Posts by Robin Bradshaw
171 posts • joined Wednesday 26th September 2007 09:19 GMT
Hooray
Hooray, There will be much rejoicing as soon we shall be able to blast through our monthly download limit in 0.1 of a second. Isn't technology wonderful.
Next week
I assume that next week there will be uproar when the world discovers that for only a few hundred pounds you could buy the necessary tooling to make a gun out of real metal that fires more than one shot from machinemart/screwfix/axminster etc etc
Dont they teach metalwork in schools any more?
Why such a complex creature :)
Would it not have been easier to start by modelling a simpler lower form of life, like politicians?
But seriously this is impressive, i look forward to the day I can design and simulate a custom worm on my computer then send off the models dna to a lab and get a packet of custom attack nematodes back in the post, it will be awesome.
Not going to happen
Tracability of IP addresses will never happen, if it did your ISP wouldn't be able to charge you through the nose for a fixed IP for your home server.
ukgnome search ebay for "fe-5680a" it wont be so much a wristwatch as an atomic clock rucksack but itll be cheaper :)
What?
"The unit contains a temperature controlled caesium gas chamber. A laser is used to heat the radioactive atoms, and a microwave resonator to detect the emissions from the atoms’ electrons as they change energy levels as part of the radioactive decay. The frequency of the microwaves is highly stable and provides the clock’s beat."
Unless symmetricon have some freakish new way to make a physics package the caesium used is caesium-133 which is not radioactive, and radioactive decay has nothing to do with it.
Here is a great video where engineer guy explains how a Cs atomic clock works, please note references to radiation are to electromagnetic radiation, ie microwaves
http://www.youtube.com/watch?v=p2BxAu6WZI8
Its not like they will have been broadcasting AIS location data and you couldnt have just watched the ship here:
http://www.marinetraffic.com/ais/
It seems somehow easier to just watch it on the internet than trying to salvage the nav systems from the scrappers and read the data off it.
Re: Stupid question
I think the letting go of a falling slinky has been covered most impressively by Veritasium on youtube here:
https://www.youtube.com/watch?v=uiyMuHuCFo4
The slow motion video is quite captivating.
Re: Bonk Cards
I havent looked at nfc bank cards yet as i dont have one, but id certainly like to know more about the security of the cards, would you even have to steal the wallet or could you read the details off the card while it still in you pocket and clone it?
Mines the one with the proxmark3 in the pocket :)
Re: Legal oddity.
"A peppercorn in legal parlance is a metaphor for a very small payment, a nominal consideration, used to satisfy the requirements for the creation of a legal contract"
http://en.wikipedia.org/wiki/Peppercorn_%28legal%29
Re: Every article I've seen about this neglects to mention the most important thing
"An SDR is fairly bulky and probably wouldn't make it through secuirty, so I question the validity of this guys claims."
http://www.ettus.com/ <expensive yes, bulky no
If by fairly bulky you mean about the size of a book then yes its bulky, and since the ettus stuff comes in a nice shiny white professional looking box i have little doubt it would pass security, yeah if you tried to take a bare pcb with loose wires and tape holding it together id expect some raised eyebrows (but you just put it in a nice pelican case with a professional looking sticker saying "industrial prototype property of aperture labs" and it will probably still pass)
Not the only one wondering
Not quite the same but someone gave a talk at defcon 20 about the possibility of feeding data out of an x-plane simulation into gunradio to broadcast x-plane generated ADS-B into the real world, the flipside of feeding real world ADS-B into x-plane so you can virtually fly with real world planes did intrigue me thought, that could be fun.
http://www.youtube.com/watch?v=CXv1j3GbgLk
What i have learned from this discussion
I think the one thing I will take away from this comments thread is the fact the United States doesn't appear to be particularly united, wouldnt it be easier to just agree on one set of laws for the whole country?
Hardware RNG's are already here
My VIA eden based home webserver (ok its actually a recycled thin client) has this feature allready as well as hardware accelerated AES and RSA. See cpuflags: rng rng_en ace ace_en ace2 ace2_en phe phe_en pmm pmm_en
Re: Unrelated file
I believe the unrelated file was infact a message with a contact email address about how the system was being used to scan the IPv4 address space after access had been gained through a default password.
Oh BT let me count the ways i hate you
When I first moved into my house I arranged to get the phone line/adsl reconnected waited in for the engineer and all i got was a txt message saying it was all done, now im sure they had done something but they hadnt connected the phone as it was still completely dead.
Ringing them up and getting past the standard doom and gloom it will cost you £££ if its your fault i tried to explain that it was probably connected as far as the pole at the end of the street but that I needed it to be connected all the way to my house, some more waffeling about availability of engineers and I finally cracked and told the nice lady if you dont fix it im going to climb up the pole and hook up the pair myself.
The engineer and his nice fluke line break tester thingy arrived first thing next morning and sorted it out :)
Then last year I had a friend banging on my door asking "if i ever answered the phone?" to which i replied no but it hasnt been ringing anyway, which is how i found the AC ringing signal was broken and why I hadnt had any nuisance calls for a few months.
