* Posts by Claptrap314

2994 publicly visible posts • joined 23 Jan 2015

Apple accused of censoring apps in Hong Kong and Russia to maintain market access

Claptrap314 Silver badge

If Apple cared about human rights

then they would not be manufacturing in China.

Fraudulent ‘popunder’ Google Ad campaign generated millions of dollars

Claptrap314 Silver badge

Re: Why would the ad networks care?

Heh. Wanna bet?

I worked for G a few years back. During a talk, a member of their ads team mentioned that recently, someone trying to do the right thing suggested tracking ROI for their ad customers. The answer swiftly came back, "NO!". It seems that the analysis had been done years earlier, and was known to be << 1. Not the sort of thing you want your suckers customers to know.

Crooks copy source code from Okta’s GitHub repository

Claptrap314 Silver badge

Re: App used by USA Defense

Secrets in source code is a full stop NO. IaC is no different, just a new set of excuses.

Meet the merry pranksters who keep the workplace interesting, if not productive

Claptrap314 Silver badge

Re: Pranking is abuse

Getting into a prank war with THAT crew? Stuff of nightmares. And induced heart attacks.

They made the right call.

Beijing needs the ability to 'destroy' Starlink, say Chinese researchers

Claptrap314 Silver badge

Re: Why would the US military use Starlink?

I went ahead and upboated this, but ever hear of the nine inch drop test?

Yes, military equipment is ruggedized. But when the time comes, it will still break--and then the improvisations start. The best ones get added to the TM.

Devil's lettuce: Toxic weed harvested with baby spinach causing delirium in Australia

Claptrap314 Silver badge

We had a ditch

full of the five-leafed weed on a farm in the middle of Western Kansas. (Who knew it would grow so well with only 17" of rain/year?) Yeah, we stood upwind when we burned it. I guess that's where I learned what it smelled like.

Taiwan to Foxconn: Selling stake in Chinese chipmaker? We’ll still fine you

Claptrap314 Silver badge

"He's the Popular Judean's Front"

US sanctions help vaporize chunk of Chinese chip barons’ wealth

Claptrap314 Silver badge

Two decades too late

When I man says he is your enemy--believe him.

If we had taken the Chinese government at their word 20, 30 years ago, we would have never allowed them access to our high tech. This would have bought us at least a couple of decades before they could seriously threaten us. It looks like we are going to sorely miss those decades...

AWS strains to make Simple Storage Service not so simple to screw up

Claptrap314 Silver badge

Re: Funny that...

I agree that S3's control interface is a huge wreck. (15 months here) What I DON'T agree with is at someone can make the access public "by accident". You have to either be a ******* yourself & either not read or not bother to understand what you are doing, or you do it intentionally.

It's almost a shame that when these things blow up, it's not literally in the face of the culprits.

San Francisco terminates explosive killer cop bots

Claptrap314 Silver badge

In one story, work was being done in an environment with elevated radiation levels. Slightly more dangerous for humans, instantly deadly for androids. There was no stopping the "Human in danger!" reflex, so the androids were constantly frying their brains. So a special robot was made that would not "endanger human life through action". As opposed to "through action or inaction". The result was bad.

In another case, a half-hearted command was given to an android to perform a task which endangered it. Because of the weak command, the android (the only one on the mission, and the one responsible for various critical functions of the mission) basically went crazy.

So it's not enough that 1 > 2 > 3, it's more like 1 >> 2 >> 3. And Randalf skimmed over that.

Claptrap314 Silver badge

I was always dissatisfied with that one. I, Robot was an exploration of the importance not just of the order of the laws, but of the need for the order to be absolute. I feel more credit should have been given.

Pentagon shares nine billion cloudy dollars between AWS, Google, Microsoft, Oracle

Claptrap314 Silver badge
Facepalm

I'm shocked.

Shocked! at this outcome.

If China has the patience to wait another two or three decades, they won't have to do anything but roll over us.

Scientists shed light on oddball gamma rays from deep space

Claptrap314 Silver badge

Re: Nuff not said

Is FTL travel possible? I have no idea. However, if it is, astrophysics is almost certain to provide important data in figuring it out.

