And here I thought this would be about too much sauerkraut for lunch.
119 posts • joined 18 Aug 2011
Seems pretty clear here. We don't care about your apps, go away.
He doesn't even realize why these services are popular
Yes, Uber are dicks, but he is seriously underselling how terrible traditional government supported artificial shortage (through the medallions) taxis are.
Yes, there are now taxi apps. But there sure weren't any useful ones before Uber. It was the competition that forced them to become competitive.
Airport is a special case in that you can almost always get a taxi out. But elsewhere, forget it. So much easier to get a Lyft.
The 'sharing economy' companies would never have gotten anywhere if the over-regulated, over-protected, stagnant companies they were competing against weren't so terrible to begin with.
Maybe there's a happy medium.
But they're still allowed to install crapware unless you uncheck it as part of the install?
To expand on what Kernel said there, crappy Enterprise software (okay, that's redundant) often requires a very specifically broken version of JVM installed. So you need this version of this bloated piece of issue tracking crap, that version for this bloated document CMS piece of crap, etc, another version for this terrible UML abomination, etc. One set of security fixes and they stop working!
But, the better way to do this is to require a manual install of the separate versions side by side where it's required rather than to just leave all the broken versions lying around.
All these credit monitoring companies are such scams. Worse than useless - they thrive because companies do the one year of useless free credit monitoring whenever there's a data breach, since they don't care.
Just get a credit lock. Much cheaper, far more effective.
Even if you buy this without skepticism, it conveniently leaves out that it's all due to Potsch's demands.
He's infamous for being a crazy tyrant who will threaten to sack entire departments if they can't deliver some feature in some crazy timeframe. And often they do crunch and get it done, which just encourages him. If not, Auf Wiedersehen.
In this case, if you believe his version of events, apparently they realized they could not reach the mileage / power / emissions specs he was demanding, so it was their jobs or a cheat and they went with the cheat.
Oh good lord. Having a Wordpress site is setting up a gigantic HACKMEEEEEEEEEE sign. Any competent IT person should know that. It's a gigantic complex PHP thing, so it's going to be insecure, and it has tons of plugins which are even more insecure (most hacks are via plugins and themes).
And most of all it is very strongly targeted. The WP PHP code isn't any worse than normal PHP code (it's better), but bad guys keep lists of known WP sites, and as soon as a zero-day is discovered, they hit them. You've got no time to react.
You have to be willing to actively to monitor it constantly or you should just shut it down. Facebook and other big places that use PHP go for the monitor it constantly route, but if you're not willing to dedicate the manpower to it, SHUT IT DOWN or move to something else.
Yeah, NOT RELATED, sure - the Aussie police are lying f@$#s, like any Feds.
[ But I don't think it's actually him. Wired and Gizmodo took pains to point out just how stupid and careless this guy is for someone who's supposed to be a genius cryptographer. Probably not actually Satoshi, though maybe his dead friend was the brains. ]
@tkioz He has strong support among people who never went to college and are registered Republican. When you see numbers like 30% keep in mind that's 30% of people who are registered as Republican, which is at a record low 25% of Americans, so that's 7%, about as many who think the moon landing was faked.
And they are serious about voting for this guy, but Trump's just the American version of UK's UKIP, France's National Front, Germany's PEGIDA / NPD, Holland's Party for Freedom (lol) etc. etc. Everyone has these idiot blue collar xenophobes. They're just afraid. Of everything and everyone. So they'll vote for whatever idiot claims he can keep out all Muslims and will send all the Mexicans back to Mexico.
Trump's especially amusing because he's so dumb and blustery and shows how low the standards really are for these troglodytes. But that's an artifact of the bizarre political system - in the primaries, the dumber and more extreme you are the more likely you are to get the nomination. In the general election that collapses. He has no chance at all there.
As an aside, people now realize our Democrat party are also corporate whores who are full of sh@# (though in different ways) so Independents are up to record 42%. Obama being eager spymaster didn't help there. But everything is still legislatively stacked in favor of Dems and Reps so Hillary will still get it.
