* Posts by Androgynous Cupboard

380 posts • joined 7 Mar 2012

Page:

Don't you see these simple facts? Destroy Facebook and restore human Liberty

Androgynous Cupboard
Bronze badge

That's it?!?!?

It has punctuation and capital letters, not too many and not too few. No swearing. No questioning of the authors parentage, species, sexual orientation or inadequacies , or of the their mothers.

Frankly that's a miserable effort. 1/10 and only because "sick" is repeated five times.

7
0

It's 2016 and a font file can own your computer

Androgynous Cupboard
Bronze badge

Re: How did this ever become a problem in the first place?

TrueType fonts are normally just "a bunch of vectors" but can also contain a whole program. This isn't very common: it's normally use for hinting, and nobody bothers with hinting, but we have a few fonts that use this table to shape the glyphs. Which is ****ing annoying.

Spec is at https://www.microsoft.com/typography/otspec/ttinst.htm, here's a snippet of example code:

PUSHB[3] 23 17 1 /* PUSH : jump1, jump2, rast. version flag */

GETINFO /* get the rasterizer version */

DUP

PUSHB[1] 34

LTEQ

ROLL

SWAP

JROT /* we are at MS rasterizer version 1.7 or higher (> 34) */

PUSHB[1]

As you can see there's a lot of room here for poor bounds checking to do some damage. I didn't read their bug report and I've no idea if the fault they found is in this section, but knowing the spec, I can't see where else it would be.

(We've written our own TrueType font parser due to the holes in the one supplied with the JVM)

(edit: El Reg, a newline at the end of the line means one line break, not two! Sort your editor out. No, not Andrew, the text editor)

3
0

Now you can easily see if a site's HTTP headers are insecure, beams dev

Androgynous Cupboard
Bronze badge

Re: Oh heck

I'll do the work for you! Just let me know which site you maintain and where the dangerous bits are. It's no trouble.

1
0

Sena's multi-action camera monster, or Cardo's PackTalk club rider juggernaut?

Androgynous Cupboard
Bronze badge

Re: NFC tag

@ Gene

Details please! Which tag, which app?

1
0

Sainsbury's Bank web pages stuck on crappy 20th century crypto

Androgynous Cupboard
Bronze badge

Re: Prosecution required.

If I were a man of dubious character with an account there, I would be attempting to hack my own account by breaking the ciphers. Transfer money away to another account, sue Sainsbury's for letting it happen, get twice value of the transaction plus inevitably successful damages.

Of course I am not that sort of man, nor am I foolish enough to bank with them.

1
0

Eight budget-friendly 1TB SSD data packers for real people

Androgynous Cupboard
Bronze badge

Failure? Oh yes.

Intel 600GB 320 Series. Back when it was very, very expensive. It failed under warranty after a few months, I returned it but when I tried to order a replacement they were no longer available. I never did get to the bottom of that one, looked like a recall to me but couldn't find anything in the press.

It took the shine off SSDs for me for quite a long time, but not forever. Our primary server boots off SSD, but I have six of them running RAID-Z2 and with a RAID-1 (mirrored) boot partition on each of the six. Try breaking now you ****er!

1
0

It's Wikipedia mythbuster time: 8 of the best on your 15th birthday

Androgynous Cupboard
Bronze badge

First look at the BBC coverage of the Scottish independence campaign - it was a propaganda tool of the Tories and other scum who wanted Scotland to remain enslaved.

Call me crazy, but I have this feeling you'd struggle to recognise a neutral position on this topic.

1
0
Androgynous Cupboard
Bronze badge

It attracts this criticism precisely because it tries to gloss over it.

If the BBC (for example) awarded a prize to someone that had converted their Kazakh language site to an organ of state propaganda, there would have been outrage both internally and externally. It wouldn't have been swept under the rug. Wikipedia and Wikileaks - both have lofty goals, but very dubious management.

18
0

Snowden bag-carrier Miranda's detention was lawful – UK appeal court

Androgynous Cupboard
Bronze badge

Re: Freedom of speech dies

I'm torn. Upvote for interesting factoid about the origin of the phrase "fire in a crowded theatre", or downvote for entirely missing the OP's point.

You have free speech, but not freedom from the consequences of your speech.

The law here recognises that fact and allows for speech to be limited if the judge deems the certain consequences too ghastly. The rights or wrongs of this particular decision are open to debate, of course, but personally I don't have a major problem with the principle.

2
0

PDF redaction is hard, NSW Medical Council finds out - the hard way

Androgynous Cupboard
Bronze badge

Re: Not a user error

Acrobat has had redaction since Acrobat 8. While the UI to do this is certainly unintuitive, that doesn't make it any different to any other part of the Acrobat's UI, and the good news is in the next release they will almost certainly redesign it again to make a completely new type of unintuitive interface.

