* Posts by Conrad Longmore

454 publicly visible posts • joined 3 Apr 2008

Page:

Lester Haines: RIP

Conrad Longmore

I has a sad

Thank you Lester for making the world a funnier and more interesting place. You will be missed.

Computer says: Stop using MacWrite II, human!

Conrad Longmore
Facepalm

Gragh, students and their sodding games

I worked with students for quite a long time. One irritation was that they would insist on playing games on the lab computers which were meant for.. well, work. Back in those days all the games were DOS games, and they almost all used Mode 13h for graphics (320 x 200 pixels x 256 colours).

I knocked together a simple TSR that intercepted the interrupt that changed the display mode.. every time you tried to change to 13h it would display an error and reboot. The TSR was pretty well hidden, I don' t think any of the users ever figured it out.

The other essential DOS tool was an application that replaced the FORMAT command with one that checked to see if the user was trying to format C: (because yes, you could actually do that). If they were it would let off an alarm, which would tend to attract attention. Yes, students actually did this either maliciously or stupidly. If they were just trying to format a floppy disk, it would pass it on to the REAL format command which had simply been renamed.

What always flabbergasted me was when students were working on their dissertations, they wouldn't ever bother to have a backup copy of the floppy disk they had to store it on. Norton Utilities certainly rescued quite a few academic careers.

When we upgraded to a Novell network the problem was that the students would never log out, and students would end up with each others dissertations. Eventually, we wrote a screensaver in VB which would log them out automatically. Unfortunately, it would tend to do it while the students were looking up references in their books and it would shut down.. being not very observant, they didn't notice the GREAT BIG RED timer which gave them five minutes grace.

Borked ESET antivirus update says entire web is too risky to browse

Conrad Longmore

Exactly. The internet is dangerous. Best to block it and get the stuff you need off those 3.5" cover disks on the front of magazines.

Reg readers battle to claim 'my silicon's older than yours' crown

Conrad Longmore
Thumb Up

PABX

We recently powered off an AT&T PABX that had been in service since about 1994. OK, it had been switched off and on a few times because occasionally you DO have to power down the server room. I betcha there are some ancient PABXes out there..

It's 2016 and idiots still use '123456' as their password

Conrad Longmore

Re: Nothing wrong with insecure passwords

Password re-use is the problem. Using throwaway passwords for trivial accounts is one way to prevent it. After all, there's no point using a password like ",=8r2/ax}DS-G2N&" if you use it everywhere, including easily hackable sites.

Motorola cut in half! But still alive, and ready to live again

Conrad Longmore
Coat

"Rola" is apparently Portuguese for "penis". Perhaps not such a good name.

https://en.wiktionary.org/wiki/rola#Portuguese

Video malvertising campaign lasted 12 hours? Try two months

Conrad Longmore

And this is why..

And this is why people block ads. Those big media companies with about a zillion javascripts loading all sorts of shit don't seem to understand that.

Child abuse image hash list shared with major web firms

Conrad Longmore

Circumvention

I recently looked at an issue involving fake LinkedIn profiles. I was getting nowhere with a reverse image search of the profile images with the usual technologies until somebody suggested flipping the image.. and all of a sudden the reverse image search started working.

That was a relatively simple circumvention technique. I'm sure there are plenty of reversible techniques to apply to a picture that would screen it from this sort of detection. But it would probably catch quite a lot of this material from being circulated.

Big mistake, Google. Big mistake: Chrome OS to be 'folded into Android'

Conrad Longmore
FAIL

Because

Because folding one OS into another always works so well, for example MeeGo. Tizen. Etc.

FBI takes down Dridex botnet, seizes servers, arrests suspect

Conrad Longmore
Facepalm

If they've taken it down..

If they've taken it down.. then how come the Dridex spam is still running? Just got another malicious Dridex DOC this morning - http://blog.dynamoo.com/2015/10/malware-spam-scan-2015-10-14-52954-pm.html

Almost all dot-science malicious, dot-cricket rigged, researchers find

Conrad Longmore

Re: Don't rely on this so called "report"

Don't a Google search for "site:.science" shows a LOT of sites, and you can tell straight away that a large quantity of them are complete crap.

