He's certainly got the ego for it!
1076 posts • joined 23 May 2011
Re: Ah bless - he drew a little picture!
>>As for library updates, it ships with a signed manifest of compatible previous version checksums which can be checked.
>Quite different to statically linking.
I asked about future versions, not past versions; e.g. a new version of OpenSSL is issued because of a bug. Assuming the OpenSSL people have done their homework, it should be compatible. But now we have to wait for manifests to be updated and then download the app.
Re: Ah bless - he drew a little picture!
At which point, you might as well statically link them. Because every time there's a patch to the library you need to reissue the manifest -- i.e. the app. And presumably you're dynamically linking because you think the pros outweigh the cons.
Security by obscurity is when you conceal the algorithm, not the password
Re: Wasn't HTML5 supposed to fix all this?
rvt begins to answer the question: idots can't write great apps with zero effort.
A second problem is the Android legacy. The Android 4.0.4 browser really didn't perform well and made writing fluid apps tricky. (There were some hacks; but it will suddenly stall.) And 4.4 is the first version of Android to have threads so you were using the UI thread for everything (although I think the design of the threading API promotes good design). As of Android 5.0 the browser updates independently of the OS. And latest versions of Chrome perform really well; there's no trouble.
But I'm doing polynomials with hundreds of terms and the performance is fine on a modern OS. And Animation is great if you use the new APIs.
@Joerg You're brining the tone down, and that's a really hard thing to do round here. Even Eadon had comedy value; you're just a stuck record.
Re: iZettle should update their mess instead of blaming Apple...
"The Register understand that Apple recognises the Bluetooth issue, and is currently working on a patch for the new OS."
This seems to be Apple's problem. And the best iZettle could have done is notify Apple.
Re: All these developers using illegal XCode must be jailed!
If you have a licence, you've not done anything illegal by downloading a copy from a mirror.
If one side of a debate tries to silence or demonize their opponents, it raises a red flag to me. if your facts are so strong, let them stand up to honest scrutiny. Shaming and demonizing and calling people lunatics are the tactics of biased ideologues. [These things] are nowhere near enough well-understood for anyone to claim authority, much less demand their opponents be silenced.
[Society] works by promoting free investigation and debate. The current understanding may be wrong in small or large ways. Gor bless Lewis and his ilk for keeping the debate alive.
But enough about Social Justice Warriors; what do you think about the climate debate?
I don't agree with Lewis, but I don't think he's being paid by anyone except El Reg.
Not so much "raw nerve" as "raw nerve centre".
Oh my, your coat-stand is shaped like a neuron! Anyway, mine's the black trench coat with the mirror shades and the sawn-off shotgun in the pockets, ta.
If Kim Jong-eun was not the head of North Korea but the head of a triad and had retaliated with his criminal buddies, we'd call it criminal act. If he was head of a neo-Nazi group we might, at a stretch, call it political activism. If he was the head of a rival corporation, it could be considered "industrial activism". (Frankly, I'd still call it a criminal act.) And if Kim Jong-eun had launched his one nuke at Sony City, we'd've definitely called it an act of war. I'm not a fan of the hyperbole and am sounding horribly right wing, but when a state acts aggressively outside its borders, it's pretty much an act of war.
That sad, any of these actors could be said to be (cyber-)terrorists perpetrating an act of terrorism: the intent was to make people scared of criticising Kim Jong-eun.
Re: Always appreciative of a contrarian view
>I'm not even sure of the appropriate term to refer to entered-the-world-through-a-vagina people.
So the "C" in C-section stands for "corporation"? That explains a lot.
☑ Considered Fair Use.
Re: care homes
But there'll be so many potential employees to chose from. Give anything less than a first class service and you'll be
in the workhouse on JSA.
What floor sir?
1. Still fewer than when each had a lift attendant to operate them for you.
2. It's clearly crap technology with a huge TCO. The better the technology the gets, the less engineers it will need.
Will people be able to sell their labour, though?
What you miss is that the creativity necessary to do jobs is increasing over time.
Apparently there were 3.3 million horses in the UK in the 19th Century -- mostly doing hard work. Now there are about 1 million, mainly in leisure. Technology has supplanted the need for horse labour and horses aren't creative enough to do anything else. (The lazy gits should have invented the opposable thumb while they had the chance.)
But, increasingly, computers are going jobs that need more creativity. (Self driving cars, being the obvious one.) I expect creativity is normally distributed amongst humans and the bottom end of the spectrum is going to find itself supplanted by computers; when someone needs more supervision than a computer they won't be able to sell their labour. We should be able to find jobs for a good chunk of them---like in care homes---but not necessarily all. If the horse numbers hold, that's two-thirds in the knacker's yard.
Tech turned on its head: 'Dislike' button in Facebook, pay Snapchat $1 to defuse self-destructing sexy selfies
Re: Criticism is valuable
>In my opinion, if somebody is going to speak their mind then they shouldn't be thinking about popularity. Some might be constrained from saying what they want to because of that particularly juvenile feature of comment forums.
There are plenty of times when I've said something I thought contentious, waited for the downvotes, and then found I got a clean sheet of up votes. Other times I've trolled and laughed at every downvote.
The ones I worry about are the ones that don't get any votes. They're comments nobody found to have any value.
Imagine the anniversary ep with Eccleston instead of Hurt. Everything would have been perfect. Even as Hurt was saying the lines I could hear Eccleston in my head. The grump should have put aside his concerns and tied it all up.
Re: Difficult to remove
Welcome, Blind Programmer. But can I just ask, why would you want to program blinds? That's the IoT gone mad!
Re: I wonder
Probably the reverse -- an attempt to discredit Trump by making a buffoon look more reasonable.
