* Posts by Mage

9268 publicly visible posts • joined 23 Nov 2007

Tesla 'API crashes' after update, angry rich bods complain

Mage Silver badge
Happy

Security

This makes sense. Having iOS access is insecure.

That CIA exploit list in full: The good, the bad, and the very ugly

Mage Silver badge
Black Helicopters

Obligatory XKCD

Also my view on how significant this "wikileak" is

XKCD Hacking

Hover mouse text (for those on phones/tablets)

The dump also contains a list of millions of prime factors, a 0-day Tamagotchi exploit, and a technique for getting gcc and bash to execute arbitrary code.

(use view element, copy outer HTML)

Mage Silver badge
Coat

Hmm, wikileaks

There is nothing here I not expect them to have. It's always "game over" when you attack one specific person and get physical access to their device. Even cloning a targets phone to an identical looking one with bug HW &SW is old hat.

Indeed as the article suggests, is the reason to leak this to support freedom and democracy or some other reason?

Even if the Trump angle is wrong, (why would Wikileaks support him?), Wikileaks seem more interested in their own ego than the public good.

All the expert agencies are using these sort of tools and often they rely on a human attack on a specific target, such as the "hotel maid" and the senior official's laptop.

Nothing to see here at all, bear in woods etc.

Huawei's just changed the way you'll use Android

Mage Silver badge

Windows, it still supports Alt-F4

So does Linux (at least Mate on Mint).

My Sony Ericsson Z1 is still working perfectly, but if it breaks, I'll look at the Huawei.

Rap for chat app chaps: Snap's shares are a joke – and a crap one at that

Mage Silver badge
Devil

Pyramid selling like scam?

Like Anglo Irish Bank the early guys get the profit, but eventually they sell to "marks". Then the price will implode.

The non-voting nature of the shares "screams scam".

Aah, all is well in the world. So peaceful, so– wait, where's the 2FA on IoT apps? Oh my gawd

Mage Silver badge

Yawn

It's irrelevant Nest / Google PR.

Google is still getting all the info.

Something that should not need a 3rd part server is using a 3rd party server.

Spies do spying, part 97: Shock horror as CIA turn phones, TVs, computers into surveillance bugs

Mage Silver badge
Facepalm

Re: And they all laughed...

There is nothing to see here, this is all oldschool stuff. If you have a specific target and get physical access, it's always been "game over". You don't even need CIA tools.

Sir Tim Berners-Lee refuses to be King Canute, approves DRM as Web standard

Mage Silver badge

Re: I have given upo trying to read paid for e-books

Manage them with Calibre and suitable plugins.

Mage Silver badge
Devil

Re: DRM means you don't own your content

I buy ebooks from Amazon and use my REAL Kindle's serial number on a plug in for Calibre so I will always have it and can read on non-Amazon eReader or apps with no DRM.

At least Amazon does let publishers (or indie authors) be DRM free. Smashwords is also DRM free.

DRM is evil period.

I never give other people copies of anything still under copyright. Eventually the content of my physical and digital archives ought to be public domain.

Mage Silver badge

Re: And will this DRM realise its been run in a VM and is a chocolate teapot?

Point camera on tripod in dark room at 4K screen.

Mage Silver badge

Re: you won't get HD quality output when videoing a screen

Actually you can. It's not hard at all.

Mage Silver badge
Devil

Re: Any Restriction Placed on the Internet

DRM has many problems:

1) It adds extra cost to consumer (HDCP on HDMI)

2) It can fail where a authentication server is needed (Adobe ePub extensions or Plays for Sure etc)

3) It ultimately is contrary to properly implemented copyright laws based on Berne convention

4) Usually it doesn't stop professional pirates and makes life awkward to users.

5) It blocks innovation, entry of new hardware, software, operating systems etc. Benefits largest suppliers of end user SW/HW

There are other problems too. Basically unlike copyright or patents which can be implemented properly, DRM is simply coercive and evil. It's often misused to achieve other ends than copyright enforcement.

Scammers hired hundreds of 'staff' to defraud TalkTalk customers

Mage Silver badge
Coffee/keyboard

Re: blocking all traffic from a couple of Indian call centres?

