* Posts by Wzrd1

2274 publicly visible posts • joined 7 Dec 2012

FBI iPhone unlock order reaction: Trump, Rubio say no to Apple. EFF and Twitter say yes

Wzrd1 Silver badge

Re: Why is this even necessary?

"Basically if you take anything out of the device then it no longer has its necessary relationship with other components in the phone. "

It's called TPM. It can still be faked, with a hell of a lot of effort. As the FBI works routinely on national security matters with the NSA, it's likely a filling in a few minor blanks operation and hence, not worth the effort.

But, oddly, they're insisting that Apple should write an entirely new operating system that undoes encryption, all by fiat, rather than via a court order.

Wzrd1 Silver badge

Re: Well played Apple

"or order the treasury to freeze all apple bank accounts, etc.. under the nation security act....."

What is rm -rf / again?

How difficult is it to make thermite and set it on the SAN units?

That's a whole lot faster than a warrant can be served.

Wzrd1 Silver badge

Re: Well played Apple

".. and the authority to ex-judicially execute US citizens anywhere in the world by drone strike"

Which is why a certain group of "militia" were all killed in a forestry center not too long ago, right?

Oh wait, they were stopped by a roadblock and arrested.

Don't be a tosser and ignore what a war is. Citizens were also targeted during WWII, when they were working with the enemy.

Or are wars different now and they're really pillow fights? It sure didn't look that way to me, or to our allied forces when we were fighting them.

Still trying to figure out the Iraq thing, as the US gained no oil, that's largely going to Europe. Maybe it was what I first theorized, "He tried to kill my dad".

Wzrd1 Silver badge

Re: Well played Apple

As usual, the press gets it wrong.

Apple unlocked his phone - gladly, once a court order was obtained and presented.

Apple refuses to write a new OS that disposes of the cryptography, thus undoing all encrypted Apple telephones.

Let's review now, the FBI asked Apple to write an entire new operating system, to unlock, allegedly one telephone that was already unlocked.

How much do we have to pay for a new commercial operating system, but the department of justice wants one for free?!

In short, enslave corporation, acquire a free product and allegedly use it once. Just like GCHQ and the NSA only slurped once.

Frankly, I'd make rapid plans to move the entire company offshore.

What would happen if Earth fell into a black hole?

Wzrd1 Silver badge

Re: AC's don't surf! Naturally, we would no notice

"The figures given for the recently-detected black hole merger can give some context. If the merger happened 1.3Gly away and the signal only created a disturbance a thousandth of the width of a proton, then it would only disturb something one lightyear away from it by about a millimetre."

Two black holes merging does not make a solar system merging with a black hole - it'd be the equivalent of dropping a drop of water into the ocean of Europa, unnoticeable.

Wzrd1 Silver badge

Re: AC's don't surf! Naturally, we would no notice

"Hint. Find a pond / pool and toss a massive rock in to it. It goes splash now doesn't it?"

Not really, gravity waves that would be that disruptive would have to originate from two black holes or a black hole and a neutron star, Sol couldn't produce such gravity waves when interacting with a black hole.

Indeed, it's likely that the entire solar system could enter a galactic core sized black hole intact-ish.

Wzrd1 Silver badge

Re: Naturally, we would no notice

Not necessarily, a supermassive black hole, such as a galactic core singularity could actually bring a planet in intact.

To be blasted by the incoming radiation below the event horizon.

Voyager 1 now 20 BEEEELLION KMs from the Sun

Wzrd1 Silver badge

Let's just hope that plutonium

Being sent isn't an insult on AC +79 3888. ;)

Then again, any insult would be highly diluted by the time they get there. Half-life is 87.7 years. That'd be about ambient temperature by then.

Norks stabilise non-threatening space speck ... for about five minutes

Wzrd1 Silver badge

Re: Missing the point?

China can and has done what it wants with all of its satellite states. Historically, they've been buffer states to protect China from invasion.

China has already cut off supplies, electricity and internet from North Korea over various incidents.

