* Posts by Destroy All Monsters

15959 posts • joined 3 Jun 2008

Web cache poisoning just got real: How to fling evil code at victims

Destroy All Monsters
Silver badge

Evil Genius but Genius.

Basically buggy exploitable crud is served for efficiency purposes (where have I heard that?)

Then the browser goes like a good doggie and fetches grenades from all over the Internet, i.e. from sites completely unrelated to the target site on a say-so, then pulls the pin .... because that's what it is supposed to do according to the current Golden Retriever model.

QubesOS is a necessity.

0
0

Self-driving cars will be safe, we're testing them in a massive AI Sim

Destroy All Monsters
Silver badge

Re: Wile E. Coyote included?

That's serious "Tex Adversial Learning"

0
0
Destroy All Monsters
Silver badge
Windows

Re: Mundanity

I would hazard a guess that most accidents, and therefore road jams etc are caused by meatbags making bad decisions.

You seem to be good in empty truths. Evidently someone has made a "bad decision" if there are problems on the road, unless the car self-combusts.

And since driving laws are becoming more drastic, speed cams, speed bumps, radar, red light cams etc it's making less sense to actually drive ourselves..

Make no mistake. Anarcho-tyranny WILL be getting worse. If you think a self-driving car will result in a reduction in your "fine budget", be ready to learn otherwise.

0
0
Destroy All Monsters
Silver badge

AV advocates seem to delight in painting human drivers as dangerous and unsafe, compared to their chosen deus in machina, but the evidence so far is that none of the current crop of AVs are as safe as the average human.

And won't be for some time.

And when I hear self-driving, I want to see actual SELF-DRIVING. Like this: Terminator 2 Truck Chase Scene

0
0
Destroy All Monsters
Silver badge

"What has Science Done!"

0
0

Juno this ain't right! Chinese hackers target Alaska

Destroy All Monsters
Silver badge

There is not enough OMG for this

Meanwhile, don't work for the CIA:

Botched CIA Communications System Helped Blow Cover of Chinese Agents: The number of informants executed in the debacle is higher than initially thought.

“You could tell the Chinese weren’t guessing. The Ministry of State Security [which handles both foreign intelligence and domestic security] were always pulling in the right people,” one of the officials said.

“When things started going bad, they went bad fast.”

The former officials also said the real number of CIA assets and those in their orbit executed by China during the two-year period was around 30, though some sources spoke of higher figures. The New York Times, which first reported the story last year, put the number at “more than a dozen.” All the CIA assets detained by Chinese intelligence around this time were eventually killed, the former officials said.

...

The covert communications system used in China was first employed by U.S. security forces in war zones in the Middle East, where the security challenges and tactical objectives are different, the sources said. “It migrated to countries with sophisticated counterintelligence operations, like China,” one of the officials said.

The system was not designed to withstand the scrutiny of a place like China, where the CIA faced a highly sophisticated intelligence service and a completely different online environment.

As part of China’s Great Firewall, internet traffic there is watched closely, and unusual patterns are flagged. Even in 2010, online anonymity of any kind was proving increasingly difficult.

0
0
Destroy All Monsters
Silver badge

Re: Just Tsinghua University?

"Finish Him"

0
0

Drama as boffins claim to reach the Holy Grail of superconductivity

Destroy All Monsters
Silver badge

Re: Extraordinary claims—

Which would make all those barren stretches of Sahara desert suddenly extremely valuable.

Italy will occupy them and then the Brits will have to declare WAR!

2
0
Destroy All Monsters
Silver badge
WTF?

"Silver in gold"

The one weird thing about this superconductor would be that it is not made of cheap materials and "rare earth metal" (also cheap) oxydes, but of Real Money metals.

Sounds Hollywoodesque. Maybe you want to sandwich it in Platinum for best effects?

5
0

Kids are more likely than adults to submit to peer pressure from robots

Destroy All Monsters
Silver badge

It's the current year.

Esp, as "children aged from seven to nine years old" were obviously voting in a referendum 2 years ago.

If toddlers can be racist, they can damned well vote!

1
0
Destroy All Monsters
Silver badge
Terminator

"Come with me if you want to live"

Ok, Robot!

3
0

Mozilla-endorsed security plug-in accused of tracking users

Destroy All Monsters
Silver badge

Re: Standard

But the server is in Germany, not in the US, so that's already +100 for me.

(OT: Brennan's license to sniff around while getting pension money revoked, yay!)

1
3

Three more data-leaking security holes found in Intel chips as designers swap security for speed

Destroy All Monsters
Silver badge
Paris Hilton

virtualisation and multi-threading have both been regarded as security risks since their inception.