Is colonizing the galaxy a realistic possibility? Probably, but astrophysics is going to give us a LOT of data about how to go about doing it successfully.

These are just a couple of obvious ones. The real benefits of basic research are almost never envisioned by the people doing the research.

Rackspace confirms ransomware attack behind days-long email meltdown

Claptrap314 Silver badge
Boffin

Re: Failure

"How Rackspace emerge from this with any sort of positive reputation is beyond me."

You've not been paying attention then. They take their customer's security, seriously.

Cloud customers are wasting money by overprovisioning resources

Claptrap314 Silver badge

Issue of scale

When your total AWS spend is less than $5k/mo, as is often the case for small businesses, the cost of doing a review, even quarterly, is likely to be higher than the savings. In a larger, more mature, organization, SRE's role of cost savings comes to the front. I would need to understand not just the percentages, but the actual dollar amount involved before drawing conclusions from this study.

Of course, what Nate Amsden said above is precisely correct--if you have the scale and maturity to support it.

We're looking at the possibility of having our business grow by a factor of 30 near the end of next year. If that happens, I'm going to be turning off Heroku instances every night. Right now---not so much.

You get the internet you deserve

Claptrap314 Silver badge

Re: .

Whoosh! ;)

Claptrap314 Silver badge

Re: The solution is fairly obvious

Apparently you have no experience in setting up or managing web sites.

Such a change would force the content mills to change one cert & to register additional domains. The cost of an annual domain registration is what again?

Claptrap314 Silver badge

Re: .

But most voters aren't qualified to be a judge in the Turing test....

‘Mother of Internet’ Radia Perlman argues for centralized infrastructure

Claptrap314 Silver badge

Re: Actually Bitcoin…

I am 100% certain that I'm not the only regular commentard that was on the cypherpunks mailing list in its heyday. Please don't speak in such a way about matter when you clearly have first- and second- hand witnesses present.

The goal absolutely was to create a medium of exchange that was beyond the influence (let alone control) of the existing bank-nation-state complex. There is a reason that electronic currency was followed immediately by revolution, after all. The discussions centered around small, rapid transactions. I don't even recall the idea of central exchanges being discussed, but if they had been, the idea would have been dumped on since such sites are obvious attack points for the existing Order. The model was the remailer network. The idea was that the miners _would_ be the servers that people used to promulgate transactions.

Since for the first decade, we had no functional examples, the sheer volume of what was being spoken of was not so evident. It's been a while, but I don't recall anyone addressing the issue. Indeed, the CAP theorem was only published in 1998, and as I admitted recently, I never considered its relationship to coin until it was mentioned here a month ago.

Of course, I cannot speak for Satoshi, but the cypherpunks _were_ the ones playing with it when it came out.

Claptrap314 Silver badge

Re: Broken? No thanks.

When our ancestors solved the "the lions are killing us" problem, it was immediately replaced with "our neighbor lion-killers are killing us". What is termed "progress" has always had this tendency to replace one problem with another.

There is a good reason to focus on today's problems. Most of the developments of the sort she seems to be mentioning were the secondary effects of earlier problems being solved.

Four suspects cuffed, face extradition over tax refund scam plot

Claptrap314 Silver badge
Coat

BLESSINGS anD SuCCESS!

I am the Nigerian.....

Cisco wriggles out from $2 billion bill for ‘willful and egregious’ patent infringements

Claptrap314 Silver badge
Happy

On second thought...

At first, this decision sounds outrageous. And utterly bizarre that the USSC would allow it to stand. However... there is a strong case to be made that the appearance of justice is more important (to the state) than justice itself. Whether or not this is so, the question before the appeals court was the matter of the appearance of justice. Now here's the thing. Suppose I am a judge. I have a duty not only to be impartial, but to appear impartial. Moreover, the judge is a human. And humans are funny social beings. And if I'm known to have skin in the game, there is a temptation to try to _prove_ that I am impartial by not favoring "my" side. Which I can do by being harder on "my" side than the other side.

And that's the issue. CISCO is essentially in a position of being able to claim that this clearly trivial stock holding by the judge's wife might have pressured the judge to rule against CISCO because of the judge's temptation to _appear_ impartial rather than _be_ impartial. That's an important claim, and apparently one that the appeals system accepts.

KmsdBot botnet is down after operator sends typo in command

Claptrap314 Silver badge
Pint

Re: Puhlease!

If I were in that part of the business, I would almost certainly fake my name. Don't think for a minute that security researchers avoid _special_ attention by the scum.

-------> for the good guys.

Claptrap314 Silver badge
Trollface

That's go for you...

FBI warns about Cuba, no, not that one — the ransomware gang

Claptrap314 Silver badge
Trollface

Why

would someone pay to have their data _encrypted_?

Bring back the Paris icon!

San Francisco lawmakers approve lethal robots – but they can't carry guns

Claptrap314 Silver badge

Re: News article, soon, i'm sure.

That's what "cover" means when you are on the playground and eight years old.

Cover fire is intended to be enough to keep the enemy pinned and unable to observe the battlefield. Set your gun to three round bursts and fire when you see movement.

Claptrap314 Silver badge

Re: First option

Or, say, Colorado? https://en.wikipedia.org/wiki/Columbine_High_School_massacre I'm afraid this is NOT a completely isolated thing.

Google wins lawsuit against alleged Russian botnet herders

Claptrap314 Silver badge

Re: "DIPLOMACY, n. The patriotic art of lying for one's country."

I've got 4000 years of human history that says you're missing what actually happens in diplomacy. I'm certain that anyone with a working knowledge of Old Egyptian or Sumerian politics can best me.

Claptrap314 Silver badge

Nothing special about the Russians on that account, I'm afraid.

"DIPLOMACY, n. The patriotic art of lying for one's country." -- http://www.thedevilsdictionary.com/d.html

Germany says nein to Qatari World Cup spyware, err, apps

Claptrap314 Silver badge

"At this point...

you had better HOPE that this decision (to hold the World's Cup in Qatar) is the result of bribery. Because that is the ONLY way this decision can make any sense."

I'm not a fan of that comedian, but I'm pretty sure he called it.

Tesla reports two more fatal Autopilot accidents to the NHTSA

Claptrap314 Silver badge

Re: Another goat?

Total US deaths by car accident in the US, 2020: 42,338. (https://injuryfacts.nsc.org/motor-vehicle/historical-fatality-trends/deaths-and-rates/) That's an average of slightly less than 116/day. Hardly "thousands every day".

But even if deaths/mile driven (a FAR more meaningful stat) were, say 1% of what you have with humans driving, you still have to contend with the problem of remote control assassination or mass murder that simply cannot exist without these interposing systems.

If you've been paying attention, these issues have been raised here continuously.

Australian exchange pauses project to move stocks to blockchain

Claptrap314 Silver badge

Disappointing, but not unexpected...

Transaction speed has always been a weakness of these systems. Now that ChoHag has brought up CAP, it really looks to be core. In order for these things to work at all, they have to be CP. That means A is flying in the wind.

Claptrap314 Silver badge

Huh. I've had my eye on this for quite a few years, and had always missed the application of the CAP theorem to the blockchain.

But I'm going to disagree with your characterization. I would argue that blockchain actually sacrifices A, and that traditional (centralized) systems, not being distributed, drop P. For Bitcoin and Etherium, at least, a transaction is not added to the chain unless a majority agree to use it for the next block (thus preserving C), however, proof of that (the transaction settling) waits until some number of blocks are added (thus sacrificing A). I expect that other systems work in a similar fashion. There is really no way to talk about a "chain" unless there is only one.

UK forces Chinese-owned company to offload Newport Wafer Fab

Claptrap314 Silver badge

"...company 'does not accept the national security concerns raised.'"

Well, now they wouldn't would they?

If you want to do business in a country, you have to play by the rules of that country. Who do these people think they are, Uber?

Investor tells Google: Cut costs now and stop paying staff so much

Claptrap314 Silver badge

"The stock is cheap right now"

So we want YOU to buy it.

