* Posts by leon clarke

121 publicly visible posts • joined 1 Sep 2008

TalkTalk attack: UK digi minister recommends security badges for websites

leon clarke
FAIL

Read the PCI DSS and weep

PCI is both an intolerable pain in the ass to comply with and completely inadequate at protecting consumer's interests. However, when you look at it, it's all quite reasonable, in the sense that if you're going to write a box-ticking assessment standard to prove a system is secure then PCI does about as good a job as is possible. There aren't absurd pointless requirements or obvious omissions.

So the question for any such kitemark is how does it compare to PCI. Is it more onerous, in which case no-one will bother. Is it less onerous in which case it gives no meaningful assurance of anything. Is it the same, in which case no-one will bother and it gives no meaningful assurance of anything.

BlackBerry opens its Priv kimono just a little wider

leon clarke

Unique?

'The Priv is unique in that nobody else is pitching a security-hardened Android at businesses that boasts top-end consumer specs.'

Presumably some words in that have precise definitions in order to make that true.Does Knox and SEAndroid not count as security hardening? Or are Samsung phones not 'pitched at Business'.

I'm going to guess they are using a definition of security hardening which describes something that no-one else thinks is worth doing.

Where will storage go over the next 15 years? We rub our crystal ball

leon clarke

15 year timescale

Over that timescale you have to assume some sort of technology like X-Point or some other phase-change memory will be developed. When that happens, its liable to be much more rapidly disruptive than flash was. I suspect that flash will look like a briefly-forgotten intermediate technology between disc and phase change. And things will get very hyper-converged very quickly - it's the only way to make use of the speed of phase change.

BT to shoot 'up to 330Mbps' G.fast into 2,000 Gosforth homes

leon clarke

Re: Copper's last hurrah

I'm waiting for G.fastest bis

leon clarke

Copper's last hurrah

I've hard that quite a few times before. I was going to say that I first heard it with V.90 but I think I may have heard it earlier than that.

Drunk driver live-streams her slow journey home

leon clarke

Re: I'll give you my steering wheel...

The only thing that can stop a bad guy in a car is so many other cars that all the roads gridlock.

Volvo to 'accept full liability' for crashes with its driverless cars

leon clarke

Re: What ifs

Re: proper audits for car software.

The good thing about the car manufacturer accepting liability like this is that market forces are correctly aligned with the interests of consumers and there's no need for complex legislation to impose proper audits. The car manufacturer, or their insurer, will want to make sure that the software works because if it doesn't they'll end up paying for crashes. This is very different to the VW situation, where there's a bit of software that wasn't really in the interests of either the car owner or the car manufacturer; not unsurprisingly this software actually did what the owner and manufacturer would want it to. I'd also assume that an autonomous volvo won't leave the drive until it's checked for security updates; volvo would have a strong financial incentive to make sure cars are patched so they'll make darned certain they are patched.

That doesn't mean we don't need audits and standards. It's just that we can rely on car manufacturers to create them, and to do a better job of creating them than would happen if they were imposed by legislation.

TRANSISTOR-GATE-GATE: Apple admits some iPhone 6Ses crappier than others

leon clarke

This has interesting implications beyond Apple

The Qualcomm 810 (fabricated by TSMC) has a well-publicised heat problem, leading Samsung to switch to their own processors for the Galaxy S6 and Qualcomm to switch from TSMC to Samsung for the 820. So at the time it rather looked like TSMC was having heat problems relative to Samsung. But now it's looking like TSMC have more than got their house in order.

(Heat and power draw are basically the same thing; where else does the power go?)

'We can handle politicos, OUR ISSUE IS JUDGES', shout GCHQ docs

leon clarke

The reason why is obvious - they're interacting with real spooks. How 007 is that? What could be cooler? And the real spooks said all sorts of stuff about how the meaning of the warrant is terribly complex, technical, not at all scary and absolutely essential to national security.

Oh, and accidentally destroying civil liberties is less of an electoral liability than accidentally allowing an unsuccessful terrorist plot to get further than it might otherwise do, so the safe thing to do (from an electoral liability point of view) is to sign everything put in front of you.

Simple really.

Microsoft starts to fix Start Menu in new Windows 10 preview

leon clarke

All together now

640 kilobytes, er I mean 512 start menu entries should be enough for anyone

Stench of confiscated dope overwhelms Catalan cop shop

leon clarke

External weed bins

...might be found to have the additional advantage of being self-emptying

First pics of flagship Lumias for 18 months released … or maybe not

leon clarke

That android on Windows strategy

Makes sense.