Terrible efficiency is not a dark secret
As much as I hate defending VW, almost every car sold in the EU has completely laughable fantasy mileage and emissions numbers just because the testing is so terrible.
Car makers are encouraged to cheat (and do) right up to some magical line where it becomes naughty. You're allowed to tape up all the cracks, rip out seats and other heavy things, use special tires, special gas in the tires, fold the side windows in (and then tape them to be even more aerodynamic)... and then the testers are paid by the car company, which encourages them to fudge it so they'll be hired again to do more testing.
This is one area where the US actually has much better standards and testing, and even then it took a third party to find the naughty type of cheating.
Same old program, different name.
Lies. Sort of. If they're shutting down one illegal spying program then it's only because the Obama admin has authorized an even worse one with a different code name and that one's up and running now. So we'll shut this one down wink wink.
They didn't build that gigantic new data center for nothing.
Phew, now the culprits have been brought to justice. Any way we can blame them for this at VW too?
Too dumb to know not to do this
Once you turn over the rock it's rarely only one slimy multilegged monstrosity scurrying for cover.
If they were dumb enough to do eDellRoot then there's nothing they're too dumb for, so we can expect a lot more of this. *popcorn*
500 sqft +
For those of you wondering what a 'Data Center' means in this context (just a PC in a closet?) these are defined by GAO as any room larger than 500 square feet (46.5 m^2) dedicated to data processing /and/ has to meet at least Tier I of Uptime Institute classification.
'A Tier I data center provides dedicated site infrastructure to support information technology beyond an office setting. Tier I infrastructure includes a dedicated space for IT systems; an uninterruptible power supply (UPS) to filter power spikes, sags, and momentary outages; dedicated cooling equipment that won’t get shut down at the end of normal office hours; and an engine generator to protect IT functions from extended power outages.'
So these aren't just lost PCs. Not surprisingly, Dept of Defense has the most lost ones.
Of course Geico
This is shady as hell. So of course Geico is using it.
Business will only go up
Experian doesn't care because with every data breach at other companies they get a crapload more 'year of useless identity protection' customers. This isn't going to slow down any time soon. I know one guy with four (4!) of these since his data has been stolen in at least six separate breaches.
Re: So like Intel's Hyper-Threading bullshit
As you sort of pointed out here, a big difference is that Intel does NOT market their 4 core HT chips as 8 cores, even though Windows shows it as 8.
I have fond memories of OS/2, but I wonder if it still takes 5 minutes to boot... that was definitely the nadir for personal computer boot time. I imagine SSD helps a lot though.
9 Started out as < 1 sec on Apple II, got worse and worse - PC BIOS, SCSI cards, Windows, and then OS/2 good lord. Since then it's been getting faster and finally back to < 10 sec from cold boot with Win10. Except CentOS. Debian boots right up, but CentOS is still a f@#$ing pig that spends minutes doing god knows what. )
Yeeeep. This is why I've only bought Nexus for a couple years now. Already have Marshmallow on everything.
Of course that's terrible for Android in general, so since Google partly funded this I'm really hoping they're going to use this as a sledgehammer to force at least Samsung and Sony to not be so terrible. The new patch level shaming in Marshmallow is a start.
Just when you think they're in deep enough already they lie their asses off again. The whole company really has a sleazebag culture, apparently.
> But Adobe's not getting a free pass: Mozilla will work with the company “to bring improvements to the Flash experience on Firefox, including on stability and performance, features and security architecture.”
Ha ha ha. Hahaha. AHAHAHAHA.
Right. The only way Adobe can bring stability and security to Flash would have been to start over 10 years ago. It's too late - it's an inverted pyramid of cards built on a foundation from before anyone cared about security on the PC. You'd be better off working on your plan for just fully obsoleting it by Christmas 2016.
Re: Yes, password manager
Nah, in practice the benefits of a password manager generating unique long random passwords still beats anything else. In theory, yes, if anyone pwns you and cares enough to dig into your individual files, you're f@#$ed, but the odds are still way better. Unless you're a real target, nobody even cares that much - Russians have much easier prey.
