* Posts by Kevin McMurtrie

3555 publicly visible posts • joined 15 Jun 2007

Israeli firm Bright Data named as enabler of Philippines government DDOS attacks on opposition groups

Kevin McMurtrie Silver badge
Unhappy

I hate to say this, but

It's time for Governments to get involved. There are too many networks claiming high standards of operation while taking in money to host craploads of illegal network abuse. It's at the regional networks, the hosting providers, and all the way up to the Tier 1 transit networks providing hostile networks with connectivity. Their attitude right now is that they absolutely don't care. No working abuse contact of any kind. Criminals pay money, victims don't.

I know the Internet is supposed to be self-healing but there's a practical limit to just how many firewall rules one can maintain. DDoS are difficult to block when there's a crime-friendly network one or two hops upstream. Companies pay CloudFlare or Akamai for protection while they serve the carders, phishers, and C&C systems helping to fund the attacks.

Yeah, the Internet is bad enough that I think Government intervention will make it better. Sad times.

https://www.abuseipdb.com/statistics

https://www.spamhaus.org/news/article/813/spamhaus-botnet-threat-update-q2-2021

What's the top programming language? It's not JavaScript but Python, says IEEE survey

Kevin McMurtrie Silver badge

Probably right

JavaScript has become fragmented by derivative languages that are transcoded into JavaScript. If you look into the corporate source repos, you find very little authentic JavaScript.

Python seems to be the new duct tape of the world. Despite it being an excellent scripting language, this is an unhealthy popularity that's going to give it a the same junk code reputation that PHP and Java have.

Singapore is the only nation with a dedicated 'net link to China. And they've just agreed to expand its use

Kevin McMurtrie Silver badge

supporting bandwidth-intensive industries like...

Missed one: Brute-force attacks

Google's newest cloud region taken out by 'transient voltage' that rebooted network kit

Kevin McMurtrie Silver badge

Harden the F up

Being in a big city doesn't seem to be much of a defense against everything trying to kill you in Australia.

Using 'AI-based software like Proctorio and ProctorU' to monitor online exams is a really bad idea, says uni panel

Kevin McMurtrie Silver badge

Used for job interviews too

This crap happens in job interviews too. You only have to read the terms and waivers to know how much of snake oil marketing trick these services are. I can't imagine how angry students would be to have this garbage suddenly dumped on them after months of studying.

At least in the job interviews, I can decline and not have wasted too much of my life.

Japan's aerospace agency hooks up with Boeing to make planes quieter when they land

Kevin McMurtrie Silver badge

Re: Boeing

The first step of noise reduction is making sure all landings remain on the tires.

China passes half a billion 5G subscriptions and adds at least 190k new 5G base stations in six months

Kevin McMurtrie Silver badge
Trollface

Re: My bad

5G is needed for all the tracking devices in the vaccine. Also, Bill Gates is watching all of us and notes that this undertaking is several orders of magnitude more boring than expected.

After reportedly dragging its feet, BlackBerry admits, yes, QNX in cars, equipment suffers from BadAlloc bug

Kevin McMurtrie Silver badge

Re: Rust

I have doubts about this code being at a high enough level of abstraction for Rust to understand the bug. Memory management is just a pile of math until those numbers are finally cast into meaningful data structure references.

China warns game devs not to mess with history

Kevin McMurtrie Silver badge

Good work for game devs, if they don't vanish

The games will need a software update every time the Chinese Government changes the official record historical events.

Tired: What3Words. Wired: A clone location-tracking service based on FOUR words – and they are all extremely rude

Kevin McMurtrie Silver badge

After 45

The US is in the process of renovating its cursing vocabulary to cover extraordinary new levels of zeal, vengeance, and pride in masses of people whom are underrepresented by existing swear words.

Kevin McMurtrie Silver badge

Synergasmic

This should be added to FOAAS so you can tell someone what to do and where to do it.

It's time to decentralize the internet, again: What was distributed is now centralized by Google, Facebook, etc

Kevin McMurtrie Silver badge

Re: IPv6

Browsing the web via IPv6 works fine. Incoming connections are harder.

It's usually some combination of allowing incoming connections then configuring the firewall with custom rules. Allowing all inbound IPv6 traffic was OK for a while, but now IoT junk is gaining IPv6 support without being hardened against exposure. You also have to sort out how to keep the IPv6 addresses stable so the firewall rules don't need to be updated every few days. On some routers that's a DHCP checkbox. Others have non-configurable IPv6 DHCP so the clients need manual configuration. Take all of that and sprinkle liberally with bugs because ISPs will claim that they don't officially support inbound connections. It's not uncommon to see firewall rule syntax errors logged for the ISP's hidden configuration.

