* Posts by Bronek Kozicki

2859 publicly visible posts • joined 6 Sep 2007

Viasat: We're going to sue Ofcom over EU-wide airline Wi-Fi network

Bronek Kozicki

Satellite

I know little on the subject but I always assumed that building and launching satellite is very expensive. I also assumed that satellites are tightly controlled by the owner, both for orbit parameters and onboard software. In the light of which, I guess Inmarsat simply chose to take the risk and equip it with antennas it could not use at the time of launch, assuming it would enable them later when legally allowed. I do not see a compliance issue (assuming nothing was transmitted in S-band without the licence), just simple business risk-taking which seems to have paid off.

What’s the real point of being a dev? It's saving management from themselves

Bronek Kozicki

Re: I did my studying back then

The thing about OO is that it is being used to either replace or supplement composition with excessive levels of abstraction. Which comes from poor education - the abstractions are useful, e.g. for dependency injection or compilation firewalls, but not nearly as often as OO evangelists made us believe. You can have a perfectly testable non-trivial program, which for most of dependencies employs simple composition (possibly sprinkled with generics), rather than interface classes etc. tools of OOP.

The missed education bit was to learn why and where abstractions are useful, e.g. open-closed principle, dependency injection etc. Instead, programmers are handed tools and commandments (e.g. define your interfaces! use design patterns for everything!) without clear explanation of the purpose, and the results are poor indeed. Because, as it turns out, simplicity is a virtue - and it got lost along the way.

Bronek Kozicki

Re: I literally wrote an entire book on this syndrome

And to think that this book was printed around the time when I was trying to understand what's is so great about OOP, and never hear about this book. Oh well, the omission is rectified now, an order will be delivered in 2 weeks or sooner.

Bronek Kozicki

Re: what a load of Tosh!

OO is not the only way to enable decoupling (testability, dependency injection, high cohesion etc.) . However it is relatively simple to implement (in a language) and use (for programmer) with static type safety, hence its popularity. It comes at a cost of design artifacts which need to be studiously maintained, i.e. interface classes.

The alternatives are polymorphism without explicit interfaces, either in a dynamically typed language (duck-typing) or in statically typed one (generics). Since dynamic typing makes early error discovery and enforcement of design tricky, the only tools remaining for large projects are either OO (well-established) or generics (tricky to use).

Personally I am not a fan of OO, because of the maintenance effort of the interfaces it drops onto developers, enabling stupid designs (a singleton which is a factory to a ... value type because it only has getters and setters, WTFF!) and generally being misused like a very heavy hammer in the hands of 500lb gorilla. However there are (not that frequent) situations when dynamic function dispatch of few closely related functions, collected under single umbrella of an interface class makes sense - but this requires consideration and understanding of (both maintenance and runtime) costs associated! More often than not, as single function pointer (or perhaps small lambda) works better, with 10% of the associated cost in terms of lines of code which need to be read and understood every-f*g-time someone needs to touch the thing.

As for AI? Neural nets have their place, but they are not going to save us from ourselves.

DXC slashes meal allowances for travelling troops: Please sir, may I have some more?

Bronek Kozicki

Re: That is fine provided that there is an exception mechanism

I do not understand why downvotes. It is not as if you are asking for higher allowance because you are picky.

ARM chip OG Steve Furber: Turing missed the mark on human intelligence

Bronek Kozicki
Boffin

Re: general purpose CPU ...

Each node of a neural network maintains very little state, but nevertheless there is some state - at the very least weight of the input (e.g. "y" parameter on the graph above). Arriving at the useful combination of this state for all nodes is what neural network training is about, and in a classical simulation it would be an important part of the data file describing the network. However since there is so little state, a pure neural network would not need separate RAM to store it to (or read from) during active work, as the required memory should easily fit alongside with the computation part. Still, in the interest of maintaining neural network state between machine suspends, it would be desirable to occasionally dump this state elsewhere - hence RAM could be used as a buffer for writes. Perhaps alongside with a description of the network topology.