That might block too much "legitimate" support that's been outsourced!

Mage Silver badge
Headmaster

Re: ???

I'll bite.

A "trojan" isn't always a virus. It's something dressed as something else. Beware Greeks bearing gifts, or Geeks baring Gifs. c.f. Story of fall of Troy.

They existed in mainframe days, a free 9 track tape with a demo would actually also do something else.

A Trojan might have any purpose. It usually needs to be explicitly run. It might be presented as "click here to install this codec you need", or as legitimate app.

A "virus" is code that replicates itself from the computer it somehow got on, to another computer via any method. Amiga should have warned MS that "autorun" CDs on Win95 was rather ideal for a virus replication medium.

Malware can obviously combine Trojan and Virus techniques.

A root kit is a way of hiding malware, it may be legitimate such as special kind of device driver to emulate some particular hardware, or make a mounted ISO look like a CD/DVD to anti-piracy software.

I suspect wikipedia, bing, google, yahoo answer the question.

Trump, Brexit, and Cambridge Analytica – not quite the dystopia you're looking for

Mage Silver badge
Big Brother

In the original Foundation trilogy

Asimov's Psychohistory was a sort of Maguffin.

Who'd imagine people would try to make it real?

A mooving tail of cows, calves and the Internet of Things

Mage Silver badge
Boffin

Re: Coverage - and not in the nice way

It's a phone with a sensor.

Yes, no study has ever found a statistically significant connection between mobile phone RF and health.

Too much RF gives burns or cataracts.

Mage Silver badge

Mooving story

They have these things in the local Co-op. They just use the regular mobile phone network and send an SMS.

Not the usual IoT horror.

Watt the f... Dim smart meters caught simply making up readings

Mage Silver badge

Re: campaigners pdeudoscience

I'm not sure it's not decided by beancounters based purely on the "bottom line" or "control".

Mage Silver badge

Remote sites

Some remote sites and street lights are not metered (in Ireland anyway). The Electricity provider simply bills based on an agreed usage (like a mobile base station power consumption only changes if the equipment is changed).

Mage Silver badge

Re: CE mark ... in some way connected to reality,

I've seen PC PSUs with the filter caps all left out and filter coil / chokes all replace by wire links.

Also phone chargers and CFL ballasts with the filter components missing.

They get mark and then leave out components to save money. Most governments only test if a lot of consumers complain. Most governments have no interest in pro-active enforcement of consumer rights or approval marks (c.f. SOGA, sale prices, equipment in retail for a different market etc).

Power socket networking gear SMPSUs are well filtered as otherwise they'd not work. They pass EMI/RFI by only being plugged in and also not being used with data.

Also the domestic wiring setup for CE testing isn't realistic. The lighting circuits only have live to wall switch, so they even more than socket wiring act as aerials.

Contrary to popular belief the main fuse box / meter provides no significant filtering for mains networking or SMPSU/Electronic ballast noise.

Mage Silver badge
Flame

Re: most LED lamps draw

Most LED lamps are SMPSU giving a low voltage. Most CFL use a SMPSU that is called an Electronic ballast, which replaces the passive iron cored choke.

The problems are that the circuits take current spikes at the peak of the sinewave and generate RFI. Also life is short due to the electrolytic capacitors drying out.

I like the new filament string LED (typically 28 LEDs and 110V per filament, but 220V/240V models may use longer "filaments" or pairs). Virtually no RFI, though they still only take current over part of the cycle as they have a rectifier and capacitor, though no pesky SMPSU in ones I've looked at.

Some SMPSUs will blow up or go on fire or trip the "fuse box" during a "brown out" as they take more current to maintain output power and voltage.

Mage Silver badge

Re: WHOLE point is reduce the ability to swap suppliers easily

No, that's reason #2

Reason #1 is to remotely disconnect you either because they THINK you didn't pay or because they need to shed load.

Mars orbiter FLOORS IT to avoid hitting MOON

Mage Silver badge
Headmaster

Re: CAPS LOCK

My Capslock key acts as the Compose key.