After all, a wise man once said 'When you're standing on a burning platform, you have to jump'.

Row rumbles on over figures in Oracle CSO’s anti-security rant

leon clarke
WTF?

So, they're counting bugs found during development

Oracle are counting bugs found during development! Arguably true, but not how anyone else in the universe counts security vulnerabilities.

Want to download free AV software? Don't have a Muslim name

leon clarke
FAIL

'against the law'

What matters (from Sophos's point of view) is not whether or not it's legal to give antivirus software to someone called Hasan Ali. What matters is whether their lawyer says it's legal. Which is subtly different - the lawyer could get into a lot of trouble if they say something is legal when it isn't, but they're unlikely to get into any trouble for claiming something 'might be problematic' when it isn't. Hence everyone 'errs on the side of caution'. And everything gets made more general and vague a few times in the interests of 'simplicity', making the eventual rules even less connected to the original law.

The same principle causes health and safety to go mad, and it needs to be better appreciated. A law should be considered faulty if it has consequences like this even if anyone reading the actual law can clearly see that, in this situation, it shouldn't apply.

China's best phone yet: Huawei P8 5.2-inch money-saving Android smartie

leon clarke
Stop

Some comparison with the OnePlus One please

OK, so it's much better value than South Korean flagships, but people wanting to save some money by getting a Chinese flagship already have a few options. OnePlus are probably creating the most media chatter, and I'd have thought the One is the obvious phone to compare with this.

I'd suspect the OnePlus One would be a better bet - slightly cheaper, hardware maybe a bit better depending on what metrics and benchmarks matter, and (most importantly) it comes with a more vanilla Android.

YOU ARE THE DRONE in Amazon's rumoured new parcel delivery plan

leon clarke

This sounds exactly like the UK 'Amazon Logistics' operation that delivers prime stuff

...and involves random people in battered vans delivering the parcels. Either Amazon has very odd ideas about how to maintain a fleet of vans, or they're all freelancers in their own vehicles.

GAZE upon our HI-RES DWARF PICS of Pluto, beams proud NASA

leon clarke

Plutonians?

How about Plutocrats

One USB plug to rule them all? That's sensible, but no...

leon clarke

Re: Is there going to be a minefield with cable quality in alternate mode?

I wasn't worrying about a cable ignoring alternate mode. I was worrying about it not having the right wire, screening and so on for whatever protocol it finds itself carrying.

But I hope someone who knows more than I do about wire, screening and so on has thought of this.

leon clarke
FAIL

Is there going to be a minefield with cable quality in alternate mode?

If a cheap cable just-about works for normal USB, I could easily imagine it not working for Thunderbolt. And maybe some cables would work for some alternate mode protocols but not others, while other cables will work for a different random set of protocols.

And has Thunderbolt managed to change things so it can run over passive cables? I thought that thunderbolt cables were really expensive as the actual driver circuitry was in the plug, not in the device. If so, have they solved an impressive problem or were they being lazy before?

Hubble spots Pluto's moons are a chaotic mess of tumbling rock

leon clarke

Rugby Balls

I'm impressed that someone from the University of Maryland recognises the moons as rugby-ball shaped. I would have feared that people from near Maryland would mistake them for American Football shaped moons.

NASA hands Boeing first commercial crew contract for SPAAAACE

leon clarke

CST-100's schedule looks interesting

According to Wikipedia

http://en.wikipedia.org/wiki/CST-100

Pad abort test in Feb 2017, uncrewed flight to ISS in April, crewed flight in July. Presumably an in-flight abort test will happen in March.

That sounds like a remarkably short time to go from pad abort to crewed flight. It doesn't give much time for any lessons to be learnt from any minor anomalies between the launches.

My guess is that they've 'got' to be ready by June 2017 to get the NASA gig, but they don't think they'll be ready for pad abort before Feb. And they can pretend this is viable by assuming all those tests will go absolutely like clockwork.

So I guess SpaceX will be launching first, after 'unexpected' delays in Boeing's plans.

A good effort, if a bit odd: Windows 10 IoT Core on Raspberry Pi 2

leon clarke

The Pi needs Windows for the same reason it needs RiscOS and Plan 9

Ex 'Tech City' chief Shields appointed junior Fun minister for internet safety

leon clarke

Er, why at Ministry of Fun?

I'd have thought that if you wanted to do anything useful about anything to do with internet safety (as a minister), you'd have to be at the Home Office. That would give you involvement in things like the snooper's charter.

Whether or not she looks like a complete dead loss depends a lot on whether you compare her with successful people in the tech field, or whether you compare her to other ministers involved in internet stuff. I'm optimistic that she may be relatively good, because she isn't a PPE graduate who thinks that getting your secretary to print out your emails counts as using the internet (but she'll be unable to do anything as she'll have to tow the home office line on anything that matters)

New EU security strategy: Sod cyber terrorism, BAN ENCRYPTION

leon clarke

Remind me who it was who organised the AES competition?

Surely they're responsible for all this strong crypto. They should be held responsible!

Trading Standards pokes Amazon over 'libellous' review

leon clarke

Um, is this true everywhere

I've rung (and then been rung back by) 999 twice, both times in London. On both occasions the incoming call showed up as 999. Maybe other 999 call centers can't program the phone system as well.

Google's new scribble-tab-ulous handwriting interface for Android

leon clarke

Finally

My android tablet is better in every respect than my Apple (Newton) tablet.

'Why don't you buy from foreign sites?' asks Commish, snapping on the gloves

leon clarke

What's the definition of a foreign site?

Isn't amazon.co.uk technically in Luxemburg?

In which case many brits buy from foreign sites. I suspect many other national Amazon sites are the same.

(And I think there are EU countries without national Amazon sites, for whom Amazon insists on charging excessive postage fees)

$30 Landfill Android mobes are proof that capitalism ROCKS

leon clarke

The invention that's done most for living standards in the last 50 years

An interesting question, but I'm going to argue for better semi-dwarf rice.

Hurry shipmates - the black hats have hacked our fire control system

leon clarke

Aren't the fire control systems of Belfast completely mechanical?

In which case, anyone hacking them over the internet (or defending against such an attack) is a genius.

I understand that Scratchwood was chosen as the target to demonstrate the guns' range; of all the targets that are very close to the guns' maximum range, it was deemed the one most deserving of a few 6" shells. So the guns can't reach slough and targets in central London aren't impressive enough.

Apple design don Jony Ive: Build-your-own phone is BOLLOCKS

leon clarke

Re: Alternatively

And since I'm bound to get accused of flamebait, I need to explain myself better.

If I hire a designer to design something for me, that thing is customised to my needs, my values and who I am. That's how the idea of design started. Any 'brilliant' house will have quirks in it because of the unique needs of the family for whom it was built. Now there's this idea that a designer can invent the perfect thing that's perfect for everyone. That idea is, frankly, rubbish. Since you can't afford to pay a decent designer to design the perfect phone for you, the best you can do is to do the personal aspects of the design yourself, by choosing the right one from a broad and diverse market.

leon clarke

Alternatively

Buying Apple is abdicating your responsibility as an individual.

IT knowledge is as important as Maths, says UK.gov

leon clarke

So, would the new cabinet minister for the digital agenda need to have a post A-Level qualification relevant to IT?

UK.gov tempts SMEs with tasty framework, then slaps them in face

leon clarke

84% of SMEs on the framework?

Presumably that's 84% of SMEs interested in selling digital services to the government that the government knows about. Or maybe 84% of SMEs who have previously sold digital services to the government. It clearly isn't 84% of SMEs since most SMEs don't provide digital services. It probably isn't 84% of companies that provide 'digital services' as I can't imagine there's an accurate list of them.

So it sounds like the statistics are being assembled in a way that lets the civil service ignore any company that thinks working for the government is a PITA.

Zoinks! Is that Mystery Machine Apple's SELF-DRIVING FAMILY WAGON? You decide

leon clarke

Er, isn't it obvious that 'streetview' cars are really 'google maps' cars

I suspect that Streetview was just an excuse to explain why Google was trying to photograph every single street in the world without suggesting to their then mapping providers that Google was developing its own maps. Apple clearly need to improve their maps. That means they need cars like this. The lack of a big high-up streetview style camera (and the obvious presence of lousy map data on iPhones) suggests that all that's going on here is mapping and they won't be adding their own streetview.

I don't see a lidar so I don't think it's anything to do with self driving.

