* Posts by Nick Kew

2841 publicly visible posts • joined 16 Jan 2007

Belgium: Oi, Brits, explain why Belgacom hack IPs pointed at you and your GCHQ

Nick Kew
Trollface

Perhaps they were playing the name 10 famous Belgians game at GCHQ - and it got out of hand...

Would Hercule Poirot be the man to solve this?

The best way to screw the competition? Do what they can't, in a fraction of the time

Nick Kew
Facepalm

Recognition?

Did Antonio get recognition for that? I'd've thought he made himself too valuable to promote to a Suit, and thus (by definition) too junior to reward in any significant way.

Perhaps he was working for a foreign company?

Or was this incident an aberration, and he was useless the rest of the time? Hmm, doesn't seem very likely ...

Should a robo-car run over a kid or a grandad? Healthy or ill person? Let's get millions of folks to decide for AI...

Nick Kew

Re: Who's gonna buy it?

In Sweden you can drive for an hour without seeing another motorist -

As I expect you can in Montana, or Wyoming, or the Dakotas, or Iowa, parts of Texas or California .....

But not of course in the populated parts of Sweden, where driving has become *a lot* tamer since my mother and her generation treated it as something of a free-for-all.

Nick Kew

Re: Who's gonna buy it?

NO ONE wants to be that loser.

So it's down to who gets the choice. Back to familiar territory now.

But that's not quite the whole story. Not everyone who can afford a Chelsea Tractor uses one to drive little Quentin and Aurora to the school gates. And taking risks turns out to be good for you: cyclists have longer life-expectancy than non-cyclists despite a few of them getting killed on the roads.

Nick Kew

Re: Final solution many years from now

You mean like town planning from around 1960?

Now widely known as "planning blight". Discriminating against the elderly and disabled, who can't just vault those railings to cross the road and so are lumped with a tedious walk to the next official crossing. Repeat a few times and you might as well just say the whole town is out of bounds.

Nick Kew

Re: Who's gonna buy it?

If the car has radar, it will favour people with metal implants / fillings?

Tinfoil hats?

Nick Kew

@Naich (and others)

You're rationalising. Yes, a child (or younger adult) is much more likely to survive with no long-term harm than an older person. "Life begins at 40" is all about the stage of life where your body starts really noticeably to lose its capacity to recover from adversity.

But these kind of rationalisations are altogether excluded from a survey posing binary questions. At best, your rationalisations put you into a survey's "don't know". Or get lost in a middling number in an "on a scale of" answer.

Yes, Americans, you can break anti-piracy DRM if you want to repair some of your kit – US govt

Nick Kew

Status?

What's the legal status of the US Copyright Office?

AIUI, the US has governments (federal and state) that make law, and courts that enforce it. Where does the "Copyright Office" fit into that structure?

Presumably the power to make such a ruling must be delegated to it by the federal government? Does that override anything the state governments might say or do? Or is it an agency of both federal and state governments at once?

And what if the Courts think differently? Doesn't it still effectively boil down to who has the deepest pockets to fee(d) the lawyers and argue their way to their chosen outcome?

This two-year-old X.org give-me-root hole is so trivial to exploit, you can fit it in a single tweet

Nick Kew

@Lee D

Your comments re: apache are wide of the mark. Yes apache starts as root if it wants to bind to ports 80 and/or 443 (http, https). But it's certainly not intended to be installed as setuid, and I should be surprised if anyone ships it as such. You - or more usually your systems init scripts - just start it as root.

Bottom line: if there's a commandline option that'll take advantage of root privileges to do something unintended, then you need root privileges to exploit it. So you might as well just do the unintended thing directly.

Oz opposition backs the 'regulatory hallucinogen' of anti-piracy laws

Nick Kew
WTF?

I thought better of the Aussies ...

No, not aussie politicians: that ship has not merely sailed, it's reached Botany Bay. But I'm shocked to hear they use that americanised spelling of Labour.

Excuse me, but have you heard the teachings of our Lord and Savior, Jesus Chr-AI-st?

Nick Kew

Re: Accuracy

"... made burned offerings ..." vs "... burned incense ..."

Indeed, that sticks out.

But perhaps more telling is what hasn't been changed. Namely, archaisms that might be obscure to the modern reader: "the ark of ...", or "the great stone". Instead of making those clearer, they make the material change you picked up on, to cleanse it of something abhorrent to the modern reader.

And there's substituting a proper name for "The Lord" ...

Erm... what did you say again, dear reader?

Nick Kew

Latin has been evolving a long time. Church latin is quite distinct from classical latin: if you're a choral singer you get to perform the same texts with different pronunciations. Then you can add more disreputable strains from Goliard[1] to Schoolboy.

[1] A mediæval dissident movement.

