* Posts by Nick Kew

2841 publicly visible posts • joined 16 Jan 2007

US authorities issue strongly worded warnings about crypto-investments

Nick Kew

@ Pen-y-gors - of course it's a bubble, and could burst. But some bubbles can outlive us all. Most obvoiusly, gold, whose financial value has far exceeded any intrinsic value for millennia.

@ratfox - social experiment. Hmmm, well it's not without precedent (as has been pointed out). But a new concept with zero intrinsic value? This is most interestingly a commentary on fiat currency. Viewed like that, it's an intrinsically better store of value than something the Emperor[1] can just print more of whenever it's expedient.

[1] A reference, if you like, to the sub-plot in Goethe's Faust where Mephistopheles invents Fiat currency just when the Emperor is desperate, causing a devastating bubble.

Nick Kew

Re: Hidden meaning

Um, the media are reporting widely its use in criminal transactions such as ransoms, and money laundering. Doesn't look very hidden to me!

Oregon will let engineer refer to himself as an 'engineer'

Nick Kew

Re: let me guess

The whole "doctor" thing is way overblown, mostly by overblown people. [...] but no one I know of refers to themselves as "doctor"

Methinks you miss the point. People don't call themselves Doctor (unless perhaps in a CV situation), but it's really useful for addressing a stranger in formal or semi-formal correspondence. Works equally for both sexes where there's any uncertainty, and is unlikely to offend even if it's not technically correct.

Nick Kew

Re: let me guess

Come to think of it ...

Yes, a student graduating through our department could qualify automatically for BCS membership and with it Chartered Engineer status after a qualifying period (possibly four years) in relevant employment. Yet we who educated those students had no such automatic path. Ho, hum.

Nick Kew

Re: let me guess

To be a software engineer you need to have graduated from a 4yr accredited engineering program.

I expect that's an oversimplification?

Once upon a time I was on the staff of a Comp Sci department of a UK (Russell Group) University. So I was surrounded by people who were providing such courses to students. Yet hardly any of us had Comp Sci degrees ourselves (my own degree was Maths), so presumably we would not have qualified under your rules.

Seems to me the underlying story is, his initial approach was one of being an arse (albeit a smart one), and was met by a p***-off reaction. A reaction that was perfectly reasonable in principle (the flaws he found being irrelevant to the subject of his wife's ticket), but horribly botched in its execution.

UK border at risk of exposure post Brexit, warn MPs

Nick Kew

Re: Why are they worried?

North Korea got there first with the isolation, and with not subjecting itself to international oversight.

Not everyone in the UK cabinet wants a NK solution. Only some of them.

Security industry needs to be less trusting to get more secure

Nick Kew

Where has she been living?

In a world where we all trust each other's intentions to be benign? Surely no security person has lived there since at least the Internet Worm of 1989?

Or perhaps I'm missing something in reading this article as a statement of the should-be-obvious?

Get ready for laptop-tab-smartphone threesomes from Microsoft, Lenovo, HP, Asus, Qualcomm

Nick Kew

Install Linux and I'll have one! Sounds ample for me, and the battery life and connectivity are on the way to what I've been waiting for so long ...

On a point of history, I seem to recollect x86 emulation on ARM was available as far back as when I had an Acorn Archimedes in the late 1980s. Thirty years of it!

Investigatory Powers Act: You're not being paranoid. UK.gov really is watching you

Nick Kew

Re: sort of confused ?

To google, I am a datum. They don't care about my identity. They have the power to direct information and advertising towards me, which I can take or leave according to my usage and privacy settings.

The government also collects data: that's not new (the idea of a census goes back to antiquity). What's controversial is when it's tied to my identity. The (agents of) government do have the power to lock me up, to deprive me of my worldly goods, to ban me doing things. And I can't opt out.

Occam's razor suggests that failing to see the difference looks like being deliberately obtuse.

