* Posts by John Robson

1526 posts • joined 19 May 2008

IT bloke: Crooks stole my bikes after cycling app blabbed my address

John Robson
Silver badge

Re: Common sense

You define the circles yourself - so I have several covering my local estate - there are only three paths out, but all it says it what estate I am on.

Same around my office.

Not that any of my local rides are publically shared, nor do I record them any more...

0
0
John Robson
Silver badge

Re: Common sense

Ok - so where do you conceal by default?

The number of people who drive to the start of a bike ride is quite high, and there is no benefit to "concealing" the start of that ride.

The setup takes you through setting up privacy zones, and you then have to make each ride public.

2
2

Xen Project blunder blows own embargo with premature bug report

John Robson
Silver badge

Hope the patch can be applied fast?

And without taking down whoever it is that uses AWS?

(I've lost track of the people who use it, not implying that no-one does)

0
0

Juniper's VPN security hole is proof that govt backdoors are bonkers

John Robson
Silver badge

Re: humble pi

22/7 is good enough for most mental arithmetic.

355/113 is better, but harder to work with

3.142857...

3.14159292035...

0
0

There's an epidemic of idiots who can't find power switches

John Robson
Silver badge

Depends on the duration of the change window...

8
0

North Wales Police outsourcing deal results in massive overspend

John Robson
Silver badge

Re: Motorists stay clear of North Wales

@AC: I am aware of that saying - If you really think that being banned from ONE form of transport for a week would lose you your job/house/family then you need a reality check.

Sure the bus might take a bit longer, or friends might have to collect you en route to work. That's the point - driving is not a right, it's a privilege.

By putting everyone ELSE's lives at risk (which is what you are doing) then you are demonstrating that you are not fit to keep that privilege. Driving is the only obvious situation where people are allowed to take a lethal weapon into public and operate it in close proximity to the general public...

0
0
John Robson
Silver badge

Re: Motorists stay clear of North Wales

The first of those links was a speed camera at the side of the road.

Why should speed camera locations be advertised from miles off? Global compliance isn't aided by saying "We only check here".

The second is to do with speed cameras being operational at night - when arguably you should be doing less than the speed limit anyway since your visibility is reduced.

The problem is not with the police catching people speeding, it's with the courts not enforcing bans:

http://www.bbc.co.uk/news/uk-england-essex-33378386

Easy solution to not getting banned. STOP SPEEDING.

I'd rather went for a "one week ban on first offence", then 2,4,8... system.

It might make people think a bit about their speed. Combined with a 10% of monthly income fine... and you might be motivated to stay within the posted limits (they're limits, not targets)

1
4
John Robson
Silver badge

Re: Motorists stay clear of North Wales

Alternatively motorists in North Wales could simply obey the law, then there is no risk of being fined...

8
8

UK ISP Sky to make smut an opt-in service from 2016

John Robson
Silver badge

Re: Whats the problem

Yes - because it's the principle.

You shouldn't have to opt in to various categories of content - partly because there is absolutely no chance that the categorisation will be accurate and complete, making it completely pointless to start with, but also that there *will* be false positives...

26
0

The ball's in your court, Bezos: Falcon 9 lands after launching satellites

John Robson
Silver badge

On Earth....

Not on a barge?

So Lohan's launch date must be getting closer, or do you need to throw a few billion at the FAA?

12
0

Canadian live route map highlights vulnerabilities to NSA spying efforts

John Robson
Silver badge

The Canadians have it right then...

Rather than legislate against packets moving across some artificial border you make it easier for them to not bother crossing that border.

Wow - Can we (the rest of the world) elect them as the US president, and into congress?

3
0

Let's shut down the internet: Republicans vacate their mind bowels

John Robson
Silver badge

Can't we get an advisor to say...

"If only we could get Pi to be 4, then we could break this stuff"

And see them battle over that...

3
0

FAA introduces unworkable drone registration rules in time for Christmas

John Robson
Silver badge

Re: Lohan loophole

"It still has mass but I stick with the -ve weight"

It has positive weight, but the air it displaced has a greater positive weight. With most objects you don't need to consider the mass of the displaced fluid.

