* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

Two-factor FAIL: Chap gets pwned after 'AT&T falls for hacker tricks'

Charles 9

Re: Yubikey + U2F

Assuming your phone takes USB OTG. This isn't a given. Remember the phone with the non-standard port?

Charles 9

Re: Yubikey + U2F

How do you use a YubiKey on your phone which has no USB ports?

Charles 9

"She'd got everyone listed with letters like SNB, FA, RA, DV (those are the ones I remember) which also related to the client. So if you called up as a customer and even if you gave the correct code word if you didn't sound like your acronym(s) Snobby (SNB), have a Foreign (FA) or Regional (RA) accent or Deep Voice (DV) then she'd be very wary."

How did the secretary handle things, though, when the voice change was for a legitimate reason (usual person was on vacation, for example)? False negative?

Charles 9

But now you're on the sliding scale. Make things TOO tight and you end up with complaints from people who can't get their business done because they've LOST their second factors and can't get a new one issued. Too tight or too loose, you end up losing business, and there's always the risk the medium is not happy but UNhappy: loose enough that accounts STILL get stolen, yet tight enough that people STILL complain too much about losing access.

Charles 9

And these always have to deal with human fallability. What happens the day you leave the fob at home on a crucial day you're hours away? Or what about the RSA attack which was apparently after secrets behind 2FA tokens so as to crack them?

Viking storms storage monastery wielding 50TB SAS SSD

Charles 9

Re: No pricing...

Maybe it's simply a case of, "If you have to ask, you can't afford it."

Charles 9

Re: Nice

But their reliability when they're mothballed can be hit or miss. Sometimes you spin up a drive that hasn't been used in a while and it...doesn't. Solid state drives can't suffer mechanical failures the way rust drives can, and controller failures can happen to ANY drive, so it's a wash there. One good question is the rate of bit rot between them. I try to address this by keeping error codes with my backups to deal with it if it pops up on occasion.

Charles 9

Re: Yay!

As the previous poster noted, WORM (or what I'd rather call WIRE, Write Infrequently, Read Extensively) is another valid use for a big drive with OK reads and lousy writes. Things like media archives where they often don't get changed once they get in but can get hammered a lot in the playback department. Reliability is a plus in that department.

Charles 9

Re: 50TB! I'll take twelvety.

What about packrats, though?

Web inventor Sir Tim sizes up handcuffs for his creation – and world has 2 weeks to appeal

Charles 9

Re: Capture system... between PC and monitor.

Not necessarily the USER. The user's DEVICE, yes, but not the user him/herself, and that's significant because the user may not necessarily have access to his/her own device (particularly the internals, think a black-box cryptoprocessor). The material is there, and the algorithm is known, but if the key is not presented in a way that the user can easily reach, then it's still a pretty tight system: like a peep show (look but don't touch).

Charles 9

Re: Consumer choice

But that makes a Hobson's Choice when the ONLY version of a product available is a DRM product: Take It Or Leave It. problem is, the Leaves are in the clear minority.

Charles 9

Re: Capture system... between PC and monitor.

Don't bother trying it with a 4K disc, though. IIRC they updated the standards so PC drives can't read the keys, only dedicated players can read them and all links on the chain (including the display) must use encrypted buses and protected data paths. They're really tying these things tighter than a miser's purse this time.

Charles 9

Re: Capture system... between PC and monitor.

Oh? Does it stay working even if hooked up to a BluRay drive. Game Capture cards depend on unencrypted streams. I have one myself, and it specifically notes it won't work on encrypted streams. And newer systems can detect when a repeater or splitter is present and block based on that.

Charles 9

Re: Let a thousand indie studios bloom

"I bet YOU have a lot of good ideas, too. And lots of other people. But Hollyweird is stuck in their elitist bubble. They can't think outside of their self-imposed "box", tainted by SJW and agenda driven plots, and no real clue as to what their customers (i.e. 'the audience') REALLY wants."