Dentist-turned bug-biter given a taste of freedom

Nick Kew

Cyberstalking?

Sorry, I think I'm missing something.

Are you saying that this is effectively two coincident stories about the same man? That is to say, one of disclosing a vulnerability and another of his harassing some innocent third-party?

Or is the cyberstalking charge purely a manifestation of a traditional Shoot the Messenger reaction?

Damian Green: Not only my workstation – mystery pr0n all over Parliamentary PCs

Nick Kew

Re: Did he do it or not?

Aha, someone else noticed the mention of thumbnails.

How many pornographic thumbnails appear in your cache when you click a single link that happens to take you to a Daily Mail story? Maybe thirty-ish in that column down the right hand side. An MP would have legitimate reason to read a lot of newspaper stories and other such contents.

Nationwide UK web bank and app take unscheduled nap

Nick Kew

Works for me

Logged in just fine to check I have sufficient funds to cover the direct debit paying off my creditcard this week. Evidently not a prolonged outage.

Hypothetical: if I'd been in urgent need of cash and had had to resort to the desperate measure of using the creditcard in an ATM, would I have been able to get them to refund the cash-onna-creditcard charges?

High Court judge finds Morrisons supermarket liable for 2014 data leak

Nick Kew

@Commswonk

Actually company drivers are one area where employer liability should be very firmly enforced. Otherwise you have a race to the bottom where companies put impossible-to-meet pressures on employees who drive on business, who then take risks to try and meet expectations.

User dialled his PC into a permanent state of 'Brown Alert'

Nick Kew
Stop

Brownouts

My sympathy here is with the operator who turned the brightness down to spare his eyes. The story as told may have been glossing over very good medical reasons for adjusting a working environment - especially if it was back in the days of flickering VDUs. And strain on the eyes could have seriously affected his brain, to the point of failing to notice the wrong keyboard - even if calling helpdesk might possibly be stretching the point.

Indeed, it was trouble with petty office managers[1] that drove me out of an office environment and into working from home.

[1] OK, that wasn't monitor settings, it was things like standardised desks forcing me into a posture that my back couldn't cope with.

Don't shame idiots about their idiotically weak passwords

Nick Kew

Can you make a good anecdote of that? Perhaps you should submit it as a story for the Friday "On Call" column?

Nick Kew

Psychology? Maths? Technology? Education? Defence in depth?

Why, here's an idea. Let's improve all of them. Each of us can contribute in our own fields of expertise, while bearing in mind the bigger picture.

Now, here's a question for the commentariat. Is it helpful when journalists present these themes as an either/or and in opposition to each other?

Stick to the script, kiddies: Some dos and don'ts for the workplace

Nick Kew

Re: Really useful article.

You merely suspect? Haven't you been following the whole systemd debate?

Mythical broadband speeds to plummet in crackdown on ISP ads

Nick Kew

Red herring

What exactly is not clear about "up to" in an advert?

Today's news is basically that silly agitators have won on an matter of trivia. So none of the Chattering Classes are looking at poor reliability and service levels. Let alone the Great Firewall (aka IWF).

More than half of GitHub is duplicate code, researchers find

Nick Kew
Pint

@Hollerithevo Re: Duplication

Oh dear. I don't think much of your musical taste. Among symphonists contemporary with Brahms I'd put Dvorak or Tchaikovsky head, shoulders and torso above the sub-Beethoven-wannabe.

That aside, if you look at any music, there's a lot of repetition. Sometimes identical, other times modified. Whole styles and genres are defined by how repetition works. One of the main things that distinguishes music worth listening to from a pop single is that it's not merely repetition, but development of ideas. From antiphonal echo, to the major classical forms like sonata and rondo, to the leitmotif and its many imitators, to name but a few forms spanning the centuries.

Take the familiar repetition away and you have Stockhausen. Or let the repetition overwhelm development for longer than a pop single and you have muzak.