Take a supertanker - does it become weightless when placed on water?

No, it still weighs alot, but it is supported by the water around it.

LOHAN still weighs what it did before, but it's supported by the air around it.

1
0
John Robson
Silver badge

Re: Lohan loophole

It's weight is still positive, it's just lower than the weight of the air it has displaced... it has bouyancy, but it still has weight.

Sorry...

0
0

Tablet computer zoom error saw plane fly 13 hours with 46cm hole

John Robson
Silver badge

Re: Goooooooo Bill

"Er yes they would if you bothered to read what I wrote. If a car had a fault such that visibility was impeded or the brakes didn't apply quickly enough then the manufacturer shares some of the blame for any accident that those flaws contributed to."

Actually - you said design, not fault.

If the brakes failed at that instant then you get to share the blame with someone - but that's why there are two braking systems, so that you never have total failure at one instant.

If there was only one braking circuit, and the master cylinder exploded then I'd start to blame manufacture...

0
0
John Robson
Silver badge

Re: Goooooooo Bill

"That depends if the design of the vehicle / controls contributed to the accident doesn't it? If you couldn't see the dog because the driver's position had poor visibility, or because the brakes took too long to respond then yes Ford would have some blame to share for the accident"

No - they wouldn't

Both of those things should be in the experience of the driver - and they should be accomodating them.

10
1

Brit 'naut Tim Peake thunders aloft

John Robson
Silver badge

Good to watch...

Hadn't really appreciated that my mistakes in KSP (hot staging) were a real technique

3
0

Samba man 'Tridge' accidentally helps to sink request for Oz voteware source code

John Robson
Silver badge

Re: Complex? It's an STV election...

I was actually going for paper and pencil...

0
0
John Robson
Silver badge

Re: Complex? It's an STV election...

Hence the paper element of the ballot.

The paper ballots can be read rather quickly by the machine, and then passed on to the human team, who can confirm the ballot over the course of the next couple of days.

There are existing mechanisms to prevent ballot box stuffing, and the ability of the machines to highlight "unusual" ballot patterns could be of interest here...

In general we are very good at looking after liitle bits of paper - and understand the security of physical objects quite well, whereas in the digital domain it's very much less well understood (and therefore less well trusted) by the vast majority of people.

1
0
John Robson
Silver badge

Complex? It's an STV election...

Is it just me that doesn't think that this is a complex scenario?

I could design a ballot paper that would be human readable, and therefore easily verifiable, as well as machine readable, and therefore able to be loaded to the dB quickly.

It's not a complex problem to solve - although I'm not quite sure I understand the concept of using a lower choice vote for people who have voted for an already "Quota'd" candidate... Whose votes do you use - or do you use them all pro rated to the "excess votes" of the primary candidate.

So if I vote for someone popular I get 1 and a bit votes?

0
0

VDI comes to the Raspberry Pi

John Robson
Silver badge

Re: if SD card is a "risk"

"The PiZero doesn't have an Ethernet port. You'd have to adapt one or a wireless add-on connection via a USB port. For that cost, you've come up to the price of a Pi2 with way more power, so it hardly seems worth it for a PiZero."

I know it doesn't - and I know it only has one USB port - but with USB OTG hub+Ethernet adaptors available for < $4 I suspect we can still come in at ~$10 for the electronics.

And I'm aware that this will increase the power budget, but the power budget isn't really an issue in most cases - what will be powering the monitor for instance?

I'd really like to see a Pi based machine in a Psion5 case with a modern touch screen.

0
0
John Robson
Silver badge

Re: if SD card is a "risk"

"Congratulations. You've reinvented the 21st century Commodore 64..."

That was roughly the aim... (The exact aim was the BBC micro)

The form factor makes some significant amount of sense, given the power we can pack into tiny computers nowadays.

Heck, a couple of AA battery compartments on the back wouldn't go amiss either...

2
0
John Robson
Silver badge

Re: Woot

I currently use a citrix solution over a 54Mb/s wireless connection in the office. It's fine.

I also frequently use VNC (running in an XVFB) over IPSec to a data centre on the continent - and guess what, that's fine too.

Sure I wouldn't want to stream video on it, but then again the machine it's running on is somewhat underpowered for that anyway.

For most things I can't tell the difference between 10ms latency and 10 us latency - my ears probably could, 10ms is right in the Hass effect "limit" range, and is a useful rule of thumb when doing audio installation designs.

But on a computer - no chance

2
0
John Robson
Silver badge

if SD card is a "risk"

Then that's the first custom version - 5k of these with a small on board storage module - maybe accessed by some magic (jumper shorting) of the input power cable...

Given that this is clearly a bulk application - Monitors/keyboards with USB hubs used to be common place, I'm sure that 5k of them with a WiFi dongle, or preferably an ethernet port, wouldn't be prohibitively expensive - a Pi Zero (2) (yes I know) would be a great little central piece...

Keyboard with a few ports on the back:

- USB power in

- HDMI out

- USB out marked "Mouse"

- Spare USB out

- Ethernet port

2
0

How to build a real lightsabre

John Robson
Silver badge

Re: Do not try this at home kids...

I've always assumed that blaster shots are much like the air packets from an airzooka...

First four seconds of this video: https://www.youtube.com/watch?v=qyMKhM1yxnE

The air is moving pretty fast, but mostly in a torus, so the actual smoke ring progresses slowly, but retains it's integrity...

0
0

Microsoft extends Internet Explorer 8 desktop lifeline to upgrade laggards

John Robson
Silver badge

Really...

"Microsoft negotiated a volume discount.."

There's the problem - the gubbinment should have been negotiating...

2
1

Microsoft beats Apple's tablet sales, apologises for Surface 4 flaws

John Robson
Silver badge

Re: More Microsoft marketing lies...so silly.

"Microsoft Surface beating Apple iPad ? More units sold? What?

It never happened. Just never."

Two reasons it could have happenned:

- They chose the release month of the shiny shiny from MS, which is a a mid-cycle month for Apple.

So there is an "early adopter" bump in the MS figures and a normal replacement month for Apple.

- The normal replacement cycle for Apple devices is somewhat longer than for MS (no evidence presented or needed for this theory).

3
0

All eyes on the jailbroken as iOS, Mac OS X threat level ratchets up

John Robson
Silver badge

Re: This oculd be due to the popularity of windows...

"Perhaps you meant "VMS and BSD", but that does undermine your argument a little. There hasn't been any DOS in Microsoft's OS products since Windows XP came out, whenever that was (I was still Mac-only in those days). The NT kernel was modelled on VMS.

I use both OSes daily. There really is no difference in privilege escalation between OSX and Windows. Processes simply cannot get above their station anymore on either OS, and must ask the user for the permissions they seek."

Yes - but I couldn't remember VMS offhand, and DOS was a more polarised difference...

Priviledge escalation is possible on any OS:

http://www.theregister.co.uk/2015/07/22/os_x_root_hole/

http://www.theregister.co.uk/2009/08/14/critical_linux_bug/

http://www.theregister.co.uk/2015/06/24/killer_character_hoses_smallalmostsmall_all_versions_of_reader_windows/

http://www.theregister.co.uk/2009/09/14/freebsd_security_bug/

Just the top links from a google search of priv esc against the register domain for the mostly discussed OSes (yes I know netBSD != FreeBSD, I only searched BSD)

Of course it is far easier to ask for the rights from the user - who usually doesn't understand what's hapening and has been trained to "click yes if you want the computer to work"

2
0
John Robson
Silver badge

This oculd be due to the popularity of windows...

Or it might be due to the fundamentally different starting points of DOS and BSD

6
2

Boffins teach cars to listen for the sound of a wet road

John Robson
Silver badge

Re: What the what?

"Question: How do you KNOW you're close to the physical capabilities of your car at that given moment?"

Because I've done various amounts of driver training, including skid pan sessions. I also have eyes and ears, and choose to drive *well within* the capability of the car and road in front of me, it's not a race.

"I'd rather arrive 5 minutes late in this world than 50 years early in the next..."

Most mechanical devices will give you feedback as you approach the limit - for instance tyres start squirming (and the traction available actually increases up to a certain slip angle).

1
0
John Robson
Silver badge

Re: What the what?

"Every car that passed it altered the conditions of the road by driving through it."

Yes - but not to the extent of making a dry road wet.

If you are driving *that* close to the edge of the physical capabilities of your car then get the hell off the road and onto a track where 'getting it wrong' doesn't have the potential to kill bystanders (yes marshals occasionally get killed, but they're made aware of that risk when they sign up)

1
0
John Robson
Silver badge

Re: What the what?

As opposed to being due to drivers not driving to the conditions in front of them...

Wet roads don't cause crashes - they are the same for everyone, and all the cars in front of you managed to get past it...

6
0

Spotify mulls Swift change of policy – we can stream Taylor, but we'll charge

John Robson
Silver badge

Re: Real sample of revenue for you

I can understand why they'd like the higher royalty rate.. but is that for a song, or for an entire catalogue of 40 years of music.

The point being that you can reasonably expect that to be a continuous stream of income, generally increasing as your catalogue grows? And there is no further cost - yes I do get the cost of getting to that stage needs to be recouped, but...

I'll also suggest that it isn't the artists sole revenue stream. It's not as if the CD sales are zero since spotify, or the concerts have noone at them...

0
0

Motorola splashes £817m buying out police comms biz Airwave

John Robson
Silver badge

@TeeCee

I doubt that the VoLTE requirement was put in for Airwave's benefit. The emergency services customers rely on various features of TETRA that are not available on LTE - that is a serious risk, not just a procedural change.

These are not mobile phones, they are not used for pure point to point conversations - and the timing requirements for TETRA are quite tight - you don't press a button and wait ten seconds before you can start a conversation.

That sort of thing can be really important if you are under attack, or in a burning building, so it isn't "most of the time", it's "all the time".

Similarly a call for help will be heard by many local officers as well as the control room - allowing someone who is just around the corner to respond without delay.

0
0
John Robson
Silver badge

Re: Manx Telecom

Because the 80% coverage that all the networks claim to have is the same 80% as each other - possibly there are few little areas of difference, but it won't get above 85%, even if you merge them all..

1
0

Is ATM security threatened by Windows XP support cutoff? Well, yes, but …

John Robson
Silver badge

Nearly - but if I had a zero day on XP embedded in my pocket now I woulnd't use it for a couple of weeks.

Then I know that if it still works it will always work. AND I can also check the patches issued for whatever followed WinXP Embedded to see if the flaws fixed also existed in the older OS - and again, I know they won't be patched.

The opportunities for exploit are much higher if I know that the systems will never be patched.

12
1

Free HTTPS certs for all – Let's Encrypt opens doors to world+dog

John Robson
Silver badge

Re: 90 Day Expiry

Bad form replying to myself - but I don't need to do anything wierd with DreamHost:

https://www.dreamhost.com/blog/2015/12/03/lets-encrypt-and-dreamhost/

It should be really easy!

1
0
John Robson
Silver badge

Re: 90 Day Expiry

So renew it every month by cron - how hard can it be? Looks like a simple command to retreive a new cert, and then have a simple root script copy that into place and kick apache?

I haven't played with this yet - but I will do once my current change freeze is over...

I wonder if I can do wierd things with DreamHost?

2
0

Google snoops on kids via Chromebooks, claims EFF in FTC filing

John Robson
Silver badge

Really?

"This allows Google to track, store on its servers, and data mine for non-advertising purposes, records of every internet site students visit, every search term they use, the results they click on, videos they look for and watch on YouTube, and their saved passwords."

Every search term, every result and every youtube video - all of those are under Google's control at the other end so of course they can monitor them...

Most sites nowadays are accessed through a search, so every site is only a small extension of that...

Saved passwords - shock horror, not quite sure that they have the time or inclination to find an individual 7 years old's password to an educational games site....

