Feeds

* Posts by Paul Crawford

1576 posts • joined 15 Mar 2007

Gigantic toothless 'DRAGONS' dominated Earth's early skies

Paul Crawford
Silver badge

Re: /but

Don't know, but the Soup Dragon had 4 legs and 2 arms instead of wings, presumably from finding an ecological nice in serving soup and blue string pudding. Guess that is evolution for you...

0
0

Kate Bush: Don't make me HAVE CONTACT with your iPHONE

Paul Crawford
Silver badge

Re: Its not just Kate Bush

So how do you know there's someone still with a bush working at his local strip club?

2
0

Nuke regulator hacked three times in three years

Paul Crawford
Silver badge

Adobe again?

The link has a little more info, including "A PDF attachment in the email contained a JavaScript security vulnerability" so it sounds like Adobe is the starting point.

Again.

1
0

What's in your toolbox? Why the browser wars are so last decade

Paul Crawford
Silver badge

"The pressure to differentiate is more intense than ever"

Really? So why is Firefox so keen to dump useful GUI stuff in order to look like Chrome?

20
2

Click on a Facebook ad on your mobe, then buy a thing on your PC ... Facebook remembers

Paul Crawford
Silver badge

World's favourite platform for whoring you from advertiser to advertiser...

0
0

Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar

Paul Crawford
Silver badge

A holy quarrel, perhpas?

http://philipkdickreview.wordpress.com/2014/06/17/holy-quarrel/

5
0

UK mobile coverage is BETTER than EVER, networks tell Ofcom

Paul Crawford
Silver badge

Interesting you should say this, as I have long suspected it on my Tesco account - generally crap coverage when you try to use it even in a modest sized Scottish city, even when signal strength is apparently decent.

0
0

Anonymous wifi the latest casualty of Russia net neurosis

Paul Crawford
Silver badge

Re: New idea for some "malware"

Better plan would be something that infects the most routers and opens a small percent of bandwidth for tor or similar, while disabling remote updates from any ISP (or just updating version number so it looks as if it worked).

If a large percentage of connections were infected it would be a major deal to try and get them all cleaned and plenty of plausible deniablity.

Not that I would promote breaking the law, of course.

0
0
Paul Crawford
Silver badge

Re: Well, to read The Register

You seem to have missed the point, its not about securing Joe Public against a wi-fi driver trying to intercept their connection, it is about tracking everyone who attempts to speak.

Tying it to a phone is a nice touch: it allows them to easily follow the locations most folk who ever use the internet as well (unless they are sufficiently paranoid to only switch it one when absolutely necessary).

0
0
Paul Crawford
Silver badge

Re: What if you don't have a mobile?

Your fckd'd. One way or another, your fsck'd.

This is "Papers citizen!!!" at every opportunity.

1
0
Paul Crawford
Silver badge

Re: What about forriners?

"whether they just want to control their own population, or whether they're really serious about security"

Really, this is all about control of their population. Just like China, Russia has not quite got the idea of democracy at all, and the last thing the powers-that-be want is to be questioned by folk they can't simply "disappear".

The fact the west is moving this way is a far more worrying sign.

9
1

Microsoft fixes all those shaky GoPro vids nobody wants to watch

Paul Crawford
Silver badge

"working to bring Hyperlapse into a Windows app some time soon"

That is MS' underlying problem these days, they still see the world as:

"Windows on x86 is the answer, now what was your question?"

They would be far better to separate applications from being Windows-only to supporting what is out there on all platforms. Its not like they don't have the resources to do cross-platform development, is it?

Edited to add: Good work nevertheless, makes such videos watchable!

10
12

Crypto Daddy Phil Zimmerman says surveillance society is DOOMED

Paul Crawford
Silver badge
Big Brother

Re: He talks a good talk

The issue here is the asymmetry of information.

In the old days, everyone knew what everyone else in the village was up to so no one really could make much use of that without the same applying to them.

Today we have secretive organisations that appear to be beyond the control/supervision of our elected official, who know more or less everything about us, but we know nothing of them.

For example, if they (or in all likelihood an employee with some grudge) chose to poison our character by slipping carefully filtered information to a job committee how would you know why you were rejected? Scale that up to situations where you have a paranoid and ill-liked government (which is the trend, sadly) and you can see the temptation for feature creep to be applied.

10
0

Microsoft throws old versions of Internet Explorer under the bus

Paul Crawford
Silver badge

Re: @Charlie Clark

As already pointed out, any closed OS can and most probable will spy on you. Open ones may do as well (looking at you Canonical with your Amazon search...)

Why do you want to use a Windows VM on the internet at all if you are so concerned? Most of my XP VMs are there to run only stuff locally that is not supported now and they just don't get external networking as I can transfer files in/out with mapped drives, etc.

