-day sale) then I know it's a false rush. If the numbers match the last I saw (or are lower) - eg "Only 15 remaining" whereas yesterday on the other browser it was 16 remaining, then I know there's a greater chance it's real. Of course, that too can be faked so we move to how much I need/want it and how much I trust the vendor.

[1] "New Old Stock" as in 'Been sitting in a warehouse for the last 20 years unopened'

Must watch: GE's smart light bulb reset process is a masterpiece... of modern techno-insanity

Kiwi
Pint

Re: It takes a genius ...

"I simplified things for the simpletons on here"

By calling a pressure relief valve an oil pump? That's not simplification, dude, that is a failure to communicate.

Perhaps, perhaps not. It's still a simplfication - note that only you've taken issue with it :)

Yes, a failed oil pressure relief valve can affect your bearings. If it fails open, it could starve your bearings for oil. If it fails closed, it can cause blown seals which again can starve your bearings for oil.

Not in this case. Yes, in others, but in this case it affects only the hydraulic lifters. The result of it failing is increased tappet noise. The pressure doesn't get high enough to properly set the tappets. Fix - run the car for a few seconds, turn off, re-start. Only occurs during frosty mornings so I only experience it a few times a year.

I describe it as 'faulty oil pump' for others because it's easier than getting into a larger technical description of what is happening. Capillaries not quite designed properly (should've been a teency bit larger) and a model of relief valve that's prone to sticking open when cold. Not sure why it should be open when cold, never looked further than an understanding of the problem - digging deeper into something like this on a car is much more than I want to do. The cost of repair is higher than the value of the car, even if I just took my labour into account. Requires lifting the head, which maybe means new head gasket and a few o-rings. At that stage I may as well clean and re-lap the valves, which means new stem seals and perhaps other bits, then there's other general stuff that gets replaced while you're there - we're at nearly $500 on a car that the previous owner purchased for $700 some 10 years ago....

This fault can, in some cases, lead to an oversupply of oil to the engine resulting in blown gaskets - but that's only coz the person who borrowed it understood that sound to be 'possibly from low oil' and decided to add a quart, not checking either dipstick (asking me or checking the engine one). I'd forgotten about the issue myself as it only occurs rarely, otherwise would've told him if he hears it to idle the car a bit then turn it off and on to clear it.

(Thankfully it's the rocker-cover gasket that goes, not hard at all to fix - 10 minutes labour and some liquid gasket)

Hope this helps. Have a nice weekend.

I did. Built some new bug shelters at the veggie gardens of an old folk's home, moved some stuff into pots and into a greenhouse for the winter (may've been too late to save the capsicum sadly, but will see), and spent some enjoyable hours clearing out a couple of the flower gardens while the old dears commented on how much stuff thrives in that patch thanks to my efforts - yet they were told I was absolutely useless at gardening and the dead patch (from before I started) would only spread and get worse if I was allowed there. Instead, using some ideas gleaned from Charles Dowding videos, I've proven certain elements should be ignored when they try to run me down. And the soil - so rich and soft now when it used to be something like fired clay! (CD gets the credit, I just followed his tutorials). First time there I needed machines and days of work to break it up, now I can pull deeply rooted plants out with no effort.

More and more I'm finding going back to simpler ways is much more enjoyable. I get more fun out of working with my hands clearing someone else's garden on a miserable winter's day than I do playing the best video games in front of a roaring fire (or not-roaring electric heater). Reminded again why I loved farming so much!

Hope the rest of yours is at least as enjoyable :)

Kiwi
FAIL

Re: It takes a genius ...

You drive a vehicle with a known unreliable oil pump?

Nope. I drive a vehicle with a perfectly reliable oil pump.

I simplified things for the simpletons on here, but I guess I didn't simplify it enough for some.

It's actually a known issue of an internal pressure relief valve the sticks open when cold. On a car closing on 400KK that still hasn't needed any mechanical work (aside from belts the water pump) because it's 2 owners have known how to deal with the issue. There's no reason to expect the engine will fail before the body does. Even with the number of retarded idiots who insist on tailgating at speed.