Yes - the settings should be off by default, or at least be presented on a first boot/account creation basis...

0
0

Competition watchdog dismisses plans by TfL to uber-regulate Uber

John Robson
Silver badge

And presumably it's not a UK only valuation...

But the tax system is, in general, a complete shambles

6
0

Court: Swedish ISPs can't be forced to block Sweden's Pirate Bay

John Robson
Silver badge

And any speeding tickets you get in Germany can be handed back to the government to pay...

Shame you can't pass them back to the car manufacturer, but the government will have to do...

0
0

Uber Australia is broke: 'We don't pay tax because we don't generate revenue'

John Robson
Silver badge

Re: It beggars belief...

"As I understand from the very broad definition, If you're getting paid, it's an enterprise. If you're not getting paid, it's a car share."

I don't think it unreasonable to expect some remuneration towards petrol & wear and tear (as defined by your government's own tax office).

Car sharing without is fine if you drive half the time, and I drive the other half, but if you always do the driving then I'm not contributing appropriately to the arrangement - paying 50% of the relevant milage rate seems fair to me - and probably good for you as well.

Carry two people to work (which I could easily have done at a previous job and you can either cut the costs in 3, or maybe everyone you carry is happy to put in 50% - in which case your own commute is free.

1
1
John Robson
Silver badge

Re: It beggars belief...

"If the goal is to help cover your commuting cost then my instinct would be that such an arrangement would not qualify, so long as the trip would have been made regardless of any paying passenger."

That was the case I was putting forward. But I can't quite work out how you would decide where that case stops...

Presumably where your petrol & wear costs are more than covered?

0
0
John Robson
Silver badge

Re: It beggars belief...

Interesting - but is a driver who, for instance, accepts a fare each way on their regular commute acting as an enterprise?

I'm not entirely convinced that they are - it's just a dynamic, and large, car pooling service.

Obviously if you are just driving around all day grabbing fares then you are operating as an enterprise...

How far out of your way do you have to go to become a taxi rather than a car share?

1
6

Tech firms fight anti-encryption demands after Paris murders

John Robson
Silver badge

Re: WRONG

Maybe because they shouldn't have been reading it without a warrant.

And those warrants are so hard to get, you need to convince a judge and everything...

The VCR legality case, where significant non infringing rights were established, seem s applicable here. There are significant non infringing uses for cryptographics. Therefore they should remain legal, despite the potential for 'missing' a terrorist you knew about anyway...

3
0
John Robson
Silver badge

Re: Join up your thinking

"American senator Dianne Feinstein, who chairs the US Senate Intelligence Committee, told MSNBC: "If you create a product that allows evil monsters to communicate in this way, to behead children, to strike innocents – whether it's at a game in a stadium, in a small restaurant in Paris, take down an airline – that is a big problem.”"

How did they get to those places - by road. What did the Romans ever do for us?

26
0

Car radars gain sharper vision after ITU assigns special spectrum slice

John Robson
Silver badge

Re: I always wonder...

It's been done with a video camera and a 150? "pixel" square on the tongue...

Allowed someone to go rock climbing IIRC...

Edit: Added:

BBC news link (2011)

Discover Magazine link (2008)

611 electrodes in an array on his tongue.

3
0
John Robson
Silver badge

Re: Interesting link

Can your eyeballs penetrate fog? Not really.

Why assume that this is the only system available - advantage of sensor arrays is that you can easily design a few of them - 79GHz, and optical, and IR, and???

Some might not work very well in fog, but between them they will easily exceed the capacity of the plasmic scanner available to the current control system...

2
0

BitLocker popper uses Windows authentication to attack itself

John Robson
Silver badge

Re: Sadistic?

- Is that, typically once a quarter, really so insufferable?

Once a quarter? Try every 30 days (i.e. not quite aligned to months)

Particularly when you normally work remotely (at a client site) and therefore don't get any warnings of password expiry...

2
0

Child abuse image hash list shared with major web firms

John Robson
Silver badge

MD5 Bad....

PhotoDNA - I hope it's somewhat better...

2
0

Forums