0
0
Paul Crawford
Silver badge

IE10/11 seem to be quite acceptable, though lacking in the range of useful plugins you get for FF & Chrome.

But why can't MS make IE11 for all supported versions of Windows? Chrome, Firefox, Opera, etc all seem to manage that trick with a fraction of MS' budget.

Yes, I know that was a rhetorical question as MS are run by marketing droids who still believe they can dictate how the PC industry will go...

2
0

Hacker crew nicks '1.2 billion passwords' – but WHERE did they all come from?

Paul Crawford
Silver badge

One could well ask what NSA/GCHQ has done to protect us. They should have known of such insecurities, so are either incompetent at their jobs (unlikely), view the protection of consumers against such scams as beneath them, or have such a warped paranoid world-view that maintaining hacking capabilities is more important than actually protecting us (most likely).

9
2
Paul Crawford
Silver badge
Unhappy

Re: Can someone please explain

Cheap outsourced coding monkeys?

Graduates not taught about security and made to run automated tests for it?

Web sites developed by consultancy then never updated?

Developers wanting (or being told to by PHB) to prioritise shiny over robust?

I don't know really, but those are my semi-educated guesses.

25
0

Who will kill power companies? TESLA, says Morgan Stanley

Paul Crawford
Silver badge

Battry life?

Its not just the initial cost of the batteries, but also the expected lifetime that is needed for an economical case.

Same with solar panels, they have pay-back times today in the order of 10-20 years (even with subsidies, that that may change as oil costs rise) but who is guaranteeing the hardware (panels & inverter) lasts for anything that time?

0
0
Paul Crawford
Silver badge

Re: @Steve Todd

Take the UK as an example: where are the CHP plants, and who is making use of the "low grade" heat that makes for the 40% or so of that 80% efficiency?

Very few. Our local University has a campus heating system that uses it, so runs its own 5MW (I think) CHP plant and pumps steam around the major buildings to heat them. Which is great.

But often if they need a bit more heating, in goes another conventional gas boiler as its cheaper to do than to extend the CHP distribution!

Now then, where are the GW sized generators, and is anyone prepared to dig up towns and cities for hot water distribution to make said efficiency worth it?

So far, the cost of energy that everyone complains about is not enough to cover the cost of western world labour for infrastructure development. Sad but true :(

5
1

NASA tests crazytech flying saucer thruster, could reach Mars in days

Paul Crawford
Silver badge

You still need the big thrust to get off Mars again, even if not quite the magnitude of leaving Earth's gravity pool.

At the thrust figures mentioned here (even assuming they are right), that means carrying chemical fuel, or making said fuel on Mars, or using some nuclear thruster (not necessarily Project Orion, but as heat source for expanding/accelerating a propellant) that you would not get permission to use on Earth for safety fears.

1
0
Paul Crawford
Silver badge

Re: @lglethal

A typical satellite with 2.5kW of power is in the big communications class, so its likely this would be similar, so around 1000kg.

With 0.72N of thrust you get an acceleration of 7.2E-4 m.s^-2 (i.e. 7.3E-5 g) or 62.2m/s per day. To double the escape velocity of about 11km/s would take about 176 days, and then double that time to stop the craft again.

So of course you keep accelerating, but this is not suddenly going to make interplanetary travel convenient.

0
8
Paul Crawford
Silver badge

"a fuel-less drive system like EmDrive changes that equation"

Until one works out where all of that power comes from.

Close to the Sun you may have solar panels, and farther out you might use a RTG for power, but with 2.5kW needed for 720mN of thrust you are looking at serious power levels to cut the flight-time to Mars.

Also did they bother to funnel the wast heat for more drive?

2
8

Surfing the web from Android? We KNEW it – sorry, iOS fanbois

Paul Crawford
Silver badge

I feel your pain - I have an HTC Wildfire until recently, now have a Moto G.

Its quite a usable phone really...

0
0

Microsoft's Euro cloud darkens: US FEDS can dig into foreign servers

Paul Crawford
Silver badge

Re: AC

"To my mind your data is no safer on your own servers than it is in the cloud unless you want to encrypt it and refuse to hand over the keys (and are therefore prepared to go to jail for not handing over the key)".

No. If I were living in Ireland then the only authority to make me hand over my keys would be the Irish courts. End of story.

What we have here is the US demanding the data on a non-US service/server based on the company having ties to the US. Had they the slightest sense of decency and international decorum, they would have made a formal request to the Irish law enforcement agencies who, no doubt would have cooperated if there was probable cause.

In that case here I'm pretty sure the comentards on this forum would have supported it as the proper legal process.

9
0

Wireless charging stretches the friendship by 45mm

Paul Crawford
Silver badge

Re: 2KW across 35mm !!

Looks like they have re-invented the induction hob?

2
0

Microsoft stands on shore as tablet-laden boat sails away

Paul Crawford
Silver badge

Tell it like it is...