But I totally agree I'd like 2FA for every single login. That'd moot a lot of it.
Yes, password manager
This jibes with other studies that the more you actually know about security the more you're likely to use a password manager and generate huge random passwords for each site. See https://www.schneier.com/blog/archives/2014/09/security_of_pas.html , http://www.theguardian.com/technology/2015/jul/27/security-experts-keep-safe-online-password-manager-seven-things , etc. Even a text file qualifies as long as you're using really random long passwords.
But there's still a substantial group of Dunning-Kruger types who know just enough about security to be dangerous and think they're smarter than that and come up with bizarre password or phrase generation schemes. I know one of them. He has to use password reset quite frequently because his algorithm is so clevar he can't reproduce the passwords reliably. Or maybe that's a feature! Also fairly sure if I got one of his plaintext passwords I could figure out the basic scheme... Except for the too clever by half bit.
Just strippers? The Pentagon contractors in Afghanistan expense child sex slaves. As do the Afghani commanders, government officials, and officers down the line. Paid for by US taxpayers since it's just part of their rich cultural heritage.
That may change now that NYT's pulled the rock off it, but 10 years of that makes strippers look pretty tame.
They just didn't caaaaaare
This is my go to answer.
Wireless insulin pumps that are trivially hackable? They just didn't care. Cars you can hack crucial driving functions on through entertainment system or OnLive? They just didn't care. Target? OPM? Etc.
They think security is too annoying so just do a cursory, laughable, intern level half-ass half-baked home grown thing. Because they figure even if they get hacked all they have to do is offer one year of credit reporting, which is a total scam and they get cheap because it's basically just a free trial for LifeLock or Experian. The AM emails have execs going 'we really should improve our crappy security' 'lol yeah we probably should' lololol.
The only times suits ever learn are catastrophes like this or huge penalties because, being sociopaths, they don't give a single shit about their customers.
Oh yeah, this is just terrible. These 4000 marijuana plants are reaaaally bumming out our officers, man. Why, we can hardly work with these 3000 marijuana plants and it's soooo unpleasant, dude. 'Who will rid me of this troublesome pot?' they cry. These 2000 plants are a total bummer.
That's too generous
nobody in parliament nor among the various departmental heads that demanded data retention understands how the networks operate: "They just don’t get it", he states.
I think it's slightly different... they just don't care. Oh I'm sure some of them can't even use email, but they can't all be this ignorant. This lets them have their cake and eat it too. Like Ashley Madison claiming they didn't store credit card entries - technically true because they were offsite, but easily accessible. They can claim they're not storing your browsing history while making it trivially reconstructable.
Thanks for this in-depth look. It's the reason I run Ublock and NoScript even on sites I like, no Java, no Flash. Can't trust their ad network at all - not their fault, but whoever they're using for ads is less cunning and evil than the Russians (even Google) and nobody's really doing much about it because they just don't care that much. This article just really drives that home.
In addition, even the non-malware ads are so bad as far as terrible scripts and bloat (like the Verge's 1000:1 crap:content ratio) that whenever I run without blockers on other people's crapboxes it's a whole new, terrible ghetto web. How can you people live like this?
So subscriptions and Patreon are all I'm willing to do. Think about it, Reg.
Aren't they making more money from merch than games now? I hope so, because they obviously have no idea what make Angry Birds so appealing in the first place. They haven't been able to replicate it since, and Angry Birds 2 is absolutely terrible. There are some good mechanics in there but the F2P crap completely kills the 'one more time!' factor.
Re: They have a point
From their leaked email they were definitely aware - execs making jokes about how they should improve their security lol.
That's definitely not going to help.
"On the other hand, why not just put the effort behind the development and porting to Linux of the Hammer2 filesystem?"
Practically, it'd be more productive if everyone got together and worked in perfect harmony on the UberFileSystem. But helping debug some else's already 3 years overdue file system isn't nearly as fun as writing your own new one. And it's the *nix way to have 5 projects when you could have 1. I can't blame him.
