* Posts by oldcoder

741 publicly visible posts • joined 17 Nov 2012

Microsoft snubs alert over Exchange hole

oldcoder

Re: So, in simple terms

It stupidity to assume the network itself is secure.

Passing any password in plaintext is a MASSIVE mistake.

oldcoder

Re: Um, spoofing a web server?

The fault is passing the password in in plaintext in the first place.

The second is using unencrypted passwords for anything.

oldcoder

Re: it only takes only four lines of code and a local config file

Wrong.

Normally a public facing web server is isolated from the network interior...

It is called a DMZ for a reason - it has less security than an internal server.

oldcoder

Re: It's not about Microsoft WANTING to fix it ..

Microsoft DOES NOT want to fix it.

If they wanted to fix vulnerabilities, they would have fixed the 19 year old NTLM vulnerabilities...

Microsfot calls it a "feature".

This is the failure of using Microsoft sub-standandard standards.

oldcoder

Re: weird

And yet, it is Windows machines that are hacked. And with the largest (something around 40 billion) cost to the industry every year for Windows servers.

Not linux servers even though there are more of them.

Windows storing passwords in plaintext is so ... 1960s...

BOFH: The case of the suspicious red icon

oldcoder

Re: Clock virus

Only way to be sure is to drop by the bar...

Logins for US Navy, NASA's JPL among US gov logins sold on deepweb

oldcoder

Re: Better use them quick

NRL certainly can. Been there seen that. In our group as soon as we were notified (as in, management saw/read the report, or sometimes even rumors) the passwords can be forced.

the normal replacement was every 90 days, as measured from last password change. But it could be reset to any interval.

Microsoft's Service Fabric for Linux hits public preview

oldcoder

How about "Embrace, Extend, Extinguish..."

Using a thing made by Microsoft, Apple or Adobe? It probably needs a patch today

oldcoder

As soon as you said "Microsoft" you need patches, no matter what the other operating systems actually need - even if they were perfect.

I'm still waiting for the enterprising virus writer to create a workable virus that installs Linux or BSD and then moves on to the next Windows system...

Microsoft thinks time crystals may be viable after all

oldcoder

Re: More on MS Copy

Actually, the randomness of the copy shows the instability of the system - with apparent random amounts of overhead causing the estimated completion time to be useless.

oldcoder

Re: Microsoft - Messing around with time

Of course it does - always forward. You will notice the message was sent before you got it.

Now, getting one from 2970... :-)

Bug in Microsoft's StorSimple arrays can kill backups

oldcoder

Standard Microsoft substandard software...

do half the job... sell to as many suckers as possible.

Then try to fix it.

Forget Khan and Klingons, Star Trek's greatest trick was simply surviving

oldcoder

Re: Huh?

Depends on your point of view.

A politicians coworkers would be disappearing...

And possibly would actually learn what not to do.

NHS hospitals told to swallow stronger anti-ransomware medication

oldcoder

Not on Windows...

The password can be/is stored in memory in plaintext.

You don't even need the password for NTLM hacks - just grab the hashed version actually used...

oldcoder

Not 'industry standards'.

It is Microsoft standards masquerading as "industry standards".

Microsoft software is the poorest designed for security. Passwords stored in plaintext, hashes used for authentication, falling back to known broken authentication... executable everything...

The only way to win (in security) is to not use Microsoft software.

Yes, paraphrased :-) but still true.

Boffins ID bug behind London's Great Plague of 1665

oldcoder

Re: So The Great Plague was caused by - YES - the plague! Next ....

Why not?

Water isn't always wet (which is why you use soap). Nor are all surfaces subject to being "wet" by water (even with added soap).

IBM lifts lid, unleashes Linux-based x86 killer on unsuspecting world

oldcoder

If I had $6,000 lying around for a new server, I WOULD get one. Even the smallest one outperforms anything with Intel with the same number of cores by a wide margin - and is smaller as well.

Linus Torvalds won't apply 'sh*t-for-brains stupid patch'

oldcoder

Re: Think about the process..