There is of course a caveat with just counting the number of bad domains.. if you take a worthy domains such as theregister.science then it counts as just one good domain, but obviously the value of that domain is much greater. Thus you can have 99% crap and 1% of actual value. Yes, I'm still minded to block some of these.. but you need to be aware of collateral damage.

Oracle pulls CSO's BONKERS anti-bug bounty and infosec rant

Conrad Longmore
Coat

Just finished reading the new Maddi Davidson murder mystery..

It turns out that the customer did it.

Windows 10 is FORCING ITSELF onto domain happy Windows 7 PCs

Conrad Longmore
Facepalm

How to detect and stop it..

All our corporate computers are joined to a domain and are managed by WSUS. However, a small number of laptops (about 0.5%) managed to initiate the download despite having policies to block running the GWX component in place. It looks like the process might have triggered when the laptops were outside of our corporate environment. We spotted the unusual traffic before it became a problem.

If you log your internet traffic, then searching for "10240.16384.150709-1700" is useful to reveal who is downloading Windows 10 components on your network.

Microsoft have some new guidance on how you can block the OS upgrade here:

https://support.microsoft.com/en-us/kb/3050265

That's not an Ofcom email about your radio licence – it's a TROJAN

Conrad Longmore

If you run the DOC (or DOCM or whatever) through olevba.py (http://www.decalage.info/fr/python/olevba) then it will extract the underlying macro. It will be heavily obfuscated, but the obfuscation itself is a clue that it is bad.

Alternatively, Payload Security's Hybrid Analysis (hybrid-analysis.com) does a very good job with these malicious documents, and will show what network traffic is going on.

Google dumps ISP email support. Virgin Media takes ball, stomps home

Conrad Longmore

Passwords in plaintext

The pre-Google version was so bad that you could find the email password stored in plaintext in the browser cache, so if anyone had access to the files on your computer then they could easily determine the webmail password with no additional tools needed. Classy.

Microsoft SLASHES 7,800 bods, BURNS $7.6bn off books in Nokia adjustment

Conrad Longmore

Re: End of an era

Like Windows NT 4.0? Actually, that did a pretty good job at it..

Apple's mystery auto project siphoning staff from other divisions

Conrad Longmore
Go

OMG.. Hooli XYZ

'nuff said

Farewell then, Mr Elop: It wasn't actually your fault

Conrad Longmore
Coat

The mistake was.. Symbian

I pretty much agree with the article 100% - Elop found Nokia in an impossible situation that was not of his making. He tried a high-risk high-reward strategy with Windows which didn't really work out. Android would have been a low-risk but low-reward approach, as the article says.. Android manufacturers are hardly raking in the cash. Sticking with MeeGo looked very much like a high-risk low-reward approach, so dumping it was probably the best decision. So the choice was really between Android and Windows. Choose one.

I think the crucial mistake was how Elop dealt with Symbian. When he become CEO, I believe that Symbian was still the best-selling smartphone platform in the work. While it lacked the capabilities of main rivals iOS and Android, it was still a very capable and lightweight OS with a ton of applications available for it.

Prior to Elop, the idea was that Symbian would move downmarket into Series 40 territory with Maemo/MeeGo taking the high end. Insteal, Elop announced that Symbian would be phased out which had the Osborne Effect on Symbian sales which collapsed, leaving a huge hole in Nokia's sales book. Then, crazily, they tried to add more features into Series 40 to make it more Symbian-like.. for example the Asha series of devices. That was a lot of effort to re-create something they already had.

Symbian certainly has its detractors, but the final Nokia Belle handsets were really rather good.

BOOM! Stephen Elop shuffled out of Microsoft door

Conrad Longmore
Coat

Nokia were already screwed..

Nokia were already screwed when Elop joined. Symbian couldn't compete with modern OSes such as Android and iOS, Nokia's escape strategy of moving to Maemo on high-end devices had fatally stalled with the ill-advised merger with Moblin to create Maemo. You can blame Olli-Pekka Kallasvuo for the mess that Nokia found itself in, not Elop.

Elop found himself at the head of a company with no roadmap, but still quite a lot of sales. His infamous "burning platform" memo was pretty accurate, but he was fatally undermined as CEO by whoever leaked that communication.

Getting out of the mess was always going to involve some risk. In the end he took a high-risk approach of dumping everything and going for Windows, hoping that Nokia would avoid becoming a "me too" Android player. In the end, that strategy did not work.