Bronek Kozicki

Re: general purpose CPU ...

To elaborate, the only calculation that a single node of such network needs to do fast can be illustrated as here. It follows that in order to keep your power requirements optimal, you need to have this (or similar - it is one of the variants) calculation embedded in hardware, with minimum data flow on input and output. For example, currently the biggest chunk of power budged of any general purpose CPU is consumed on shuffling data to and from DRAM, and in a neural network this should not be necessary most of the time.

Bronek Kozicki

general purpose CPU ...

.. for the simulation of a neural network? Well of course, if power utilization and space are not concern, do count me in. There are surely many hobby projects where this could work. However, for a large simulation, I would certainly use a different approach. Something along the lines of Google TPU, perhaps.

EU: No encryption backdoors but, eh, let's help each other crack that crypto, oui? Ja?

Bronek Kozicki
Joke

Re: 4 is actually an empty set -

... only no one was paying attention.

must be something to do with "undetectable" part

Bronek Kozicki
Big Brother

Re: The hysteria about encryption seems to be mainly

The thing is that 1 and 3 are dying out, thanks for availability of good grade encryption in the form of open source projects such as OpenSSL etc. Yes they have their problems (my heart bleeds for poor developers ...) but they generally do follow industry practices and, importantly, are under scrutiny of cryptographers who understand the math. While most crypto in category 2 aspires to 4, I think 4 is actually an empty set - just as there are no non-trivial programs with exactly zero bugs.

Back to topic - spooks are not blind, they see that category 2 is getting more popular and accessible by the day. Since they do not understand the math, they feel they cannot compete with cryptographers and hence, for the same reason, issue silly demands. Or perhaps that's just a cover, to make us think that they do not understand the math and cannot really hack what's out there ...

BlackBerry Motion lurches into UK stores

Bronek Kozicki

... amen to that. Can't live without my keyboard, but the apps are nowhere close to where I want them to be.

IBM: We're now a, what's not losing money? Ah, a cognitive cloud champ!

Bronek Kozicki

Re: Power systems

As someone writing the SW, I am very keen to have a choice of HW platforms where my code will be running on. It is not a wanton wish. Everyone makes assumption that intel architecture will be "forever" because it is most popular, but do not forget that use of 32bit x86 is declining, and 64bit extensions were brought by AMD (not intel) and it was despite intel, not thanks to them. All the good work that intel is currently doing notwithstanding, we must not allow ourselves to become hostages to one platform.

Also, SW must scale across many cores. Sometimes there will be few, sometimes tens, sometimes thousands (Volta GPU) - and there are different ways to useful employ these. It is healthy to have some exploration in this space - should I make use of modern C11 memory model? Should I use consume semantics? Or perhaps try transactional memory? These choices set the scalability limits to the software I am/will be writing, and they should not be dictated by only one R&D department.

EDIT: I do agree that cloud department at IBM is little lazy - I wanted to hire a small VM to try POWER8 myself but was confused as to what I would be buying. The sales ppl never got back to me ...

Bronek Kozicki

Power systems

I do hope they do not make any silly cuts and continue investing in this direction - an alternative to Xeon is badly needed and the move to open power initiative was very smart. Also I am rather keen on POWER9 and especially its NVLink with coherent memory model shared with NVidia GPU - something Intel does not have. They have a good USP now, and what market needs is reassurances that open power will live on.

Linux kernel community tries to castrate GPL copyright troll

Bronek Kozicki

Re: How long before...

(with thanks to #define INFINITY -1)

Directly from kernel maintainers, as reported in LWN:

If people are acting outside of the social contract, perhaps their code could be rewritten and replaced.

For McHardy's code, that may be a viable option, Hemel said. Obviously, it won't help for products that have already shipped, but ripping out McHardy's code would help for the future. Companies could hire a few developers to rewrite it. If you look at the money he has made and the cost in lawyers to handle the disputes, it comes to a loss of multiple millions of euros, he said.

Radcliffe agreed, saying that ripping out the code would provide a warning to the next person that considered doing this kind of thing.

Xperia XZ1: Sony spies with its MotionEye something beginning...

Bronek Kozicki

Re: No need to go as far as XZ1

I've read that starting the camera app on XA1 took few seconds - has this been fixed? Asking because missus needs a new 5-inch phone with good camera, and she likes Sony ones.

Culture, schmulture. DevOps, agile need to be software-first again

Bronek Kozicki

Re: New tropes...

Agile - do away with the subject matter "experts" and let the developers learn the subject, from the users.

Swiss banking software has Swiss cheese security, says Rapid7

Bronek Kozicki

Re: How is SQL Injection Still a Thing?

Actually SQL is not that bad and it definitely is not equivalent of COBOL. The problem is not SQL; it is programmers who think that building SQL programmatically by string concatenation is acceptable. It is not and never was. That's what stored procedures with parameters passing are for, or failing that pre-compiled statements, but of course that requires a little more varied code on the caller side. In effect there are two programming models here: 1) actual database queries and manipulation language in SQL and 2) database interface with procedures/pre-compiled statements, parameters etc. required to use 1) from other languages.

Programmers often perceive 2) as an optional element but it is not and as you have demonstrated above, it is easier to rant about 1) than learn to use it properly.

FWIW I do not use SQL now and have not used it for years, but frankly how can anyone aspire for "better languages" without understanding of what went before?

El Reg was invited to the House of Lords to burst the AI-pocalypse bubble

Bronek Kozicki

nice

Kudos for this "Find people who find flaws in an approach, and support researchers who have interesting new approaches that aren't popular or fashionable. Encourage intellectual diversity."

I agree, that's what we need instead of following one-and-the-same path as everyone else.

Kotlin's killin' Java among Android devs

Bronek Kozicki

Re: Open source

ABAP , T-SQL as two of many examples. Basically as a programmer you are given access to language documentation, programming, and runtime environment, but you cannot peak underneath and are not allowed to influence its future evolution.

BlackBerry's new Motion will move you neither to tears of joy nor sadness

Bronek Kozicki

Faster wi-fi ... as long as you use our routers, our phones, our tablets, etc?

I suspect not, more likely they will share their implementation of 802.11ac firmware with whatever they have in their access points already. Which is standard conforming and works well with all types of devices, nothing proprietary here. However good (or bad) implementation can greatly impact actual achievable throughput and latency, simply because these two are tied to timing, which itself is tied to performance of the code itself (i.e. the standard is quite forgiving because it has to, but the implementation can aim for the best performance)

FWIW I do have some networking kit from TP-Link (e.g. CAP1750 access point, some managed switches, wifi controller etc) and it is good piece of kit - or excellent if you look at the (very small) price tag. They do not spend money on fancy features or loud marketing, and sometimes the hardware may be less robust (looking at old "nano" powerline adapters ...), but it is refreshing compared to Netgear, D-Link, Linksys etc. usual suspects.

Hitting 3 nanometers to cost chipmaker TSMC at least US$20 billion

Bronek Kozicki

Re: Well at 3nm it's a case of...

...the oxide thickness is usually 1/10 that so 1-2 atoms thick. I suspect this will go up, as the current has to flow somewhere. Curious what the new process will look like ...

Ghost in Musk's machines: Software bugs' autonomous joy ride

Bronek Kozicki
Joke

Re: Thats interesting but in short...

Testing is great but don't you dare automated testing, because that takes you towards TDD and agile, away from the sacred lands of waterfall.

Bronek Kozicki

Re: Really??

It was one of many dramatic mis-application of existing code. Others are Ariane 5 or a bug which finished Knight Capital. The code itself was working according to conditions for which it was coded, but the software has been applied in conditions for which it was not intended, for example steering a much larger rocket, actual live trading or fully autonomous driving. There is not much blame you can put on coder, and a lot of it on the organization itself.