11
0

Dialog box shut: Now Microchip is set to gobble up Atmel

Androgynous Cupboard
Bronze badge

Missing the point of Arduinos

They're just the gateway drug. I started with Arduino-alikes (Teensy's), quickly outgrew the ecosystem and now design with the bare AVR chips and code in avr-gcc. But the fact they you don't have to start off that way is what got me in. Yeah, I know PICs have a development environment, but the momentum behind Arduino, and the fact I could install the entire development suite on the Mac with one download was what convinced me to give it a try in the first place.

6
0

Boffins baffled by record-smashing supernova that shouldn't exist

Androgynous Cupboard
Bronze badge

Re: No H or He?

I think what you would see rapidly approaching you would be an "event horizon" - a sphere all around you, like a black hole turned inside out. As it shrinks around you, the walls of the room you are in recede from you, faster and faster, becoming fainter and fainter yet with time passing slower and slower. The clock on the wall, as it recedes from you, slows down and as the shrinking event horizon reaches it, stops. Beyond it, from your perspective, is nothing - because time has stopped and everything beyond it has become infinite in duration, width and mass, and of zero length - since this is what happens to anything travelling at light speed.

Material sourced for tonights bedtime story, thanks. Lets see how well they sleep after this one.

1
0

Kiwi hackers crack crap algo, showcase 40c-a-litre DIY fuel discounts

Androgynous Cupboard
Bronze badge

Shurely calling x-50 an algorithm is stretching it a bit?

2
0

Boffins switch on pinchfist incandescent bulb

Androgynous Cupboard
Bronze badge

'ere we go

Cue americans and Daily Mail readers complaining about the gummint unnecessarily prizing their incandescant bulbs from their fossil-fuel loving hands in three... two... one...

5
13

Bloke sues dad who shot down his drone – and why it may decide who owns the skies

Androgynous Cupboard
Bronze badge

Re: @h4rm0ny - What is the sky?

There's a large difference between an obviously confrontational situation of gathering your mates and going round someone's house and the immediate response of whether or not to damage a mechanical device that is on your property and you consider to be actively infringing on your life. One is potentially violent and by definition pre-meditated. The other is neither.

Hang on, what? Are you saying that blowing something out of the sky with a shotgun isn't violent? And turning up to a house occupied by someone who has just done this, unarmed, is somehow the more violent action?

I don't know the personalities or the history of this, perhaps you do and there's context I don't get. Maybe one, or both of the parties is a certifiable arsehole - this is probably very likely. But you're making a few leaps here. "Gathering a few of your mates" could be "bring a witness in case he shoots me too". Maybe his mates were tiny and non-threatening. To me, being told "if you enter my property I'm going to shoot you" is the most violent action of this whole sordid tale, but that seems to pass as normal behaviour in the US.

In short your assignation of guilt to the one party isn't backed up by the facts quoted in this story or your comments on it.

7
8

Password-less database 'open-sources' 191m US voter records on the web

Androgynous Cupboard
Bronze badge

Re: All your data are belong to us

> It is also terribly disruptive to the rolling 24hour news schedule to have to wait until after the count to decide who won.

I misread that as wait for the court to decide - both apply equally well.

0
0

Kiwi judge rules Kim Dotcom can be extradited to USA

Androgynous Cupboard
Bronze badge

Re: Fair Trial

> Julian Assange: Either guilty of rape under strange circumstances or a trumped up charge to force him into US extradition, a short stop in a kangaroo court before being shipped to the latest version of Guantanamo Bay.

You forgot jumping bail.

1
2
Androgynous Cupboard
Bronze badge

Re: Actually, the reason there is prima facae evidence

Anyone feeling the urge to blurt on the rights or wrongs of this would do well to read that arstechnica article first....

2
0

How I Learned to Stop Worrying and Love the Star Wars Special Editions

Androgynous Cupboard
Bronze badge

There were a couple - if you rewatch the originals you can see a few scenes that jar a little, like the Falcon leaving Mos Eisley, which is nothing more than a light blob moving in a very odd way in the original. I have a little sympathy here, it's clear what the original intention was but the technology wasn't up to the job at the time.

For the rest, every time a comedy alien punches another my hackles raise.

1
0

How to feed and raise a Wikipedia robo-editor

Androgynous Cupboard
Bronze badge

Artificial Intelligence

Is better than no intelligence at all.