It was always a high-risk, high-reward strategy to tie Nokia up with Microsoft. If they'd have gone down the Android path, I am sure that Nokia would still be an independent manufacturer today.. but not a very profitable one. The low-risk, low-reward strategy.

Of course, since Nokia became Microsoft, more mistakes have been made. The last high-end device launch was over a year ago and the current product range is moribund. It's a shame because Windows is rather good, and Cortana is easily better than Google's offering.

The Hound of Hounslow: No $40m Wall Street wobbler

Conrad Longmore

Re: If only we could get back to markets being about real value...

Putting a transaction tax on each trade would kill HFT dead and re-establish some sanity into the market, IMO. Doesn't make a difference to real investors, but it screws up those who basically screwing up the markets.

Last flying Avro Vulcan, XH558, prepares for her swan song

Conrad Longmore
Thumb Up

Ah.. the TSR2. There's a whole other story..

Chrome version 42 will pour your Java coffee down the drain: Plugin blocked by default

Conrad Longmore
Thumb Down

It isn't the 1990s any more..

It isn't the 1990s any more. Java should be long dead, but sadly it isn't. Probably for 90%+ of users this move is probably a great one. But for the rest it is going to be a massive pain in the arse.

I've been saying for years that if you have Java installed on your system then the smartest thing you can do is remove it completely. In the real world hardly anybody needs it. But isn't it awfully prescriptive of the Chrome devs to decide that *nobody* can use it in Chrome? After all, Chrome was written to be a stable platform to run apps.

One thing that will suffer is anything running that antiquated piece of crap known as Oracle Forms. Heck, that even breaks when Oracle update their own Java product. A cynic might say that Google will view any damage to Oracle's products as acceptable damage..

Can't patch this: Mozilla pulls Firefox encryption feature after just a week

Conrad Longmore

100% False Positive rate

As far as almost all users are concerned, certificate warnings are almost 100% false positives. Usually it's either a legitimate self-signed certificate, a server somewhere has changed its name, the certificate has expired or some other annoyance. And although they are not common, most users just ignore them, so that they will eventually ignore ALL certificate errors..

Popular crypto app uses single-byte XOR and nowt else, hacker says

Conrad Longmore
Thumb Down

NQ Mobile

NQ Vault is a product of NQ Mobile. A quick bit of searching on them in Google News comes up with allegations that the entire company grossly overstates its user base and income. This is a company where the founder and other senior officers have a habit of abruptly resigning. Draw your own conclusions.

SIM hack scandal biz Gemalto: Everything's fine ... Security industry: No, it's really not

Conrad Longmore
Black Helicopters

Maybe they got a visit..

Maybe they got a visit from those people in suits and matching black SUVs.

"Here, let us write the press release for you.."

German music moguls slammed for 'wurst ever DMCA takedown spam'

Conrad Longmore

Re: Why stop?

Not quite, you swear under penalty of perjury that you have a good faith belief in the complaint being made. So, just having some random web crawler spam things out obviously does not constitute a good faith belief.

It is long overdue that somebody who HAS perjured themselves in this way spends a bit of time in jail as a warning to others.

Five years of Sun software under Oracle: Were the critics right?

Conrad Longmore
FAIL

Java is shit

Let's not beat around the bush here.. Java on desktops (not so much on other platforms) is a heap of shit. Anybody who codes still Java applets for web pages needs to be taken out and shot. Basically, it's a slice of the 1990s where much of the functionality can be replaced by quicker, more stable and more secure replacements.

Oracle's products of course heavily rely on Java. Oracle forms is a particularly obsolete slice of twentieth-century technology that still uses it. Except of course for when your particular version of Oracle doesn't work with the latest version of Java which is always fun.

'80s hacker turned journo, IT crime ace Steve Gold logs off

Conrad Longmore
Unhappy

Gitmo

These days the government would probably rendition him out to Guantanamo Bay for such a thing.

A reminder of a simpler time, and probably one of the influences that got me involved in the IT security field. Rest in Peace.

Pitch Black: New BlackBerry Classic is aimed at the old-school

Conrad Longmore

The company that won't seem to die..

By all logical reasoning, BlackBerry should have crashed and burned after the Z10 and Playbook fiascos. Luckily for them, they had an enormous cash pile to burn through first.