It'd not take much more for China to send their military in to make a fine point with the North Korean leadership.

Wzrd1 Silver badge

Re: Missing the point?

Not really, all research thus far has found that dispersion of nuclear isotopes are limited to essentially being a mere inconvenience. You'd need metric tons of radioisotopes to significantly contaminate an area beyond a city block - especially if it's from breakup or high altitude dispersal.

Hell, I was born in the early 1960's and am mildly radioactive, courtesy of all of the nuclear armed nations surface nuclear warhead testing. Everyone is.

Juarez, Mexico had a Cobalt-60 spill, one of the worst ever, negligible harm to the populace. Today, it's in steel rebar and table legs all over North America, no harm observed to any of the populace.

At least, not so far. Some people received 150 - 200 rads of radiation and are being observed to see if they suffer any lingering effects.

Canonical reckons Android phone-makers will switch to Ubuntu

Wzrd1 Silver badge

Re: a bit harsh on the other fruity one

Microsoft really didn't bother with actually marketing their windows phone OS, which undermined them tremendously. Granted, the app market for windows phone was lacking, but seriously, if you're going to introduce a product, advertise it and maybe it'll sell.

As for Ubuntu phone, they're trying... I'll stick with my Ubuntu desktops and assorted OS servers that range from CentOS to *BSD. For a phone, I'll probably stick with the Chocolate Factory.

Who would code a self-destruct feature into their own web browser? Oh, hello, Apple

Wzrd1 Silver badge

"Sounds to me like an objective c++ paradigm flaw.'

Sounds like shit coding to me.

"And it did. Changing page WHILE it was printing was like replacing a paving stoe with a banana skin."

See the above.

Why, oh why do software companies keep hiring infinite numbers of monkeys, then release the first thing that they bang out that compiles?

Police Scotland will have direct access to disabled parking badge database

Wzrd1 Silver badge

"Limit the BHP and engine size of vehicles that may be parked using the blue badge. People who need to park very close to their destination will make do with the reduced performance and lack of status of a small fiesta or gutless mondeo."

How kind of you to fuck over the handicapped! What other wonders would you bestow upon the helpless? Perhaps a badge to be worn with their disability emblazoned upon it?

Fuck off.

Wzrd1 Silver badge

Re: Yes -

"There is a need to renew them, every year I think."

In the US, there are handicapped placards and permanent handicapped license plates.

Typically, a plate holder will also get a placard, for use in other vehicles. The plates are renewed as part of a registration renewal.

Wzrd1 Silver badge

Re: Not a good example @2460

"If she had a badge and it was on display do you think she'd have returned to that message?"

Probably, I have returned to such a message tucked under my windshield wiper.

It's a shame I didn't know who placed it there, I could've been in need of a new cane after I broke it over their heads.

Wzrd1 Silver badge

Re: Nothing like this will happen

"Now, instead of having to justify their requests for private and sensitive information they'll be able to look it up at will."

Bloody hell, they already can look up your vehicle registration, address, name and in some cases, your photograph.

So, now they can look up a handicapped placard. It isn't your medical history, it's a name and number.

Any law enforcement officer who sells information should be held accountable to the very laws that they are supposed to enforce.

Wzrd1 Silver badge

Re: Nothing like this will happen

"I imagine it's more likely they will identify those who have no right to be using the parking space and leave a deserving, but not nasty, ticket on the offender's windscreens."

I forgot my placard and parked in a handicapped parking spot, was limping badly with a cane and received a citation for parking in the handicapped spot. My youngest daughter was present and explained that to the office, his reply was, "I don't care".

I moved away from that asshole state.

Wzrd1 Silver badge

Re: Why badges?

"...go be a social justice warrior somewhere else."

Indeed, the few times I've challenged a non-placarded vehicle owner, it was when I couldn't find an open handicapped parking spot.

But, with my placard, if someone tries to give me a hard time, I fully reserve the right to wrap my fine wooden cane around their head.

Wzrd1 Silver badge

Re: Why badges?

"If they are having a 'good day' then they have NO NEED of the space and should leave it for someone who does NEED it."