Given the booming business in Hollywood, and given there hasn't been a real independent blockbuster since, say, The Blair Witch Project, I don't think Hollywood is worried all that much. Sure, they lay an egg now and then, but they still seem to get enough good results (plus the occasional blockbuster) to keep going. If independent cinema really was all that, why haven't they taken over already?

Charles 9

Re: How is this going to help; cost to consumers

"And yet people with no hope of making money from it are ripping stuff."

But not at the full 4K quality. The ones you're seeing now are mostly coming from insiders. All the rest are being written off as "screeners" and the realm of the desperate who will do ANYTHING for a view: even take inferior results.

Charles 9

Re: Sir Tim is 62

"It's relatively trivial to reverse-engineer a 4K TV or numerous other attack vectors to sidestep any content-protection measure. with full quality."

Even if the TV is built with tamper resistance? And if the BluRay discs contain stuff like ROM-Marks or the like that can't be read by PC-class players?

Charles 9

Re: How is this going to help; cost to consumers

Computers aren't allowed to be 4K BluRay players. The spec REQUIRES dedicated players because they know PCs can't be protected end-to-end. As for the framebuffer, (1) by the time it's there the video data is raw, meaning gigabytes per second of data streaming through. It's gonna take some specialized hardware to handle the raw 4K stream at that level, and (2) it may be embedded in the display hardware to the extent that you have to undo something else to get at it. Like I said, protected hardware paths which includes significant tamper-resistance.

Put it this way. It's a LOT of hoop-jumping to rip a 4K film these days. I believe due to this most leaks are now coming from insiders.

Charles 9

Re: Sir Tim is 62

And the computers can be instructed not to make things easy. Or did you notice most of these will require the use of video cards that support HDCP? AND can detect the use of splitters and/or repeaters? Here's a hint: "A repeater is connected to your system. Some video applications do not support HDCP when a repeater is present."

That's why 4K BluRay content won't be allowed on PCs, only dedicated devices with protected hardware paths.

Charles 9

Re: Slowly and surely they drew their plans against us

"By keeping this fracture, we ensure that DRM companies will only ever employ second-rate programmers whose code will inevitably kneel to the steely-eyed abilities of their betters who will mercilessly rip apart their stupid schemes and allow us to continue to master our content in the manner of our choosing."

Or they'll just stick to what they know (namely closed systems like Windows) which leaves the non-Windows users SOL. Think of Unintended Consequences.

Microsoft drops Office 365 for biz. Now it's just Microsoft 365. Word

Charles 9

Re: Inspire...

Unless someone us BARRED from using Google accounts for security reasons (eg. High security airgapped area). Plus what if a critical links DEMANDS use of MS products due to scripts or whatever (and has the power to resist any push to change, could even push back and terminate conteacts)?

Charles 9

Re: As if they didn't have enough

Well, to be fair, the cable companies get shafted, too. The channels themselves are owned by a few major conglomerates. For example, Discovery, TLC, ID, and a bunch of others are owned by one company, Disney owns the ESPN networks, all Disney networks, and several others (including the one that's still contracted to air The 700 Club). Basically put, THEY won't let the cable companies go a la carte, either (Especially Disney. They KNOW they hold one of the most demanded cable channels and make it a Hobson's Choice--you want ESPN? You take ALL our channels...OR NONE. Leave us and watch your customers defect).

Former GCHQ boss backs end-to-end encryption

Charles 9

Re: progress

It's extremely hard to hide electricity, especially in an environment where electricity costs money and efficiency is a go word.

Charles 9

Re: No longer in post -> Can speak truthfully

But the opponent is the government itself. As in they MAKE the laws. Anything you can make, they can UNmake (or work around). When your opponent is at that level, laws pretty much can't help you.

Brit prosecutors ask IT suppliers to fight over £3 USB cable tender

Charles 9

Re: Buy local!

What about PUBLIC concerns where legislatures and taxpayers are going to have questions?

Tape lives! The tape archive bit bucket is becoming bottomless

Charles 9

Re: Price range

Except you have to account for the cost of the drive as well as most don't have one. And even taking into consideration most need SAS (server-grade drive tech, not available to most people) to keep it fed, you should see the price tags for recent LTO drives. Definitely NOT consumer-level stuff.