Well, almost. The blob that the driver may need loaded into the device does not have to be part of the driver - just part of the distribution. It can be loaded into the device as a separate item, thus removing the bloat from the driver code.

oldcoder

Re: 22 million lines of code

It actually isn't.

Not all of the code is used for a particular instance - For example, none of the ARM code, or 68000, or Power, or IBM 370, or the Z code is used when you are X86 based.

But they ARE available if you want. The kernel you get is actually smaller than Windows. The only things that get added are driver and filesystem modules for your specific use.

Thus, no bloat.

Now when it comes to distributions, you have a different source of bloat, and it isn't the kernel.

oldcoder

Re: The mostly non-existent drivers of Linux

Linux actually works with MORE devices than any other operating system.

Windows will not work at all for some device Microsoft has decicded is "too old"... Like two year old printers, scanners... or even some software.

oldcoder

Then you have never worked in a public area.

Like setting up a large tent.

You get to hear all kinds of things when people screw it up when they should have known better.

oldcoder

Re: I expect my manager to give me all kinds of shit if I f**k-up

I guess you don't work then.

Abuse is perfectly fine when you need to get the persons attention.

oldcoder

Re: He's right. Again.

They are ALREADY open to patent trolling.

Drivers have nothing to do with it.

oldcoder

Re: He's right. Again.

It is just as stable as Windows - as shown by Windows 10 not working with a rather widespread number of devices.

And Linux is MORE stable than Windows - drivers for existing devices get updated when the interface changes, at least for the drivers included in the kernel.

oldcoder

Re: He's right. Again.

It is Microsoft that claims "backward compatibility" for all devices... and all software.

Never mind that Microsoft is lying in both cases.

Spoof an Ethernet adapter on USB, and you can sniff credentials from locked laptops

oldcoder

Just another NTLM hack

It just another NTLM hack - and one that has worked for almost 20 years - and continues to work.

Microsoft has labeled it as a "feature" and refuses to fix it.

Japan's Brexit warning casts shadow over Softbank ARM promises

oldcoder

Re: Meanwhile

You are ASSUMING that the losses from exported cars is strictly less than or equal to the income from import tariffs.

If nobody buys the cars - that would be 100% loss - and no exports; resulting in no subsidies from import tariffs.

oldcoder

Re: Not really comparable

Their "skills" are available in Japan.

ARM is no longer independent, thus they will only be designing what is directed from Japan. And if they don't like it, they can be forced out.

Question: What's missing in Microsoft's data science professional degree?

oldcoder

What is missing?

The science part. No foundations provided.

Cooky crumbles: Apple mulls yanking profits out of Europe and into US

oldcoder

Re: Taxes

Most likely spending it on Microsoft products... or just to get more non-working patches from Microsoft.

Tim Cook: EU lied about Apple taxes. Watch out Ireland, this is a coup!

oldcoder

Re: Well, bears in the woods etc.

Ah, but as I understand it, US taxes do NOT include sales outside the US.

Thus the profits you mention that would have been taxed in the US are not... making the profits even larger.

Linux turns 25, with corporate contributors now key to its future

oldcoder

Re: Linux control to proprietary entities, particularly Microsoft

Even that won't work - Linux is GPLv2.

And will always be GPLv2.

The most they could do is fork Linux... And they don't even need to depose Linus.

It would be quite hard to "wrest Linux copyright authority from all the Linux and GNU copyright stakeholders" - some are dead.

You can't change the license without the permission - and you can't get it from them. Nor will you be able to get it from all the thousands of contributors.

oldcoder

Re: Don't panic

Unlikely - as only the owner will use it, and when that person dies... no users.

oldcoder

Re: World without Linux

Those of us that used UNIX certainly would know.

Without Microsoft, hospitals would still be secure... As would government systems, banks, ...

Having offended everyone else in the world, Linus Torvalds calls own lawyers a 'nasty festering disease'

oldcoder

Re: It's True!

"the stakes are so small"????

With 90% of all phones

With 95+% of all supercomputers

Majority of embedded computers (toys, drones, TVs, routers, ...)

Not small at ALL.

oldcoder

Re: Easy to get rid of the lawyers

Open season for attacks - like getting sued for code already in the project but claimed by another party.