Euro mobile standards chiefs eye tiny beauty: It's the KEY to 5G

leon clarke

Re: Am I being stupid here?

Ahh. That makes sense

leon clarke
WTF?

Am I being stupid here?

Loads of tiny cells controlled by lower-frequency super-cells? Why not just connect the end-user devices to the super-cell?

Get your special 'sound-optimising' storage here, hipsters

leon clarke

I'll see your audiophile cat 5 and raise you

Now everyone's using WiFi, you really need digital-grade audiophile air. I wonder if it's OK to use the same kind of air for the wifi path and the audio path between the speakers and the ears.

Google kills CAPTCHAs: Are we human or are we spammer?

leon clarke

Google seems very clever in its use of capchas

Not only are they presenting you with a problem which computers are bad at solving. They're presenting you with a problem that they want solved. So for instance, the image capcha thing will obviously be used to improve image search just as the pictures of house numbers were obviously being used to improve google maps.

UK computing museum starts reboot of 65-year-old EDSAC

leon clarke

Oh, and zdnet has a rather good picture of the new EDSAC's boot ROM (which is a bit of a mechanical phone exchange)

http://www.zdnet.com/national-museum-of-computing-opens-edsac-display-recreating-1949s-top-computer-7000036216/

The boot ROM is one of those details that makes EDSAC so brilliant. Everyone else building computers at the time thought that building an electronic computer was an impressive achievement by itself. The EDSAC team also thought through what else was needed to let other people in the university to do something useful with it - so they invented boot ROMs and subroutines and so on.

leon clarke

Reboot?

Have they actually restored it, or is this a replica? I was unaware that any significant parts of it survived.

All the same, incredible achievement!

BIG trouble in Big China: Samsung cops it RIGHT in the wallet

leon clarke

To what extent are Apple prices grounded in reality?

My guess is they can only maintain so much of a premium over Samsung, so Samsung reacting to the Chinese will have an impact on Apple profits.

EU competition chief goes after Amazon’s delux Lux tax deal

leon clarke
FAIL

11 years to investigate...

Has Almunia not heard of the concept of having subordinates to do some of the work for you? If there were 5,000 matters that should have been handled at first then there should have been enough people to handle them.

Supercapacitors have the power to save you from data loss

leon clarke

Very interesting

But any chance of a noddy version of this article - that actually mentions particular models of SSD instead of particular capacitor chemistry options.

What the 4K: High-def DisplayPort vid meets reversible USB Type C

leon clarke

Re: Nirvana

If only someone could invent the 3.5mm headphone jack we'd be happy

leon clarke
Thumb Up

Interesting

It's interesting to see Apple on board, especially for mobile. Suggests they reckon that Lightning will run out of speed and have to be replaced by USB C.

Something interesting in press release: The cable has 4 USB 3.1 lanes. Each lane can either be used for USB or re-purposed for DisplayPort. That means that you could have a 2.5kx1.4k monitor with a built-in USB 3 hub connected using 1 USB C lead. 2 lanes can drive the monitor and the other 2 provide 20gbps to the USB hub.

And I didn't know that USB C has a standard for negotiating complete changes of wire protocol. Cool. That means that a phone could contain a USB C port, but a range of reasonably-cheap adapters can expose a range of different signals. (This will be less useful when USB C takes over the world and there's no need for any other signals, but still)

Cracked it - Vulture 2 power podule fires servos for 4 HOURS

leon clarke

I'm sure this is standard model aircraft terminology...

but why is the thing that connects the batteries to the servo called a battery eliminator?

Amazon takes swipe at PayPal, Square with card reader for mobes

leon clarke

It probably needs to pay most of those fees on to visa/mastercard, who will then pass them on to the issuer banks. The banks get so much money from card merchant fees that they feel generous enough to give people 1% cashback, and an interest free month.

(Creating a form of payment which didn't inherently cost so much would be a good thing, but that's a Separate Issue)

NVIDIA claims first 64-bit ARMv8 SoC for Androids

leon clarke

Re: Microcode

And Wikipedia tells us that Denver is indeed a microcoded CPU designed by engineers poached from various companies including Transmeta (and possibly licensing some transmeta tech). The reason it can't do x86 is that Nvidia doesn't have the patent licenses.

7-way superscalar, so if it works it'll be very fast.

I await some real independent benchmarks with interest.