* Posts by Adam 1

2545 publicly visible posts • joined 7 May 2012

Son of Hudl: Tesco flogs new Atom-powered 8.3-inch Android tablet

Adam 1

Re: There’s no official word from Tesco on the weight of the Hudl 2

>Don't you have the Scales app on your iPhone 6

Cool. Didn't know about that trick. Awesome. Off to weigh my Bagger 288.

Android's Cyanogenmod open to MitM attacks

Adam 1

Re: Single biggest bug source

Then how would you refactor your methods? It isn't like IDEs have built in features where you can extract code to new method. Clearly you have to copy the method, add your new loop and if statement and give it some obscure name.

Also, wouldn't it be great if build servers were able to reject check-ins if duplicate code was detected? Ah, pipe dreams.

Adam 1

Re: And so...

Still waiting for them to properly fix their production code.

Adam 1

>He said the fix was fairly simple and said the exposure served as an academic exercise in the perils of code reuse

I would venture to suggest that code reuse is not the problem. No, I will go further than that. If you roll your own security code there is a better than average chance that what you come up with is much worse.

The problem here is that the developer used the code without understanding how it worked and failed to write test cases that included validation against an invalid certificate.

Heistmeisters crack cost of safecrackers with $150 widget

Adam 1

True, but probably not as quietly and most likely leaving it in a way that makes it obvious that something is amiss. It would allow the sort of attack where the safe is broken at a time when it is empty and so under minimal supervision. The safe can then be opened in seconds when it is of more interest.

Red Bull does NOT give you wings, $13.5m lawsuit says so

Adam 1

I guess that would be irony as defined by the Allanis Morissette dictionary...

SPLITTERS! Symantec cleft in twain

Adam 1

Re: Veritas?

And Norton's?

Right, suits off: Windows 10 preview Internet Explorer is here

Adam 1

To reintroduce the <blink/> tag?

Revealed: Malware that forces weak ATMs to spit out 'ALL THE CASH'

Adam 1

Re: "32-bit Windows-powered ATM"

>"32-bit Windows-powered ATM"

> No further questions, your honour!

Lucky that there is no bash or openSSL in sight ;p

Adam 1

How is this any different to what Barnaby Jack demonstrated at blackhat in 2010?

http://en.wikipedia.org/wiki/Barnaby_Jack

http://youtu.be/v-dS4UFomv0

Aussie builds contactless card cloner app, shops at Woolies with fake card

Adam 1

Are opal cards vulnerable to the same class of attacks?

Adobe spies on reading habits over unencrypted web because your 'privacy is important'

Adam 1

Re: Maybe incorrect assumption on my part..

No, the best way to fight this is given the failure to encrypt the phone home to randomly send millions of books read (to the point where they cannot differentiate which requests are real)

Adam 1

>Good thing I have no interest in reading e-books. This could've been a problem for me if I did

Oh thank heavens. I was about to ask whether anyone knew whether this would be a problem for Frank.

Dear Reg readers. I want Metro tiles to replace all icons in Windows. Is this a good idea?

Adam 1

Re: Statistical Observation

> was the script that deleted all his posts, in fact, run on a windows machine

From http://www.theregister.co.uk/about/company/website/

The site is built using a custom content management system which is written in Perl and filters its input through HTML Tidy. The pages are generated using the GNOME libxslt library. We make substantial use of the excellent DBIx-Class ORM.

The webservers are running Apache, with MySQL for the back-end database and the search engine. Our web applications (search, forums, Reg Whitepapers, Reg Events, etc) are all built on mod_perl. All the software runs on Debian GNU/Linux, chosen for its stability, reliability, flexibility, and especially for its superlative support of remote package management and upgrades.

So my guess is no.

Adam 1

Re: Statistical Observation

EPIC MEMORY FAIL!!!

Marriott fined $600k for deliberate JAMMING of guests' Wi-Fi hotspots

Adam 1

Re: True Intentions?

If you are talking about the physics involved, then yes, the 2.4 and 5GHz channels over which WiFi operates is a limited resource. Just like a road network, if everyone tries to drive at the same time then no-one will get anywhere quickly, but there are a couple of points that I take issue with:

1. Is it reasonable to expect that the density of WiFi communication is any higher in a hotel environment such as this than it is in a residential building in the CBD?