Charles 9

Re: Good. Now all we need in Windows NTBackup ported to Windows 7

"a) run windows [if you must] in a VM hosted on Linux or BSD"

Can't. Performance and gaming issues. This is a gaming, 3D, AND encoding rig. Need maximum memory AND performance which a VM can't provide.

Charles 9

Transfer rates, data allowances, and ownership issues mean the solution MUST be local. And while I AM using a two-drive rotation for the stuff I value most, they're not designed for cold storage, so I'm always worried about a failsafe failure.

Charles 9

Probably not, so it would be nice if LTO quotes in future are raw and let the user assume responsibility for optimizing its use through compression, deduplication, etc.

Having said that, I miss the Travan days. At least back then, tape drives were within consumer reach and provided us with at least some means of offloading cold data in the days when 1GB of data was a premium. A tape system accessible and affordable to the consumer in tiers of 2, 4, maybe 8 to 12TB for packrats would at least provide an alternative to external drives which can have reliability issues. At this stage, the only one within reach (and at a stretch) is rust-based RDX. Longevity doesn't even have to be so strong. Five, maybe ten years on the outside would be enough to handle a move between generations if need be.

Good luck building a VR PC: Ethereum miners are buying all the GPUs

Charles 9

Re: Other problems for VR

The problem with round trip times is that they run into a HARD limit: the speed of light. It's physically impossible for data to run a round trip from New York to Los Angeles and back faster than c, and usually some fraction of c (the speed of electricity in copper is about half c).

While USA is distracted by its President's antics, China is busy breaking another fusion record

Charles 9

Re: Worse..

According to the article, it's not solar power specifically but the California grid in general. It's way overbuilt, even accounting for surge capacity. This is more a matter of political nepotism at work here: a human factor that's notoriously hard to control. And there's no mention of selling off the excess electricity to neighboring states. Perhaps the infrastructure isn't there or regulations make this too problematic. Point is, the article isn't quite saying what you're saying.

Charles 9

Re: Flat Earth

The trouble is that true Flat Earthers are irrational by nature. And you know what they say about trying to win an argument with an irrational person.

Charles 9

Re: That reminds me

IOW, it's a lottery side bet. Like putting aside a buck now and then when the jackpot gets big. If it doesn't work, oh well, no lunch. But if it hits, it hits BIG. The reward way outweighs the risk in this case because the risk really isn't that great.

Charles 9

Re: Crazy ideas?

"Of course they did, they were living on it after all. :P"

Blame my phone's autocorrect, OK? And since I was on the mobile site, I couldn't edit.

Charles 9

Re: Worse..

Oh? Is EAST part of ITER? Or something separate so that China doesn't have to share?

Charles 9

Re: Crazy ideas?

"It wasn't that long ago that many learned people thought if you sailed across the ocean then you would fall off the edge. Flying and space travel was the ideas of crazy people and if you went faster that 30mph in a train then you would be ripped to pieces from the forces involved."

The Greeks knew the world was around 2,000 years ago AND could prove it with math and physics.

BOFH: That's right. Turn it off. Turn it on

Charles 9

Re: You could try this

And if it turns out he's on 7...or a non-Windows machine?

Charles 9

Re: “Because they're idiots, and the worst is yet to come.” Indeed it is, says I/US.

Not even that. Eventually the bottom runs out of higher life forms from which to draw their sustenance. Not even sunlight is a given if a cosmic winter hits.

Charles 9

Which brings us to the next problem. What happens when the rubes happen to be on the board?

Charles 9

Re: do not enter the hypen!

The reason for that is that credit card fields have EXACTLY 16 spaces in them. Not 15 nor 17. And there's no slack because SOMEONE will use all 17 spaces by mistake (double strike) AND swear up and down they only entered 16 numbers to the point they only count 16 when directly asked to do so.

Sometimes, you just can't fix stupid.