"it prefers not to comment on analyst figures, especially ones that don’t fit with its view of the world"

Could not have put it better.

13
0

Android busted for carrying Fake ID: OS doesn't check who really made that 'Adobe' plugin

Paul Crawford
Silver badge

"security updates for *any* software as long as possible"

While for any software would be nice, the real problem here is a physical device that cant be used securely after a certain time due to embedded software/firmware. It becomes landfill, a waste of the Earth's resources.

With pure software (i.e. stuff running on a computer, including its OS) you can often change it/upgrade it and not throw something away, and we have had automated patching of OS and applications for years already. So its not like a fancy "new technology" is it?

As far as time scale is concerned, it should be defined in terms of the expected usable life (from the buyer's point of view), so something like at least 5 years after end-of-production.

0
0
Paul Crawford
Silver badge

It is high time the law was changed to make manufacturers/carriers liable for a failure to provide a timely patch.

Just now most of them just don't give a damn because its in their interest that you either buy a new phone or take out another 2 year contract. And if anything goes wrong to you, your bank account, etc, its none of their problem.

That would change noticeably if they were required to pay up for failure to act. Of course phones will still have bugs, and they can't be expected to indemnify for the unknown, but they sure as hell should be punished for not fixing stuff once they have, say, 1 month's notice.

Edited to add: And do the same for the crappy/creepy "IoT" devices as well.

11
2

Flamewars in SPAAACE: cooler fires hint at energy efficiency

Paul Crawford
Silver badge

Thermodynmic efficiency?

The problem with 'cold' burning is also efficiency: the ultimate (theoretical) efficiency of a heat engine depends on the ratio of hot & cold absolute temperatures (e.g. Kelvin), and the "cold" one is always above ambient in practice.

http://en.wikipedia.org/wiki/Heat_Engine#Efficiency

0
0

14 antivirus apps found to have security problems

Paul Crawford
Silver badge

Re: Point of Issue

That is why various guidelines and standards have been developed to make coding safer:

http://en.wikipedia.org/wiki/MISRA_C

www.stroustrup.com/JSF-AV-rules.pdf

Whatever language you use, you can screw up, but C/C++ just gives you a more direct way of doing so. Safe code is hard to do and needs some skill and the willingness to stick to the above guidelines and to USE the tools already out there to check for errors and bad practice.

2
1

OKCupid: OK, STUPID, YES we set you up with BAD DATES. On purpose

Paul Crawford
Silver badge

First in a long time

That article on the OK trends was the first listed since 2011 when they were bought out by match.com and I had thought the founders had simply quit at that point.

It is also worth noting that an earlier blog critical of match.com and other paid dating sites was pulled from the blog around that time.

http://web.archive.org/web/20101006104124/http://blog.okcupid.com/index.php/why-you-should-never-pay-for-online-dating/

3
0

Stick a 4K in them: Super high-res TVs are DONE

Paul Crawford
Silver badge
Joke

Re: Speaking as a CRT user...

Don't sharks have multiple gill slots, which is how you know its a kettle of fish (single gill slot) and not a kettle of sharks?

Oh, and fish don't have lasers...

0
0

Secure microkernel that uses maths to be 'bug free' goes open source

Paul Crawford
Silver badge

Re: CPU

You have to consider each aspect separately. All they have proven is the implemented logic of the microkernel meets the specifications.

You can have bugs and flaws in:

- Specifications

- Sub-systems called by the microkernel

- Compiler

- Standard Libraries

- CPU/FPU hardware

But compared the today's huge kernels in Linux/UNIX/Windows/etc which have the last three as well as a box-of-frogs evolved design, that provability is a big start to something reliable for critical jobs.

3
0
Paul Crawford
Silver badge

"has provable upper bounds on interrupt latencies"

Er, those upper bounds would include hardware jitter as that is a known value and generally much much smaller than the software steps in ISR task-swapping.

2
0
Paul Crawford
Silver badge

Re: Was it really necessary for MS to change

For marketing yes, and that ultimately won along with a lot of legacy-supporting crud and mind-numbing stupidity like making IE deeply embedded.

If they had stuck to the original microkernel approach as planned by Dave Cutler and just accepted the performance penalty then it would have been one of the most secure OS around.

9
0

UK.gov's Open Source switch WON'T get rid of Microsoft, y'know

Paul Crawford
Silver badge

No, it is not pointless.

The point is with .docx you have to do it MS' way, and they can fiddle with that and withhold info (e.g. the binary blobs in .doc format that is included), while with .odf it is an open and transparent standard.

That way anyone can do it properly and the goal is to compete on the quality/price ratio of your editor, and not on having the only one that works with some secret sauce.

Long term, that is MS' way forward to a profitable future - to do better and not to rely on lock-in and unethical practice. Not holding my breath, of course...