Or have you forgotten the BSD/UNIX lawsuits?

oldcoder

Is there a difference between lawyers and politicians? :-)

oldcoder

Re: So?

Actually not.

There were so many forks of UNIX that it devolved. Now there are three varieties of BSD, and a few dozen varieties of UNIX (one for each vendor), and none of the kernels are all that cross compatible. Just try taking a driver from AIX and add it to a Mac OS/X.... Not a chance. Try taking a driver from Solaris and add it to AIX or OS/X (or even any of the BSD systems)... not a chance.

Contrast that with Linux. A hundred or so distributions - yet the linux kernel is cross compatible with all of them.

oldcoder

There was a BIG difference for the lawyers...

The IBM lawyers were not presuming to defend Linux. They were defending IBM against the baseless attack of SCO.

Kuhn was/is just trying to drum up lawsuits.

Eben Moglen has a different approach. Instead of lawsuits he works with both the developers and the "accused" to eliminate the lawsuit - which is damaging to both parties in a lawsuit.

Your wget is broken and should DIE, dev tells Microsoft

oldcoder

Re: Usual Microsoft behaviour

The order is a bit off:

1. change it so the Windows version is not compliant with the non-microsoft version

2. make it available in Windows

3. claim the Windows version is compliant

4. refuse to make the Windows version compliant

5. push windows version of said item

6. call non-Microsoft version "broken"

Hey - works for AD, being broken with LDAP/Kerberos/Bind.

Microsoft doesn't even know how its own software works as MS had to get help from the Samba project for the EU mandated documentation.

Microsoft's maps lost Melbourne because it used bad Wikipedia data

oldcoder

Not necessarily.

They are just BLAMING the free encyclopedia.

oldcoder

Re: Which Melbourne?

Given the "quality" of Microsofts spell check - you might even get a list of all the Marlboroughs there are. After all, they both start with "M" and have an "lb", even a "u" in them.

oldcoder

Re: Absolute proof

No negative sign... It was marked "South". But of course, Microsoft assumes numbers are always signed...

Never mind the nonsense the -37.8136° South would be...

Das ist empörend: Microsoft slams umlaut for email depth charge

oldcoder

Microsoft laid off the QC employees... and closed the QC departments.

Not that they ever did all that much in the first place.

Microsoft: Why we had to tie Azure Stack to boxen we picked for you

oldcoder

Re: Hmm...

"Thoroughly tested"??? Microsoft doesn't have a quality control section anymore.

"Secure"?? This is Microsoft and Windows - not a chance.

Besides setting off the BS detector, it should have also caused the audience laughter detector off.

Linux security backfires: Flaw lets hackers inject malware into downloads, disrupt Tor users, etc

oldcoder

Re: Won't you think of the children?

Well, considering he is a British, Dutch and Turkish origin - most of him coming from northern Europe...

Bungling Microsoft singlehandedly proves that golden backdoor keys are a terrible idea

oldcoder

Actually, Linux is at the top. The most phones, supercomputers, a bit more than half of IoT... It even controls Azure networking, and about 25% of all instances on Azure.

Revealed: How a weather forecast in 1967 stopped nuclear war

oldcoder

That depends on your definition of "limited".

There was a lot of damage caused by above ground testing (designed to minimize damage and investigate the damage there was). And this would NOT be testing - but deliberately placed detonations; designed specifically to kill people. Also even one detonation would be several times larger than the tests.

Break out the Elder Scrolls: Skyrmion characters seek storage possibilities

oldcoder

Stability?

Less energy to change the value also translates into "less stable".

What wasn't mentioned is the lifetime of a given value before it becomes randomized.

It doesn't help if everything has to be cooled to 4 degrees Kelvin.

Linux 4.8 rc1 lands, with Surface 3 support promised!

oldcoder

"It doesn't have a proper modular device driver system."

Unlike Windows that doesn't support backward compatibility with device drivers, and changes "modular device drivers" at the drop of a hat, forcing OEMs to do the work of conversion all the time.

"It just grows including support for every nasty and not so nasty processor and chipset that comes out."

Unlike Windows that only runs on ONE processor and a little bit on ONE ARM processor architecture.