* Posts by Paul Crawford

2669 posts • joined 15 Mar 2007

European Union set to release anti-competition hounds on Google

Paul Crawford
Silver badge

Yes, after all Nokia did really well when "helped" by an ex-MS employee to choose a non-European OS.

7
1

Hacking Team hole still unpatched, exploit pop doc claims

Paul Crawford
Silver badge

Re: What's the embedded device?

Or some printer with a web server and/or wifi access point that is still on even when on Ethernet.

When did you last see any patching for any of your printers?

3
0

What's wrong with the Daily Mail buying Yahoo?

Paul Crawford
Silver badge

Re: Flickr

Welcome to the cloud, where you get little or no control of what happens to your data!

It can happen to any hosted service, either the hosting company screws up and deletes your stuff, or the service decided to close because they are bored or losing money. In short, if the ownership or future availability really matters to you then you set up your own (hosted if your ISP can't offer the bandwidth you need at a price you can afford), and keep your own mirror/backup in any case.

6
0

Linux command line mistake 'nukes web boss'S biz'

Paul Crawford
Silver badge

"Except, of course, for the 88%+* desktop market share Windows users, who have no idea what we're talking about"

Fixed it for you. When looking at anyone who would use (or even know about) command line actions, its probably closer to 50%.

Still, some additional "WTF?" options that allow (or not) such problems. Others recommend that most users don't get shell access, or the ability to execute programs in areas they have write access to:

https://www.gov.uk/government/publications/end-user-devices-security-guidance-ubuntu-1404-lts/end-user-devices-guidance-ubuntu-1404-lts

0
0
Paul Crawford
Silver badge
Joke

Re: "rm" stands for "remark"

While "dd" stands for "destroy data" as we all know...

6
0
Paul Crawford
Silver badge

More precisely, deleting stuff need write-access to the holding directory. Unless you are root, that user, or the user has allowed you via "group" membership & write permission (or $DIETY forbid, "other") then you can't do it.

Backups? Snapshot file system? I know its glib to ask, and we have all done dumb things in the past, but for a hosing business you like to assume there was *some* disaster recovery plan!

6
0

Vinyl LPs to top 3 million sales in Blighty this year

Paul Crawford
Silver badge

Re: Wow

I always thought RCA stood for "rubber conservation association" from how thin their records became.

6
0
Paul Crawford
Silver badge
Pirate

Re: Buying, not necessarily playing

1) Buy the vinyl record

2) Torrent the FLAC equivalent

3) Profit! (one hopes step 1 is actually paying musicians)

3
0

BOFH: If you liked it then you should've put the internet in it

Paul Crawford
Silver badge

Missing the two-way aspect

Why no mention of the built-in cattle prod?

1
0

ExoMars works! 2 Mbit/s link established and camera snapping

Paul Crawford
Silver badge

Re: @Symon

Thanks for posting that link

1
0

Web backup biz Monster Cloud monstered after monster price hike

Paul Crawford
Silver badge

Re: Another dot com manager is going to bite the bullet

True, but is this not yet another lesson in what it means to put your balls in another’s vice valuable data in a cloud service?

9
1

Music's value gap? Follow the money trail back to Google

Paul Crawford
Silver badge
Gimp

Rum, sodomy, and the lash?

Damn, need two icons!

3
0

Hey, Atlantis Computing. What the heck is this in your EULA?

Paul Crawford
Silver badge

"Those two vendors have a product that performs roughly the same, but vendor E knows how to tune vendor N's product so that it is 50% slower."

Don't public benchmarks serve to stop this sort of knobbling? OK they don't address the real-world if your problem is not similar to the test, but they ate least have an open set of tests that each vendor can submit their own tuning to get the best from it.

1
0

Microsoft sues US DoJ for right to squeal when Feds slurp your data

Paul Crawford
Silver badge

Re: Hat's off

Irrespective of MS' business reasons for doing this, it is good they are as few others have the resources or influence in the US to consider this.

I'm not American, nor do I live in the USA, but what happens in this case will be looked at world-wide and hopefully make other governments and their people think more carefully about what is reasonable to demand in the digital world.