Morrisons supermarket: We're taking payroll leak liability fight to UK Supreme Court

Nick Kew

Re: So let me get this straight...

Quick lesson in life: that's the primary purpose of the judicial system. More expensive than hiring a gang of thugs or an assassin, but does a more thorough job and leaves you in a stronger position if you feed it sufficient gold.

C.f. patents, for an application area likely to be more familiar around here.

Nick Kew

Quis custodiet ipsos bootstrap?

It wasn't his job to export the data for himself to take away. It's up to Morrisons to have sufficient controls in place to prevent that.

Morrisons then has to employ (or contract) someone to devise and implement such controls.

As I said, though, this is non-trivial and there is an implicit trust placed in IT personnel. The implication is generally that a skilled admin will never be able to work in that field again if he wilfully and maliciously abuses that trust, so the risk is considered small.

It would be ageist to refuse to hire a skilled admin close to retirement. Sexist to refuse one who might leave the workplace to become a full-time mother. And clairvoyant to know your sysadmin has an entirely new career lined up.

Nick Kew

Precedent

Isn't there a potentially-troubling precedent here? One that looks a bit like a BoFH column, in which Simon Gets His Way by blackmail - threatening The Boss with a leak like this?

Nick Kew

So when a Morrisons employee crashes their car, the victims (or their family) will know where to turn for compensation? Even if the employee was under no pressure of work, no need to hurry?

Nick Kew

Re: I expect to be flamed

The corporation is responsible for the corporate culture and environment in which things happen. I would hope that would be considered relevant to the level of corporate blame and/or responsibility when bad things happen.

That's why employees have to go through all that tedious box-ticking training, on subjects ranging from Elfin Safety to Diversity Awareness. So when Dodgy Joe gets accused - rightly or wrongly - of harassing Dodgy Jo, the company has at least not been negligent in failing to educate him.

Bottom line that I expect Morrisons are trying to argue is that this was so far from acceptable within their corporate culture as to be totally distanced from them. That would be very different to an "everyone does it" culture that seems to have affected banking.

'The inmates have taken over the asylum': DNS godfather blasts DNS over HTTPS adoption

Nick Kew

Re: Where do the keys come from?

They look the same to me.

Not the same. DOH is a nice big extra overhead: help avoid any prospect of the world's IT infrastructure ever being ample to meet our needs.

Nick Kew

Re: '000s of UDP & TCP ports

And lo, it hath come to pass.

SQLite creator crucified after code of conduct warns devs to love God, and not kill, commit adultery, steal, curse...

Nick Kew

Re: Does it even define what it means by "God"?

Yeah, but calling God by the wrong name is the worst crime of all.

Hence Elijah's slaughter of all the followers of Baal. Somehow the bible translators failed to translate the word Baal, so it looks like a proper name. And thus the genocide becomes a work of The Lord, who is somehow not merely a translation of The Lord.

Nick Kew
Pint

Re: I have a code of conduct

I think one or two commentards may be missing the point. It is my code of conduct, not one I try to impose on others.

Speaking as someone who immediately upvoted your code of conduct and also enjoyed the first response lightheartedly contradicting you, I don't think you have too much to worry about.

But it's true, subtlety and irony can be lost here. I've had two posts saying the same thing on the same thread in a Reg group, one attracted lots of downvotes, the other lots of upvotes. Commentards[1] are fickle, and you play with their expectations at your peril.

[1] And moderators, which is worse - though a lot rarer here.

Nick Kew

Code of conduct in any online[1] community in our time:

- Nice idea. Or seems so.

- Nightmare in reality as it gets weaponised to enforce an Agenda, usually totalitarian.

Looks just like rather a lot of religious teachings.

I'm tempted to say Good On Him for calling out the nonsense, if it was indeed a reaction to (against) a modern form of repression.

BTW, we have a contrasting case of Larry Wall here. Some bits of God-bothering around Perl, but not so in-your-face as to be offensive or feel exclusive to a non-christian like me.

Can't get pranked by your team if nobody in the world can log on

Nick Kew

Re: GDPR...

A proximity system has its own issues,

Indeed, that sounds likely. Not that I have personal experience.

In the context of a column like this and its anecdotes, one of those issues is that most of the stories come from an entirely different era. Computers have had screen lock for as long as they've had screens[1], and inactivity-based logout for as long as I can remember, but any more sophisticated measure of proximity is surely an altogether different story.

[1] OK, that wouldn't've looked like modern screen lock, but clearing the screen then refusing any input that isn't an accepted unlock serves the same purpose.

Nick Kew
Headmaster

Re: CV update

For a post about avoiding grammar and spelling errors, that's quite a howler. Your apostrophes are both bogus (though you're missing a necessary one along with some punctuation in the second paragraph), and I'm a little bemused by the idea of music gardening. Did the interviewer's stoicism perhaps manifest in his or her overlooking your faults? Did another interviewer (whose existence I infer from your application of an adjective to the interviewer you explicitly mention) take a different view?

