* Posts by Mike 125

90 posts • joined 1 Jun 2010

Page:

Samsung: Hackers can't pwn our NFC payment kit. No way, nuh-uh, not true (Well, OK, maybe)

Mike 125

Re: You can't argue with a working proof of concept video.....

@DougS

>>but sometimes doing things the right way gets compromised due to wanting to >>drive down cost...i.e. making the payment terminals cheaper.

Yes, and also compromised by inappropriate speed optimisations: an extra 13 digits to create a properly safe MAC, all going over NFC, could be seen as taking a few ms too many. Usability always trumps good security.

This is fun - it's a fair bet Apple use the same system.

1
1

If you use ‘smart’ Bluetooth locks, you're asking to be burgled

Mike 125

ha ha

>>If you use ‘smart’ Bluetooth locks, you're asking to be burgled

It's funny because it's true.

8
0

Osram's Lightify smart bulbs blow a security fuse – isn't anything code audited anymore?

Mike 125

Re: Why is it

>>it has TWO, read em, TWO functions. On and Off,

For a bit of romance, it's sometimes useful to set something in-between...

The anger can be focussed far more widely than IoT. I don't want to go all hippy, but since consumer culture began, we've been buying crap we don't need. This is just one more insane example.

Also, security is not done well on PCs. So why would we expect it to be done well on IoT, which has huge platform constraints?

This whole thing was inevitable, like the next financial crash.

/> Hippy mode off.

10
0

414,949 D-Link cameras, IoT devices can be hijacked over the net

Mike 125

Re: Your wifi cam is not directly accessible from the internet

>>These devices (and I have some myself) are behind firewalls

And so is your computer, so that's ok then. What *can* everyone be worried about. Beats me.

8
0

Magnetic, heat scanners to catch Tour de France electric motor cheats

Mike 125

I love Bluetooth

>>Bluetooth-operated motor

Add that to the list of ludicrous Bluetooth applications, along with the BT padlock and BT electric toothbrush.

Being bored one day, I used Amazon Customer Questions & Answers forum to ask if the toothbrush also has Ethernet. I was earnestly and with great sincerity informed "No, sorry, it does not."

15
0

NASCAR team red-flagged by ransomware attack

Mike 125

TeslaCrypt

>>Leavine Family Racing (CSLFR) has admitted paying off ransomware runners after one of its main test computers got infected with Truecrypt malware.

That's TeslaCrypt, not Truecrypt.

5
0

Holy Crap! Bloke finishes hand-built CPU project!

Mike 125

Re: Not the same thing

But Babbage dreamt of a mechanical same thing:

Wiki:

The Analytical Engine incorporated an arithmetic logic unit, control flow in the form of conditional branching and loops, and integrated memory, making it the first design for a general-purpose computer that could be described in modern terms as Turing-complete.[5][6] In other words, the logical structure of the Analytical Engine was essentially the same as that which has dominated computer design in the electronic era.[3]

5
0
Mike 125

Re: Hydraulic valves, I trust?

Babbage been there, done that, (in theory).

https://plan28.org/

2
0

Ransomware scum build weapon from JavaScript

Mike 125

Re: How exactly does this execute?

Create a .js file containing:

WSH.Echo("Hello world");

WSH.Quit();

and just click on it in Windows Explorer. The rest follows.

'Windows Script Host' execution environment is enabled by default because it lets people 'do stuff'.

9
2

Chaps make working 6502 CPU by hand. Because why not?

Mike 125

Re: It's not that big...

>>takes up his entire living room!

...not to mention life.

>>just over 11 transistors per RAM bit

Discrete - that is seriously impressive.

Good Luck to all obsessive hobbyists - that's how the ball gets rolling.

2
0

Siemens Healthcare struck by rebranding madness

Mike 125

is that PC..?

Can you say Boutiqueers? I don't think that's allowed these days - depending on where you stress the syllables.

Siemens Healthcare has long been a laughing stock- so I guess this insanity suits.

6
0

I am Craig Wright, inventor of Craig Wright

Mike 125

Re: I'm Jamie Vardy

Bad. And btw I'm open to offers.

0
0
Mike 125

I'm Jamie Vardy

and that's all anybody needs to know.

1
0
Mike 125

Or someone's had *too* much coffee...

Or someone's had too *much* coffee...

I love these preludes to figuring stuff out...!

1
0

Google broke its own cloud AGAIN, with TWO software bugs

Mike 125

How many ways...

>>Google says it has a “canary step” designed to catch messes like that described >>above. But the canary had a bug “

There's always another way of saying "Actually no, we don't really know what we're doing."

6
2

Hey, tech industry, have you noticed Amazon in the rearview?