Which is kind-of like github. Clone something, you have duplication. Fork and go your own way, or feed back to your upstream via pull requests, and you have different modes of development. Is not a bugfix branch just what you say of the genome: an essential component of corrections?

I guess an in-depth study of analogies to other complex systems might look more like a PhD thesis than an El Reg post. Maybe a good halfway house could be a paper examining some aspect in depth, which El Reg could then report and commentards could debate in an ingenious self-reference reminiscent of Escher.

Mine's a pint, please. I'll need it to take this any further.

Nick Kew

Duplication

Now remind us.

How much of the human brain is redundant?

How much of the human genome is duplication?

or even

How much of a great artwork is duplication?

It seems to go with the territory of being large and complex.

Nick Kew

The mote in thine eye

but along the way, they turned up a “staggering rate of file-level duplication” that made them change direction.

So their own work was driven by what they discovered after they'd started. That makes it statistically worthless.

Was the slightly-ironic sub-headline El Reg, or from the research? If the latter, I hope the tongue was firmly in the cheek.

Prosecute driverless car devs for software snafus, say Brit cyclists

Nick Kew

The Netherlands have a simple rule - any RTA involving a cyclist, it's the non-cyclists fault.

Citation needed, 'cos that sounds like a misrepresentation in more than one way.

First, it's not fault, it's a presumption of responsibility. That's not the same as fault. Persons in charge of dangerous machines have a responsibility to use them safely.

Second, it's not cyclists vs the rest, it's associated entirely with being in charge of a deadly weapon. Just as if you're in charge of a gun that accidentally goes off and does something bad - even if the person who got shot should never have been there.

Q: Why are you running in the office? A: This is my password for El Reg

Nick Kew
Coat

Admit defeet

There should be a rule - a lighthearted Godwin - about when a discussion gets turned into a punfest.

Now Oracle stiffs its own sales reps to pocket their overtime, allegedly

Nick Kew

Re: Overtime falsification in the timesheet. How quaint. And how familiar.

Yep. Get folks into the habit early. In my case, my first job after graduating made it abundantly clear that working whatever hours it takes for no extra pay was all part of being a professional person, as opposed to a unionised blue-collar worker. So that's the norm.

How can airlines stop hackers pwning planes over the air? And don't say 'regular patches'

Nick Kew

When you land in serious weather and can't see a thing ...

You want connectivity between the plane's telemetry and the airport. Not to mention weather information that tells you what you're descending into as you go down.

How do you do that with an airgap?

Red Hat opens its ARMs to Enterprise Linux... er, wait, perhaps it's the other way round

Nick Kew

Re: What is really needed...

ISTR having been looking for something like that for about 20 years.

Real prize would be to get it in a laptop. Proper laptop, not some horrible keyboard-less device.

WikiLeaks drama alert: CIA forged digital certs imitating Kaspersky Lab

Nick Kew
WTF?

Thank you for asking the critical question. Has the CIA infiltrated trust lists such as those of browsers, and/or "real" CAs?

The followup to your question is, why did El Reg not address it?

User asked help desk to debug a Post-it Note that survived a reboot

Nick Kew

No you didn't ...

The story wasn't about someone getting confused. It was about failing to figure it out, and escalating to a helpdesk.

Upvote anyway, for the chuckle.

Nick Kew

Dilbert?

If this isn't a 1990s PHB joke, it jolly well should be!

Where hackers haven't directly influenced polls, they've undermined our faith in democracy

Nick Kew

Re: Why must democracy be digitised?

You trust a system that makes no attempt whatsoever to verify that people walking into a polling station are who they say they are?

Nick Kew

Re: The biggest UK hackers of the lot then?

You forgot convicted (in the US) fraudster Conrad Black, who was hacking the public mind for much of the same time as Murdoch. Colonials getting revenge on Blighty for having colonised their countries?