And the clevite bearing wouldn't be used in the area of the engine affected by this issue, so yet another fail. Neither bearings nor bearing surfaces affected by this.

This weekend you better read those ebooks you bought from Microsoft – because they'll be dead come early July

Kiwi
Unhappy

Spotted a typo.

"But the solution to piracy is not, nor ever will be, usually to punish law abiding people while mildly and temporarily inconveniencing pirates."

Funny how that works elsewhere as well.. Look at NZ's knee-jerk changes to the gun laws - law abiding citizens are punished while crims may actually find it easier to get their hands on those 'nasty guns'.

Hate speech laws - if I want to saw nasty things to someone I'll say nasty things to that person, screw the law. Meanwhile, John Goodcitizen can't lovingly say to his boyfriend 'You're one disgusting faggot - and I love that about you!' without committing a crime.

KP laws - kids are disappearing from TV and adverts in case some nonce might just get the hots for them and go for 'a quick shower'. Do you think it'll really stop or even slow someone who is into KP?

Speeding laws - during holiday weekends we get a stupid law where the cops can stop and ticket you for speeding for being a mere 4km over the limit. There's evidence to suggest this has been causing more accidents than it prevents as people are less focused on the road and more focused on their speedometer. Those who strive to be good drivers yet stray a little over, or forget certain country roads have a much lower speed limit than they normally would, get pinged. Meanwhile, the person with advance warning of the cop drives by, the txters drive by, the tailgaters and non-indicators drive by.

Yep, punish the law-abiding and momentarily slow down a small few of the law breakers seems to be par for the course.

Kiwi

Re: It's a book

You read it, you put it down, you make notes in the margin, you stick labels on the important pages. You shouldn't need to charge it, or have it vanish from your bookshelf when someone's server gets turned off.

IN recent times I had well over 2,000 computer (inc laptops and tablets) service manuals, around 150 car service manuals, 100 motor mower service manuals (I inherited that lot ok?) and over 500 motorbike service manuals. I also have 3 or 4 Bible's and a couple of hundred related books. Can you even begin to imagine how much shelf space that would take in print? Also it's a lot quicker to search an electronic book than it is a print one.

I have a couple of dozen printed manuals that take up a large amount of shelf space. Some computer manuals seem to require an entire room just for the bloody index!

Kiwi
Pint

Re: That's not only DRM, it's the whole subscription model...

Free Pascal & Lazarus. Bye bye Windows, bye by Embacardero

YAY! Glad to know I'm not alone! I thought I was the only remaining Pascal programmer out there!

As someone who did a lot of work in TP6 then skipped basically everything for 20 years, I found FP&L quite easy to get back in to. Being somewhat cross-platform also helped with my largest programming project in recent years which had to be run on a Windows machine (but the code could be written on something much nicer :) )

Was happy to find something I could sit down at after a long break and still whip out a reasonable program in a little over a weekend (thankfully console only - I am the ultimate engineer when it comes to UI styling! :) )

Kiwi
Trollface

Re: DRM removal and calibre

I never found a way to remove DRM from many titles.

Screenshot button/camera pointed at the screen, and some really good OCR software? Oh, and a somewhat OCD level of dedication as well, if the book is large enough! :)

Kiwi
Pirate

https://xkcd.com/488/

Surprised no one else jumped up with the obvious link.

Well I did...

About a day after you :(

Kiwi
Coat

????

While a technologically savvy person will have considered the fact that buying an ebook with DRM means that it might stop working at some point in the future, you don't really expect it to happen, especially with a household name like Microsoft. But here we are.

Sarcasm? Or has the quality of writing actually declined since the departure of AO?

[Checks date, checks byline...]

Normally a decent writer.

And you're surprised by any DRM company screwing over the customers no longer supporting a format? Especially when it's MS?

Did I miss a <sarcasm> tag somewhere????

And as I'm doing a re-read of them and happened to come across this one earlier today, oblig xkcd

2001: Linux is cancer, says Microsoft. 2019: Hey friends, ah, can we join the official linux-distros mailing list, plz?