German Firefox users to test recommendation engine 'a bit like thought-reading'

Bronek Kozicki
Big Brother

Big deal

Frankly, this is what Chrome have been doing for years, without opt-in. I understand that Firefox had actively asked users' consent (that's what "opt-in" implied) before enabling this feature for them, which makes them better than Chrome.

The icon because that's the way we live now, in case you thought otherwise.

Developers' timezone fail woke half of New Zealand

Bronek Kozicki

Re: Aukward moment

FWIW, Howard Hinnant wrote nice C++ library for parsing timezone database files. It also handles conversion to/from GPS and TAI clock . The size of the thing is good indication that this is not simple at all, for those interested link (it is modern C++ and integrates with std::chrono , do not blame me if you have not been following standardization ...)

Sole Equifax security worker at fault for failed patch, says former CEO

Bronek Kozicki
Unhappy

Re: Next question

Start with closing you bank account, any credit cards you have and closing all debts you might have. Then replace contract phone with pay-as-you-go one and sell your car. If you are very careful not to enter into new financial liabilities for the next few years then who knows, maybe your record won't be updated - but then it might start showing AWOL, so it's not very good either.

Musk: Come ride my Big F**king Rocket to Mars

Bronek Kozicki
Unhappy

Re: HOTOL / Skylon / A2 is a very different cryptid

@Ledswinger hard to disagree with you, but I think you will concede that any such effort would not, and should not, end with a single project. Hence money on, for example, space programme, would by necessity have to be also committed in the long term. It is much easier for political classes to blow this sort of money on ad-hoc bungs, failures and waste, as there will be very little backlash if they do their usual, that is U-turn.

You better explain yourself, mister: DARPA's mission to make an accountable AI

Bronek Kozicki
Terminator

Re: Even simpler...

Humans tend to avoid cognitive dissonances, that is they do not want to learn things which contravene their believes (this applies to both "fairies at the bottom of the garden" believes and "I've seen and evaluated the proof so it must be right"). Since humans are also social creatures, they seek the company which would not contravene their believes either, so what remains will by necessity either "leave them be" or reinforce these believes. This believe reinforcement is important, esp. in the age of border-less social communication.

Which is a long-winded way to say that we tend to create ghettos for ourselves and are rarely as open-minded, as we like to think we are. How does this relate to AI? For one thing, unless AI is subject to continuous learning coming from outside of its direct experience, it will be also avoiding cognitive dissonances and not so "open-minded" as we might wish it was. We currently have no means to discover when that happens, which is not a good thing if AI are making more decisions about our lives.

Internet-wide security update put on hold over fears 60 million people would be kicked offline

Bronek Kozicki

Re: Root KSK roll

I do not quite understand. It does not appear that the new KSK is somehow linked to the new signing algorithm ed25519 , or at least the article is silent on this. From what I read, it is a new DNSSEC signing key for the root servers, so as long as your (new or not so-new) DNS server has the new DNSSEC keys installed, it should just work. The RFC 8145 seem to be about enabling the root (and not so root) DNS servers to build up a knowledge about who has the new key and who has not, and it does not need to be installed everywhere. Neither seem related to the new key signing algo.

Unless the requirement of the new key is the use of the new signing algo, which would be a pretty important point to make in the article (and yet it is no there)?

NBD: Adobe just dumped its private PGP key on the internet

Bronek Kozicki
Joke

Perhaps they did it on purpose?

Obligatory xkcd reference.

Researchers claim ISPs are 'complicit' in latest FinSpy snooping rounds

Bronek Kozicki

Re: Cmon, have guts

... Iran? Sudan?