1
0
Paul Crawford
Silver badge

Re: Already Given Up

"Anyone can grab hold of a 1/4-20 UNC bolt and use it to mount their camera anywhere they want"

Tsk, tsk, you should be using BSW for that...

2
0
Paul Crawford
Silver badge

Re: Revolutionaries

"Did you know that Word 97 and Powerpoint 97 work quite happily with the 2007 converter pack?"

Er, have you tried to use them with a 2010+ era .docx document? It sucks and MS has only themselves to blame, so .odf is a major improvement here as it won't have the same petty hidden changes to bother with.

3
0

SHOCK and AWS: The fall of Amazon's deflationary cloud

Paul Crawford
Silver badge
Unhappy

Re: @Naughtyhorse

If this brave new world of on-line services resulted in an end to stupid GUI changes and features no one wants, and instead bugs were fixed and actual improvements made I would support it.

Sadly from my (limited) experience of MS and Google, it is the usual stupidity but on a regular payment plan.

2
0
Paul Crawford
Silver badge

And people wonder why the likes of MS and Adobe are pushing on-line versions? Money, regular money, and no need to offer something new/better to keep getting paid.

7
0

It's Google HQ - the British one: Reg man snaps covert shots INSIDE London offices

Paul Crawford
Silver badge
Gimp

Re: "lying face down on with arms and legs dangling"

Now where has my spanking paddle gone?

3
0

Arrr: Freetard-bothering Digital Economy Act tied up, thrown in the hold

Paul Crawford
Silver badge

Alternatively they looked at the success (or otherwise) of other's attempts (e.g. the French) and decided its not cost-effective.

While availability of legal sources for some things is much improved (e.g. no DRM on audio after Apple's ITunes more or less forced the major player's hands), there are still problems in video actually getting what you want, when you want it, and in a format that won't piss you around in an attempt to play it.

Some will always pirate, some may stop if they are threatened, but the results of, for example, Spotify on music piracy where it is available has been enormous and that is a lesson to be learned. Shame it has not benefited the artists as much :(

9
1

Researcher sat on critical IE bugs for THREE YEARS

Paul Crawford
Silver badge

Re: SourceFire report

Oh, the other thing lacking from the report is the time-to-patch. That is a big factor in how secure you can be with a given product/supplier.

3
0
Paul Crawford
Silver badge

SourceFire report

It is worth reading the SourceFire report as it gives an interesting look at the disclosed vulnerabilities over the years.

Forum trolls will delight in being able to quote it for/against any fanbois of OS as well. It has some correct, possibly controversial, ways of reporting, for example counting the webkit browser engine as "Apple" so the CVE count is way higher than you might have expected. Similarity it treats Linux as one product, but the different versions of Windows as separate (mostly, this is discussed).

However, what the report lacks is the exploit count relating to these. For example, it has the iPhone as much worse than Android by CVE count (210 versus 24), but we all know that Trojans and general shit-ware, etc, for Android are much, MUCH bigger problem in practice.

Oh, and check your buffers please? That is the No.1 vulnerability of the quarter-century!

4
1
Paul Crawford
Silver badge
Black Helicopters

3 years?

Time-line is claimed to be:

VIII. DISCLOSURE TIMELINE

-----------------------------

2011-02-12 - Vulnerability Discovered by VUPEN Security

2014-03-14 - Vulnerability Reported to ZDI and Microsoft During Pwn2Own 2014

2014-06-10 - Vulnerability Fixed by Microsoft

2014-07-16 - Public disclosure

Do we really believe they told no one before Pwn2Own?

5
3

Who should do security clearance checks? Did you say 'chat-bot'? This military slinger hopes so

Paul Crawford
Silver badge

The Inquisitor?

http://www.youtube.com/watch?v=9tGO79BtWUI

0
0

iOS slurpware brouhaha: It's for diagnostics, honest, says Apple

Paul Crawford
Silver badge

Maybe the Russians had a point in dumping iPads, etc, for gov work after all?

3
1

Microsoft confirms secret Surface will never see the light of day

Paul Crawford
Silver badge

Short answer is probably the knew it would loose money. After all they are pushing a similar form-factor in the bigger Nokia-softs and, while decent enough phones in many ways, they are hardly flying off the shelves.

0
0

Facebook haters, look away now: BABY SNAP site's profit is up 138%

Paul Crawford
Silver badge

I guess the recent changes to the user-whoring platform to push adverts in to the news feed is working then, but I find it astonishing there is enough sales liked to FB adverts to justify agencies spending "$6.44 in average revenue per user in the US and Canada".

1
0

HP, Microsoft prove it again: Big Business doesn't create jobs

Paul Crawford
Silver badge

Re: Good article, but...

Same idea as the French insult (more of a derogatory term than outright insult mind you) referring to the British as roast beefs, presumably from out habit of cooking meat until it is usable for shoe soles.

3
0