1
0

Lettuce-nibbling veggies menace Mother Earth

Androgynous Cupboard
Bronze badge

Re: Yawn

> Humus is a colloid

And there was me thinking it was a terrorist organization.

1
0

Enraged Brits demand Donald Trump UK ban

Androgynous Cupboard
Bronze badge

Re: Extremely sad

There is considerable difference between banning 1.6 billion muslims because of the actions of a few thousand, and banning Donald Trump because of the actions of Donald Trump. I'm rather partial to a spot of irony myself but I'm not sure it really applies here.

41
4

US Navy's newest ship sets sail with Captain James Kirk at the bridge

Androgynous Cupboard
Bronze badge

But where am I going to get my environmental news now? I'm going to have to take out a subscription to Bunty magazine.

Actually it's almost a shame: I liked Lewis's defence writing and while I rarely agreed with Worstall (that rarest of things, a UKIP-supporting economist) in his conclusions, some of his facts made for an interesting read. Always good to see how the other half think.

12
2

Pirate Bay domain suspended thanks to controversial verification system

Androgynous Cupboard
Bronze badge

Re: Hold on...

Why bother with an anonymising service? Take your lead from ICANN's own whois entry:

Admin Organization:ICANN

Admin Name:Domain Administrator

Admin Email:domain-admin@icann.org

Put down any old address and a number from a phone-to-voicemail service, and you're as anonymous as you like and still within the letter of their requirements.

2
0
Androgynous Cupboard
Bronze badge

Re: OpenNIC

True, but at least it works. More than I can say for most ISP DNS servers.

0
0

Cyber-terror: How real is the threat? Squirrels are more of a danger

Androgynous Cupboard
Bronze badge

Not just stuxnet

Don't forget this one. Quite an expensive error.

But otherwise, spot on. The latest knee-jerk Tory fuck-knuckle to confuse hollywood internet with real life once again demonstrates that it's better to keep your mouth shut and be thought a fool, etc. It's up there with the old "paedophiles are using an area of the internet the size of Wales" line from Brass Eye. They never learn.

1
0

Commentard achieves bronze badge, goes directly to jail

Androgynous Cupboard
Bronze badge

Re: I've been around here for ages

> You presumably need to maintain >100 posts in the past year, drop below that and you temporarily lose the badge

Which is why a period of one year is known as the "bronze age". I found history very confusing at school.

14
0

GPS, you've gone too far this time

Androgynous Cupboard
Bronze badge

Re: How big is the error?

By how much will depend on your actual velocity. Say GPS is 95% accurate to 2m (I'm generalising, but it will do), so for point to point distances at 1Hz when travelling at 100mph, that's not much.

However, sit still for a bit and see how often your GPS records 0.1kt. You've travelled a zero distance, but the GPS reports a non zero distance. As a percentage, that's infinite. Which is presumably why TFA referenced errors during walking.

1
0

Your taxes at work: Three hours driving to turn on politician's PC

Androgynous Cupboard
Bronze badge

Re: This one time...

I got tea and biscuits during the fix. And treated to his

guided tour of preserved mammalian genitalia.

I'm pretty sure when I've seen this plotline before, it ends very badly indeed.

10
0

The Edward Snowden guide to practical privacy

Androgynous Cupboard
Bronze badge

He missed one.

1. Do not hire Edward Snowden and entrust him with private data

You might not like it, but it's undeniably true.

3
4

Boffins teach Wi-Fi routers to dance to the same tune

Androgynous Cupboard
Bronze badge

Re: Clock signals

I now know more about clock signals than I thought there was to know. Have an upvote.

4
0

Untamed pledge() aims to improve OpenBSD security

Androgynous Cupboard
Bronze badge

Re: Stupid idea

Any process that oversteps bounds that have been specified by the original developer has by definition already failed in an undefined way. Kill it, kill it with -9.

As a developer I would look very favourably on this, as I'd rather not have a daemon I wrote be responsible for a pwning (although naturally this will be a second line of defence behind my already exemplary coding standards).

I've never really got on with SELinux, I can understand the appeal to admins to lock down a process their way, but sometimes the developer knows best. If I know my code will never fork() or exec(), I am more than happy to specify that in the source: that alone would be a massive win for system security.

4
0

HMRC 'reluctant' to crack down on VAT fraudsters – tax ace

Androgynous Cupboard
Bronze badge

Bullshit

eBay at least provides no way to identify if the price you're paying includes VAT. This is a pain in the arse if you're buying on behalf of a business as it makes cost comparison very difficult.

I would love to see HMRC lean on them.