It seems that BlackBerry have given up trying to recreate the days when they shipped more smartphones than anyone else (excluding Symbian). Being smallers and more focussed might ensure survival of some sort, but it remains to be seen if BlackBerry can thrive again.

London teen pleads guilty to Spamhaus DDoS

Conrad Longmore

Cannot name for legal reasons?

Let me name names instead, he is ████████ ██ ████████

Dr. Dobb's Journal sails into the sunset - yet again

Conrad Longmore

Re: Ah the nostalgia!

I miss Byte. And PCW.. that didn't even get the chance to say "goodbye".

El Reg Redesign - leave your comment here.

Conrad Longmore

Too much whitespace

Things are all too far apart, there's too much whitespace.

I think you had it right in 1998 - https://web.archive.org/web/19981206084318/http://www.theregister.co.uk/

Sony cuff-puter to do one thing smartwatches can't: Give you DAYS of hot wrist action

Conrad Longmore

FONE

I bought a FONE when it first came out. People were amazed that there was still writing on the screen when you took the battery out. Of course, things like the Kindle are now quite common so people are used to the display staying on.

Technology quiz reveals that nobody including quiz drafters knows anything about IT

Conrad Longmore
Coat

Re: 10/12

Even on an ancient system you could probably UUENCODE it and send it in the body text.

I think I am being pedantic though.

Fake antivirus scams: It's a $120m business – and alleged ringleaders have just been frozen

Conrad Longmore
Mushroom

Floriduh

Florida again. Can we just nuke the whole state from orbit? It would make the world a better place.

YOU are the threat: True confessions of real-life sysadmins

Conrad Longmore

One trick I heard of..

One trick I heard of (and I cannot remember where I heard it, it may be apocryphal) was that a large organisation wanted to fire a sysadmin, but they needed a few hours to make sure that all the passwords could be changed and accounts disabled.

So, they made up an excuse to get the employee on a LONG flight to another location (I think this was in the US) where they would be completely out of contact with everything and everyone. When they got to the other end, they were met by management and HR and then terminated.

I don't know if this story is even true, but it does demonstrate the lengths you might have to go to if you need to fire a potentially rogue sysadmin. Alternatively giving them a large pile of cash on a smooth transition might also work..

NOKIA - Not FINNished yet! BEHOLD the somewhat DULL MYSTERY DEVICE!

Conrad Longmore

It's the Z Launcher..

It's a hardware platform to promote the Z Launcher, isn't it? And then presumable a raft of HERE apps and other Nokia technologies.

It looks pretty decent, but it won't be in the shops in time for Christmas. :(

Could YOU identify these 10 cool vintage mobile phones?

Conrad Longmore

Re: What about the Siemens SK65

I have.. two. Which is two too many really.

Siemens were masters of industrial design, but they were really not very good when it came to quality (especially for a Germany company). Remember the SL55? That was a cool device.

Conrad Longmore

A cheap thing to collect

It you're interested in this kind of retro stuff, a lot of it can be picked up very cheaply for around £30 or so on eBay. Some things are very rare (like the MPX300) or sometime very expensive (Nokia N950). They're all far more interesting to look at than what you get today, although my dull slabby Android easily beats them when it comes to features.

Conrad Longmore

Re: 6 out of 10

I've been trying to get hold of an MPX300 for my collection for a while. Very rare. Not as rare as the Sendo though.. another very rate one of those is the Symbiab-based Sendo X2.

WinShock PoC clocked: But DON'T PANIC... It's no Heartbleed

Conrad Longmore

Easier to patch?

Easier to patch in most cases, although reportedly there are issues with some systems that rely on TLS 1.2 connections.

Also, this is a remote code execution flaw, so if it does get exploited it has a far worse impact that Heartbleed.

The Great Smartphone Massacre: Android bloodbath gathers pace

Conrad Longmore
Thumb Up

Re: When I started in the phone business

If you go back between five and ten years ago then there was much more variety in physical design and features. Nokia, Siemens, Motorola and Ericsson came up with different features, form factors and designs that were much more interesting than what we see today.

Then Apple came along and designed what was basically a good looking touchscreen with an enclosure around it.. and that really is all everybody has done since.