Bill Gates says he'd do CTRL-ALT-DEL with one key if given the chance to go back through time

Bronek Kozicki

I think every developer worth his/hers salt wrote some truly awful software in their young age. Bill Gates was unlucky to have that software used by virtually everyone, for a very long time. If people all around the world started using code I've written 25 years ago I would probably die of embarrassment.

What's that, Equifax? Most people expect to be notified of a breach within hours?

Bronek Kozicki

Re: Not Qualified

If I was on her place I would keep that visible. The fault is on the board of directors for putting her in a position show was not qualified to. Since that information is was public, there is no suspicion of her trying to pass the qualifications she did not have.

Bronek Kozicki
Holmes

Re: How?

I have not seen the document in question, but can offer an educated guess. The document contains recommendation that the breached company should buy ID protection services for the affected customers. From Equifax, of course.

IBM packs 120TB into a carry-on bag, for snow-balling cloud uploads

Bronek Kozicki

I do not think Aspera would be able to transfer the initial snapshot "really fast". This technology seems to be only only sending incremental changes, based on real-time (or near) monitoring for local changes. When adding any off-site data storage service (does not have to be cloud - replication to newly added second datacentre is possible example) then the initial snapshot could take a long time, and sending it in a "hard format" instead makes sense.

Linux 4.14 'getting very core new functionality' says Linus Torvalds

Bronek Kozicki
Coat

Right, yes .... (scooting off)

Bronek Kozicki

Hi Goeffrey, from my experience you would probably find ready documentation using either of these extra "magic" words, i.e. names of distros which have plenty of useful documentation: arch, gentoo, debian, ubuntu, redhat . There is also, of course, stackexchange and serverfault.

Good luck.

Bronek Kozicki

Re: Windows vs Linux ... really?

It matters not how many other people are using any OS, as long as the applications you need are available for it.

You are right - Linux rules in pocket and in datacentres exactly because of abundance of "applications" (for lack of better word). My point was that the limiting factor in all cases (pocket, desktop, datacentre, IoT etc.) for the past years, was not kernel (nor the drivers, which are in the kernel source tree). These factors are elsewhere - with the developers whose business model does not play well with open source. There are more than few developers who release (and earn their revenue this way) closed-source on Linux, but still not enough. FWIW I would prefer them all to go "Red Hat way", i.e. release open source and sell support instead. However let's not deceive ourselves - that would leave Linux without any AA games or other "no contracts needed" software products, since developers need to earn their keep. It so happens that this kind of "no contracts needed" software is crucial on desktops, but now the borders are blurring.

Anyway back to topic: Linux kernel improvements change nothing in this space. Hence the contention that the discussion on the "Linux on desktop" does not belong here (I am actually surprised that this is contentious, judging by the number of downvotes I received, but whatever ...)

Bronek Kozicki
Facepalm

Windows vs Linux ... really?

So, Linux overlord announces arrival of significant new features into Linux kernel version 4.14, which will be also next (after 4.9) Long Term Support kernel. This is actually great news for those (few?) of us who prefer to use self-configured and self-built vanilla kernel, as opposed to distribution patched, binary kernel. Also the features announced are quite significant for datacentres, where (if you look beyond operating systems sales figures), Linux absolutely dominates.

And where do we get from this announcement? Lame complaints that Mint GUIs do not appear to provide equivalent functionality to Windows firewall management. Really?

Just to compensate, here is a much nicer list of new features in kernel 4.14 to ponder about, summarized below:

* GPU drivers improvements, for all of AMD, Nvidia and Intel

* many new features in memory subsystem, as mentioned in the article

* ARM64 improvements, with support for Raspberry Pi Zero, Banana Pi etc. boards added

* updates for both hypervisors KVM and Xen, and (as mentioned in the article) Microsoft Hyper-V guest

* a bunch of improvements and fixes in filesystems btrs, ext4, xfs, f2fs and (as mentioned) zstd compression

* new drivers, EFI boot improvements etc. etc.

This is going to be large release and I will not be surprised if we see it going to 4.14-rc8 this time round.