I do have a way of engaging SHOUTING AT PEOPLE mode. A bit like a nuke launch, I have to engage both shift keys.

Occasional all caps words are acceptable for emphasis. It's a bit hard to read a large passage that way. Hence the monks invented lower case (miniscule). The Romans might only have had capitals. Probably that's why the Celts, Huns, Goths, Jews etc thought them arrogant.

UK watchdog to probe political campaigns trading personal info

Mage Silver badge
Devil

We didn't break any laws

Then laws need to be changed to outlaw the entire privacy theft industry euphemistically called analytics with their immoral use of browser stats, clear pixels, cookies and javascript.

Browsers should only report window sized etc to ensure server supplies content that can be rendered.

Website owners should only log impressions per hour.

Any other information should be supplied with genuine freely given consent of the user without coercion.

BT splurges £1.2bn on securing Champions League rights, Sky heads for an early bath

Mage Silver badge

Re: Ban exclusive rights

The money is destroying football.

COP BLOCKED: Uber app thwarted arrests of its drivers by fooling police with 'ghost cars'

Mage Silver badge
Devil

Re: legal to track their whereabouts and activities with police scanner radios

In many countries it may be legal to listen*, but illegal to act on the information or communicate it to a 3rd party. In some democracies it's also illegal to listen.

In many countries the use of Greyball would be illegal.

[*Tetra and use of Mobile make listening in very difficult, no scanner generally available supports that]

Java? Nah, I do JavaScript, man. Wise up, hipster, to the money

Mage Silver badge
Coat

Language?

I'd put choice of language third. Though obviously it depends a lot on the platform / application.

Microcontroller with no OS, embedded OS, desktop apps, server applications, web stuff, setboxes, routers etc.

The most important thing is the attitude and quality of the programmer.

Then sensible management.

Though I have a preference, in many cases the language is not something the programmer chooses. Many use cases are unsuitable for my "favourite" languages. I hate web programming more than any language to do it. I counted six "languages" in use in the same file, if you count HTML and SQL as "programming". No sensible way to have aid of a compiler's sanity check.

Compared to that, arguing the merits of Java vs C# (MS concept of Java), C++, etc is pointless.

Though I'd point out that Java can be used (and has been) for TVs, Setboxes, Windows/Mac/Linux desktop, phones, servers as well as Web applications. Anyone use PHP for anything other than Web?

Mage Silver badge
Windows

Nostalgia

This thread is so 1980s!

Mage Silver badge
Coffee/keyboard

Re: PHP

Look at the OLD security bugs in new PHP modules on mailing lists for all the popular CMS / Forums etc.

EVERY WEEK!

Popular or fast to put out the door != good

Mage Silver badge

Re: web apps

Plenty of software development doesn't involve web apps.

Google, what the hell? Search giant wrongly said shop closed down, refused to list the truth

Mage Silver badge

Re: Guidelines fixed

Still inadequate. It should be impossible for users to mark a business as closed without verification. This is arrogant negligent behaviour and worse than Wikipedia (because Maps), which is bad enough.

Mage Silver badge
Devil

Re: What about the postcard thing?

Users of Google maps should not be able to mark a business as closed, period, not without proper verification. That's too open to abuse by competitor's shills, trolls and idiots. It's an abuse of Google's market share too.

Mage Silver badge

Arrogant

The same attitude to everything they do. Even when they are "right" they are totally arrogant and mow their tank over your <insert entity>.

If we must have an IoT bog roll holder, can we at least make it secure?

Mage Silver badge
Coffee/keyboard

Problem is developers?

Maybe some of the issues are, but I would bet on Bosses, Beancounters, Marketing.

They metaphorically put fingers in ears and La La La La when any issue is raised.

Palmtop nostalgia is tinny music to my elephantine ears

Mage Silver badge

Re: When is the last time you decided to use your 7" or less phablet in portrait mode?

Only for eBook reading, which is inferior to eInk.