Reported the fault, the engineer turned up at the allotted time tested the line and confirmed it was broken but it was a job for the people in the exchange not him and said they would fix it and buggered off.
That evening I got a text message to tell me it was fixed so I tested the line and it wasnt. So I got to play some fault report ping pong with them, reopen the fault, their helpfull website shown me a nice picture saying its my equipment at fault and closing the issue, me reopening the fault etc etc
The fifth time I reopened the fault I had lost my temper and added the comment "for god sake check the line card at the exchange" to the ticket. That seemed to do the trick.
Oh BT I hate you so.
Re: Not one but two
I have a cunning plan, what we need is location data for these crusty old lead/paper/copper cables on googlemaps, the pikeys will have away with it in no time, since it cant be BT's cable as they have sworn they dont have any, they wont have to burn the pvc off it and they can sell the lead too. Win all round :)
simple bit of notation
E=½mv² fixed that for both of you :)
Is it only samsung???
There are only a handful of companys who write firmware for for PC's off hand i can think of phoenix, award, AMI and insyde and i think the first 3 might all be the same company now, oh and dell but thats just a phoenix bios mangled beyond all recognition.
I had a quick google and it appears the NP700Z5C is using a phoenix efi bios, I know the bios is customised by samsung for their particular machine and with UEFI apparently being designed to have loads of crap shovelled in to it I hope it was something stupid samsung did, but im intrigued as to if this is just samsung thats affected and if it is how have they managed to take code that many other manufacturers are also using and break it so spectacularly.
Bah annoying rules
Id have suggested xkcd and minutephysics
Re: DO NOT CALL lists Do Work - especially with a large FINE!
I am intrigued by this idea, i checked the BT specs for there special information tones and it appears the UK only has one (950Hz,1400Hz,1800Hz all ±50Hz) you can find the specs here: http://www.sinet.bt.com/350v1p3.pdf about half way down page 4.
The tolerance in the frequency of ±50Hz means the US tones are within the specs for the UK tones too.
I want to test this so I have just made an outrageous £10 purchase of a USB 56k modem to hook up to my raspberry pi, I had an idea i could script it to watch for it to report a ring then wait for the ringing to stop force it off hook then either play an audio file or i think AT+VTS=[985,,38],[1428,,38],[1776,,38] will do it if its supported then force it back on hook. With a possible upgrade to asterisk and a suitable hell menu if i ever feel like paying for caller id.
Anyone got any better ideas?
Righteous indignation
I know I should be more annoyed at the MOD screwing things up.
Sadly however I am just surprised we aren't discussing problems of the planes propellers getting tangled in the rigging, or difficulty procuring enough oak to build the carrier, hemp with which to rig it and incompatible cannon ball sizes .
I think the real story here is that Vint Cerf and Robert Kahn published their paper, A Protocol for Packet Network Interconnection as a PDF in 1974. That really is ahead of the curve :)
Re: liquid lenses
If you would like to see a liquid lens in action and details of the usb webcam it came out of Ben Krasnow has a video demonstrating it here:
http://www.youtube.com/watch?v=zvMv6WiWMHA
There are people deserving of this law they just arent going after them.
"Section 127(2) targets false messages and persistent misuse intended to cause annoyance, inconvenience or needless anxiety."
Well if they have these powers why the hell aren't they going after ISP's with their outright lies like Unlimited* and upto 16megabit* and anything else that has an asterisk of bullshit after it. They are false messages that cause a great deal of annoyance and inconvenience.
And how about all the infuriating robocalls about loft insulation/ppi/switching utility providers/hearing loss claims and especially those twats with the awfull voip lines from india pretending to be microsoft support.
If your going to interpret a law overly broadly to increase your statistics you could at least do it in a way that benefits the public.
Re: Simple solution
An even simpler solution, they could just wait and the fat PS3's will all slowly die off with YLOD and the problem will go away.
Re: They need to be careful here...
auburnman its not exactly what you want but its pretty close http://www.theyworkforyou.com/
So much promise yet the end result will be smartphones that you cant remove the shitty operator crippled firmware from and computers that nickel and dime you for every little function because you cant install anything except through their app store, it may involve increased risk but ill take freedom over security.
Thats your problem right there!
"5Mb/s down, 1Mb/s up, for $40"
Thats why its not popular in europe those speeds at that price would make even talk talk look like an attractive proposition.
“USBs report themselves as fixed disk,” Niehaus told the crowd in his session, and therefore cannot be partitioned. “Special hardware” will therefore be needed to
Horse shit! Just because windows is brain dead and wont let you partition a USB stick doesnt mean you need special hardware, they just need to rewrite their usb removable disk driver so it isnt so stupid, partitioned usb drives work just fine under linux.
I think what they really meant is we wont let your drive work unless you pay us.
Re: Stupidity continues
The wifi monitoring was intentional to record the location, signal strength, SSID and MAC address of any wifi access points it could see, this was to build the database that android phones use to get a rough location fix without the use of GPS, the phone simply listens to see what access points are in the area, sends this to google who then query the database and return the likely location of the device.