Dumb autonomous cars can save more lives than brilliant ones

Nick Kew

Backlash

Trouble is, if autonomous cars are only, say, 99% safer than human drivers, what happens when a case is reported where one is responsible for killing someone?

There are lots of precedents for damaging backlashes. In the field of transport, just look at the completely different standards applied to rail deaths compared to road deaths. If the cost-per-death of the Hatfield disaster were applied to motorists, a year's insurance premium would cost more than a new car, and it seems statistically likely that the rail disruption that followed it caused more deaths (by driving people onto the roads) than the crash itself.

You know what's coming next: FBI is upset it can't get into Texas church gunman's smartphone

Nick Kew

@John Smith 19

Is that related to Catch 22?

Transparent algorithms? Here's why that's a bad idea, Google tells MPs

Nick Kew

Google is in an unusual position

Google's core algorithms that power search are affected by an unusual problem: they're under constant attack by spammers, for whom reverse-engineering those algorithms would be a Holy Grail. Every victory for those spammers is a defeat not only for google, but for all of us who use google for search.

Furthermore, google is a huge target for those spammers. A deep-pocketed "SEO" shop might justify a million-a-month R&D effort for the merest demonstrable advantage.

In those circumstances, it makes sense for Google to be less-than open about the detail of its algorithms, and to be constantly varying them.

Seldom used 'i' mangled by baffling autocorrect bug in Apple's iOS 11

Nick Kew
Coat

There's no I in

... apple products.

Nick Kew

Confusion

Sorry for the downvote. The arrow was pointing upwards on my screen.

Look out, Pepe: Martha Lane Fox has a plan

Nick Kew
Childcatcher

Re: Accessibility

If the badge denotes that the website is accessible to all users it should be in Braille, or at the very least embossed.

Erm, jokes aren't always obvious in text. Trouble with yours is, it's scarily close to some of the misguided things idiots do for real in the pursuit of an illusion of accessibility.

Putting on my expert hat[1] I should point out that accessibility comes straight from well-written HTML, and it takes a lot less effort to get right than many sites put in to subverting it. From memory, Lane-Fox's own lastminute was one of those that put vast effort into b*****ing it up.

[1] Some years ago I served as Invited Expert with the W3C on accessibility.

Official: Perl the most hated programming language, say devs

Nick Kew

Re: Learning languages from a book

Sometime in the 1980s I first needed to learn C. I picked up the C book, K&R.

After reading the whole thing, it told me little of any value. Most memorably, I came out puzzled: surely C does dynamic memory allocation? Yet I had to ask "what's the C equivalent of Pascal's new"? Yes, it's true, there is not a single mention of malloc in the whole of K&R[1]!

In fact, the most informative learning resource I could find was a Microsoft VC++ manual. Despite the fact that I wasn't even working on an MS operating system, let alone with their compiler. It just happened to be something I could find.

Towards the end of the '80s, I read Stroustrup on C++ and found him a lot more informative. Though when I wanted to get to grips with STL in the 1990s, I found again a great gap in available documentation.

Perl was so much easier, with all the docs built in. Never looked at a Perl book, though.

[1] I understand that may have changed in later editions of K&R.

Only good guys would use an automated GPU-powered password-cracker ... right?

Nick Kew
Alien

Re: Way out of my league to understand this, but..

A tool like this is more about lowering the bar to a job than about enabling it in the first place. The determined blackhat can do the same already. The competent network administrator might be able to too, if only he had time free from all those more urgent demands!

A tool simplifying the latter's job sounds like a Good Thing to me. And as I read it, this one's got builtin hurdles against casual misuse, so it doesn't lower the bar too much to a script kiddie.

To withhold it would smell of that old favourite, security by obscurity.

Nick Kew

Re: Yeah but...

... and trawl social media for names and dates associated with lovers, pets, family, favourite things, etc.

Add a nice big database of leaked data and it could cover a lot of phishing grounds.

Dell forgot to renew PC data recovery domain, so a squatter bought it

Nick Kew
Facepalm

Re: How do domain names expire?