I have a cheap USB keyboard cover (€8) with cheap Android Keyboard utility so I have the equivalent of Compose and AltGr. That is only usable in landscape. It's frightening how many BT & USB keyboard covers (and mini USB standalone USB) are useless for UK keyboard layout approximation and have too few special buttons either side of spacebar. The one I have is printed as USA but amazingly has the | \ key beside Z, and five non-character keys apart from Fn on bottom row with space.

All the BT portable keyboards I've tried are useless

I plan to make an 8 row, 96 key USB based keyboard to suit portrait mode to write notes. I've made custom keypads before using the PCB out of PC USB keyboard and figuring out the row/column, with "tact" switches. Faster than making up an 18F series PIC.

I'd like four, five or six LED illuminated light pipes so a A á Á å Å etc light up as required.

Anyone for Virtual Monkey Tennis? Telco tries to sell us on 5G

Mage Silver badge

Re: No point having this in phones

It will have no significant impact on home broadband, because the really high speed/capacity bands are really only line of sight.

For a street full of 4K TVs you need fibre to at least the street. Within 200m of the home router, if not to the home.

The 5G will have almost no impact on coverage, capacity or speed outside an open plan office femto cell (fed by fibre).

Mage Silver badge
Boffin

Improved coverage and speed

No new spec gives either of those, only a change in licence conditions forcing operators to treble or x10 the number of base-stations. Also a SINGLE wholesale RAN for all bands would instantly give x2 to x4 improvement in speed/capacity.

The issue is ROI, the profit vs cost of more basestations. Unless there is a different charging model, adding coverage adds too few extra customers and adding speed/capacity adds almost no extra customers and almost no extra revenue per customer.

The 5G doesn't change physics or economics. The newer high speed bands will only work on femto cells fed by fibre, near line of sight, maybe reliably only 100m at high speed.

Amazon S3-izure cause: Half the web vanished because an AWS bod fat-fingered a command

Mage Silver badge

Wizards know

1 in a million miracles happen 9 times out of 10.

Or something.

Next time it will be a rush to release patch that is auto updated. Perhaps like HP toner or ink cartridge DRM it won't be obvious till later.

Beware potato based Cloud computing.

Smart meter firm EDMI asked UK for £7m to change a single component

Mage Silver badge

Re: The pi-zero w is less than £10 and I bet it would do all they need and more.

Actually using the SRD 864Mhz doesn't solve the problem.

The whole concept is broken at so many levels. It's really just about the ability to shed load.

Mage Silver badge

Re: The pi-zero w is less than £10 and I bet it would do all they need and more.

The Pi has no 864 to 868 SRD* band (it's not specifically Zigbee, but also short range walkie-talkies, home weather stations, wireless headphones, etc). It's "licence" free if you have approvals. It's probable a high part of cost might be approvals. The 433MHz SRD band is much smaller and also used for door bells, wireless security sensors, remote control extenders on 2.4GHz or 5.8Ghz video extenders, etc.

I bet they eventually ask for another £7M to add 433MHz too!

Yes the bare modules are only a few $ to buy off the shelf, but only finished products with SRD modules have approvals.

Ofcom have a list of the "licence free" bands (really pre-licenced due to approvals of products). There is no such thing as an NFC, WiFi or Zigbee band, just ISM/SRD bands that those things can use.

[* SRD = Short Range Device. ISM = Industrial, Scientific, Medical. Often North America has different Allocations to the rest of the world, they use 385MHz approx instead of 433MHz and part of 900MHz GSM band instead of 864 and their FRS (462 & 467) isn't the same spec or band as the European PMR446, at 446MHz. I think the 49MHz SRD might be similar. Legal CB (26 to 27MHz) historically wasn't the same spec in mainland Europe, UK (FM only higher channnels) and North America. Buyer beware on the Internet and in Maplin. ]

AWS's S3 outage was so bad Amazon couldn't get into its own dashboard to warn the world

Mage Silver badge
Unhappy

Re: The Cloud...

Obviously people should occasionally disconnect their internet and check everything electrical.

Mage Silver badge
Coat

But Cloud is better than In House!

Yes, loads of companies do in house stuff badly or don't bother with resilience or disaster planing etc. So the argument is that the Cloud is better.