4
0

You won't believe this, but… nothing useful found on Farook iPhone

Paul Crawford
Silver badge

Re: *grins*

"So the NSA admitted they couldn't crack couldn't be arsed to look at something pointless, but others could"

Fixed that for you...

16
0

Google yanks Chrome support for Windows XP, at long last

Paul Crawford
Silver badge

Re: Chrome for 32 bit Linux is also dead....

That is due to the fsking thing needing more than 2GB of memory!

17
0

Sweden 'secretly blames' hackers – not solar flares – for taking out air traffic control

Paul Crawford
Silver badge

Re: Might be but...

Cyberdickwaving is always a good enough reason!

Really though, Sweden should think of this as successful penetration testing for free.

1
1

Zuck: You're still using non-Facebook websites ... I'll put an end to that

Paul Crawford
Silver badge
Terminator

Re: Sick of this charade

Indeed, but maybe this new AI thing would be better then all of those "friends" who turn out to be morons when it comes the re-posting shit on Facebook?

My new friend ->

1
0

Prof Hawking to mail postage-stamp space craft to Alpha Centauri using frickin' lasers

Paul Crawford
Silver badge

Indeed, my first thought was "link budget?"

You beat me to the question of sensor acquisition time.

0
0

Graphene solar panels harvest energy from rain

Paul Crawford
Silver badge

Lifetime?

My own concern is how long would such a system continue work given the presence of various contaminants in the air, lichen, bird crap, etc.

5
1

Bundling ZFS and Linux is impossible says Richard Stallman

Paul Crawford
Silver badge
Joke

Re: ReiserFS...

"I hear it murders wives and gets caught"

Neither of which are good traits in a file system developer...

1
3
Paul Crawford
Silver badge

Re: Simpler solution.

AFIK Oracle was the major contributor to BTRFS for Linux, but that stopped when it bought Sun and inherited ZFS in the process.

Interesting point though, is the effort of brining BTRFS to match ZFS bigger or smaller than finding a way round the license terms?

2
0
Paul Crawford
Silver badge

Open/Closed

Odd really. A lot of folk accept, and Linux distros offer, closed-source drivers for video and similar. Not a GPL violation it seems.

Where as ZFS is open-source and you can also modify it, hence in terms of the overall goals of GPL, a much better fit. But not compatible because? Because?

I'm guessing its something to do with linking in the kernel rather than loading a driver, but it seems a little odd and almost one of those religious-wars type of reasons (you know Catholic/Protestant, Sunni/Shia, little-end/big-end, etc)

28
3

Aluminum-wrapped robbers fail to foil bank

Paul Crawford
Silver badge
Joke

Re: Hmm...

Silver opportunity, surely?

[Yes, really aluminium, but you know the colour most commonly associated with uniform-spectrum metallic reflections]

4
0

Anonymised search engine page found on 'kid-friendly' search site

Paul Crawford
Silver badge

Depending on the time-scale w.r.t. pr0n then "de-pubified" is probably most accurate.

0
0

FBI, Apple continue cat-and-mouse game over iPhones in New York

Paul Crawford
Silver badge

Re: Pretty weak position for the FBI here

My proposed solution to both the "lawful examination" request and the "dead relatives' phone" problem is to make the key readable by physical means: by desoldering a chip, grinding off its top and scanning the silicon with an electron microscope to read the bits back.

That way its not usable remotely, quickly, or cheaply. Just like old-school investigations that time & cost would focus its use to cases that really matter, and would not be viable for mass surveillance, fishing extraditions, etc.

4
0

Read America's insane draft crypto-borking law that no one's willing to admit they wrote

Paul Crawford
Silver badge

Re: "lower bumfuckistan"

Have an up-vote for that alone!

0
0

Microsoft hopes to shine light on shadow IT

Paul Crawford
Silver badge

Yes, when I read "...Cloud App Security is to cover off the data loss danger..." I immediately thought "physician heal thyself".

3
2

Power9: Google gives Intel a chip-flip migraine, IBM tries to lures big biz

Paul Crawford
Silver badge
Trollface

Intel worries?

No problems, after all in this post-x86 world there is always the Itanium.

16
1

Bring on the goats! Apple's cloud failure demands further sacrifice

Paul Crawford
Silver badge

Re: Do they?

Surely you encrypt before storing it remotely?