Kiwi
Trollface

Re: They are now the Voyager Borg

The only thing MS needs to do to win is bring down Linux to their level of mediocrity.

I thought the systemD, Gnome3 and Wayland teams were already doing that?

Who do you think Pottything really works for?

Kiwi
Devil

Re: I am getting worried

The problem would be when they try to extinguish-- but how can they extinguish what they do not own or control? Once they've written the code and it goes out there into the world under the GPL, it's no more "theirs" than any other GPL code. They can't shut off the tap and have it just go away as they could with their own proprietary software. Once something is out there on the internet, it's out there forever, and no longer under the control of its creator.

MS has been playing some interesting games for a long time. Some they started a long time ago may only now be coming into fruition.

How much "GPL" code does MS actually own the rights to; code which never should've been released as GPL as MS owned it outright?

You're not worried right now, but here's the chill. When MS aquired Hotmail, they had T&Cs that stated that MS completely owned the copyright to anything that went through Hotmail's servers - you gave up the right to your email contents if you had one of their accounts. I don't know if they still have that code or not.

Many people have used HM to share code of various forms, knowingly or unknowingly - ie there may've been ways to redirect mail to/from another domain for a long time. How many people innocently shared code with someone who was at say john@johnsnewlinuxdistro.com where that address went to HM? When John replied quoting the code, MS then legally had the rights to the code.

And then there's the next issue. MS could simply choose to ignore the GPL, or even fight it (damn I'm sounding like C9 here! :( )

Will it stand up in court? Well, MS has deep pockets.

How much of this is 'happy coincidence', and how long has MS been playing games where they can get stuff through other acquisitions?

(MS aren't alone in those sorts of terms - did you put your company logo on LinkedIn or a G+ page? Well those companies now own the rights to your logo, you don't.)

Satanists and witches these days promote themselves as being the sorts who care for the community - but no matter how they dress, those who follow evil are only going to support the goals of evil - even when what they do appears to be good (eg many who claim the 'christian' banner yet live the devil's lifestyle).

Kiwi
Linux

Re: I am getting worried

You're assuming Microsoft has good intentions.

They do. I, an avid MS hater, can fully and honestly say MS are doing this with the best intentions at heart.

Best intentions for MS of course.

Lemme see.. They'd get early access to bug reports - how many will be mysteriously 'accidentally leaked' or 'independently found by black-hat types' where a fix may be slow in coming (Linux slow like a few days, not MS fast like a few months or even years :) )

They'd be able to improve some of their own stuff - I'm sure MS has lifted 'one or two' bits of Linux code for their own internal stuff.

And I'm sure MS would never try to figure out ways to use early knowledge of issues with Linux to improve their own position.

Having bank problems? I feel bad for you son: I've got 25 million problems, but a bulk upload ain't one

Kiwi
Pint

Re: Reversing the debits into credits?

He wasn't called Jake, by any chance?

Bit late to the party but that was exactly my thought when I read that! :)

Kiwi

Re: 10 minutes, not a second more...

Basically, the idea was if the installer / maintenance person couldn't see that no one had turned the power back on, he (or she) needed assurance that it wouldn't be. And that's with little ol' 110V US circuits. With higher voltages I'd want lock-out regardless.

A cheap hasp and lock on your fuse box door? Easy to break in an emergency, but family should know not to damage it unless it's a life/death emergency.

Kiwi
Coat

Re: Wait, you have savings?

Wait, you have savings?

How the hell did that happen?

I actually have a very active "Freeflow savings account".

Money automatically flows in each paycheque. It freely flows out again well before the next paycheque.

The only "savings" about it is it saves me having to say 'I'm completely broke" today - at least till I get the money transferred out of it.

Kiwi
Pint

Re: I call bullshit

"Well, I do, and haven't."

Find a dictionary.

Look up "hubris".

I'd suggest adding 'karma' to the list as well... :)

Kiwi

Re: I call bullshit

My what a narrow world you live in my friend.

Before suggesting I'm narrow minded have you ever considered why:

1. Any time these stories occur people write into The Reg - such that every single week - they can produce a story?

I believe El Reg has at least a couple of dozen readers. Some of us have been in or around IT or engineering or other stuff for decades. Some of us have made or seen mistakes made more than once.

It could be said El Reg is the best IT news site in the business (well, even if just by me :) ) - there is just a slim chance that a few people will congregate here who know of such mistakes being made. And we do have a tendency to blow our own trumpets. Those "atmospheric noise" videos on YT? Just the physical manifestation of an El Reg comments thread.

2. People are so willing to discuss them with the World + Dog, even though the stories are always anonymised and about something that the organisation in question would absolutely not want anyone involved talking about?

I took you up on your challenge and tried to hunt for the case referenced in the article. I quickly gave up because, well, this is NOT a rare thing. This is just one of thousands of results, and I was several pages in before I gave up here.

These sort of errors happen a lot (not just this one but those in other stories). People are right to say you've had a narrow experience of life. A few changes of details to keep things anonymous, but even without that how is a company going to know they're the ones being talked about? These things happen a lot

Just look at the article on BGP taking out Farcebork, clodfool and scamathon. Think that wasn't a bit of 'human error' - or maybe it just didn't happen after all?

3. How an organisation has become the "biggest" in their sector, whilst also seemingly having bugger all in place to stop a trivial error? See also: employing people at multiple levels who lack absolute basic understanding of the difference between testing in a dev/production environment.

Again, these people have been doing this for decades. Some of the people who read here played a big role in developing the internet we know today, and the OS's we use. The idea of separating dev/production - do you have even the slighest inkling of how it came about as a standard?

It's obvious now - and of course now we all have oodles of cash to throw at doubling up on IT and massive numbers of VM's and huge raid arrays.. But way back when, testing had to be done on the same hardware during downtime, and hope like hell backups were there.. Or just be sure you did a good job. I've taken overseas trips on the overtime pay from individual series of tests because they had to be done out of hours, and we only had one plant to test on so that mean working through the night to get things ready, tested, and the results cleaned up and the line back to being ready for the next day's production run. Duplicate kit can be prohibitively expensive (as can mistakes on the only production line in the factory :( )

How do you think locking off and tagging off switch gear came about? IIRC the last straw was when an engineer had her had crushed (fatally) by some robotics, because she was working out of site of anyone else and it was thought she'd left the area (I am happy to be corrected on any of these details), possibly even at a Ford plant or some other US-based car manufacturing plant. A solution that wasn't obvious until enough people died. Other solutions were tried after other incidents, but individual locks for each engineer? This poor lady was the catalyst for something that keeps the rest of us safer.

Some of us have been working far longer than the current standards have been around.

4. Why you can never find independent and publicly verifiable stories to back any of it up, even when The Reg claims it's a story reported by mainstream media?

Take a look at MSM over the last few decades. For this story alone you have thousands of candidates (and I even wrote one very sweary post as, well, if this happened in NZ then I was a victim of the screw up and it actually made quite a mess of my finances that took a long time to clear - yes I was a customer of our largest bank, yes it made front page (and TV) news, and yes it was some filthy scoundrel at a bank double-dipping "accidentally" - but the post was too much even by El Reg standards so I deleted it. And yes, nearly 30 years on I am still very pissed at that person!)

These are just a small section of the issues. I don't think it's worth going further if you're too narrow minded to accept some of these stories might just be made up.

Maybe. Probably. Probably if not 'made up' then at least some alteration of some key facts to keep it anonymous.

I've worked in Banks

Hopefully not in any position of responsibility...

Actually, I kinda hope with your limited RW experience that you are not in places of any real responsibility. "You're not a real engineer until you've made at least one $50k mistake". With time, you'll make the sort of screwups that teach you how to manage serious problems - maybe a new 'never again' standard will be developed because of you. God willing, you'll survive the experience and in 20 years some 20something will be telling you it was made up, 'how can someone have made such a mistake when we have the Andy103 Law to prevent people doing such things?'