I do own one of those flagship phone thingies. It's a OnePlus One. If they are building that and making a profit, then really everything else is completely overpriced.

Ad-borne Cryptowall ransomware is set to claim FRESH VICTIMS

Conrad Longmore

Re: AdBlocker / NoScript

NoScript is very effective in blocking this sort of thing, but it does break a lot of things in the process. And as Charles 9 says, AdBlock and similar tools are only effective against known ad networks, although often those are the networks being abused.

Ultimately the problem is that ads are what makes the web go round. If everybody blocked ads then a lot of sites would become uneconomical to run (there are of course other ways of displaying ads other than using an ad network).

Forget passwords, let's use SELFIES, says Obama's cyber tsar

Conrad Longmore

Re: Photos don't work

Oooh.. I hadn't noticed "live check" before. But otherwise it has been proven that you can unlock the device with a photograph..

Of COURSE Stephen Elop's to blame for Nokia woes, says author

Conrad Longmore

The Symbian Error

When Elop took over they had Symbian (ancient but selling well), Series 30 and 40 (selling in the billions but for very little profit) and the stalled development of MeeGo from the Maemo / Moblin merger mess.

I seem to remember that before Elop the plan was to move Symbian downmarket to replace a lot of the Series 40 devices with ultra-cheap smartphones and build up the top end with MeeGo. However, MeeGo was a bust and Nokia instead had to keep Symbian at the top end of the range where they kept polishing it just enough to be acceptable.

So, when Elop came in he made the very wise decision to kill MeeGo which was going exactly nowhere. But he also made the mistake of saying that they were going to phase out Symbian which had the effect of making the market collapse completely. It was the way that Symbian was treated (and not the Windows tie-up) that in my opinion was Elop's key error.

Had he stuck with the the plan and simply shifted Symbian downmarket then that might well have protected sales. Remember, Nokia ended up spending a lot of time pissing around adding smartphone-like features into Series 40 (e.g. Nokia Asha) when they already had those feature in Symbian. Yeah, the Asha range sold pretty well but it was completely and utterly pointless to develop *those* when Symbian could do the job much better.

Nokia's fall from grace started before Elop took over, and Nokia is hardly the only mobile firm to suffer such woes. Motorola and RIM/BlackBerry made pretty much the same errors.

Renault Twingo: Small, sporty(ish), safe ... and it's a BACK-ENDER

Conrad Longmore

Re: Fiat 500?

The clever folks at BRABUS can tune the smart rear engines to produce 120HP (or possibly even more), and the ew ForFour is the same basic platform as the Twingo III. And the folks at RenaultSport are not slouches either when it comes to tweaking engines.

I think the best thing to do is wait and see.

Conrad Longmore

Re: All Very Well..

I own a four-year-old Twingo II RS. It hasn't had any major problems (apart form split balljoint sleeves in the suspension) and a trim issue. Everything else has been rock solid.

*However*, the Twingo II follows the Dacia approach of using tried-and-tested bits from the Renault parts bucket. It's quite a simple thing, with a buzzy 133HP VVT engine shoved in, these new Twingo IIIs are more complex beasts.

The Novo Mesto plant seems to have a good reputation for quality, so I suspect that this will be much better than the Renaults of old..

FBI boss: Apple's iPhone, iPad encryption puts people 'ABOVE THE LAW'

Conrad Longmore

Re: And all completely irrelevant to us right-pondians...

Erm well you could also encrypt it twice instead. One person has one key, the other has the other.

Yahoo!... Our Alibaba stake's worth BILLIONS. Oh – our shares are in the toilet

Conrad Longmore

Re: Troubled Cambridge Micro Maker....

I was thinking of exactly the same thing when I read the article. What ultimately killed Acorn was (perversely) the significant value of its shareholding in ARM. A bit of research indicates that Acorn was bought for £270m to gain access to the shares, with the rest of the company broken up and renamed.

Sure, Acorn was probably doomed anyway. Even RM couldn't hack it from selling PCs to education markets in the end, the esoteric ARM based devices would probably have gone the same way.

Yahoo! would require significantly deeper pockets. One possibility of course is that Alibaba might make a bid to liberate their shares..

Leak of '5 MEELLLION Gmail passwords' creates security flap

Conrad Longmore

You can check..

You can check if your password is in the list using https://isleaked.com/en

Page: