* Posts by Adam 1

2545 publicly visible posts • joined 7 May 2012

UK smut filter may have sent game patch to sin-bin

Adam 1

To be fair, it is no worse than their false positive rate for four months of Skype activity.

LogMeIn: We're stopping our free offering from now

Adam 1

Re: UltraVNC

Do they need to port forward or is it just your end in that configuration?

Redmond researchers profile Skype scammers

Adam 1

68% maybe ok if it uses a methodology that has nearly no false positives but combined with a 1 in 20 false positive is pretty poor. You could probably get similar stats by assuming anyone who sends a URL is a spammer

Good news: 'password' is no longer the #1 sesame opener, now it's '123456'

Adam 1

Re: Obligatory XKCD link

Although that one is probably common now. My approach is to generate a random number for each required credential.

http://xkcd.com/221/

VCs drop cash on DropBox, bestow $10bn valuation

Adam 1

The problem I have with dropbox and similar services is that your don't get a say where your data is held and you rely on them to have appropriate security arrangements. I use btsync myself because there is no third party holding your data. The main downside is you can't just send a file by URL and that the syncing will only occur while your computer is on.

Obama reveals tiny NSA reforms ... aka reforming your view of the NSA

Adam 1

Re: If you're not a terrorist, you have nothing to worry about

To be fair, glitter can be really annoying to get off.

Adam 1

Re: "Having faced down the totalitarian dangers of fascism and communism"

> If it weren't for the involvement of the US in WW II, most of Europe might be speaking German today

Good Lord. I don't wish to downplay the significant role that the US had in both Europe and Pacific both directly and indirectly, but you do owe it to yourself to actually read something on the matter rather than assuming saving Ryan's privates is all there was.

The eastern front and particularly Stalingrad was much more strategically significant than DDay and the allies were helped by Hitler's military stupidity going for the symbolic battles against Moscow and Stalingrad rather than locking up the oilfields and building massive battleships rather than the uboats that were crippling British supply lines.

Not to mention the Italians cocking up in Greece and Africa and needing to be rescued by Germany.

The US did help prevent western Europe having a new language but that language was Russian.

NSA: It's TRUE, we grab 200 MILLION of your text messages A DAY globally

Adam 1

Re: "Lawfully collected"???

> But who made it legal in the UK for a foreign power (the US) to snoop on us without a warrant issued in the UK (and the same applies to every other non-US country)?

Hate to break it to you but UK law has no jurisdictionoutside the UK beyond treaty obligations agreed between the countries. That is why women are allowed to drive in the UK in spite of backwards laws in some other countries that forbid it.

Adam 1

> This sounds a lot, but bear in mind US mobile users alone send an estimated six billion texts a day.

Oh ok. Well that is fine and dandy then.

Java, Android were THE wide-open barn doors of security in 2013 - report

Adam 1

> malware developers in the mobile realm seem laser-focused on Android, with Android users experiencing nearly three quarters of all encounters with web-based malware in 2013.

Wouldn't that be expected given that android claims about 75% market share? Isn't that like saying Toyotas are less safe than Porsches because they are involved in more accidents?

Ian Williamson: The engineer who gave Sinclair his first micro

Adam 1

> Scrumpi cost around £65, right in the centre of the £50-60 price range

Hmmm.

Mountain bike mishap man suffers SEVEN WEEK stiffie

Adam 1

What a dick.

Hubble 'scope snaps 600-LIGHT-YEAR-wide pic of star-spawning nebula

Adam 1

Re: Where's the link to the bigger version of the spaaace pic?

And how many light weeks per pixel is it?

Adam 1

Re: Stunning photo

> How cool would that be?

Quite. No more than a few Kelvin.

Remember when SimCity ABSOLUTELY HAD to be online? Not any more – fancy that!

Adam 1

> I wouldn't give a car a shit review because the chap delivered it to me without the keys.

I don't think anyone else here would either, but if they weren't able to give keys to any of the purchasers, that goes a bit further don't you think.

Cicada 3301: The web's toughest and most creepy crypto-puzzle is BACK

Adam 1

Highly unlikely.

Images posted on Youtwitface tend to be legitimate. It is probably a link to the new Kony 2014 or something

'Leaked' iPhone 6 pics will make cool fanbois WEEP - it's a PHABLET

Adam 1

Re: Question

> If this is a prototype, would it be in china?

No. It would be left in a bar somewhere.

Europe MPs: Time to change our data-sharing policy with US firms

Adam 1

Btsync is a pretty good start.

BlackBerry sues American Idol host's company for 'blatant' patent infringement

Adam 1

Re: I couldnt see anything patentable about the design at all

BB: It's a keyboard in a draw.

USPTO: Sorry but I'm afraid there is prior art so you can not patent it.

BB: OK, fair enough. Well how about this?

USPTO: What is it?

BB: It's a keyboard draw for a mobile device.

USPTO: BRILLIANT!!!

iPhone fanbois outsmart fandroids in totally reliable test of brain power

Adam 1

> No-one can claim the test author isn't knowingly phrasing things in a way that isn't natural to the English language.

Spoken like a true Samsung user ;p

Adam 1

Re: Touchscreen Bias ..

No. It is clearly the additional time to move your finger around the giant screens on the Samsung

Australia puts 300 sharks on Twitter

Adam 1

Re: Most dangerous animal in Aus?

> We just write Drop Bear deaths off as "camping/hiking accidents"....

Not to mention the "holiday road toll". Why anyone would voluntarily go on a drive through the country in a soft top or with windows down is just crazy.

Adam 1

> There are venomous sheep in australia?

Don't get carried away. There are a small minority of sheep species that are placid.

CryptoLocker creeps lure victims with fake Adobe, Microsoft activation codes

Adam 1
Unhappy

Re: So what can be done to nobble the Crypto API ?

If only it were that simple. If the Crypto API was nobbled, it would break the ability to perform authentication (validating password hashes for logins / network shares) and break the ability to generate and validate session keys (https). It would also break any application relying on the API (usually random number generation, encryption for secure data transfer or hashing).

Additionally, it would be ineffective because there are countless libraries that provide the same functionality. It would increase the payload size of the malware by a few hundred KB but that is about all.

Acer C720 Chromebook with Haswell battery boosting goodness

Adam 1

> but how often do you replace a printer

To be fair, it is probably no more expensive than a replacement ink cartridge.

Saucy Snapchat addicts EXPOSED: Exploit code to poke holes goes wild

Adam 1

Re: Load of rubbish

Or since we are talking android, press power and volume down at the same time.

Apple wants sales ban on Samsung smartphones nobody is selling

Adam 1

Sorry Mr Cook, this is not necessary. If their current or future phones infringe your patents, you can get the court to hear it at that time. This is a waste of time because even if you are right, there would be noimpact.

Get lost, fanbois: Nokia pulls HERE Maps from Apple's App Store

Adam 1

Re: The real reason

It's been a while since I looked into it, but it used to be the casethat the embeded ios browser couldn't asynchronously render the page. This meant that the same page delivered via safari was much much faster than the samepage embedded inside an app.

Want access to mobe users' location, camera, phone ID? EXPLAIN YOURSELVES - ICO

Adam 1

Re: Hmm. Setting up a set of dummy data sources to feed to the app?

We could even use Dual_EC_DRBG to generate the longitude/ latitude for fake GPS :)

Adam 1

Re: Can't say no..

In principle you are right, but it is not possible for developers. The security model requires all permissions to be identified in the manifest "upfront". There is no way for a developer to indicate whether a permission is mandatory or optional. There should be but there is not.

For example, Bittorrent Sync requires has some pretty obvious permission request which the app would be useless without (full network access / USB storage). But it also allows you to generate a QR code to setup a sync folder. This means it has to request access to the camera. This means they either have to request that token, not offer the feature, or offer umpteen versions of the app with various combinations of permission requests.

Adam 1
Megaphone

Dear Google,

Please provide a way of:

1. Allowing developers to explain next to each token the reason they need it. Some apps do this in the description or FAQ, but on the popup with a big red "We're not telling" by default will encourage some disclosure.

2. Allow selective denial of permissions.

Thanks

RSA comes out swinging at claims it took NSA's $10m to backdoor crypto

Adam 1

@AC, it all stems back to who you think their customer is.

I remember the Trustwave CA signing the root certificate for surveillance controversy from a few years back. The only use of a CA is to tell you whether the server you are talking to matches who they claim to be. If that is not what they are doing, then they are failing their job to prevent man in the middle attack.