Mike 125

nailed

Agree. From start to finish, the buying process just works and even gets better. I now get free delivery in a couple of days on average, without even trying. They got the IT right, right from the start. How very, very, very, sadly, incredibly rare.

7
0

Illegal drugs and dodgy pics? Nah. Half the dark web is perfectly legal

Mike 125

Re: Come on!

Ok smarty pants - so what does the sw actually do?

I always assumed 'dark' just means no DNS lookup. Is there more to it than that?

4
1

Oops! Microsoft says its 'Bitcoin ban' was a bug, not a feature

Mike 125

§%$§&%/ !!

W.T.F. are these people doing? When was the last time they didn't screw up?

And why can't I walk into Currys and buy a laptop-to-go, with Linux, a reasonable GUI, LibreOffice and Firefox? What more does the high street shopper need? If I could, I would (except it wouldn't be Currys...!).

Why??

6
1

Hijack wireless mice, keyboards, with $15 of kit and 15 lines of code

Mike 125

This is a 'mindset' thing...

It's hard to see how the guy in that video missed all that activity on his machine. Important guy, important call.

But it never occurred to me that my 15 quid wireless mouse would be crypto safe. People should shift to assuming danger, rather than assuming safety.

2
0

Winning Underhand C Contest code silently tricks nuke inspectors

Mike 125

Re: horses for courses

@Tim7

>>type-safe languages with optimising overrides

If that's a thing, it's a nonsense thing if 'optimising overrides' overrides type-safety. The program fails on exactly this attribute. In any case, in such an application, there's no need for extreme optimisation, (unless I'm missing something). It's a data analysis tool, in no particular hurry.

>>blaming it on the language is completely wrong.

Indeed. I'm glad we agree. C's a great language - mine of choice.

>>Something of this seriousness require belts, braces and a seriously well >>hardened bolt through the navel.

Absolutely. And more to the point, it's not system code. It is without constraints on runtime or code-size.

>>the dick-head that didn’t make sure they were up to standard that needs a >>case of manslaughter against them.

Other than for this competition, only a dick-head would write such a critical application in C. (OK, it may well be a dick-head manager insisting.)

When there's a critical safety requirement and no platform or performance constraints, C is not appropriate. Hence the firing.

0
0
Mike 125

horses for courses

It's a great entry, because the code itself is so benign. The problem would never be spotted through inspection. Tools would maybe spot the #include discrepancy, but it's doubtful. And anyway, build systems often hides differences such as which particular #include gets #included.

It's also a great example of why, in the real world, anyone found using C for such a 'correct-critical', 'non-time/size critical' application should be instantly fired. In the real world, loose typing has its place. This isn't it!

5
14

'Dodgy Type-C USB cable fried my laptop!'

Mike 125

Oh, for a sensible cable...

There's no middle ground for cables. It's the race to the bottom versus diamond studded, single crystal idiocy. I'd pay a tenner for a demonstrably good quality, flexible USB3 cable. But there is no such product. Stupid capitalism, thinks it's so great...

29
1

Why a detachable cabin probably won’t save your life in a plane crash

Mike 125

Please no....

>>Also, can we make it a thing that anyone self-described as an 'inventor' who comes up with a >>wholesale systemic change to a comoditised very-high-technology system should be ignored as a >>matter of course?

Definitely not. That would remove a very rich target for humorous ridicule at a stroke.

I too fancy car ejector seats, ideally steerable with collision avoidance, in case of low flying / crashing aircraft.

9
0

Yahoo! Mail! Had! Nasty! XSS! Bug!

Mike 125

Real issues...

People love to slag Yahoo, but IMHO most of its problems now are caused by the ignorance and appalling hygiene of your average Yahoo user.

Let's not forget - it was a lot of people's first webmail account, back when 12345 was good enough. I always know when someone's account has succumbed: a strange 'Hi' arrives from someone not heard from in years. And on contact, they've often forgotten all about the account long ago. And I also know people who click on every f#king thing that arrives.

But yea, clearly there are real issues here too.

0
3

Intel admits Skylakes can ... ... ... freeze in the middle of work

Mike 125

Re: BIOS?

@psyq

>>Unless you get access to Intel's private key...

This was the cry of the MiFare access card maker, until someone *got access to the private key*, (admittedly a whole different technology).

It's always the pitiful cry.

6
1
Mike 125

BIOS?

I'm out of touch - the BIOS can now update CPU microcode? F'k me, is nothing sacred? Real security would appear to be an impossible dream with arrangements like this.

It seems that the CPU makers are jumping on the same ship the OS makers have been on for years: "We push out the crap, and the customers find the bugs for free."

13
0

'Fairly bad core bug' crushed in Linux 4.4-rc5

Mike 125

oh dear

@ emouse and Voland

Ahh, it's so satisfying being a click-bait whinger, always first to click, never anything to add, just waiting to pounce, needing.... needing... that thrill of knowing you're first.

It's ok.

I know.

I feel your highs and your lows.

Somebody cares.

7
16

Apple's Faulty Powers moment: iPad Pro slabs 'temporarily bricked' during recharge

Mike 125

Re: "temporarily bricked"?

Drywalled? Breezeblocked?

2
0

Windows 10 is an antique (and you might be too) says Google man

Mike 125

Re: Can't resist this bandwagon..

@Dave 126

Goddamn it, you mean I gotta go redraw my Context Diagram *again*!

Ok, but he oddly tries to draw a distinction between how an OS *looks* and how it *works*, when actually, he's talking about the system in both cases.

Agreed, Twitts can't win.

0
0
Mike 125

Can't resist this bandwagon..

- He's excited to 'try a new thing', but he's not sure why.

- He's always liked Microsoft's attempts to 'change the paradigm'.

- He thinks that a user interface defines how a computer *works*.

Confused people like Matias him are the reason IT, big and small, is in a mess. Put your suit on sir, and go sell something to... maybe a government department?

10
0

Microsoft now awfully pushy with Windows 10 on Win 7, 8 PCs – Reg readers hit back

Mike 125

Technical Support Scam...

I fking hate Msoft.

I went to the link below and submitted a 'Technical Support Scam' report, which seems appropriate. I incorporated as many expletives as my sensitive nature would allow. Won't do any good of course, but it dissipates the anger.

https://support.microsoft.com/en-gb/getsupport?oaspworkflow=start_1.0.0.0&wfname=scamsurvey&locale=en-gb&ccsid=

4
0

Here are the God-mode holes that gave TrueCrypt audit the slip

Mike 125

Re: Lateral thinking

>>spooks would prefer a less obvious yet incredibly simple approach of pick-pocketing the key while their targets are focused on improving the lock.

Yes. One thing that makes me wary of VeraCrypt is (from their site):

"TrueCrypt uses PBKDF2-RIPEMD160 with 1000 iterations whereas in VeraCrypt we use 327661."

That does not fill me with the confidence of knowing that VeraCrypt is even vaguely aware of

>>less obvious yet incredibly simple approach(es).

3
0

11 MILLION VW cars used Dieselgate cheatware – what the clutch, Volkswagen?

Mike 125

Re: Sorry but how is this at all funny or appropriate?

@diodesign

>>Changed it,

Noooo, please don't. I for one come to the Reg. for (apart from great tech. analysis) its total political incorrectness and utter ignorance and insanity on issues like climate change!

>>having worked with children to whom all kind of nasty things had happened back in the 70's.

Oh, go p'ss up a f'kstick. As it happens, some of us *were* those kids, and we sure as hell don't need the help of dumb f'ck attitudes like this to get by:-

>>So the thumbs down is from someone who thinks violence to kids is OK?

Please Keep It Unreal, Reg.

As for VW, bring on Tesla - can't be soon enough.

19
0

LTO issues mighty seventh-generation 15TB tape format

Mike 125

Great pic.

Didn't know they had Steam Punk back then. And I really gotta get me some of those pince nez.

The old guys are on the up in politics, too. It's a good time to be alive.

0
0

Don't want to upgrade to Windows 10? You'll download it WHETHER YOU LIKE IT OR NOT

Mike 125

Don't ya just hate it when...

...your sandel-wearing, furry freak mates turn out to have been right all along. I've hated Linux for as long as I can remember. But maybe it's time to dive in. And certainly, if I was setting up a development environment at work, my recommendation would now be Linux.

12
0

TCP is a wire-centric protocol being forced to cut the cord, painfully

Mike 125

Re: Surprise?

@Tom

Indeed. It never sounds good when people start blaming their performance issues on the core protocols. I suspect this is a very big part of his problem:

“In the kernel, for every new networking characteristic, someone adds more stuff – the data path becomes very complicated.”

And yet his solution is to add yet more "heuristics"?

Having said that - it's a nightmare area to be working in, given the market conditions.

3
0

Sorry, Californians, you can't have this: Asus to build WATER COOLED notebook

Mike 125

Just why.

I love how the marketeers turn energy inefficiency and waste into desirable features (for morons). Same with cars.

0
4

Windows 10 blamed (partly) for stalled PC sales recovery

Mike 125

it's shifting

@BigAndos

Agree completely.

The irony is that since NTFS turned Windows into a real OS, each new version has offered very little new. And that's really always been the elephant in the room for MS. OS as a service is their only way out, with a "Support and Security Fix" tag line. Windows 10 is the start of that shift.

0
0

C For Hell – Day Two: Outage misery continues for furious C4L customers

Mike 125

And yet they continue making the 100% claim...

"At C4L we specialise in providing 100% uptime and security to protect you from the results of disasters when using such a setup. We will ensure that all of your data remains available in the event of fire, theft or other data loss. We can also ensure that should you lose an office/site, then your staff can continue to work as before from either home or another location with no interruption."

Still, they could have claimed 110%, like a footballer. So s'pose that's humble of them.

4
0

Power Bar: EE was warned of safety risk BEFORE user was burned in explosion

Mike 125

EE adverts..

I'm intrigued that EE advertising appears down both sides of Reg's home page and other stories. But click on this one, and it disappears - completely blank. Biting the Hand.. but within reason!! Respect! Or probably just complete coincidence.

1
0

Windows 10 is FORCING ITSELF onto domain happy Windows 7 PCs

Mike 125

wow

This has all the makings of total f#king disaster. Slow car crash time. You can somehow just sense it. Updates off, for now.

24
2

Facebook casts a hex with self-referential IPv6

Mike 125

Voting

I voted Sad, but was secretly thinking Cool.

1
3

Google harms consumers and strangles the open web, says study

Mike 125

But it's the system.

We appear to have a system which turns innovative genius into monopolistic monstrosity. Inevitably. Suggestions?

9
1

Webmail password reset scam lays groundwork for serious aggro

Mike 125

Insane

Giving up a mobile number to a free webmail provider is about as dumb as it gets. That's obvious.

As for the scam, it just goes to show that adding complexity doesn't imply better security. It nearly always implies the opposite.

5
2

Meet the man who inspired Elon Musk’s fear of the robot uprising

Mike 125

Re: Some seriously flawed thinking there...

>> “If we actually succeeded in creating machines that were intelligent, how would we ensure that they would be controlled and friendly?

> By definition we couldn't. To be intelligent, an entity needs to be able to make its own conclusions and decide its own actions.

By definition? That implies we're agreed on a definition, which we're not.

But let's define an AI as "Something capable of creating new knowledge, creating new ideas and ways of testing them, and thereby amplifying the human ability to research." Even then, why does it need the ability to decide its *own* actions? Couldn't it just issue a list of instructions? So, if it decided some particular theory deserved investigating, it would explain useful ways to do so.

Couldn't we *use* such an intellgence, without giving it any physical ability... a pure, virtual intelligence? But then, how to firewall the damn thing...... Can knowledge be firewalled?

Probably not.

1
0

Apple to devs: Watch out, don't make the Watch into a, well, a watch

Mike 125

ffs

It's time to call out F#cking Farce on this.

You could not make this stuff up. Only Damien Hirst sells more worthless pieces of crap to bigger morons. But that's a very, very high bar.

1
0

Fukushima nuke plant owner told to upgrade from Windows XP

Mike 125

I'm suggesting it.

>>There's no suggestion that the accident was in any way related to XP. ®

I'm suggesting it. So now there is.

The sort of mentality which thinks it's ok to use something like XP, (let's assume it's not actually controlling anything, which would be insane), in a nuclear installation, probably also thinks it's ok not to build a wall higher than 10m (or whatever it was), to protect the emergency backup generators for the nuclear core coolant system.

9
26

National Grid's new designer pylon is 'too white and boring' – Pylon Appreciation Society

Mike 125

Re: White pylon

@Ledswinger

Cool. And even better, we can just let the kids worry about the decommissioning and clean up, somewhere down the line. They'll thank us for keeping the lights on. And in any case, there's no problem with any of that sh't, right, nothing a good, stiff broom can't budge, right?

Ahhh... amortising costs out to the future, to screw up the future - it's so great.

Now, back to a serious question: how do you actually measure the efficiency of a wind turbine? Power out / Power in, but how do you measure the Power in?

11
42

Amazon listens to MORE of your private stuff

Mike 125

Re: Um....who uses these things?

@Thecowking

Hmm, impressive.

But have you got a plastic cup which requires ~5000 words of legal mumbo?

https://www.myvessyl.com/terms

Thought not.

1
0

Ex-Autonomy chief Mike Lynch's Darktrace bags £12.6m from investors

Mike 125

"Darktrace"??

Impressive credentials. But "Darktrace" ? Hahah - gimme a break. Someone's been watching too many crap '90s cybercrime flics.

Security is so great - selling nuts to monkeys.

0
0

Page:

Forums