2. If there is a specific need for a specific set of rooms to be rf pure, then the solution is to build some sort of faraday cage around the room itself.

3. If such active DoS measures are unavoidable (which would be an absolute legal minefield if it reached off premise btw), then the hotel should be providing a ***free*** alternative (guest APs or wired connections), or a lack of availability of WiFi channels should be very clearly stipulated at the time of booking.

Adam 1

Re: A small step in the right direction

Fire with fire!

Find the sales office for these de auth tools and return fire.

Top 10 SSDs: Price, performance and capacity

Adam 1

Re: I don't get it

I, for one, welcome our meme correcting overlords.

Adam 1

Re: I don't get it

>I'd venture for most people, 500MBps is going to be plenty.

640MBps ought to be enough for anybody.

Google ordered to tear down search results from its global dotcom by French court

Adam 1

In your analogy, Google is not the importer. It is an index. Once you click to the link, the content is delivered from the source website. So the source website is the importer.

Adam 1

>Time to show the politicians (and in places like France, that includes the judges) the only language they all understand:

I thought they were using the language of retreat quite well.

SURPRISE: Telstra STILL wants all its promised NBN booty

Adam 1

Re: NBN=Rort

No. The rort was to privatise Telstra in the 90s without splitting their retail and wholesale arms.

UK reforms on private copying and parody come into force

Adam 1

Re: £58m lost revenues

They need to decide if they sell a product or a licence. If a product then you should be free to do as you like with it once purchased. If a licence, then as a licence holder you should be able to purchase a replacement media or exchange format at (or reasonably close to) cost price.

In simple terms, if you want to force someone to purchase another copy for a format shift, then you are starting that they have purchased something physical rather than a licence.

DRAM! Speedy software upstart PernixData's caching up fast

Adam 1

Re: Um...

Also windows since vista. There are basically two reasons to write to disk.

1. A requirement to not lose the data when shutdown or other system crash (including the VM host).

2. Overflow storage where there is insufficient RAM to work in memory (very large datasets).

This solution doesn't solve 1 and if you are using it for 2 then why not just give it that RAM as RAM?

RAM backed SSD can make sense to boost longevity by avoiding overwriting the same block (discussed here) but this use case smells weird to me.

Windows 10: One for the suits, right Microsoft? Or so one THOUGHT

Adam 1

>Have I missed something?

I thought the download links in my comment would suffice as a sarcasm tag. ;)

Adam 1

@patient1

Deskman is/was always a *Microsoft* powertoy. It is not third party any more than the .net runtime could be considered third party.

Desktops was made by sysinternals but Microsoft bought them out a few years back (one of their more sensible acquisitions) so that is third party in the same sense that Skype or Nokia are third party.

Adam 1

> What else is new... virtual desktops

Yes. Definitely new. Not available on Windows XP, that is for sure. There are also no options for Vista, 7 or 8 so glad this is finally coming.

Atlas snubbed! Ad blocker says it can kill Facebook's stalker tech

Adam 1

Re: Not with a bang, but with a whimper

>What do you mean...? How else can one access cyberspace...?!?

It is so sad what is happening to the information superhighway.

Ingredient found in TASTY BEER is GOOD for your BRAIN

Adam 1

Apple blacklists tech journo following explicit BENDY iPhone vid

Adam 1

Re: This bendy meme

But will it bend?

DARPA joins math-secured microkernel race

Adam 1

Re: Good luck with that

Plus provably secure compiler. Even this can only secure against software bugs (buffer overruns etc). What about side channel attacks? The area of the various chips that heat up effectively leaks information too.

US Attorney Gen latest to roast Apple, Google mobe encryption

Adam 1

he has a point

I mean, it is only in the last decade that people started to carry pocketable computers that happen to occasionally make phone calls. We seem to forget that before that point in time there was no way to catch criminals. It is only now that crime has been solved.

Supercomputers: The Next Generation – Cray puts burst buffer tech, Intel Haswell inside

Adam 1

Re: Very nice -

Just whack bash on there. Then you can sit wherever you feel like.