Kevin McMurtrie Silver badge

IPv6

This comes back to needing IPv6 working. Hosting providers are hoarding IPv4 addresses while doing what they can to assure people that IPv6 is irrelevant. IPv6 enables complete decentralization - mail, content hosting, social feeds, direct messaging, video chat, photo albums, and pretty much everything can be on a low cost home computer

I'd write the software to bind it all together if not for the one problem: The Internet is broken. Everyone is behind IPv4 NAT and/or a half-assed IPv6 router. I run my own server and the one technical bit that can't be automated is getting IPv6 working on home Internet. 1990's hero Sonic.net never modernized and couldn't be bothered. Comcast Business and AT&T fiber need custome router configuration with custom bug work-arounds. Then there are IoT junklets supporting IPv6 with zero security.

Fix the Internet then we can start dismantling the content monoliths.

Apple responds to critics of CSAM scan plan with FAQs, says it'd block governments subverting its system

Kevin McMurtrie Silver badge
Big Brother

False statement of authority and accuracy

It's all fine until you start claiming utter BS like "a one in one trillion chance" for false positives. If believed, that's the kind of statement that can put a lot of innocent people in jail. I dare Apple to prove that an iPhone or iPad can perform the hash with a one in one trillion rate of computational errors. I dare Apple to publish their algorithm for peer review. Can NCMEC claim they can process images with a one in one trillion chance for a mistake?

Anti-virus software uses really big hashes yet corporations are regularly idled when their computers stop working. There's more than once place to screw up.

Perl's Community Affairs Team chair quits as org put on ice by code language's foundation

Kevin McMurtrie Silver badge

Re: FFS

It depends. Both do great things until you abuse them. For every idiot who has tried to write big apps in Perl shorthand 20 years ago, there's another idiot trying to do fork-joins in Python today.

Apple is about to start scanning iPhone users' devices for banned content, professor warns

Kevin McMurtrie Silver badge

A new iPhone meaning for "jailbreak

Take 50 photos of family kids playing. Find that they're all blurry and delete them. Get arrested by FBI because AI found illegal content and you deleted both their evidence and your defense.

Got a cheap Cisco router in your home office? If it's one of these, there's an exposed RCE hole you need to plug

Kevin McMurtrie Silver badge

Self defense?

My experience with Cisco's RV series is that they barely work. Hackers will need to deal with constant crashes, stalling, and users power cycling the device.

Tesla battery fire finally flamed out after four-day conflagration

Kevin McMurtrie Silver badge

Re: Extinguishers...

What would you do with a partially incinerated Megapack? Nobody's going to touch that.

Give them Nichrome chimneys to suck the flames up to a safe distance from the other packs.

Don't rush to adopt QUIC – it's a slog to make it faster than TCP

Kevin McMurtrie Silver badge

The feedback the same

Packet loss and latency. Those are the two feedback values you have for tuning. Packet loss is a costly value to probe. Both values have highly dynamic optimal values.

TCP, QUIC, and home-brew UDP layers can't improve what little data there is to work with.

Fixing bloated JS and giving your marketing department rabies shots could improve HTTP performance by 90x.

Amazon sets the date for televised return to Middle Earth: September 2022

Kevin McMurtrie Silver badge

I think you meant "product placement"

Google says Pixel 6, 6 Pro coming this year with custom AI acceleration

Kevin McMurtrie Silver badge

Translations

"AI acceleration engine" -> Deeply invasive behavioral monitoring and manipulation

"most layers of hardware security" -> Spyware can't be disabled with ADB

"Material You" -> Your life is our product

"upgraded the rear camera system" -> The camera lump grows like cancer but still no room for a headphone jack or modern quantities of storage.

Giant Tesla battery providing explosion in renewable energy – not as intended

Kevin McMurtrie Silver badge
Mushroom

It's not online yet

So just a smoke test.

Beige pencil stockists on high alert as 'Colouring Book of Retro Computers' hits the crowdfunding circuit

Kevin McMurtrie Silver badge

Apple ][

It always amused me that the Apple ][ series came in beige but the HiRes mode could only produce black, white, purple, green, orange, and cyan. Adding to that, selecting purple/green or orange/cyan was at the byte level so they could not be blended. Single pixels always produced a color.

Having an Apple ][ show a picture of itself required some creative coloring and shading.

Scam-baiting YouTube channel Tech Support Scams taken offline by tech support scam

Kevin McMurtrie Silver badge

Re: I was a bit surprised by this bit

The other age groups when tech support calls: "Don't care. Delete it if it's broken. Bye."

Kevin McMurtrie Silver badge

I'm guessing he was tricked into thinking that he was taking over and deleting an imposter account. I've seen Facebook accounts where the imposter account is so good that the imposter can successfully ask everyone to report abuse against the original.

Dell won't ship energy-hungry PCs to California and five other US states due to power regulations

Kevin McMurtrie Silver badge

Re: Sell it as an electric heater

That's not going to sell on the West Coast any more. I barely ran BOINC last winter because there was no need for its heat.