It's happened to me.

Domain is on auto-renew. All is well for many years, you forget all about it. Then your once-competent-and-reliable provider stops its secondary DNS and domain registration service. Whoops!

UK's NHS to pilot 'Airbnb'-style care service in homeowners' spare rooms

Nick Kew

I can envisage a case in point.

I have a friend in her 80s, who had to go into hospital for something about a year ago. She lives alone, and normally needs no help. But when she had just been operated, they didn't want to let her out unless there was someone around just in case she needed it.

If I had a suitable spare room (and known about it at the time), I'd've been happy to offer it. If the NHS were paying, it could go a long way towards making it acceptable to a patient who doesn't want to be any trouble.

It's just one more step to do the same with strangers.

Didn't install a safety-critical driverless car patch? Bye, insurance!

Nick Kew

Re: other parts of the article:

Seems particularly ill-considered: how many drivers will want to hang around a petrol station while the chariot gets recharged? Fortunately in the real world, people are installing them more sensibly in car parks: for example, at retail outlets such as supermarkets, city centres and park-and-ride, leisure venues such as theatre/music/cinema, etc.

Eventually it'll be depots for summon-a-car fleets. Recharging along with cleaning and other maintenance.

Nick Kew
WTF?

Re: Safety Critical Patches

Selling unsafe goods is not allowed

Wow! What country is this, and when did they ban selling of cars?

Boss visited the night shift and found a car in the data centre

Nick Kew

@Baldrickk

If ever there was a time and a place for Windows bashing ...

You're doing open source wrong, Microsoft tsk-tsk-tsks at Google: Chrome security fixes made public too early

Nick Kew

This is a real issue ...

In order to make a release, we need to push out release candidates. Those, at the very least, will contain whatever security fixes are required. And if a release candidate differs from the relevant public code repo, eyebrows will be raised, and blackhats very interested.

Our preferred solution typically involves committing the fixes quietly, with commit messages that don't mention any security implication of what's being done. The fix, but not the issue, is then public for as long as it takes to release. The security issues are announced when the release candidate successfully becomes a release.

EU: No encryption backdoors but, eh, let's help each other crack that crypto, oui? Ja?

Nick Kew

This is government doing the Right Thing, and not getting in the way of industry and society. They're looking at the story of the FBI and the Iphone, and pooling expertise as and when such cases arise and the maker can't or won't help law-enforcement.

Microsoft exec says ARM-powered Windows laptops have multi-day battery life

Nick Kew
Meh

All my life

(or at least since I first acquired a laptop, in about 1993 or '94)

I've been waiting for this (kind of thing). Something I could stuff in the backpack for a weekend - or (much better) a week - away, up in the mountains.

I wonder if we can get a spec something like this wishlist? We have the processor and (I imagine) the solid-state storage, so an e-ink screen would complete the trio of hardware fundamentals.

It's coming. Just as I'm getting too old to take advantage, and struggle ever more to lug camping gear and a week's worth of food&stuff over the mountains and still enjoy it.

Now German companies are beating the drum over poor patent quality

Nick Kew
Holmes

Re: Changes

The prize for winning is more opportunities and a lower bar for European companies to act as privateers, raiding the rest of the world.

At least, that's the general idea, based on how US economic imperialism has worked for a long time. I'm not convinced it can work for Europe, as the dynamics of the legal systems are so different (clearly German lawyers aren't up for it). I wonder if there's a profitable arbitrage to be had in jurisdiction-shopping?

Man prosecuted for posting a picture of his hobby on Facebook

Nick Kew
Alert

Traditional

Also, having laws that prosecute people because something is "grossly offensive or of an indecent, obscene or menacing" is asking for trouble. It is very subjective and easily abused to prosecute basically anyone at any time.

That's traditional.

One generation ago: The Romans in Britain.

Two generations ago: Lady Chatterley.

etc.