Maybe from the point of view of the users in one company cloud is better than In house, perhaps you can't then order from one supplier when their in house IT falls over if they don't use cloud.

But the "cloud" could mean that no-one can order from anyone. Instead of just RBS or HSBC being down all banks, Mobile billing (so no mobile calls due to no credit, PAYG or Bill Pay), no ATMS, no POS, no card payments ...

Maybe fantasy today, but not as more companies outsource to cloud EVEN if it's done better than in house. Not as we head toward various mono cultures. It won't be a cyber war, but a Friday afternoon patch to Edge Routers, or load balancing, or DNS servers, or database etc.

The famines in the 19th Century (not just in Ireland) were due to mono culture.

The very concept and "savings involved" of Cloud Computing is heading all of the first World to a cyber potato event horizon.

Skype-on-Linux graduates from Alpha to Beta status

Mage Silver badge

Web based?

I don't want to run a web browser for text chat. Currently using 4.3.0.37 on Linux. I can send files, don't get them from windows. The voice and video seem to work, but I don't use them often. The file thing isn't important: Email.

Also for desktop sharing etc there is Teamviewer?

A lot of people changed to QQ when Skype on Windows started using 100% on some net books. Unfortunately that only seems to be Chinese on Linux.

Typical stupidity of MS to rename their own completely different business package "Skype".

Move over, Bernie Ecclestone. Scientists unearth Earth's oldest fossil yet: 4bn years old

Mage Silver badge

Re: why we dont we see life everywhere.

We've hardly started "looking" elsewhere at anything likely. The James Webb telescope and spectroscopic analysis should help.

Space is really big. The Oort Cloud is about 1000 times further away than the inner part of the Kuiper belt. The Milky way has billions of suns.

The galaxy could be teaming with life, but we don't know yet.

Mage Silver badge

Re: 'seeded' from the same extrasolar source

That's dangerously close to a "turtles all the way down argument" and solves nothing ultimately about the origin of life. The much more logical argument is that life originates separately at each suitable location.

Tuesday's AWS S3-izure exposes Amazon-sized internet bottleneck

Mage Silver badge
Big Brother

Amazon’s S3 outage is a gift to Azure and Google?

"Amazon’s S3 outage is a gift to Azure and Google, on-premises IT, hybrid cloud supporters and multi-cloud gateways. But it has also exposed inadequate business continuance and disaster recovery provisions by Amazon's business customers."

No, it's no gift to Azure and Google or any other Cloud seller. Anyone with any logic will realise that inherently the issue is the same for all.

This: ->

exposed inadequate business continuance and disaster recovery provisions

Planned 'cookie law' update will exacerbate problems of old law – expert

Mage Silver badge
Devil

Cookies

They should only be on sites you explicitly log on to. Anything else is probably evil and abusive.

I block 3rd party cookies entirely and that doesn't break anything. Why isn't that the default in Firefox?

Some newspapers block all images if you block their cookies, so I set cookies on newspapers to be deleted on session exit.

Google Analytics and third party icons with javascript is also an abuse of privacy. Problem is amount of money and effort some companies spend on lobbying and propaganda.

Amazon's AWS S3 cloud storage evaporates: Top websites, Docker stung

Mage Silver badge

Re: Amazon Music borked?

I just have multiple copies of all my music on our own multiple systems. Why would I store my media on the cloud to play it when:

1) I have only one internet connection.

2) I have a cap

3) The "cloud" isn't available walking, cycling or in the car.

Mage Silver badge
Mushroom

Cloud selling and Pricing

Yes, the "Cloud" is the problem. The way it's hyped, priced and marketed encourages beancounters to outsource to it.

Almost Zero regulation.

No 3rd party audit or oversight

No transparency on backup, resilience, security or privacy. Just vendor hype.

There are things that are appropriate for the "Cloud". However increasingly due to marketing of the Cloud vendors, the applications are inappropriate.

Security slip-ups in 1Password and other password managers 'extremely worrying'

Mage Silver badge

Re: Little blue book

Especially if you die unexpectedly.