That part should have been in the first paragraph. Would have warned everyone with a half-functioning brain that the rest of the letter is less than worthless.

Spent Chinese Long 6A rocket spews over 50 pieces of space junk

Claptrap314 Silver badge

Always relucant

to ditch the hunny, I see...

NSA urges orgs to use memory-safe programming languages

Claptrap314 Silver badge

Re: Self Hosting

https://users.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf

Swiss Re wants government bail out as cybercrime insurance costs spike

Claptrap314 Silver badge

It's not the insurance industry

that needs to mature in this case.

Except for that bit about whining when a bet turns sour.

FBI: Russian hacktivists achieve only 'limited' DDoS success

Claptrap314 Silver badge
Mushroom

Re: If only we could convince them the way to hurt the US

I disagree pretty strongly with what you are saying, but that final line got the upboat...

China is likely stockpiling and deploying vulnerabilities, says Microsoft

Claptrap314 Silver badge

Re: Cut them off at source

So how do the bad guys find them?

This is a market failure, plain and simple. The buyer entirely lacks the ability to evaluate security, and as only a very limited ability to even value it in the first place. Not that government intervention is likely to help much if at all.

Companies release garbage software because the market tolerates it. They can do a LOT better. It's just that they would lose market share if they did.

Ritz cracker giant settles bust-up with insurer over $100m+ NotPetya cleanup

Claptrap314 Silver badge

Re: These Insurance Companies...

This is the first job I've held where security & compliance were part of the JD. I've not dealt with our insurance carrier (yet), but the vendor security surveys are ENTIRELY along these lines.

My personal favorite is when they demand that we rotate our passwords every three months. Of course, NIST reversed its recommendation on that front years ago...

Terraform Labs and crypto bro Do Kwon face $57 million court case in Singapore

Claptrap314 Silver badge

That depends entire on your standard of evidence. In civil cases in the US, it is often "preponderance of the evidence"--in other words, if the evidence is 51-49, the 51 party wins.

No idea what the standard is the the colonial-law system of Singapore, but if the complainants can manage to show that he was using known bad technology (ie, the same tech that had previously failed the defendant), then that's some pretty strong evidence.

War declared on bosses using 'omnipresent surveillance' tools to quash union efforts

Claptrap314 Silver badge
Boffin

Re: crack down on the growing use of technology by bosses

If you are in the US, you clearly either slept through your harassment training or have a very short memory.

Yes, managers are employees. They are also _managers_, and as such have a lot of rules that apply to them that don't apply to line workers.

I'm not commenting on any other aspect of your post.

Education tech giant gets an F for security after sensitive info on 40 million users stolen

Claptrap314 Silver badge

Why?

Are they still in business?

Fines for this garbage ought to start as a % of global business & double per breach with less than 3 years between. Add some personal liability for the board & C-suite while you're at it.

Apple boosts bug bounties but may not fix some bugs in past operating systems

Claptrap314 Silver badge

Re: "Log in with your Apple ID"

Interesting. I'll try to keep that in mind for next time, I guess.

Claptrap314 Silver badge

"Log in with your Apple ID"

Time for burner credit cards?

I go through this with every employer. No company credit card? No Apple ID.

One good thing about the corporate rooting system at my current employer is that I still manage to get all the important updates.

Ordinary web access request or command to malware?

Claptrap314 Silver badge

Anything over anything

This is another application of the AoA meta-protocol that I mentioned with the DNS-over-https stuff was first brought up. Honestly, the only surprise is that this appears to be new or at least rare.

Biden now wants to toughen up chemical sector's cybersecurity

Claptrap314 Silver badge
Devil

Itsn't there an app for that?

To go with the new SMART controllers?

Martian microbes could survive up to 280 million years buried underground

Claptrap314 Silver badge
Alien

"And viruses"

So... we could be looking at a reverse War of the Worlds situation, then?

Luxury smartphone brand returns with $41,500 device

Claptrap314 Silver badge

Now, you need to understand

Getting those alligators from the New York City sewer system to the Himalayas isn't cheap! You're paying for real work here!

("I ain't never had no union steward ask for no hazard pay on account of no alligators in no sewers")