Ubuntu says i386 to be 86'd with Eoan 19.10 release: Ageing 32-bit x86 support will be ex-86

Kiwi
WTF?

Re: To Everything There Is A Season...

Would that be progress?

Never said it did now did I?

I know you're a yank, and perhaps one of the stupidest examples of those even, but surely even basic English comprehension isn't beyond you?

Queue baa, Libra: People will buy what Facebook's selling. They shouldn't, but they will

Kiwi
Pint

Re: Half the population—

If life's harsh, you have to also agree that it can easily be TOO harsh.

Yes, I know that quite well. What I haven't seen with my own eyes I've learned from those close to me.

I also know how we built abilities to survive and not only just merely survive like many do today, but to actually get above what has been done and be useful to society.

As to "time before you were born' - well your posts generally make you out to be a teenager, sometimes around 13 or 14 sometimes perhaps as old as 22 or 23.

(I realise mine often make me out to be a complete idiot but that would not be true - several parts are missing!)

Kiwi

Re: Half the population—

And what did they tell the grieving parents of those who DIDN'T make it home by dark...nor at all?

This was a time way before you were born. Kids could be out till all hours of the night. The most dangerous person in town would probably talk with you about a religious views your parents didn't approve of, things like that. The most dangerous child molester would make sure you were home safe, walk you home if he felt you were out too late, and talk with your parents before leaving you on your own (that or the people who tell me I was such a cute lad have been lying to me)

For the most part, most of the time, we got home fine. In May of 1991 two of my closest school friends lost their lives to an errant driver while walking home during the day near Patea. Yes, I get it Charles, bad stuff happens, but in the 70's and 80's (and even earlier) you could go anywhere, do anything you felt like, and get home safe (or with minor cuts and bruises - normally). It was very rare around these parts for people not to make it home, or to get hurt.

We were outside, free, active, healthy, exploring, experimenting, learning, growing, being creative, and enjoying life. There were risks, but at least our parents didn't have their kids who were too fearful to step outside the door, or who were suffering from serious weight-related diseases at a young age. I could tell you what was said to the parents when Craig Woodhead died while 'car-surfing', but you'd just turn it into some stupid "but WHAT if THEY were PROFESSIONAL GAMERZ!!!!q1!!1 or some garbage like that.

We got out, got hurt, learned from our mistakes (most of us), spent our time wanting to be out of hospital and out of the cast so we could do it a different way that hopefully worked better. Some of us got broken, and yes we did lose a couple of good people in stupid ways, but we kept trying and learning, getting back on the horse and going again.

This is why the younger generation tend to be a bunch of worthless self-obsessed (and phone-obsessed) snowflakes with a sense of entitlement beyond their experience or earnings, while those of us gone before knew that a university degree meant you still first picked up the broom and learned to sweep the floors. Given the chance, most of my generation would ride a horse bareback and unbridled if that was the only way we could ride. Or we'd spend a day helping rebuilt a friend's bike engine to spend 5 minutes on it next month sometime. Today's generation? You wouldn't even get them away from their screens long enough to even see a real blade of grass let alone a horse.

And that's the point of my earlier post. These kids see nothing of the outside world, have no concept of learning the limits by pushing their bodies to (and sometimes beyond) breaking point (or seeing someone else snap an arm or lose a finger (thankfully teachers were quick and surgeons were good back then!) - and the lack of getting out perhaps is a big contributor to the the lack of intelligence amongst today's youth. You don't try to think through solving a problem with limited tools and limited experience. I can be dropped in bush with no food, no tools, and a broken leg and find my way out or survive till I'm rescued, because I learned how to make tools and shelter from having to as a kid. You'd be dropped in the same area with a month's food, the best gear money can buy, no injuries, every tool every imagined, and be dead within an hour because no electricity for your phone - how could you live? Kid's today haven't had to learn how to do things for themselves, thus their brains are largely mush (much like mine is right now - sorry folks).