Sure, why not.
... as long as we can default to ext4 and pick others based on our level of devil-may-careness. And as long as you don't kill your wife.
"No, that data dump is totally fa" *SMACK*
Avid Life has been lying their ass off about this hack and filing fraudulent DMCA takedowns on people talking about it. This second dump seems like a bit of a smack in the face about that, especially given the 'Hey Noel' message.
"We lie constantly, to everyone, even under oath," Brad Burns, an AT&T spokesman, reaffirmed.
Oh c'mon, nothing about abort, kill, peek, poke, inject, grind?
Oh, he's not a Bay Area tech bro or VC... that makes it harder. Those guys wouldn't hesitate an instant, and would then grind the now homeless residents into soylent for an extra $160k.
Yes, it is terrible, and they made iTunes even worse to do this (who knew that was possible?) I wouldn't use it even if they didn't charge $9.99 a month.
Just think, if Bonny Prince Woo Woo Charles ever takes the throne, this is your new Secretary of State for Health. Time to have a pint to the health of the old girl.
They definitely have an internal chat/locker room where they discuss stories and make terrible jokes like that if they're like every other media organization on the planet. Except you guys of course - you just do those in the article titles.
The IT Union
"If you're a corporate IT person, though, the last thing you need is for your users to be randomly upgrading their desktops and laptops. You presumably have Windows 7 or Windows 8 there for a reason – and that reason is because you have a set of standards that you know how to support and for which your service desk and PC support teams are trained."
Ahahahahaha *sob* Excuse me gotta wipe a tear from my eye here. Corporate IT is still back on XP because they wanted to control everything with exactly these policies - so now they're so busy doing stupid unnecessary gruntwork that they have no time to upgrade the entire company - and they're terrified anyhow because the dirty secret is that IT knows barely more than the casual users and way less than anyone who actively manages their own PCs at home. So they enshrine it as some sort of sacred priesthood like this. We're back to mainframe days.
Be funny if some of that malware they love to add to project installers bit them in the ass.
4x the cost, and having to deal with Comcast. Chances are they'll never show up for the install. And if they do they'll burn your house down. And they don't then you'll never get anywhere near the claimed speed, and you'll have have a cap even though they swear it's not a cap.
Basically, lost me at 'Comcast'.
They clean it once a month but...
The goldfish was in the large unlit filtration /tank/ under the main tank. They clean it once a month, but it's huge, 3m x 5m (don't say how deep), and dark. Apparently this guy just hung out away from where the cleaning was going on. But this time, someone thought he saw the shadow of a largish fish moving in the darkness (which must have been a fairly AHHHHHHH moment). And when he went looking with a flashlight saw this guy just hanging out down there.
MS hasn't really fired him... they've just sent him out to destroy yet another company for them to buy for pennies on the dollar. Shall we see where he goes?
These are the same dumbasses who thought it would be great to put the Fn key where the Ctrl key should be, so I'm not surprised at all.
Just imagine this were you walking by and some aggro a-hole chav just leaps off a balcony and sticks his knife in you (hur hur) just because he thinks he's all f@#$ing special because he's one of 8 billion f#$ing ape-roaches infesting the planet.
At this point the swordfish is worth far more than this dickhead. It's a bad trade.
Well, I guess it's all Russian if you consider variations of western stuff with some mods to be all Russian.
Cue the Russian Comment Brigade on how the PDP-11 was actually copied from the Elektronika K180 series instead of the other way around.
Yeah, I'm fine with constant stream of patches IF you don't have to reboot for them. OPtherwise I'm still only gonna reboot every few weeks.
This might help counteract some of the 'ewwwwww Cell processor' reaction people have when you say MIPS/PPC these days (if they even know what you're talking about, and didn't have a PPC Mac). The horrible architecture wasn't the CPU's fault, really!
'The researchers are also convinced the Chinese government is directly behind the Great Cannon's operations.'
It has to be. Besides the technical similarities, they wouldn't tolerate else anyone messing with their search engine like this. Especially not for so long.