Semiconductor-laced bunny eyedrops appear to nuke infections

Charles 9

Re: copper, the miracle element...

Is copper still effective after it's developed a patina? Perhaps that's the reason they switched to things like stainless steel, which are usually passivated to prevent similar chemical reactions from dulling their usefulness.

Charles 9

Re: Resistance

Carbon seems to work below the normal biochemical level. Its action seems closer to that of a bleach than anything else (which kills by simply bulldozing cells chemically rather than by any bacterial action). You're astute to note potential risk to friendly cells, which is why I mention the specific term "A bleach," which in biochemistry means specifically an indiscriminate chemical agent (TOO powerful, IOW).

Tech can do a lot, Prime Minister, but it can't save the NHS

Charles 9

Sound like we're screwed then. Private enterprise sucks the patients and insurance companies dry while the public sector is mired in inefficiency and never safe from being turned into a governmental plaything. And since BOTH are natural human tendencies, no amount of safeguarding can ever keep them permanently away (eventually, one or the other will REMOVE the safeguards).

Microsoft boasted it had rebuilt Skype 'from the ground up'. Instead, it should have buried it

Charles 9

Re: Modern Day Professional

Not really. The powers have more voices, and you know the saying, "Tell a lie enough times and people start believing it." Remember, these are people who believe with true conviction that climate change is a massive global conspiracy that ALSO involves the rival Russians and Chinese and that immunizations are a secret indoctrination project to permanently hold the population hostage to lifelong treatment regimens only the State can provide. Sad to say, but the natural human state is IRrational.

Charles 9

Re: Ekiga

Classic problem. Cross-app compatibility BY WHAT STANDARD? All the app makers want to be the standard-bearer since that lets them dictate terms. And since there are high stakes involved, no one's willing to give up on the race at this point. IOW, for there to be standard, there must be a WINNER first, and the race isn't over yet.

Charles 9

Re: Modern Day Professional

NO JOKE! Frankly, we're gonna have to face the fact that there's something extremely wrong with the entirety of Western Civilization, if you ask me.

Charles 9

Re: "This new app is absolutely terrible"

"Since I'm on the subject, what exactly is the Register "make this comment better within ten minutes" offer?"

Are you on the mobile website? Edit's not available yet on the mobile website. Switch to the Desktop website and it should appear. If you're using ad-blockers, you'll probably also need to enable both theregister.co.uk and regmedia.co.uk.

I've also heard the Edit feature is not available to all users. Anyone know if you need a medal to be able to edit?

America's net neutrality rage hits academia

Charles 9

Re: Welcome to the new Trumpistan!

The way you talk, you figure we're past the Point of No Return: beyond the Idiocracy point where the stupid can always outvote the smart. Am I right that this means it would take another intellectual revolution (and luck to avoid the nukes) to correct this properly?

Bye bye MP3: You sucked the life out of music. But vinyl is just as warped

Charles 9

Re: Oh no you don't

"Yes, you definitely do notice the difference. Except if you have to do it in blind testing. Hydrogen audio performed quite a long time ago testing on different MP3/AAC bitrates, on properly functioning codec (=no blatant bugs, incorrect settings) very few people can tell 128kbit apart from FLAC. Throw in variable bitrate and/or higher constant bitrate and you're completely SOL. (*)"

Did they also do a FLAC-to-vinyl comparison to see if true audiophiles could tell them apart better than random guessing?

Charles 9

Re: Well said

"Even as an engineer, trying to explain Nyquist etc. to them there's really no point, it feels like trying to preach Christianity to a Bhudist."

Then make them put their money where their mouth is and subject them to a blind sound test between good vinyl and high-bandwidth MP3s and see if they can consistently tell them apart higher than random guessing.

New work: Algorithms to give self-driving cars 'impulsive' human 'ethics'

Charles 9

Re: A half century of driving

I guess you've never had one just suddenly jump out at you from a blind spot and too close to stop even at cautious speeds. There are also "crap happens" moments when you're simply screwed: such as driving on a bridge the day it suddenly collapses under you.