8
0

Balloon-lofted space podule hits 30,000m

Androgynous Cupboard
Bronze badge

Re: Look Kinda Scary I would need the bar

I do hope the toilet has a locking lid, otherwise your liquid courage will be floating in droplet form around the room when the balloon detaches. God forbid you go up after a curry.

5
0

Someone's lost the plod: Use crappy HTTP for shopping, banking, say Brit cops

Androgynous Cupboard
Bronze badge

Bank of Scotland have been texting me recently to sign up to their "protecting your business against fraud" website, also HTTP. Now this. My irony sensors are in full overload.

1
0

Russian subs prowling near submarine cables: report

Androgynous Cupboard
Bronze badge

I questioned the abilty of anyone to realistically tap undersea fibre in an earlier reg article and was slapped down in the comments [1]. So at least someone thinks it's possible.

(Why are hyperlinks in comments no longer working?)

[1] http://forums.theregister.co.uk/forum/1/2015/01/06/snowden_leaks_hype_and_lack_of_context_bad_for_understanding/#c_2404367

1
0
Androgynous Cupboard
Bronze badge

Re: Reds are under the bed!

> live and let live principles.

terms and conditions apply.

5
0

Chaos at TalkTalk: Data was 'secure', not all encrypted, we took site down, were DDoSed

Androgynous Cupboard
Bronze badge

Re: Things move on . . .

Get their stuff back? This doesn't include their reputation, presumably.

1
0

El Reg celebrates Back to the Future Day

Androgynous Cupboard
Bronze badge

... but what was about to surprise Marty most about 2015 was the modern replacement for the colostomy bag.

1
0

BBC shuts off iPlayer to UK VPNs, cutting access to overseas fans

Androgynous Cupboard
Bronze badge

Re: BBC kow tawing to tories.

I always found it ironic that the most UKIPpy foik I've ever met lived in the south of Spain (and naturally didn't speak a word of spanish).

5
0

Terror, terror everywhere: Call the filter police, there's a madman (or two) in town

Androgynous Cupboard
Bronze badge

Start with the small things

I think any online government strategy has to start with a new font. And some icons.

7
0

Top boffin Freeman Dyson on climate change, interstellar travel, fusion, and more

Androgynous Cupboard
Bronze badge

> Dr Norman Page

> Houston

Oil man? Yep..

I do like Freeman Dyson, but he's always been at the battier end of the spectrum.

2
7

PETA monkey selfie lawsuit threatens wildlife photography, warns snapper at heart of row

Androgynous Cupboard
Bronze badge

Re: He should take a photo...

Forget the royalties, charge the cat with assault.

4
4

Confession: I was a teenage computer virus writer

Androgynous Cupboard
Bronze badge

Look at you lot

Did anyone here not write a virus or gremlin of some sort as a teenager?

(my first was a TSR keylogger, and one we had the teachers password...)

2
0

Ashley Madison made dumb security mistakes, researcher says

Androgynous Cupboard
Bronze badge

Re: So...

All this eye-rolling outrage has me a bit puzzled too. I get storing keys directly inline in the code is bad from a maintenance point of view, fine. But they've got to be stored somewhere. If they're in a config file, or they're created by a process that itself has a config file, at some point they have to be stored in a repository (because the odds of fat-fingers requiring a restore from repository are much, much higher than the odds of being hacked). So who can explain to me why two repositories is more resistant to hacking than one?

The only way I can see around this is something like a PKCS#11 keystore - a hardware token plugged into the server, which stores the private keys required to access the AWS or whatever. Which is a lovely idea but a lot more work, and overkill for most applications I would think - including dating websites.

1
0

Wikipedia’s biggest scandal: Industrial-scale blackmail

Androgynous Cupboard
Bronze badge

Re: Was the USSR an ally of Nazi Germany?

Not sure why the US is at the top, didn't they turn up late? Again?

3
0

FORKING BitcoinXT: Is it really a coup or just more crypto-FUD?

Androgynous Cupboard
Bronze badge

Re: Biiiiig speculative play

This does actually happen, by the way: http://www.bbc.co.uk/news/world-asia-19364838

1
0

Bloke clicks GitHub 'commit' button in Visual Studio, gets slapped with $6,500 AWS bill

Androgynous Cupboard
Bronze badge

Re: The missing moral...

Man, that is deep.

5
0

The Raspberry Pi is succeeding in ways its makers almost imagined

Androgynous Cupboard
Bronze badge

Dear God, it's all gone horribly wrong.

Great alarm on reading that article - sophisticated Crontabs? PHP? The Raspberry Pi team may have set out to create a generation of programmers, but they've accidentally created a generation of Sys-Admins instead. The ideocracy has begun, run for the hills!

[asbestos suit engaged]

4
1

Page:

Forums