Hijacked, rampaging infrastructure will kill humans by 2025 – Gartner

Kevin McMurtrie Silver badge

Infrastructure is tiny

The really big mass-murders and riots are brain hacks. They always have been and technology makes them even easier. It's going to take a longer time for infrastructure hacks to catch up.

Google Cloud's Intrusion Detection Service attempts to make security 'invisible' but cost will be the big giveaway

Kevin McMurtrie Silver badge

Proof of Concept?

I'll be excited when GCP cleans up.

UK and chums call out Chinese Ministry of State Security for Hafnium Microsoft Exchange Server attacks

Kevin McMurtrie Silver badge
Mushroom

USA! USA! USA!

Meanwhile, a US criminal hosting outfit calling itself FranTech Solutions, BuyVM, PONYNET, and other names is one of the world's largest source of brute-force attacks, malware, and ransomware. Their product is cheap bulletproof VPS so hackers can buy anonymity.

Home hotspots of the day:

https://www.abuseipdb.com/check-block/205.185.127.0/24

https://www.abuseipdb.com/check-block/205.185.125.0/24

https://www.abuseipdb.com/check-block/107.189.1.0/24

Tomorrow's wireless world will be fatter, faster, and creepier

Kevin McMurtrie Silver badge

Re: "as frequency goes up antenna size goes down"

Antennas are resonant so the active element shrinks with frequency. When you see a giant microwave dish or yagi antenna, the giant part is passively making the resonance more directional. Mobile radios use multi-antenna phasing to actively control direction somewhat. At the higher frequencies, arrays fit in chips..

Sweat-sipping wearable aims to charge electronics without couch potatoes lifting a finger

Kevin McMurtrie Silver badge

10 microwatts per square cm

This is down in the territory of low-light solar cells (the brown ones on calculators) and lithium button cells that will outlast the clothing. I'm betting a solar cell or button cell survives more trips through the washer.

Total recall: Amazon faces legal action from US consumer protection group over hazardous goods

Kevin McMurtrie Silver badge

Took immediate action

But Amazon doesn't care if bots keep generating new stores and new brands for the same junk. It's a big reason for me never looking for anything on that site. Amazon shows hundreds of top-rated search results for the same defective products being dumped into the only US store that would dare sell them.

IPv6 still 5-10 years away from mainstream use, but K8s networking and multi-cloud are now real

Kevin McMurtrie Silver badge

Version 6

IPv6 is already quite popular in use, but not at many cloud vendors. Cloud vendors have been hoarding IPv4 addresses and it's in their best interest that you feel like you need one. It's also wrong to look at your workplace's network or Docker and assume that their IPv6 isn't working. Except for some old telcos that never upgraded past DSL, most US Internet connections are IPv6.

Cellular 6G is completely dead until it can find a reason to exist. It's current ideas expand upon all the features of 5G that are proving to be unpopular and unpractical. A mmWave access point every 100 meters, an edge compute datacenter every 1km, and a world of unified AI with perfect connectivity? Maybe someday, but not with this tech.

Galaxy quest: Yet another sub-£500 phone comes to trouble mobile big dogs in the form of Realme GT 5G

Kevin McMurtrie Silver badge

Radio bands

Radio compatibility is a problem on most midrange Chinese phones. They do work outside of China and India but cellular performance is awful.

Linux Foundation celebrates 30 years of Torvalds' kernel with a dry T-shirt contest

Kevin McMurtrie Silver badge

Re: designing a T-shirt to celebrate 30 years of the software

My thoughts too. I suggest a penguin and a glass of Wine with a caption of "and another glass to make a 300 DPI vector file"

Battery recycling boosted by dentist-style ultrasonics, if manufacturers can cooperate

Kevin McMurtrie Silver badge

Are old plates still solid?

I'd think that a battery maker would use plates that last no longer than the electrode surface. Anything more would be extra weight. I'd also expect battery technology to be making so many small and rapid changes that standardized recycling is difficult.

Streamlining the chemical process is probably a better bet.

Microsoft warns of serious vulnerabilities in Netgear's DGN2200v1 router

Kevin McMurtrie Silver badge

Re: I've had a dim view of Netgear since about 2008.

Malformed self-signed certificates, unsecured RMIs, telnet backdoors, trivial DoS by hitting high resource URLs, and a customer support team that will "pass your information on" and never call back. I threw out all of my managed Netgear equipment around 2010 because it was clear that Netgear should not be making network gear. Yeah, the products feel like they're decades of old code duct-taped together and maintained by short-term contractors.

AWS offers you the opportunity to pay cloud bills before they’ve been issued

Kevin McMurtrie Silver badge
WTF?

