* Posts by David Roberts

1606 publicly visible posts • joined 25 Jan 2007

Illegal drugs and dodgy pics? Nah. Half the dark web is perfectly legal

David Roberts

So dark net is no longer dark

Apart from all the bits they didn't find.

FreeBSD 10.3 lands

David Roberts
Paris Hilton

Developed from Unix?

Back in the day there were two main variants of Unix - AT&T System (most Unix boxes) and Berkley Systems Division (mainly used by Sun).

From reading the comments, FreeBSD is a free version of the Sun Unix.

So when did it stop being Unix?

Icon in case this is a dumb question.

Top Firefox extensions can hide silent malware using easy pre-fab tool

David Roberts
Facepalm

Messy article, messy comments.

As far as I can tell someone has demonstrated that a malicious extension can hijack reputable extensions and do bad things (the implication being that reputable extensions have the power to do bad things but don't ).

For context, some of the most popular (vulnerable) extensions were listed.

Cue commentards promptly slagging off various extensions, apparently missing the point that you also need to install the malicious extension for harm to happen.

Isn't the real message that the extension framework in Firefox is unsafe by design so be very careful about adding extensions?

Just to join in the general slagging off, I've given up on Firefox on Windows and Android because it is so bloated and slow.

Whatever happened to ... Nest?

David Roberts

Channeling Microsoft?

Microsoft certainly used to have the strategy of letting the market chose a winner then buying the company.

With much the same results - the innovators who worked long hours to push a personal vision didn't fit well into corporate mega-culture and moved on.

The products then tended to stagnate and slowly die.

Perhaps someone could look back into history with a search engine and see how it all turned out?

R&D white coats at HP Inc will make corporate ID into wearable tech

David Roberts
Black Helicopters

Can't be passed to another person?

So something more sophisticated than just a card, or even a card with a password. Not like a credit card you can send someone else to the shops with. Fingerprints are allegedly easily fooled by a picture.

So, need a sample of your genes?

Can you all say "bio-aware implant" children?

Amazon ports Alexa voice assistant to Raspberry Pi

David Roberts

Full setup not shown?

I was intrigued by the picture and wasted some time chasing AYL speakers.

The ones looking like the picture are audio cable speakers with no microphone.

So presumably the USB bits include a Bluetooth dongle for a microphone. In which case why not go for one of the many bluetooth speaker/microphone combos?

Just a picture to say "look - Pi with a speaker" to explain what audio is?

Anyway, looks like fun.

Ransomware now using disk-level encryption

David Roberts

Encrypts/decrypts for months?

Does this mean a reboot with a Live CD (for example) would find evidence of the encryption?

Ever wondered what the worst TV show in the world would be? Apple just commissioned it

David Roberts
Unhappy

If Apple have no sense of humour..

..then the obvious challenge is to produce a show which appears to champion "core values" "brand excellence" and other such wonders but laces it with subtle sarcasm. See how many episodes you can produce before the sponsors twig.

Although what is really needed is the equivalent of "Yes (Prime) Minister" where the public think it is so unreal that it is ludicrous (but funny) and the insiders keep asking "Who told you about that?".

Titled...ummm...."Yes PM (Program Manager) {all pigs fuelled and ready to fly}" where the politicians are replaced by clueless suits with no IT knowledge, the Civil Service by Sales and Marketing...there is loads of scope in Government IT.....

Well, no, that is starting to look more like a depressing tradgedy than light hearted comedy.

Six charged for 'hacking' lottery terminals to spew only winning tickets

David Roberts
Facepalm

Expect a lot more charges

Once someone discovers a way to work the odds, the word will spread like wildfire.

Illegal, but far too tempting when it feels like a victimless crime.

A variant on the "If you bang the machine just here you get free candy.".

Immediate temptation and an anonymous victim.

This does, of course, make you wonder how they test these machines.

Calm down, dear: Woman claims sexism in tech journalism

David Roberts
Unhappy

Of course it was satire.......

......just not very good satire, sadly.

Computers shouldn't smoke. Cigarettes aren't healthy for anyone

David Roberts

New motherboard and memory?

Should have thrown in a case and PSU as well, given the overall cost.

Then just moved the HDD across.

Save all the time spent cleaning up.

Your money or your life! Another hospital goes down to ransomware

David Roberts
Windows

Sigh. Windows vs Linux again.

I'm struggling with this at the moment.

I've bought a new HP colour laser printer (Ethernet connected) and I'm trying to get it to work with Mint.

Despite the support being added to the generic HP printer support software the version in Mint is two releases behind. Denied that there was an HP printer on the network.

I've hand upgraded to the latest version via the command line complete with warnings that my version of Mint is not on the suported list so it may not work. The software now admits that there is a printer there, but can't print to it. I will soldier on because it is a challenge.

[Note that I had the same issue with an older version of Ubuntu I played with briefly before wiping, so it is not a problem specific to Mint.]

Under Windows (7 and 8.1) IT JUST FUCKING WORKS!!!

Now I don't hold evangelistic views over which OS is better, more moral etc. but until you can take common hardware and just have it work with Linux then most large organisations are likely to opt for Windows because it is the first (and often only) OS that equipment suppliers implement against.

I am a long term Unix and Linux user and it is a good choice for many implementations.

However Linux will never become a leader on the home user desktop unless/until GUI based support for consumer hardware is supplied at the time of hardware launch.

It will never take over in complex environments like hospitals until manufacturers of specialist equipment include Linux support. Which may never happen given that some kit won't even work with Windows later than XP.

Now thoroughly depressed.

How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript

David Roberts

Open Source Software??

I naively thought the whole point of OSS was that the developer(s) couldn't one day just throw a wobbler and tell you that you couldn't use the code anymore. Or suddenly decide to charge you loads of money. Not, of course, mentioning any names such as Microsoft.

As far as I can see this developer has had a spat with the firm hosting the code, and made it very public by pulling all his code from the repository. Obviously effective from the article here.

Just needs someone else to pick up the code and re-publish.

As already commented, hopefully this will make developers think a bit more about where their code comes from. Then again this does make for very Agile coding.

What to call a £200m 15,000-tonne polar vessel – how about Boaty McBoatface?

David Roberts
Coat

Endless scope for fun

I was kind of hoping it would be named the Black Pig. For endless crew name puns.

However I would go with the leading suggestion if they recruited a Mr. Skipper to be the commanding officer.

Skipper Skipper of Boaty McBoatface has an undeniable ring to it.

[Or even Skipper McSkipper.]

So where has the legal 'right' to 10Mbps broadband gone?

David Roberts
WTF?

Right to request?

As far as I know I have the legal right to request a 10 meg connection now.

I can also request may other things that people are not obliged to supply me with at a cost I am prepared to pay.

If the wording included "and to be supplied with at a reasonable cost" it might make more sense.

Mystery Kindle update will block readers from books after Wednesday

David Roberts

Or later?

The linked page (thanks) lists "{version} or later".

This caused a few moments of mild paranoia until I confirmed that the version quoted was the latest version.

The inner pedant is now grumbling. I assume that the information is supposed to stay unchanged and so allows for future versions.

David Roberts
WTF?

Re: Non-cloudy thinking - SD card

I've had a really good look at my Kindle amd I can't see an SD card slot anywhere. So I'm not sure how this is relevant to my Kindle use.

I have various devices I use to read Kindle books including a mobile phone (which does have an SD card slot, although many don't) and a tablet (likewise). I share the Kindle between myself and my partner. We can both order (usually free) books from the Kindle store and have them available across all devices. So the "cloud" seems to work fine for this use case.

I could, of course, have a routine of connecting all devices via USB to for example Calibre to keep them up to date but why? If I am buying the eBooks from Amazon they already know about me and the books so I am missing the downside.

Or is this just a warning to back up your Kindle store to Calibre now and then?

Domino's trials trundling four-wheeled pizza delivery bot

David Roberts

For the last half mile?

Given that I don't know how far apart the pizza shops are...

These devices are far too slow to service anything but a few city blocks and the requirement to have enough power to return to base also limits their reach.

So perhaps a "mother van" which carries them out to their target block whilst charging, drops them off, then collects them again after their short delivery run? Charging them on the way back to reload?

No - it all looks far too complicated unless these things roam the streets with a gas fired oven (electric would limit the range) and a magazine of uncooked pizza so they can do "just in time" cook and deliver.

Of course, if they get an upgrade of "smarts" you could find them unplugging your electric car from the road side charging point so they can top off their batteries.....

Nah.

Just a publicity tool plus a threat to their work force to up performance and reduce wages. Have one trundle round the area and see the motivation soar (or at least struggle slightly further above zero).

P.S. Similar problems with Amazon drones - out and back times. One model is to have the delivery van park in the middle of an area and have the drones do the last hundred yards or so in parallel. The slowest part for meat sack delivery drivers is the park, get package, walk to house, deliver, walk back, start up and drive.

Infosec bods pop mobile money crypto by 'sniffing' e-mag radiation

David Roberts

Precautions

Don't use free charging points or put you phone down on any surface in a public place.

Especially on a table in a bar or restaurant.

That should exert some behavioural pressure on the average phone user!

Bloody Danes top world happiness league

David Roberts

Those Brits who responded to the survey....

.....all answered "Mustn't grumble."

Storks bin migration for junk food diet

David Roberts
Joke

Damned African migrants.

Taking over our rubbish tips without permission.

Never past Calais!

Yes, look --->

Met Police cancels £90m 999 call command-and-control gig

David Roberts

Integration with the comms?

Hasn't there been some fluttering in the dovecotes recently over the communications infrastructure?

Things like selecting a mobile phone provider with no coverage inside the Underground?

If your communications infrastructure (possibly one major part of C&C) is a moving target then it may be very difficult to integrate you software.

London is not like most other UK cities because of the Underground network. I have no idea if systems from other major cities such as New York reflect the way that the UK does things. No doubt we shall learn more in time.

Back in the days when I worked on bids the aim of the game was to expend minimal effort on winning the bid, keep things nice and loose in the contract, then do the real design work if you won. Make any under bid back through the inevitable change control when the customer realised that what the specification said wasn't what was really needed. I don't suppose that things have changed that much. Note that this was often agreeable to both sides, especially if the customer had a "use it or lose it" budget allocation and was in the last financial quarter.

I have commented before on the impossibility of delivering if politically motivated changes arrive at a faster rate than the ability to deliver to the previous specification.

Your unpatchable, insecure Android mobe will feel right at home in the Internet of Stuff era

David Roberts
Coat

Anyone who snaps a picture.....

......of me on the toilet is in a world of hurt and will need professional counselling.

Hang on, is IoT Internet of Toilets?

Mine's the one with the extra soft toilet paper in the pocket ->

British IT outsourcers back Remain in the EU referendum campaign

David Roberts

Re: I thought the jobs went to India?

Scotland probably haven't yet taken on board the amount of fiscal autonomy allowed to Greece by the EU.

But we voted for this!

Tough.

Cops hacked the Police National Computer to unlawfully retain suspects' biometric data

David Roberts
IT Angle

Surprise, surprise.....

.....the average computer user in the police force is just like any user anywhere else.

Not enough resources to meet the arbitrary targets (in this case make a go/no go decision within 25 days).

System that deletes the biometric evidence after 25 days.

Outside auditor currently kicking up a stink about biometric evidence being deleted when the suspect hasn't been cleared; is still under active investigation although this has taken more than 25 days.

The Catch 22 is strong in this one.

Amongst all the police bashing nobody seems to have considered that most of the computer wrangling is probably done by civilian back office staff who are simultaneously being told to meet their targets and keep the data. Cue immense pressure to find a "third way".

As with all target driven systems, especially in the NHS, the situation where you are measured on targets not outcomes generates enormous pressure for mis-reporting when the targets are just not achievable due to circumstances outside your immediate control.

On a pure IT front, show me an IT person who has not been pressured to under report hours worked on a project to keep to the "plan". Used to be the bane of my life come project planning and costing time. How can you plan and cost realistically when your resources lie to you?

Anyway, this story to me just demonstrates a broken system with unachievable targets. So the process and targets need reviewing. And fixing. Probably by increasing the available resource until realistic targets can be achieved (see NHS).

All being blurred by bad experiences with the police.

Mechanic computers used to pwn cars in new model-agnostic attack

David Roberts
Devil

Simple first demonstration....

....follwing traditional mainframe practices manufacturers sell one engine which can provide a wide range of performance options enabled by a simple "fix" but costing the customer a significant amount of money.

A simple "ramdom" function which flips the switch and sends out low performace cars with more "oomph" and high performance cars with boy but no racer would provide endless amusement and could be quite hard to track down.

Especially when the slowed car gets taken to a different garage to fix the problem.

Reminds me of the good old days when a dropped EDS (exchangeable disc, not the firm) could be progressively walked round the drives to try and diagnose the fault, damaging each drive in turn and any undamaged disc packs used to cross check results.

Audit Office pours cold water on UK.gov's SME spending target claims

David Roberts
Facepalm

Why would they?

"The body recommended the government stop changing its basis for estimating SME spending"

Consistent figures to measure targets? Get a grip!

NatWest tightens online banking security after hacks' 'hack' exposé

David Roberts

Re: Been there, done that, got the paperwork!

I note that a new debit card was also issued.

As per other comments, you should need to validate that you hold a card linked to your account before you can set up a new payee.

So was the first criminal act to steal or clone the debit card, followed by an attempt to use it to transfer money?

Bungling Seagate staffer leaked coworkers' social security numbers, other info to email fraudsters

David Roberts
Unhappy

Corporate culture?

Perhaps the poor unfortunate who sent the information was regularly shouted at for not responding quickly enough?

A few instances of "Of course it's from me! Are you too stupid to read an email address?" will override any nebulous security policy which senior execs are far too busy and important to read.

Followed, of course, by "How could you be so stupid? Of course it wasn't from me!"

Followed by the poor unfortunate being blamed and fired.

Or worse, if some commentards have their way.

Bill Clinton killed off internet taxes, says Australian politician

David Roberts
Coat

Re: Corrections and Clarifications Column

"Vulture South notes that even with 20 million 'net accounts in Australia in 2016, a "fraction of a cent" a megabyte access tax amounts to a motza annually."

Leaving aside the dubious maths in the original calculation(unless Australia has only 10 cents to the dollar) this would leave the situation where users were being taxed to receive adverts unless they used ad blockers (which would obviously be illegal tax avoidance software).

It also raises the interesting question on who would pay the tax on SPAM which seems to make up a large proportion of Internet traffic.

Then again, the IRS might be an effective force if they realise the financial gains of taxing DDOS attacks.

Alice, Bob and Verity, too. Yeah, everybody's got a story, pal

David Roberts
Coat

All I've worked out so far..

..is tha Bob is back dooring Alice.

(I think).

Email pioneer Raymond Tomlinson dies aged 74

David Roberts
Windows

Bang paths?

From the crusty recesses of my memory, wasn't that forced routing originally through UUCP?

Adopted by RFC 821 again to force email routing through specific servers?

All went away with MX records in DNS, possibly, although it should still work......

India challenges US visa price hike at World Trade Organisation

David Roberts

Apart from India

Who else does this impact on?

Presumably this applies to all workers everywhere, not just from India. However the rest of the world gets railroaded by a spat with India.

Unless of course UK nationals wanting to work in the US for their US employer don't need this visa?

Hacker 'Guccifer' extradited to US

David Roberts

Prison time?

Suspended sentence in 2011.

Convicted in 2014.

Served seven years in jail - when?

The time line is wrong or something is missing.

We’re not holding biz to ransom, says pay to play ad-blocking outfit

David Roberts
Unhappy

Proportinate response?

Government is dependant on the big ad agencies.

Just look back over who runs the election campaigns and who get honours afterwards.

Consider also the FTSE100 firms which rely on advertising.

Given that, it doesn't pay to totally piss off the ad agencies because of the influence they yield.

Users are adopting add blockers in droves.

Soon they will either be banned or circumvented.

So placing an ad filter on your device is a compromise which might work.

Oh, we don't mind YOUR adverts. Just the ones from the bad people.

Is it a protection racket? Could well be. Is it worth the price? Probably for a little while.

The check on the white list sellers is that there are always total ad blockers out there.

They have to please both the user and the advertiser.

Facebook can block folks using pseudonyms in Germany – court

David Roberts
Pint

Censorship and the Great Firewall

In lands where the occupants (often misguidedly) consider themselve both free and civilised they are quite happy for their free world web sites to be viewed in countries where they are illegal.

For instance the web site may be dedicated to gay people. In some parts of the world being gay is a crime.

There is great outcry if there is any attempt to block access. Human rights are often quoted.

Here we have two sites in Europe where the laws are different.

Judging by the former example, we should all be suporting the laws in the country where the web site is hosted. If you are not comfortable with the laws in the country hosting the web site then close your account. Look for a web site in your home country. Or accept the rules of the hosting country.

Seems to me that the arguments don't follow logic or the law; same arguments used in opposite directions depending which outcome you favour.

We should all obey the law. Except that one, of course. It's obviously silly.

Or go with the USA approach. One of our people used you web site so our laws apply.

Incoming!!

Beer because it is Friday and I just cashed a load of tokens at Tesco and got 8 big bottles of Leffe for £1.

SSL's DROWN not as bad as Heartbleed, still a security ship wreck

David Roberts
Black Helicopters

Only really useful...

....to someone inside the infrastructure. Targetting an individual.

That wil be all the TLAs then.

Oh, and ISP is a TLA.

So using HTTPS and a VPN will not protect you against the snoopers charter

Forget data thieves, data sabotage will be your next IT nightmare

David Roberts

Not much money in that

Given that GDS were/are hot for the authentication of identity for the Government Gateway to be handed over to the credit agencies, plus decisions being made on large loans and new credit cards, there must be enormous scope to combine identity theft with credit score manipulation.

Hillary Clinton private email server probe winding up – reports

David Roberts

Immunity

Implies that the person is going to self incriminate during any hearing/trial.

Sadly, it doesn't imply that the person is going to tell the truth

There must be a degree of duress here - we've go you on this charge but if you smear others we won't charge you.

Not unknown in "overheard in jail" testimony in various criminal cases.

Hackers rely on weak passwords when brute-forcing PoS terminals

David Roberts

Success rate?

Plenty of stats on the common passwords used in attacks.

I can't see any on the success rate of these passwords (unless I missed something in the article).

Google risks everything if it doesn’t grab Android round the throat

David Roberts

Update route?

If I understand correctly, there are three steps in a software build.

(1) Google build base software

(2) Manufacturer (e.g. Samsung) spanners it onto their hardware

(3) Carrier (e.g 3) adds their prettys.

The user then views the result with shock and awe.

Now with contract phones I assume the upgrade path follows the same route. Or does it?

Many phones are now bought SIM free.

Many more phones are unlocked post contract and now with another carrier.

Do all these phones have a link to stage (2) in the process regardless of which carrier (and even which country) they are currently with?

Serious question; another view of it is "can your carrier block or delay an update?".

If so, the problem is a lot larger than just Google and OEMs having different priorities.

SEC: Qualcomm hired relatives of Chinese officials to seal biz deals

David Roberts
Mushroom

So they bribed the SEC

To accept their bribery in China?

Normal cost of doing business, and apparently legal as well!

Schneider Electric building manager bug allows security bypass

David Roberts

Admin user with a command prompt

Can do stuff.

Not earth shattering stuff then?

I would guess that if you have a malign admin user you have all sorts of security problems.

Edit: see Lysenko beat me to it.

Investigatory Powers Bill lands in Parliament amid howls over breadth of spying powers

David Roberts
Coat

Re: “cast my ballet”

Can I be the first to say "Me tutu"?

Although the thought of a ballet box is slightly distracting.

Perhaps safer to cast your ballot?

Zuck gets a Brazilian whack: Top Facebook VP cuffed in WhatsApp privacy kerfuffle

David Roberts

Geoblock Brazil?

If Facebook and Twitter shut all access to Brazilian IP addresses then that would stir things up.

Then again, I'm not sure I want multi-nationals blackmailing governments (any more than they do already).

Google Project Zero reverse-engineers Windows path hacks for better security

David Roberts
WTF?

Sniping apart..

..does this mean that you can have drive IDs apart from A-Z which are invisible to most if not all utilities?

The suggestion is there but not much detail.

Microsoft releases Windows 10 preview for Raspberry Pi 3

David Roberts
Black Helicopters

As long as Raspbian...

...doesn't try to auto-update we should be O.K.

DDoS attacks up 149 percent as brassy booter kids make bank

David Roberts
Coat

Not really trying?

The UK doesn't seem to feature in the pie chart for originating attacks.

Are we more cyber aware or just mainly on the receiving end?

Or just lazy?

Science contest to get girls interested in STEM awards first prize to ... a boy

David Roberts
WTF?

Re: runner up - prior art - lens cover

I assume your comment is based on the fact that glass lets water through?

Oh, hang on.........

David Roberts
Holmes

Discrimination?

It depends on how you look at it.

It looks as though there is probably still a barrier to females in the "engineering" arena (why do I get a mental image of crusty tweed clad pipe smoking....) and I know my daughter hit some of this at school.

However computing (especially software) isn't hard science.

It requires a certain variety of logical thinking.

Success at Cluedo might be a positive indicator.

I started my computing career in the early '70s and at the time (doing mainfrsme COBOL programming) there was a good mix of sexes. Recruitment requirement was graduate (or partial completion of a degree course) plus programming aptitude (or at least an aptitude in passing the tests). Lots of different disciplines but no Computer Scientists IIRC.

There was some apparent discrimination because the were more female than male Systems Analysts and most of the programmers were male. Never worked out why.

Then again this was in London which was quite enlightened at the time.

Daughter is still making Daddy proud by earning shed loads of money in IT - more than I ever made.

I do note that the awards seem to be aimed at physical things - tablets, clockwork and the like.

Wheras most IT seems to centre around the "softer" skills (as in software) where logical thinking, multi-tasking, team and negotiating skills all have their place.

One thought - autism is often linked to high intelligence and involves a large degree of social isolation and lack of awareness of the "rules". It is also predominantly a male trait. Which ties in with the image of an unwashed male nerd in a dark basement hacking the Internet - with one in a thousand going on to start an innovative tech startup and some of them to achieve Unicorn status. So perhaps there is a sex linkage to success in certain areas of IT which is not fuelled by discrimination?