The difference here is obvious but the reasoning for the outrage is the same. For what purpose does RSA exist if not to provide secure communication between devices? If it knowingly allows this to be compromised, then it is of no value to me.

I have no problem with it offering Dual EC DRBG as an option, but it should have been actively advising against using this since 2007 when the backdoor was found.

Gift-giving gotchas: How to avoid Xmas morning EMBARRASSMENT

Adam 1

Re: Just a moment on camera battery advice

One other thing I didn't want to get in to, or we'd have spent the whole article talking about batteries, is of course that some makers have firmwares that reject third party batteries, so you need to check that first, if you're going to buy extras so you don't waste money buying such a device.

/Fixed

Silk Road 2.0 busted! At least two arrests as federal crackdown begins

Adam 1

Re: Panic Attack.

Er, that should have been elliptic, as in Dual Elliptic Curve Deterministic Random Bit Generator.

Stupid autocomplete or well played Mr NSA.

Adam 1

Re: Honey Trap?

I think theoatmeal needs to do a chart on when to use an. :)

Adam 1

Re: Panic Attack.

There is nothing wrong with RSA. Ecliptic curve pseudo random number generators are another matter entirely.

You've got $60k: So, 2013 sporty Corvette, or a year of AWS's new I2 beast?

Adam 1

Re: FINALLY!!

But can it run Crysis?

Code-busters lift RSA keys simply by listening to the noises a computer makes

Adam 1

Re: But will it help you decrypt Sky Digital

Yes. All you would need is a microphone next to the set top box and a webcam feed from your local sewage works for an hour or so.

Adam 1

Re: Digital Rights Management

Plus well if your goal is to get access to the unencrypted sound wave for a song and all you have is a microphone and a computer *playing the song* there are probably easier ways to get it.

Mozilla: Native code? No, it's JavaScript, only it's BLAZING FAST

Adam 1

Re: Very Nice Mozilla @Adam1

Some functions of Firefox require more than 64KB of addressable memory which rules out a 16 bit address space, but why not try to answer the question?

64 bit processes can do some ops faster like floating point manipulations but it makes other things slower like copying pointers. The main advantage from a browser's point of view is the ability to make use of 2GB RAM which makes a lot of sense when your 25 open tabs are combined in one address space with the 8 plugins also loaded, but if you have already separated it into a process per tab model then you are probably a long way south of 2GB.

Or have I just been trolled by an rf -rm handle not noticing the advocation of threading and missing the irony. If so, well played sir.

Adam 1

Re: Very Nice Mozilla

If you think it should be multiprocess, why do you also think it should be 64 bit?

Proposed California law demands anti-theft 'kill switch' in all smartphones

Adam 1

I doubt that bargain bin phones are really the issue these days. By the time your IMEA is blocked you have a toy that can't connect to the mobile network . Given the specs of landfill android and winphone that market will only shrink.

A more likely scenario is that your phone is still stolen, pulled apart and then sold as a refurbished battery, screen and ųSD card.

Australia rebukes Apple for 'false or misleading representations'

Adam 1

> erect a web page explaining its policies

Although the link will probably be put below the fold using fancy CSS trickery.

Apple CEO Cook breaks YEARS OF SILENCE, finally speaks to El Reg hack

Adam 1

Re: The title of the article should be...

Nah it's legit.

If it WAS Siri, it would Shirley have pointed out some nearby coffee house.

Old Apple Safaris leave IDs and passwords for scavengers to peck

Adam 1

You're closing it wrong.

NSA alleges 'BIOS plot to destroy PCs'

Adam 1

> and it is felt the lack of such an ability helped the 9/11 plotters to evade detection

So is this some new form of Godwin's Law I am not yet familiar with?

I KNOW how to SAVE Microsoft. Give Windows 8 away for FREE – analyst

Adam 1

No need to give it away. Just reinstate the start MENU from Windows 7 and provide the option to stop showing TIFKAM for the vast majority of PCs without touch.

Why America is no longer slurping electricity from Russian nuke warheads

Adam 1

Now if only there was some other giant stash of nukes they could start dismantling ...

Blighty could put a (WO)MAN on MARS by 2040, says sci minister

Adam 1
Alien

At least you guys get a science minister

Our current government has decided that we don't need one. They have also decided that AGW and Y2K are both scams, so I suppose that is no surprise.