And how about when a good day turns to shit?

Oh well, crawl to your distant car, right?

I've had many a day where I was having a great day, walking nearly normally, only to suddenly be incapable of holding myself up without support.

Hence, I use the handicapped parking, lest I hold up traffic in the lot while limping to my car.

Wzrd1 Silver badge

Re: Why badges?

"Correct again. And the handful of people I know in that situation would choose to not use a blue-badge space unless they really need it on the day."

I use it constantly. I never know when a good day will turn into a bad day and I have trouble getting back to my car.

Wzrd1 Silver badge

Re: Why badges?

"Of course, you realise not everyone who is disabled and has a badge is in a wheelchair? They might even have a "good" period where they can walk almost normally. They are really happy to get back to their car and find out some tw*t like you has damaged it."

Indeed, that's a swift way to find a brick through a shop window.

Especially, as I am one of those who can walk about nearly normally, then have spectacularly bad days where I can barely walk at all.

I've even been known to limp past an able bodied person who took the handicapped parking spot and ask, "Are you disabled or handicapped?", when the answer was no, "Would you like a disability?". They move their car rather quickly.

Just as well, I don't want to damage my cane.

Microsoft struggles against self-inflicted Office 365 IMAP outage

Wzrd1 Silver badge

Re: Yet...

I suspect I know the company name, we just split from that company and are slowly migrating to Offal 365.

Could replace the lot of either bloatware with a small bit of open source programs, ical, sendmail, jabber, etc.

But, we'd have one problem with doing that - it would work.

Wzrd1 Silver badge

Re: Not like it worked even before that

I've found that sendmail works quite well. Even after patching, it still works.

Wzrd1 Silver badge

Re: Voicemail

We're slowly migrating to O365 from Bloatus Notes.

Looks like there'll be a bit of a delay.

Whatever was wrong with sendmail?

Wzrd1 Silver badge

Re: who could have thunked?

NT4 SP6...

I guess they're still not testing their products correctly.

Kentucky to build 3,400-mile state-owned broadband network – and a fight is brewing

Wzrd1 Silver badge

Re: The Key is Sewer Access

The overwhelming majority of internet access in the US is run on poles, with some underground. Few use sewers to provide access.

Wzrd1 Silver badge

Re: Governments & Technology (+The Internet)

Erm, NIPRnet and SIPRnet predate the public internet.

Wzrd1 Silver badge

Re: Dug their own grave

Only one problem, Ledswinger. When the government regulates and the monopoly states that if enforced, they'll withdraw from the service area and leave no service whatsoever.

Meanwhile, the monopoly pays large campaign contributions to "generate gratitude" in the elected leadership.

Our fiber backbones were supported and financed by the federal government leasing dark fiber. State and local governments are able to do the same, leaving the last mile to whatever organizations are willing to spend a little to connect people in that last mile, while enjoying a free backbone.

Seriously, if I was in that state, I'd be scrambling to try to keep up with that fiber, running those last miles.

Wzrd1 Silver badge

Re: 'Murica

They simply learned from Pavlov and his dogs.

Conditioned response.

After all, "the rich guy knows everything, that's how he got rich" is the programming that is so well promoted in the masses.

Wzrd1 Silver badge

Re: Not a bad idea really

Well, the original backbones were private, created with government assistance and leased dark fiber.

Around a decade or so ago, the government didn't renew the lease on a lot of dark fiber that Sprint and AT&T owned, which actually made the companies happy, as they could enlarge their backbone.

The only real difference is, it's the state and municipal taxpayers teat feeding this, rather than the federal government.

What I don't get in their objections is, they're essentially saying, "No! I don't *want* free money!", as they're be able to set up the ISP's to hook into the free backbone. That's free infrastructure they're rejecting!

We have some astonishingly short signed business "leaders" in the US.

Wzrd1 Silver badge

Re: Money

Well, I've been saying for well over 30 years, the United States of America has the best government that money can buy.

I think I'll rent me a few politicians, just so that they'll take care of the populace for a change.