Basically just the same as skyhook does for the iphone i think, but google just decided to make their own database instead of paying skyhook.
the need for this is less now as i *think* android phones themselves report back similarly when they have a good gps fix and wifi on so ensuring the wifi triangulation database stays up to date but it needed to be created in the firstplace before there were alot of android handsets about.
I can understand how with deadlines to meet it would seem a trivial task to just fire up airsnort on a laptop dump the data to a drive and then grep the log for SSID broadcasts and correlate the timestamps with your GPS log, and if you didnt think carefully about it this would work but grab other stuff too.
Id put this down to rushing to get a job done rather than some evil Machiavellian plot.
See its innards on youtube.
Mikeselectricstuff has an excellent teardown video of this on youtube here:
http://youtu.be/7xdajSS_cOU
Its a fantastic bit of design although im not sure its worth the asking price.
The cure is worse than the disease.
Perhaps the US should launch a secret black op to smuggle copies of norton antivirus to the iranians, that should set back their nuclear programme by years.
You forgot to include the £183,000 cost of the 33GHz Agilent DSOX93204A Infiniium High-Performance Oscilloscope upon which to see the effects of this audio twattery, because obviously if you can hear a difference you will be able to measure and quantify it with a scope, wont you?
Re: let's look at it from a different perspective
HDMI with encryption you say!!!! http://pastebin.com/kCA3dFDv sucks to be them, the master key has been known for nearly 2 years now.
Re: nVidia has more important things to do
Lucky Titan doesnt run linux or GPU support would be a pain :)
Re: Fail
Indeed as WDX noted APOPO and their hero rats are already doing this.
http://www.apopo.org/home.php
So have i got this right?
So what they are saying is they want the ISP's to ask for a cut of traffic coming from popular sites such as for example netflix, google, microsoft (for all the windows updates)
so what happens when these popular sites say no and route all traffic from the money grabbing ISP's to a black hole?
How long do you think an ISP would survive if you couldnt reach google/netflix/microsoft from their connection, and as has been noted who do you think would then buy what was left?
Re: Why use an altimeter when you have a GPS tracker?
The COCOM non-military limits on GPS are i think you cannot exceed 1,000 knots speed and 60,000 ft altitude at the same time.
In theory with all chipsets you should be able to exceed one limit as long as you dont exceed both but in practice many manufactures implement this as OR rather than AND.
For a list of good chipsets where you can exceed 60k feet as long as your slower than 1000 knots look here:
http://ukhas.org.uk/guides:gps_modules
GPS modules that work
The uk high altitude society has a small list of known good GPS modules that work at high altitude
http://ukhas.org.uk/guides:gps_modules
Sigh!
And the worlds media companys wonder why people steal content.
Comic Sans would be more befitting the company.
And this is why they are dusting off and bringing back the Interception Modernisation Programme.
Once you strip away the fluff
Once you strip away the fluff of this press release it will more than likely turn out that boeing has contracted to build some android handsets to the NSA's Project fishbowl standards
http://www.nsa.gov/ia/programs/mobility_program/index.shtml
Presumably based on the SE android kernel
http://selinuxproject.org/page/SEAndroid
So more than likely somewhere like foxconn is going to make handsets for boeing for peanuts, boeing will then load their secure android firmware on them and sell them to the government at a $10k markup.
So business as usual all round!
How long until there is a facebook group for outing companies that do this sort of thing in a comedy twist on the companies disparaging themselves, and of course demonstrating their employees are muppets who ignore basic security, so their systems will likely be easy pickings.
As the AC mentioned, its largely been done http://palaeo.gly.bris.ac.uk/Essays/WWD/default.html
They just didnt print out plastic toys to take home.
My thoughts on android bootloaders FWIW
Would you buy a laptop that wouldn't let you install the OS of your choice? or whose warranty was voided because you installed ubuntu? No and neither would I.
Phones only have a reputation for being fragile easily killed devices because their boot-loaders are actively trying to keep you out, they have been designed to be that way. There is no reason at all that they couldn't behave more like the BIOS of a PC, by all means encrypt/sign the radio stack with the strongest crypto on earth, that's a good thing as messing with the radio could cause havoc on the network, but leave the application processor open and allow unsigned code and recovery from a bad flash.
That way the networks can be happy the radio isn't doing anything bad, and the customer can be happy flashing any old crap software to his phone safe in the knowledge that if it all goes tits up you can just hold the magic key combo whilst turning on the phone to enter the boot-loader and put some other OS on it to fix it. That would be great wouldn't it? No more having to lie to customer services to say it just died if you botched a hack, tech support could just point you to the instructions to put the official firmware back on the phone and tell you to call back if you still have a problem when running that.
To extend your analogy, if telcos provided unlimited electricity they would change your main fuse to 1 Amp and then tell you it was unlimited and charge a small fortune to replace it when you blew it trying to boil a kettle.
"these accounts weren't set up with Virgin or Google either. So where have they scraped them up from?"
If i had to guess id say your kids probably created an account on youtube so they could comment and post stuff/ lie about their age and since google are tying stuff together under one login then this may be something that affects them.