Regarding virtualization, I can't remember anyone running around telling people "don't use this!". These kind of ideas need time to ripe, the CPUs need to become faster, the systems more complex & optimized until a problems pops up. Hell virtualization started with IBM's VM series in the 70s. It's been a long time. When did the first warning surface?

Now for multi-threading I have found a Hyper-Threading Considered Harmful from 2004, so this point is well taken.

1
1
Destroy All Monsters
Silver badge
Linux

Re: Looking at the wrong holes

It's the *browser software* providing the security, not the hardware, so only the browser needs to be signed and trusted.

Very NOPE. Once the browser forks of a separate process to run the JavaScript mystery meat (it DOES that, right ... right?), it's the hardware what takes over (with the kernel doing the management for the CPU or the CPU doing the management for the kernel, it depends on the point of view, very Necker-Cube like). Context switches, page tables, the whole shebang. Sure the software is in there ALSO, but it is mostly complexifying the problem with I/O, pipes, shared memory for IPC, locks, etc. whatever, opening potential holes in what should be a the base a simple, assuredly secure set of minimal principles for process isolation.

4
0

Boffins get fish drunk to prove what any bouncer already knows

Destroy All Monsters
Silver badge
Trollface

No alcohol, red bull chemtrail drink and coffee in moderation....

The lands towards the south must be rather peaceful

4
0

Reel talk: You know what's safely offline? Tape. Data protection outfit Veeam inks deal with Quantum

Destroy All Monsters
Silver badge

Re: Safe until ...

G. Triffids attack.

H. Putin hacks base reality at the quantum level and overwrites your tape with Ukrainian Jokes.

6
1

US voting systems: Full of holes, loaded with pop music, and 'hacked' by an 11-year-old

Destroy All Monsters
Silver badge

I wonder why it always comes down to money?

Stalin was right insofar as sometimes it comes down to just bayonets and get a move on.

2
0

Criminal justice software code could send you to jail and there’s nothing you can do about it

This post has been deleted by a moderator

Former NSA top hacker names the filthy four of nation-state hacking

Destroy All Monsters
Silver badge

Beyond Parody

According to Joyce there are four primary actors when it comes to states hacking states: Russia, China, Iran and North Korea. Notably missing from the list was the US, but let's face it, he wasn't going to go into detail about that.

There's is another one missing, which is also renowned for bumping of scientists in the street and showing 100% guaranteed fake shit at the UN to drum up some fear with incredible chutzpah.

6
5

What do a meth, coke, molly, heroin stash and Vegas allegedly have in common? Broadcom cofounder Henry Nicolas

Destroy All Monsters
Silver badge

Re: Other than...

Who the hell cares about what they were spending their money on?

Manufactured outrage buoys the news in 2018.

People are now used to let their holier-than-you attitude hang out all day flapping in the wind while getting dripfed some twitter inanities.

4
0
Destroy All Monsters
Silver badge

Re: Another affluenza victim, shirley.

as Mueller slowly works his way up to the top

At some point he's probably going to have to meet himself then.

0
9

Work at a startup? Think US military isn't good enough at killing? We've got the program for you

Destroy All Monsters
Silver badge
Black Helicopters

You can never have enough killtech as your empire crumbles into blue dust.

Guess the CIA has its own program and Facebook and Twitter did successful pitches.

6
0

Clap, damn you, clap! Samsung's Bixby 2.0 AI reveal is met with apathy

Destroy All Monsters
Silver badge

Re: wrong quote

The only thing appropriate as you drive up to FaceAppTweetOggle ControlPlex: "We should have shotguns for this kind of deal".

1
0
Destroy All Monsters
Silver badge

Re: "Do not want" is not strong enough.

I really consider this something that not having would be far superior to having.

The only thing I would really want would be a SDK with a flat learning curve so that I can compose my own ultra-simple mobile interface and leave out all the crud and weird asynchronous Google event shit.

1
1

The off-brand 'military-grade' x86 processors, in the library, with the root-granting 'backdoor'

Destroy All Monsters
Silver badge

Bullshit. A user is not forced to make a physical action to do a kernel call either.

A good enough procedure would a kernel parameter that sets the Alternate Instruction Set Allowed bit.

15
2

Space, the final Trump-tier: America to beam up $8bn for Space Force

This post has been deleted by a moderator

Destroy All Monsters
Silver badge

Re: Interesting

I'm sure Russia has a Space Spetznaz team all ready to go if they need to rapidly board & take over ISS.

3
0
Destroy All Monsters
Silver badge
Trollface

This sad and ancient religion: Veep Vader cargocults!

space development

I'm sure lawyers will lobby for "eminent domain" legislation soon.