Wzrd1 Silver badge

Re: It's competition (how unfair)

Isn't a little bit of competition amazing in its results?

In the area we relocated to, there is precisely one cable company that offers bundled internet, cable and telephone service. Service is mediocre, with outages whenever it drops below freezing.

If we had competition in the area, like where we previously lived, services improved and prices dropped.

Linux Foundation quietly scraps individual memberships

Wzrd1 Silver badge

Re: W. T. H.

I'm jumping ship. Will be upgrading to a variant of BSD.

Wzrd1 Silver badge

Fork it my buttocks. Time to go with *BSD and call it a day.

Scandal-smashed OPM will no longer do govt's background checks – for obvious reasons

Wzrd1 Silver badge

Re: effective, efficient, and secure

Typical government, "Faster, cheaper, better. Pick two".

Wzrd1 Silver badge

Re: The Burgeoning Bureaucracy

"I can't help but think that if only the US government had created an investigatory bureau years ago, they might have saved themselves the bother."

Nah, they really only need to come up with yet another acronym to slap on the same old crap.

Wzrd1 Silver badge

Re: New OPM

@Doctor Syntax, true enough. The only problem with these kids and their ageism is, some of us are still perfectly capable of knocking them onto their arse.

This boomer prefers respect, but is perfectly willing to settle for fear of reprisal.

Wzrd1 Silver badge

Re: New OPM

Erm, the reason for the deficit is the over 50% of the federal budget going into the DoD, with its massive fraud, waste and abuse still rampant.

As for hiring the same people, don't be silly. They'll hire the same contracting firms, plus a new contract for new software, which will have cost overruns and failure to perform, but will be protected by hiring the DoD personnel after they leave the service.

I've witnessed that very thing, repeatedly.

For fsck's SAKKE: GCHQ-built phone voice encryption has massive backdoor – researcher

Wzrd1 Silver badge

Re: One!...More!!..TIME!!!...

"The NSA--that's who. So you already have two agencies that are at odds, except that one of the agencies is directed by it's opposition and is therefore the red-headed stepchild that never gets anything done."

Odd, when I drove past cybercommand every day back and forth from work, they seemed to be doing quite well for themselves. Regular deliveries, plenty of people coming and going and all quite happy when at the local fast food joint.

Apparently, you've no military experience, so let me suggest that a division does not starve its brigades of funding, otherwise, it fails its missions every time.

The NSA is part of the US DoD and its mission is primarily military.

Wzrd1 Silver badge

Re: One!...More!!..TIME!!!...

Actually, the NSA has always been tasked with electronic spying *and* securing US DoD traffic from snooping. It's why they hire the most mathematicians in the world, to crack codes and create difficult to impossible to crack code.

Every bit of crypto kit I had, back when I was in the business of shooting and blowing people up, had NSA crypto keys. We knew that the NSA kept a copy and could listen in if something was amiss and we really didn't care.

We *would* care if the NSA was snooping on Congress, as then, they'd be seen to be attempting to undermine their oversight.

Our keys for network services, such as SSL and our CAC cards came from DISA, rather than the NSA and DISA retained a copy. That came in handy when one's encryption key was expired and replaced, as one could retrieve that key and decrypt old messages.

Now, I can't speak on how the GCHQ does things on Landing Strip One, province of Oceania.

Wzrd1 Silver badge

Re: @a_yank_lurker

Not at all, slurp all, catch some oversight politician having an affair that would be embarrassing and your budget is guaranteed forever.

The NSA learned it from the CIA, who learned it from J Edgar Hoover's FBI, who set up the largest house of prostitution in D.C. Complete with tape recorders and cameras hidden behind the walls.

Wzrd1 Silver badge

Re: Need to up the cost

When I was with the US DoD, encryption keys were issued by DISA, save for certain communication keys, which came from the NSA.

Isn't it handy to know that one's own government communications aren't being used against that government?

Stephen Hawking reckons he's cracked the black hole paradox

Wzrd1 Silver badge

Re: I'm told that bald men have tiny hairs too

Well, let's look at what happens when something approaches, then enters the event horizon.