RIP Dyn Dynamic DNS :'( Oracle to end Dyn-asty by axing freshly gobbled services, shoving customers into its cloud

Kiwi

Re: Time to find another solution

I've been looking at NoIP, but I'm also considering setting up my own Dynamic IP service to run from one of my hosted installations. That way I can be sure that my service won't be sold off and that it's as secure as is possible.

I wrote a script that sits on a machine linked to a Mega account. All it does is run every hour or two (might be 4 hourly) and updates a log file with the system's outside IP address.

This is on one of my elderly rellie's machines so all I need is a link to the same Mega account and I can get into their systems despite a non-gauranteed IP (this was done before I built my own cloud server)

I'm sure you could figure a way to make use of this idea, and have it as an include into your hosts file (or other suitable) so you can point your own domain name to the appropriate IP (how often is hosts checked anyway? Sure you can figure some way so if the file changes the system updates it's DNS record)

I'd show you the code but trying to format it - I'm stuck in a recraptcha nightmare (El Reg PLEASE GET RID OF THAT FUCKING NIGHTMARE!) and it's making it much of a pain to try. I'll revisit this tomorrow sometime and post the core of the code, but basically :

It checks for a log file, if found reads in the last line to get the last IP address. It gets the current IP by contacting opendns using this line :

myip="$(dig +short myip.opendns.com @resolver1.opendns.com)"

(I got this from https://www.cyberciti.biz/faq/how-to-find-my-public-ip-address-from-command-line-on-a-linux/)

Compares "myip" with the old entry, and if there's a difference it adds a new line to the log with the new IP.

If I was using it with a hosts file (etc), I'd probably just overwrite the included file (does /etc/hosts handle #include-type stuff?) each run, but I might find a way to keep the IP in RAM (using the Linux/bash equiv to the old DOS "SET ENV" command to set 'environment variables' - assuming there is one?) and only change the file if there's a new IP.

Now to fight my way through the recraptcha nightmare again, and fuck off away from El Reg and find something else to read for the night. Suggest a place to drop the code (or ask someone at El Reg to pass on your details) if you want to see the full thing. I'd love to post it on El Reg but recraptcha got it's mits on my system (accidentally visited El Reg with google.co.nz having JS allowed :( ). so posting anything let alone trying to nicely format code is a nightmare.

Night all, see you tomorrow.

(PS try http://freedns.afraid.org/ - I've had something tucked away with them for ages)

Iran is doing to our networks what it did to our spy drone, claims Uncle Sam: Now they're bombing our hard drives

Kiwi
Coat

Re: Statement by Cybersecurity and Infrastructure Security Agency

Someone is keeping a close moderation on my comments, including this one :(

No, I'm certain that's not the case at all.. Why, I haven't seen any remotely suspicious posts from you in weeks!

Kiwi
Big Brother

Re: Oh, I thought it was the NORKs that did that!

Oh, silly me: the NORKs were the last enemy, the current enemy is Iran: so of course it is the Iranians.

Quick: where is the nearest Memory Hole into which I can put everything that I (thought that I) remembered about the NORKs.

To carry that on a bit further (scarily, for the easily startled), just consider how uch time and effort Trump put in to showing the world how great he was at negotiating with the NORKs and how the two nations would soon be on very good friendly terms...

Kiwi
Holmes

Re: Silver lining

Wiping is incredibly disruptive, so it is obvious you've been compromised. If someone silently penetrates your network and steals secrets they might continue doing that for a long time before it becomes known.

This is what causes me to entertain the possibility of a 'false flag' operation. Far more value in sneaking in, planting cameras and microphones, and sneaking out than smashing your way in, tripping every alarm imaginable, and fleeing with only the trinkets they wanted you to see.

Kiwi

Re: backups

backups

have you heard of them?

Why yes!

Years back I found a special backup device thanks to a fellow countryman named Simon.

It holds massive amounts of capacity - I've been backing systems up to it for years and not yet run out of space. And it is extremely fast as well, always has been! As fast as you can throw data at it!

Yes. If you want a fast way to back up your data, simply point your backups to /dev/null.