Certainly things like reliability and backups are dependent on the service they make/buy, but again, if possible it would be better to duplicate on two providers so if one goes TITSUP and/or hikes the price too much, you keep the other and migrate to a new "2nd copy" for the next contract negotiation round.

3
0
Paul Crawford
Silver badge

Do they?

Do they actually need to build out the cloud infrastructure?

What about putting an abstraction layer on other cloud services so they can use whoever is cheaper and/or actually working at any given time? After all, the key selling point is supposed to be "computing/storage" as a commodity, just like power or the ISP networking, and its the data that is precious and needs protection (encryption + backing up) and management?

2
0

Done making the big stuff better? The path to Apple's mid-life crisis

Paul Crawford
Silver badge

Re: RE:"currently no clear, easily marketable, crying need in mass-market consumer electronics"

Indeed, that is an irritation for many.

However, more penitent is the fact there often never is "no clear, easily marketable, crying need in mass-market consumer electronics" because world+dog would have filled it. What Apple did that made it such a money-spinner was either:

1) Make something that already was well known, like a "PC", but make it suck less than others that were available at the time (i.e. Windows, with all its AV needs and infestations that were the home user's experience).

2) Imagine something a little different that no one in the tech world thought would sell big-time. Such as the iPad that partly dealt with (1) but was too simple for most technical designers to see the big use for it.

The watch is not such a game-changer. Maybe a TV/PC home entertainment centre convergence that "just worked" and did not have shitty on-screen controls, partly-supported features that get pulled a year or two one, and inconstancies from TV, to streaming, to music, to recording/time-shift, etc, would allow them to mark it up and thus get the big profits they know and love? Who knows...

1
1

Adblock wins in court again – this time against German newspaper

Paul Crawford
Silver badge

Oh dear, how sad, never mind!

The alternative, that of not having intrusive ads with sound or video, or grabbing focus, etc, has never occurred to them?

Really, they get what they deserve for that. True, they do deserve some finical support for publishing, but not by throwing crap (and potential infection vectors) all over my screen.

41
0

Ransomware scum sling PowerShell, Word macro nasty at healthcare biz

Paul Crawford
Silver badge

1) Macros were a stupid idea, at least, the idea they could do anything in any way to overwrite or run an executable program, script, etc.

2) Backups.

Really, while getting your machine shafted by a cryptovirus sucks donkey balls big-time, what were your plans for the day your HDD/SSD dies, machine is stolen, or PSU goes on a last bender and takes out several disks in your RAID set?

5
0

Spanish launch heroic bid to seize Brit polar vessel

Paul Crawford
Silver badge

Re: Not to give offence

Can I sail on Boat69?

2
0
Paul Crawford
Silver badge
Gimp

Re: The lesson from this story is don't ask the public

It was a mean thing to say.

OK, my deviations are far from standard...

17
0

William Hague: Brussels attacks mean we must destroy crypto ASAP

Paul Crawford
Silver badge

Re: Dear William Hague

He is a politician, probably both.

27
2

Amazon WorkSpaces two years on: Are we ready for cloud-hosted Windows desktops?

Paul Crawford
Silver badge

stringent limitations...Windows 7 in a virtual environment

But not on w2k or XP, so I don't feel bad about keeping all my legacy Windows software going for ever more on that.

Security? Well, they ain't on the Internet or used for web/email access...

2
0

X-ray scanners, CCTV cams, hefty machinery ... let's play: VNC Roulette!

Paul Crawford
Silver badge

Re: NX is getting there but only recently

What, you mean to say administering a *NIX system over an SSH command terminal is new?

Or maybe using ssh -X to allow running an X-windows program’s GUI on your local machine tunnelled over a secured link is also "recent"?

3
1

Mud sticks: Microsoft, Windows 10 and reputational damage

Paul Crawford
Silver badge

Re: USB to serial converters

I was pleasantly surprised a couple of weeks ago when I tried attaching a USB to RS232 converter to my laptop and all I had to do to make my serial code work we tell it to open /dev/ttyUSB0 instead of /dev/ttyS0. My decade-old code is hard coded for ttyS0 or S1, so I created a symbolic link of that name to the USB device as a temporary work-around until I fix that in a more elegant way. I believe it was using the FTDI chip, but don't know who made the overall converter, and laptop is running Ubuntu 14.04

Back to Andrew's article: sure Windows 10 has a poor reputation but its not just the user interface. That may not be great, but as others have pointed out, its the creepy nature of the telemetry and forced updates that really make me advise against it to anyone who will listen. A shame really as lower down the Windows kernel, etc, has useful improvements.