Time, for the object, slows down more and more, relative to the rest of the universe.

Upon entering the event horizon, time is so dilated, that time stops for the object. It's quite literally, frozen at the event horizon.

Now, let's see what happens when the black hole evaporates enough for the object to be above the event horizon.

It was falling before, it falls again, straight into the new event horizon.

Eventually, the black hole will be small enough that the curve of approach and escape velocity is low enough that the object now escapes unharmed.

Quite likely, some time after proton decay.

Riddle of cash-for-malware offer in new Raspberry Pi computers

Wzrd1 Silver badge

Re: Oracle, Adobe

That's why I download the full redistributable versions of their products. No crapware is included in those, otherwise, they'd lose all government and corporate users.

Cisco cops to enterprise IOS XE vulnerability

Wzrd1 Silver badge

Re: Audit? Nah...

Good catch! I've known far too many folks who wouldn't look at the *entire* packet and hence, miss the bug.

Isn't it fun when bugs interact?

Potent OWA backdoor scores 11,000 corporate creds from single biz

Wzrd1 Silver badge

Re: How do you cook a backdoor?

Larger problems? More like problems one can sail a supertanker through.

First, separate admin account from the user account, ensure the passwords are different. Personally, for that, I prefer a 2 factor authentication, for user and admin accounts.

One also has the OWA frontend servers *not* running exchange and pinholes made in the firewall. I've personally saw both on a box on the DMZ on a Fortune 200 company.

Juniper's VPN security hole is proof that govt backdoors are bonkers

Wzrd1 Silver badge

Re: "Juniper's VPN security hole is proof that govt backdoors are bonkers"

Amazing! You're the first commenter, other than myself, who said the magic three letters, AES.

DES is broken and should have been depreciated long ago. 3DES? Trivial for a bank of GPU's.

Still, if one is inside or gets inside, one can muck the PKI infrastructure and start serving an attackers keys. That means internal monitoring (should be 24/7/365 anyway), change management and frequent audits.

That's nothing if you are a *security hardware provider*.

I'd also do RCS hashes stored to write once media, to prevent hashes from being altered for a specific version number.

Wzrd1 Silver badge

Re: Why didn't co-workers notice?

Shut down revision control system. Insert code, calculate new has, insert new hash into RCS database for that latest version.

Grab a cup of coffee, the day is still early.

The initial change was one single value out of all of the source code. Easily enough missed if there wasn't a security analysis of the entire code base.

Wzrd1 Silver badge

Re: Playing the Xenophobia Card

USSR? Ancient history today. Today's buggerboos are Russia, PRC, USSA, The Commonwealth, as key players, up and coming, Iran and on their heels, every other nation .

Welcome to the real world, where every nation is listening to the other, some for commercial gain, some for national security, some just for the hell of it.

Slowing them down enough to catch and block them is a field with excellent job security.

After all, if you can't be part of the solution, there's excellent money to be made in prolonging the problem.

By the by, *all* spying is technically illegal. The trick isn't even not getting caught, as an arrest is impossible in your home nation, it's not getting caught dead to rights. Such as a Russian hacking team using Russian symbol coding and other telltales in their tools.

Add in a layer, "They're criminals and we're trying our best to catch them", hire them on as needed, you're golden.

Wzrd1 Silver badge

Re: The problem with backdoors

Government 1 vulnerability researcher: Hey, this implementation's a bit weak, but still a nuisance.

Government 1 vulnerability researcher 2: Hey, are they using their own product? If so, let's break in and insert a weaker implementation that we can easily get in and send it to operations after it's implemented in the source code.

Government 1 vulnerability researcher: Great idea! Got it! (calling operations to notify of the weakness)

Government 2 vulnerability researcher:Hey, somebody bollocked the implementation on this model series, others are equally vulnerable and it seems it's a backdoor.

Government 2 vulnerability boss: Quick, we want our own backdoor, add it...

End result, brokety broke.