London flatmate (Julian Assange) sues landlord (government of Ecuador) in human rights spat

Nick Kew

Re: Asylum

Evidence please!

Assange is evidence.

Before dismissing that, note a couple of things:

  • I didn't claim (nor would I) anything about all asylum seekers. Or even any weaker quantification beyond a comparison with the general population.
  • Evidence and proof are of course very different things.

So yes, a sample of 1 can be evidence - and is easier to quote here than any more detailed or authoritative report containing stronger evidence. Just apply Bayes' Theorem using the sample we're discussing.

Nick Kew
Pint

I notice Unregistered has registered just this one comment in the whopping 24 hours they've been a member.

At a guess, it's a joke from someone familiar with Reg comments. Maybe a regular or a lurker. Or even someone deliberately feeding a line to that first reply :)

Nick Kew

Asylum

This looks somewhat analogous to Political Asylum in the UK and other Western countries.

Those who seek Political Asylum are disproportionately likely to be troublemakers, attention-seekers, or just plain crooks: after all, the silent majority don't incur the wrath even of pretty nasty governments, and persecution by more brutal organisations - like religious nuts - that aren't recognised governments doesn't qualify for asylum.

And some of them do sue countries that have given them asylum (and in Blighty get Legal Aid for it).

Compare some of the foreign criminals who argue Human Rights to avoid deportation, and one might argue Assange looks like a harmless also-ran by comparison.

Maybe Ecuador will eventually do to him what Blighty eventually did to Abu Hamza after all those years of legal battle? Then we can see if anyone cares about him enough to do more than go through the motions of arresting him for skipping bail.

Nick Kew

psychologically break him

Hmmm. I should've thought indefinite confinement would tend to do that. The embassy may not technically be prison, but his situation must rank with being confined to a cruise ship or spaceship for immediate hell, and without the prospect of release to keep a chap sane.

Silent running: Computer sounds are so '90s

Nick Kew

Re: Trigger Happy

I once had an employer who insisted on keyboard click and disciplined me for turning the vile thing off. Something about standardisation of the office environment, and if I disable the click it must be a symptom of abusing or subverting the whole place.

And that was back in the era of VT100(ish) terminals, and big solid keyboards with *loud* synthetic beep for a click. YOUR WIFE IS A BIG HIPPO!!!

Nick Kew

Um, the Nokia ringtone pre-dates Dolby by a couple of centuries. Even the more famous Dolby who gave his name Dolby labs and to big chunks of audio history.

Nick Kew

Re: The title is too long.

Just be grateful we've left behind us the era when they'd have set light to their money and poisoned the air you were breathing.

We need the same treatment for electronic and recorded noises of all kinds in public places as we have for smokers. And then a bit more: deal with wide-area nuisances like amplified buskers and pubs with noise but no soundproofing.

Arm cozies up to Intel for second time in a week – this time to borrow tools from Yocto Project for Mbed Linux

Nick Kew

Now who's the soppy picture supposed to represent?

On a serious note, we know that Intel has had to adjust to the growth of ARM's world, but does any of this working with Intel look like a change of direction for ARM under softbank management? Or is it just regular industry movements that would look fairly inevitable under any management? Or is the change perhaps in a PR department enthusiastic about Reg stories?

Emergency Services Network delays to cost public purse £1.1bn, Home Office reveals

Nick Kew

Re: Incompetence

Hmm, isn't that just a question of funding? That is to say, non-government incompetents run out of money before they achieve the scale of government?

Virgin Media? More like Virgin Meltdown: Brit broadband ISP falls over amid power drama

Nick Kew

No signal at all since February

... and many months before that it was a sick joke, with frequent timeouts on web and mail, and 'phone unusable.

The difference between Virgin and BT is that when BT went titsup they delivered a next-day fix. For Virgin, a next-year fix is clearly too much to expect. Good thing I've got that 4G backup connection from a real provider.

Scanning an Exchange server for a virus that spreads via email? What could go wrong?

Nick Kew

Re: Sweet memories...

"Oh, I never read messages from IT, you're always just sending out warnings."

The boy who cried Wolf springs to mind.

Can't comment on your individual situation, but warnings are more effective if you pick your cases with some care to avoid overloading users with esoterica that'll only baffle them.

Nick Kew

Still baffled

... at how noone sued MS for damages at the time.

The means by which this email evaded detection in a simple and sensible email scanner was MS's deliberate breaking of MIME standards dating back to 1992. And the RFC even contains an informational section under the heading of security implications explaining exactly why what MS subsequently did would leave their users wide open to attack.

Your RSS is grass: Mozilla euthanizes feed reader, Atom code in Firefox browser, claims it's old and unloved

Nick Kew

Re: I've always liked RSS

RSS is still the best way to consume day-by-day data on the 'net. For a site like El Reg, we get the executive summary, then click on selected stories we want to read. I don't think I'd hang around here if there were no feed. Ditto other news sites. And all the blogs I follow are through RSS or Atom feeds, either directly or aggregated as Planets (which I follow using a Planet's feed).

The web browser does nicely for sites one visits proactively but not daily, and for interactive contents. Mailinglists serve for full two-way communication, with a much higher bar to subscription than a feed. Usenet does (or did) interactive comms best of all. RSS serves a niche that is none of those.

Fortunately these media still integrate: the RSS button in a webpage, and the feed reader launching a full Reg story in a browser. No need for Firefox's builtin stuff, which was always less-than optimal.

Take my advice: The only safe ID is a fake ID

Nick Kew

@Russell Chapman

Thanks for that explanation. Sounds like one of those words whose meaning evolves. Like "frogs" (from the Parisian coat of arms), or various others that would likely get me banned if posted here.

Nick Kew

Re: Starbucks

a daily <insert brand name> coffee

As far as I'm concerned, <insert brand name> coffee is something one has in the order of once or twice a month, when in town or when travelling. Are these people who drink the stuff every day real (and with money to burn) or mythical?

Nick Kew

Who needs an alias?

When I don't want to give someone my name (more-or-less any site that asks for it in circumstances where signing up seems an unnecessary hurdle), I'm just Not Me, and have an email address of not.me@not.here .

Noone cares if it's even remotely plausible.

Nick Kew

Re: Silly first name.

Spoken like a true sassanach!

Oy! That's enough anti-sassenach hate-speech. We're not all like that!

That french sexologist is clearly a canard. As is so much more of this Dabbling.

Powerful forces, bodily fluids – it's all in a day's work

Nick Kew

Re: Just the Usual...

Hmmm. For a busy office, this kind of thing must be routine. Surely there should be a healthy market for scanners and printers incorporating a metal detector that'll complain *before* potentially self-harming if fed a stash containing staples and paperclips?

Likewise sticky things that might feature in a stash.

US may have by far the world's biggest military budget but it's not showing in security

Nick Kew

Re: Not Again!

Was that the battlefleet that got eaten by a small dog?

Nick Kew
Alert

Big budget

Would that be a budget big enough to support an entire bug-ridden comms system as a decoy, while having an altogether different system sitting behind it in the shadows?

Age-old military tactic.

Huge ice blades on Jupiter’s Europa will make it a right pain in the ASCII to land on

Nick Kew
Coat

Nanny Ogg's space travels

Her favourite song captures the essence of this planet's defence against alien (e.g. human) interference.

Google and Microsoft boffins playing nicely together to stop replay attacks in their tracks

Nick Kew
Stop

'scuse me. We need a *groan* response that is neither thumbs up nor down but a nice big LART.

Damn, never having looked at the innards of OAuth, I'm surprised it uses tokens subject to replay attack in the first place.

Which? That smart home camera? The one with the vulns? Really?

Nick Kew

Re: Which ${subject-I-know-about} related reviews

Fixed your title for you. If your expertise lay elsewhere, you'd see similar issues with their reviews of something else.

Nick Kew

Re: common place

Indeed. Long, long ago I used to read Which? reports with lots of interest as a great source of information. Then I read one or two reports into subjects where I had some expertise, and saw a different side.

Basically, a lot of what's there is "how happy are the owners with a product"? That leaves a situation where owners of a cheap product take the view "yeah, it's fine, does the job, I'm satisfied", whereas those who take a serious interest in a subject and buy top-end gear remain sensitive to its flaws.

The importance attached to security would seem still to be something that depends heavily on ones perspective, so IT practitioners differ radically from Joe Public. Some journos are working on that divide, but I guess they still have a way to go.

Has anyone (here) studied the actual vulnerabilities under discussion, and where they fall on a scale of hypothetical to easily exploitable by a stranger?

Oracle? On my server? I must have been hacked! *Penny drops* Oh sh-

Nick Kew

Re: bleh...

Hehe.

I remember setting up a cron job before working on firewall rules. Cron job would run hourly and reset port $ssh to the state before I started a session. I don't recollect ever needing it, but it made the job less scary.

Nick Kew

Re: Early days of easy/cheap connectivity

The Sun (or otherBigName) with the expensive contract would be for users needing that reliable very-high uptime. For the rest of us, Linux or *BSD on commodity hardware has made more sense since about the mid-90s.

The difficulty back then was that the choice was between an expensive package like yours and something slapdash like the host in the story. It's only really this century we've seen the rise of cheaper hosts who also make it their business to know their arse from their elbow.