For Windows-only software that I need (e.g. some CAD stuff) I used VMs and don't have to worry about the "hardware" changing and Windows complaining of activation, etc.

16
1

Met plod commissioner: Fraud victims should not be refunded by banks

Paul Crawford
Silver badge

Indeed, can you imagine the first court case when a suitably clued-up litigant gets the judge's approval for a full and public audit of the banks systems. You know, including those banks still on XP and IE6 because they have internal stuff that demands it?

And the same for Government offices who request you pay on-line to them, will they want to be held to the same standard of public auditing?

You can be damn sure the banks have considered the cost of liability and the cost of mitigating it (and loss of business if folk just stop using on-line payments, etc) and have come to the conclusion the current arrangement is the least-worst option.

18
0

It's nuts but 'shared' is still shorthand for 'worthless'

Paul Crawford
Silver badge

Re: Cheating

It is also very difficult to assess. Did they find out something useful and apply it, or pay for a "mechanical Turk" to do the work they just submitted?

And as others have pointed out, without a basic grasp of roughly what to expect the solution to be, how can you filter the 99.9% of crap found by Google and sanity-check the data in/out the produced it?

2
0

Yahoo! kills! more! passwords! with! push! notification! app!

Paul Crawford
Silver badge

Use a POP client like Thunderbird, they don't seem to have problems with passwords for that. It also allows a "unified folders" view which is handy when your spam messages come from several accounts.

0
0
Paul Crawford
Silver badge

Re: "Yahoo! has long been on a mission to kill passwords!"

Odd thing is, they only do the for the webmail interface. I have a yahoo account for spammy stuff and access it via POP, no problems with changing geographic log-ins, etc, for years now.

Same password as the web interface. Same security problems of a password being stolen or brute-forced. Go figure...

0
0

Clear April 12: Windows, Samba to splat curious 'crucial' Badlock bug

Paul Crawford
Silver badge

Lets face it, most of said SMB equipment would be a strong and resilient as a wet paper bag if you expose the network to world+dog, samba patch or not.

I'm guessing this is more of a risk in small businesses if a malicious actor can get a machine attached (or p0wn one via email, etc). Nobody should have a network share visiable to world+dog and big organisations/companies will have network switches set up to reject unknown machines being attached internally. I hope?

7
0

Comms 'redlining' in Brussels as explosions kill up to 30 people

Paul Crawford
Silver badge

Re: boltar

CCTV, APRN, etc. Do you think anyone going to blow themselves up cares about detection *after* the event?

As you seem to have not noticed, the blew up the airport *outside* of the security checks where folk were waiting. How far back do you want those checks? Its turtles all the way down...

21
1

Reposting 8-second sports clips infringes copyright

Paul Crawford
Silver badge

Pro tip - if it has wheels is probably not a horse.

19
1

Champagne supernova in the sky: Shockwaves seen breaking star

Paul Crawford
Silver badge

Re: Supernova Fusion

I think (but may be wrong) that stars normal fusion process can create atoms up to iron, above that and fusion is not generating energy so the star's fusion engine stalls and collapses. That final supernova burst is what powers the creation of heavier atoms (and, of course, releases all of the stuff above hydrogen/helium that we need to exist out in to space so eventually planets form, life arises, porn is created, etc...).

9
0

Cloud security harder than 'encrypt everything'

Paul Crawford
Silver badge

Site white lists?

"The problem here is that an attacker's site can also use SSL/TLS, and if it's a user (who clicks on a phishing link, for example)"

I'm guessing most businesses only really deal with a modest number of sites with ligitimate reason from the corporate LAN (as opposed to the separate guest/coffee break wifi, which of course they have on a separate network). So they could have a system where access to a site has to be requested first by the user (with various checks) to add it to the white-list. That way most phishing links would fail and most malware C&C would be blocked.

Unless the users was really, really dumb of course and determined to access some random site.

0
0

Forums