In the meantime, due to the neverending aggravated/crippling/debilitating/asscracking sanctions, Russia is mulling "no more rocket engines for you": https://www.rt.com/business/435560-russia-retaliate-sanctions-rocket-engines/

5
0

Revealed: El Reg blew lid off Meltdown CPU bug before Intel told US govt – and how bitter tech rivals teamed up

Destroy All Monsters
Silver badge
Trollface

Why are there people developing Blue Screens of Death and why should anyone have notified them?

6
0

Intel: Yeah, yeah, 10nm. It's on the todo list. Now, let's talk about AI...

Destroy All Monsters
Silver badge
Mushroom

DUMB SHIT

"Autonomous vehicles will run on data just as today's vehicles run on gasoline."

The self-driving part won't work very well and the data will be shit while the gasoline will be very expensive and will be really really necessary.

1
0

ZX Spectrum Vega+ blows a FUSE: It runs open-source emulator

Destroy All Monsters
Silver badge

> they couldn't have been that crap.

There was nothing to compare against.

31
5

DXC will be damned if it lets cloud cannibalise the IT outsourcing biz before DXC does

Destroy All Monsters
Silver badge

Pyramid rebalancing was about having fewer decisions makers in management and more workers doing the work.

Like sharpening razor blades under a pyramidform structure.

1
0

Google's cuddling up to China with clouds in its eyes – reports

Destroy All Monsters
Silver badge

Re: Times change...

Where are those Google murals? Impressive, they must be.

0
0

TSMC chip fab tools hit by virus, payment biz BGP hijacked, CCleaner gets weird – and more

Destroy All Monsters
Silver badge

Re: We Snoop

Fear leads to GDPR.

1
0

Linux kernel 4.18 delayed: Bug ate my rc7, says Linus Torvalds

Destroy All Monsters
Silver badge

Re: Linus should really learn from Microsoft

"Unix won because worse is better."

No!! Windows won because worse is better. (Otherwise the pure hack of Windows 1.x would,'t have survived against OS/2 + the severely delayed Presentation Manager)

But:

A wrong lesson is to take the parable literally and to conclude that C is the right vehicle for AI software. The 50% solution has to be basically right, and in this case it isn't.

Ah, the East Coast hackers and their LISP. Well, at least we know nowadays that there is no single language for AI software. You need to design one adapted to your problem.

2
0
Destroy All Monsters
Silver badge
Linux

Re: Linus should really learn from Microsoft

Either Unix is very good, or software engineers are very lazy

Just keep it simple, and functional (i.e. puke out a monolithic Linux kernel instead of waiting for something based on a microkernel to ripen). Did I mention simple: The Art of Unix Programming. (Some chapters may need review in that book though).

Principles should be few. Manuals should be thin. Learing curves should be flat (i.e. you should not need to pull in 10 different knowledge areas when you need to add something to a simple desktop application).

Somewhere in there the viewpoint of "keeping things simple for the C programmer" persists, but C is just horribad and an impediment to smooth design and development nowadays. The symptom is in the difficulty of multithreading applications. Time to morph, I guess.

0
0
Destroy All Monsters
Silver badge
Stop

Oh no!

Linus' "You are Going Down" face.

1
0

Putting the ass in Atlassian: Helpdesk email server passwords blabbed to strangers

Destroy All Monsters
Silver badge
Windows

That was fast

"The vulnerability has been present since early 2017," Atlassian told its punters. "We first became aware of the issue on July 12, 2018 PST and took immediate action to investigate the matter, issuing a fix early on July 16, 2018 PST."

The way other completely annoying and apparently-not-hard to fix problems with tons of votes are being handled by Atlassian it amazes me that they got to it before 2025.

Unless the problem is "solved" by dropping the feature which is the root cause .... like recursive table in Confluence, ain't it, Atlassian?

8
0

Facebook's security boss is offski. Not to worry, it has 'embedded security' in all divisions

Destroy All Monsters
Silver badge
Windows

Soviets under every bed

Stamos said he had planned to leave earlier this year, shortly after he reportedly clashed with his superiors in arguing the social network needed to be more forthcoming about Russian election interference and disinformation campaigns. Now we know he moving on to become a full time academic, specialising in information security policy, the role of security and technology in society and related areas.

Expect a nevernding spew of books about Digital Pearl Harbor, promotional tours about how Russians are undermining democracy, pwning the Internet of Things and generally probing Zuckerberg's flock using glowing touchscreens from afar.