/ducks

Turn OFF your phone or WE'LL ALL DI... live? Europe OKs mobes, tabs non-stop on flights

Adam 1

Re: Don't get too upset

> "guess where I'm calling you from" for hours on end at 30k feet.

I'm on the plane. Hello? Yeah, the plane. Did you hear me? OK what did you hear up to? I'M … ON … THE … PLANE. No, plane. Yes. Anyway, nearly out of credit. I will call you later.

/yeah, that would definitely get old quickly.

Adam 1

Re: What's changed?

If the cell tower antenna is capturing signal from above and responding in the same direction, they are doing it wrong.

BENDY iPhone 6, you say? Pah, warp claims are bent out of shape: Consumer Reports

Adam 1

so what you're saying is

They're testing it wrong…

Telstra, Vodafone at odds over data retention

Adam 1

Re: Cue stampede of punters

Can anyone confirm which VPN services work on Vodafone?

Microsoft on the Threshold of a new name for Windows next week

Adam 1

Windows 'not 8'

Should sell like hotcakes.

Adam 1

Re: How about...

No!

That glass of water you just drank? It was OLDER than the SUN

Adam 1

Worse still; it has all been drunk and whizzed out by at least one dinosaur.

How the FLAC do I tell MP3s from lossless audio?

Adam 1

Re: Listen to the same song on FLAC and MP3 - there's your answer

Um, you can't make such a statement without clarifying what you mean by mp3 and what is being played. A 96kbps CBR sounds very different to a 320kbps VBR. Most people could pick the 96. Almost no one could pick the 320 in a statistically significant way in a double blind test.

Adam 1

Re: Self inflicted

>Suddenly, all of those 128 kbps MP3 audio files you grabbed from Napster in the 1990s are garbage to your ears.

I think 128kbps is low enough that most people could pick which is which for some types of music. If you double it to 256 and add some VBR, the difference is physically inaudible to most the population. At 320, you would have a lot of trouble in a double blind test to pick one from the other.

That is not to say that it doesn't sound better to you. We know for example that the placebo effect is real. Someone who is told that a particular medication will help their breathing performs better at altitude tests than control even if the medication is just a sugar pill. I am in no doubt that someone who knows they are listening to a lossless encoding will experience in their brain a better quality of sound.

Nonetheless, your point about 1990s tracks sounding like garbage is correct* but that has little to do with how the music is encoded ;)

* especially only happy when it rains.

Adam 1

Re: Good source material and very good speakers or good headphones needed

>(Most headphones under £50 and most speaker systems under £500 cause far more alteration to the music than a high rate MP3 produced by a reasonable encoder.

Some headphones over £50 are pretty terrible in this regard; not to mention any specific brands that may have been pictured in the article.

Hackers thrash Bash Shellshock bug: World races to cover hole

Adam 1

Re: I'm safe. I use a Microsoft Windows system.

EPIC MICROSOFT SUCCESS!?

Adam 1

Re: Bash Vulnerability?

>Write this down: You can't inject anything into machine code, which is what your CGI should be made of.

Yes, heartbleed only worked because openSSL is runtime interpreted rather than compiled.

Adam 1

Re: FUD whack-a-mole

>Still no word of JUST ONE commercial site (or device!) being pwned by this one

How do you propose to validate that this bug was the source of the mentioned pwnage? It would bypass the logging. Your server could be pwned without you even knowing. And Apache cgi-bins are just one vector we know of.

Adam 1

Re: How to check?

BTW, I would usually recommend against taking any BASH advice from someone called rm -rf / (although his advice is correct in this instance ;p)

FBI: Your real SECURITY TERROR? An ANGRY INSIDE MAN

Adam 1

Re: re: simple solution

>We've all got iPads now...

But will it bend?

NSFW: Click here, watch iPhone 6 being TORTURED

Adam 1

Re: Is it just me...

I'm waiting for the series "but will it toddler", where various things are put in the hands of a two year old to see how resilient they really are.

Heatmiser digital thermostat users: For pity's sake, DON'T SWITCH ON the WI-FI

Adam 1

That's the stupidest combination I've ever heard in my life! That's the kind of thing an idiot would have on his luggage!