Could this possibly mean "year of Linux on desktop"? This question is really missing the point. It does not have to - it is already dominating in the pocket, and in datacentres. If we want to carry on discussion about role of Linux on desktop, then much more appropriate context for it would be new KDE, Gnome or perhaps XFCE releases, or maybe Libre Office or some major distribution. Linux kernel is more than ready for taking on desktops, it is these other projects which lead it there. However in the context of new kernel releases, that discussion is entirely off topic. Please refrain next time!

Hubble catches a glimpse WASP-12b, an almost pitch-black exoplanet

Bronek Kozicki

Re: making the planet darker than fresh asphalt!

... or simply because all these starts and landings leave lots of soot anyway

User worked with wrong app for two weeks, then complained to IT that data had gone missing

Bronek Kozicki

Re: TBH

Actually locking the color scheme of LIVE version would be even more important - imagine the mayhem if a user decided that TEST version scheme is so nice, he wants it on LIVE one. Then few weeks down the line proceeds to use LIVE as if it was TEST, because it looks like one.

How to stop Facebook and Apple taking over the mobile phone industry

Bronek Kozicki

Re: Streaming an operating system?

The pre-requisite here is that you need to trust both the network and the server, because otherwise your OS image becomes untrusted. I am not entirely sure I would trust mobile networks more than I (have to) trust Google or Apple.

123-Reg customers outraged at automatic .UK domain registration

Bronek Kozicki
Joke

... but surely they will not make anyone think worse of them ? I mean, surely that's impossible ?

Missed patch caused Equifax data breach

Bronek Kozicki

Re: Typical problem of many large organizations

@Peter Getherhole exactly, you have won "compartmentalization" word in the bullshit bingo. The sad truth is that many C-level executives only know the words, but do not know the meaning.

Bronek Kozicki

Re: Typical problem of many large organizations

I do not have a silver bullet, and I do not claim this to be a simple problem. The list of possible underlying causes is, by necessity, short.

The one common factor I found, reading about this and other failures, is the C-level executives oblivious to, or otherwise ignoring, the implied requirements of sane IT infrastructure, and focusing on explicitly stated business needs only.

Bronek Kozicki
Coat

Typical problem of many large organizations

Dysupgraditis - permanent inability to deploy required upgrades or patches on time, typically caused by fear of breaking infrastructure. Underlying causes: lack of understanding of the existing infrastructure within the organization, lack of infrastructure to perform pre-deployment testing of patches or upgrades, lack of skill to minimize the downtime or risk from the deployment. Known cure: none.

El Reg is hiring an intern. Apply now before it closes

Bronek Kozicki
Go

Re: you could just apply for a real job with them?

"I thought not."

It might be worth giving it a shot. For one, I would be interested to read tech articles written by an old curmudgeon like yourself. "Old is new again" etc, that might be not only entertaining but also enlightening.

Go for it, and who knows?

Cassini probe's death dive to send data at just 27 kilobits per second

Bronek Kozicki
Thumb Up

Good bye, Cassini

You served well, thank you for all the science and nice pictures!

Boffins fear we might be running out of ideas

Bronek Kozicki
Coat

Bullshit patents to blame?

Imagine you are novice investor into some research. You eventually get your research results, and they appear to provide innovative solution for a problem you paid to research in the first place. You go to patent your solution and then move onto production, happy that your investment will bear fruit, only to discover there are many related patents and there is no way to make a viable product without encroaching in someone else's patent "do it with a computer" or some such.

So, the next time you in invest your money in a research, you spend more and more money researching patents in the related areas, rather than the science involved. As a result you spent much more money, but at least you get to profit from the science you invested in - so it is money well spent!

Or perhaps I am entirely wrong about it.

Atlassian kills God, rebrands as a mountain, a structurally unsound 'A' or a high five

Bronek Kozicki
Coat

Re: Money

Very appropriate, too