The year 2005 called but then it said "no signal"

This sounds like an old cellphone or cable Internet contract. You pay a ton of money in advance and then hope you get your product. If you don't get your product, the fine print will explain how that's exactly your fault and how you're now in debt for violation of the contract.

Facebook granted patent for 'artificial reality' baseball cap. Repeat, an 'artificial reality' baseball cap

Kevin McMurtrie Silver badge

Perfect format

Baseball caps with loud logos are already used to indicate strong beliefs in an alternate reality.

How hot is it right now? 'Water park catching fire and burning down' hot

Kevin McMurtrie Silver badge

Re: Doubts

Maybe a rusty old pump left on and dry? Or it could have been what I thought of when I first read the article header - NJ water pollution went critical.

It's 2021 and a printf format string in a wireless network's name can break iPhone Wi-Fi

Kevin McMurtrie Silver badge

How wide?

The NSString documentation isn't clear on what parts of the printf spec it supports. If it supports padding to 2000000000 characters, it just might do some damage.

(Browsing through code samples reminds me that dropping MacOS development from my career because of Objective C was a good call)

Stob treks back across the decades to review the greatest TV sci-fi in the light of recent experience

Kevin McMurtrie Silver badge

On the surface...

Kirk: Everyone! Get to, work! Stop staring at, your flip-phones.

Kirk: Kirk to Scotty, uninstall everyone's apps.

Scotty: File a ticket

Kirk: Now!

Scotty: These are critical components and there's a process. I could have this done next sprint if the Warp Coils OKRs are allowed to slip a wee bit.

Kirk: Nevermind, Scotty. Offboard deceased Red Shirts 5486 and 75385. Bones, prepare a post-mortem.

Scotty: File a ticket.

Roger Waters tells Facebook CEO to Zuck off after 'huge' song rights request

Kevin McMurtrie Silver badge

Not Now John

Maybe other songs are for sale?

Toyota reveals its work on an honest-to-goodness cloak of invisibility

Kevin McMurtrie Silver badge

Other options

Wouldn't it be easier to move the pillar airbags? They were nice and small until they became giant C-beams. Even carbon fiber would solve the weight/strength/size problem with less cost than simulated invisibility.

Say helloSystem: Mac-like FreeBSD project emits 0.5 release

Kevin McMurtrie Silver badge

Control or Alt

The ONE thing I hate about Linux UIs is using the Control key for standard shortcuts. You have terminal and app windows open at the same time. In the terminal, Control-c kills and Alt-c copies. In the email app, Control-c copies and Alt-c opens the carbon-copy field. It drives me mad that there's no consistent shortcuts. You can try remapping tricks in the windowing manager but apps ignore them.

There was a crooked man who bought a crooked M1 iMac, and we presume they lived together in a little crooked house

Kevin McMurtrie Silver badge
Devil

Whiners

Try using a cheap rotating Dell monitor at work. Rotates when you press a menu button. Rotates when you try to tilt it. Wiggles, rotates, and changes height when you're typing too hard. Rotates, slides down, and falls over when somebody rests their hand on it. Abruptly changes height to thwart all attempts to level it. Guaranteed to never be level.

Crooked spawn of Satan icon ->

Calendly’s new logo perceived as either bog-standard or kind of crappy

Kevin McMurtrie Silver badge

Re: Toilet bowl?

I saw that cell injection and also a pimple cross sectional diagram. I have no idea what Calendly is and now I hope I don't have to use it.

Inventor of the graphite anode – key Li-ion battery tech – says he can now charge an electric car in 10 minutes

Kevin McMurtrie Silver badge

Another questionable battery announcement

Some problems here.

Fast charging already has multiple phases to match the battery state. This is nothing new. You can't fast charge without it unless enormous fires are acceptable.

High capacity Lithium Ion batteries hardly conduct well enough for 10 minute charging when new. Resistance goes up with age.

The final stage of charge is tricky. After about 70% charge, continuing requires a carefully controlled over-voltage. As the battery ages, different parts of the battery are in different stages following the fast charge. Forcing that last 30% quickly isn't a good idea.

UK tells UN that nation-states should retaliate against cyber badness with no warning

Kevin McMurtrie Silver badge

Re: That's a delusional idea

Do fake origins even matter? OVH, Amazon, Google, Digital Ocean, Infocom, CloudFlare, Mastercom, Frantech, Chinamobile, Chinanet, Viettel, etc. Then the "peers with anything" group - Cogent, NTT, Telia, Seabone, etc.

These networks have made it very clear that they don't care if abuse is coming from them or through them. They're the tools and the shields for hackers. Start with basic network accountability and hackers will be a lot easier to find.

If you're getting 10000 brute-force attacks and several highly targeted attacks a day from a network, and that network tells you that they can't be bothered, retaliate. I don't think counter-hacking is proper first response but government backed blocklists would be a great start.