And the biggest benefits - it's free, yet the restores are just as reliable as any of the larger 3rd-party systems where you might pay $hundreds of thousands!

Kiwi
Holmes

Re: Possibly, but...

Hacking critical infrastructure could lead to multiple loss-of-life events. If they manage to hack the control system for a dam, nuclear plant, chemical plant (etc)...

The key thing is to keep these controls as isolated as you can, and also have local staff with local abilities to over-ride the remote stuff, and also design safeguards around problems. Take a dam - emergency spillway that means the dam won't breach, a simple physical channel that cannot be opened or closed, it simply is. The tops of your spillway gates also allow water to safely overflow should a slip close the emergency spillway and for some reason you cannot open the normal gates. Turbines that can have the maximum imaginable flow of water directed to them and still be safe, not relying on brakes that may fail to keep things in control.

So what can I do? If I shut down all systems at the dam so no spillway gates work, all the turbines etc are closed, and I blow up a chunk of hillside blocking the emergency spillway, the damn still survives.

Also have physical and automatic cutouts on your switch gear. I start trying to pull too much power through them, the contacts get open. That silly Bruce Willis movie where someone remotely sends all the natural gas in a region towards one main hub to blow it up? That should never be able to happen; flow restrictors and cut-offs or vents should be able to make sure the pipes cannot be asked to carry more gas than the weakest link can survive.

Nuke plants are much the same. Have means to start shutting them down and open up emergency cooling systems in the event of a loss of normal coolant ability. Even extra control rods that can automatically drop into place without electricity if certain parameters are exceeded (assuming I have enough understanding of how nuclear reactions are controlled - there is a very good chance that I may not :) )

There should be no way to remotely mess with things and cause problems, and very little chance even directly, short of liberal applications of C4...

Kiwi
Angel

Re: What goes round, comes around

An influential part of US decision makers totally believe that Armageddon is a ritual to summon Jesus with and they will be rewarded by going straight to heaven on beams of light avoiding the Tribulations!

What would be really cool would be if they were to check their Bible's so see if they were right.

At which point, they'd see that only by the most insane twists of anything that could be called 'logic' could their current view even remotely be seen as correct. They might find their current view places them amongst those most deserving of the fictional 'hell'.

Kiwi
Pint

Re: What goes round, comes around

The problem is right there with your "rogue nations".

You mean "Anybody who doesn't roll over for the US".

Much better put than I would've done!

Kiwi
Holmes

Re: What goes round, comes around

Talking is great, essential even, but it doesn't get you everywhere and it can not possibly disarm anyone's covert cyber capabilities.

1) Only those with an excessive sense of entitlement would go to 'other means' if they don't get everything they want. A key thing to remember is if you get something from the other side, they haven't had everything they want.

2) The issue is NOT to get the other side to disarm, the issue is to have them not use their weapons against you.

Talking works well, especially if you're willing to do a bit of give-and-take to help make every one as happy as possible - obviously some self-entlted types will never be happy even if they get the lions share with the least effort, but if every one else leaves the table smiling then talking has worked well. A lot better than anything involving any form of force.

Kiwi
Coat

Re: In other news

Have you noticed how the word "Impeachment" has disappeared from the news while this crap is going on?

If you don't think that's a coincidence, it's time for your nurse to give you more anti-psychotic meds.

Acually I've stopped taking anti-psychotics. I'm donating them to the US government. They seem to need them much more than I do at the moment!

(As to 'news' - if I was to watch even a few minutes a year on the goings on of the US, I'd be taking anti-psychotics by the truckload and still loosing control!)

BGP super-blunder: How Verizon today sparked a 'cascading catastrophic failure' that knackered Cloudflare, Amazon, etc

Kiwi
Trollface

Re: whaaaaat, no...

The phrase you're looking for is: Iran is America's 'Great Satan'.

Pretty sure Trump is US's 'great satan'. Especially if you consider 'satan' means 'accuser'.

Perhaps in the run up to the next election he can can change his catch-phrase a little and make it more accurate...

"Make America 'Great Satan' again!"