Yea, with apology to Borges, Twitter is like a room containing an infinite1 number of water coolers, each labelled by topic. Or, like a lossy forum where no-one expects you to have read every post.
1. Okay, for English speakers it probably tops out at around 1.2E198, at which point conversations would become a graph between water coolers.
"Having been raped unconsciously once, why would she continue to put herself in danger by remaining in the presence of this man?"
<speculation>Because he apologised and said it wouldn't happen again, and she was in love with him so she forgave him.</speculation>
Re: Human Error
"they don't talk back..."
For the time being.
There's one built in to your browser. It's normally labelled "url".
Paris, because she's a gURL.
Re: its not about money, its about the disguises
Or the updated version, "The Government considers these people "irrelevant". We don't. Hunted by the authorities, we work in secret. You'll never find us, but victim or perpetrator, if your number's up... we'll find *you*"
(Speaking of which: why wasn't Root on the list?)
Re: JMcA obviously!
They stacked the deck by including the photo; it triggered a ROTFLMAO flashback.
Bruce Schneier fact: if you need to hire him, you can't afford to. Because this is a man who can dehash your password from the "x" in
/&c/password without looking at
El Reg fact: I had to write
"/&c/" because, writing
"shadow" triggers blocking from cloudfart.
Re: Everything or nothing
"Comparison sites are so universally bad even Google can put together something better."
But the cost of doing it, on top of what Google is already doing, must be tiny. Trying to do it from scratch must be far harder.
I Am Spartacus "Citation needed."
Oh, the irony.
"...the brightly streaked slope with bright streaks."
Ahhh, Doctor Tautology, I'd know your work anywhere.
turtlesblack mini-dresses all the way down."
The point of a minidress is it doesn't go all the way down.
Re: I don't see the difference
Perhaps they deserve to be dumped. But it certainly shouldn't be a hanging offence.
Heads, you lose; tails, you lose.
Relax, it's a privately run IT system; want could possibly go wrong? What's that you say? Ashley Madison? Y'know, you're right.
So let's go with a publicly run IT system; what could possibly go wrong? What's that you say? Edward Snowden? You're right, we're fucked.
Whence the nonce?
Why is it not a vulture of vulns? Or possibly a "vaulture" -- because identified viruses are put in a vault-ure.
I didn't vote for it, because I knew the rest of you would. Coincidentally, that's how secure coding works: I don't check for vulns because I know the rest of you will spot them for me.
As a grammar pendant, I have to say they're not "shortcuts"; they're efficiency savings. Please use the correct term.
I've been doing this for a while - adding a extra couple of digits on either end on my pin.
x86 code pages are typically 4KiB -- so its only the first 4096 bytes that need to be mapped.
And C++11 onwards has a genuine
nullptr (of type
std::nullptr_t) although it still ends up referencing address zero in any real situation.
Re: Things look better than they did last week...
"...a case of paranoia that would keep many shrinks in business for years."
The paranoia is fully justified. If anything, they don't seem to be paranoid enough.
Re: Welcome to reality …
I've emailed you the reasons why I think you're wrong.
Re: Secure documents attached to email?
As I follow it, "Top Secret" means "not for the plebs". Everyone in the elite has TS clearance.
Other meteor showers are available.
Competing with street lights, I've been seeing 4-5 in half an hour. But every night I've seen at least once Kappa Cygnids (started in Cygnus and headed across Cephus into Cassiopeia). Last Friday I was still seeing Beta Cassiopeids, too.
Re: Okay, that's like a chiuaua morphing into tibetan mastiff
"People who doubt dark matter..."
But Pauli didn't have an LHC. Which is not to say there aren't gaps, but they are getting ever smaller. And Pauli didn't ask you to believe that neutrinos compose 85% of all matter or buy into Dark Energy. And come to that, it only took 14 years from proposing a neutrino to detecting it; whereas we've known about Dark Matter for, say, 35 years. Against that background, I think its right to start to be sceptical, particular as modifications to gravity are known to be necessary and have form.
"They counted sunspot activity, and 68 years later you decide the data was wrong?
How is this possible?
I've got to page two of the article. And sunspot number, properly called, relative sunspot number, is defined as
R = k (10 Ng + Ns)
So it's not a dumb count of sunspots but a weighted sum of sunspot groups (Ng) and single sunspots (Ns) scaled by an arbitrary constant, k, "...usually called the personal coefficient of the observer..." which compensates "...for the differences in the number of recorded sunspots by different observers [and] depends mainly on the ability of the observer to detect the smallest sunspots (telescope aperture, local seeing, personal experience) and on how groups are split by the observer."
So, the sunspot number is a blend quantitative measure with qualitative opinion of an observer. Do you begin to see how this might suffer some bias and why astronomers might want to revise it?
I do agree that, once again, that El Reg's reporting could have made this clearer.
Leeming != Slipstream
And you seem to have a bit of an understanding-the-article problem, if I understand correctly. Because, the "legit security researcher" who pulled this stunt (Leeming), wasn't the guy who found the vuln (Slipstream). Slipstream may have been an arse, but it wasn't his arse that farted out a copyright infringement sue ball.
If you're selling software, and get outed by a teenage wannabe, we can reasonably expect you to smile and gently chastise the irresponsible "researcher", rather than cry havoc and let loose the poodles of law.
"I suspect "visible to the naked eye" only applies to those unembuggered by light pollution."
I know; will somebody please turn off the fucking moon.
"HTML pages have morphed into apps which have access to a ton of sensitive local system state...*and* users are expecting to be able to connect to random sites safely,..."
Given that, it's remarkably safe. Most of the holes come from legacy plugins. *cough* Flash *cough*
It's almost as if there's a security dividend from forcing people to use an interpreted language with no low-level access to hardware where every API has been scrutinised by a committee.