1
2

Build your own NASA space rover: Here are the DIY JPL blueprints

Destroy All Monsters
Silver badge

Re: The table with the specs...

ISIS' head will explode

0
0

Riddle me this: TypeScript's latest data type is literally unknown

Destroy All Monsters
Silver badge

I approve of this

Although I'm not into using JavaScript, nor TypeScript, at least for now.

For the webby interface, elm sounds like a good investment.

For anything else, stay the hell off an ECMAScript runtime.

0
0

The Solar System's oldest minerals reveal the Sun's violent past

Destroy All Monsters
Silver badge
Paris Hilton

Re: Irradiation in the early solar system

> achieving critical mass

This is not a fission reactor.

You need to dump hydrogen and some trace elements of "other stuff" onto the big heap until the pressure and heat at the center start to be sufficiently high to sometimes get a deuterium nucleus out of the proton-proton assembly <-> disassembly at equilibrium. This takes a long time. Real Astrophysicists may want to say more.

I would call this "it gently warms up from the inside"; you would just be looking at a ball of hydrogen shedding the heat generated by infall for a many millions of years, until convection causes the interior to bubble up.

2
0

Facebook deletes 17 accounts, dusts off hands, beams: We've saved the 2018 elections

Destroy All Monsters
Silver badge

Re: Moron!

It is a source of something, but what?

8
0

Pentagon 'do not buy' list says нет to Russia, 不要 to Chinese code

Destroy All Monsters
Silver badge
Big Brother

Source code Mandrake. Router source code.

This move sparked some serious concerns, not least because some of these companies are major suppliers to America's military. Exposing the source code to Moscow's agents would show Russian spies where to attack installed equipment and software to eavesdrop on the US administration.

Rank paranoia.

We know what source code is.

It is not a magical black liquid that sloshes at the bottom of circuit boards that allows one to "eavesdrop" from across the world one it has been seen unbottled.

But it's good that I don't need to read about "Soviet spies" as seems to crop up from time to time in The Meedja.

1
1

Relax, Amazon workers – OpenAI-trained robo hand isn't much use (well, not right now)

Destroy All Monsters
Silver badge
Windows

Excellent (what's with the trans bluhair style?)

The researchers hope that this will eventually lead to progress in building robots that can cope with our volatile and mutable reality while helping humans with chores at home and at work.

It's a hand! Animated by a neural network, which is a thing that does processing at insect capabilities.

There is a whole (situated) robot to which it must be attached which doesn't exist. (cue Miles Bennett Dyson in the Cyberdyne vault)

There is much to do.

As Rodney Brooks writes

Consider AlphaGo, the program that beat 18 time world Go champion, Lee Sedol, in March of 2016. The program had no idea that it was playing a game, that people exist, or that there is two dimensional territory in the real world–it didn’t know that a real world exists. So AlphaGo was very different from Lee Sedol who is a living, breathing human who takes care of his existence in the world.

I remember seeing someone comment at the time that Lee Sedol was supported by a cup of coffee. And Alpha Go was supported by 200 human engineers. They got it processors in the cloud on which to run, managed software versions, fed AlphaGo the moves (Lee Sedol merely looked at the board with his own two eyes), played AlphaGo’s desired moves on the board, rebooted everything when necessary, and generally enabled AlphaGo to play at all. That is not a Super Intelligence, it is a super basket case.

We need more (unless you are doing task-oriented kill problems for the military for example):

Theoretical Impediments to Machine Learning With Seven Sparks from the Causal Revolution, Judea Pearl, 2018-01-15

Current machine learning systems operate, almost exclusively, in a statistical, or model-free mode,

which entails severe theoretical limits on their power and performance. Such systems cannot reason about interventions and retrospection and, therefore, cannot serve as the basis for strong AI. To achieve human level intelligence, learning machines need the guidance of a model of reality, similar to the ones used in causal inference tasks. To demonstrate the essential role of such models, I will present a summary of seven tasks which are beyond reach of current machine learning systems and which have been accomplished using the tools of causal modeling.

(Also get Judea Pearl's "The Book of Why", it's full of fun)

9
1

Microsoft devises new way of making you feel old: Windows NT is 25

Destroy All Monsters
Silver badge

Re: NT

> KDE 5 is making me start thinking that things are going backwards

Oh, so I'm not the only one.

(And stop banning my comments, El Reg, shits' worse than liberal lilly webzines like HuffPo)

1
5

Hot US deal! IBM wins $83m from Groupon in e-commerce patent spat

Destroy All Monsters
Silver badge
Paris Hilton

Hmmm ...

Aren't these patents from before the raving-bonkers-by-greed-era when was not possible to patent business processes and software algorithms? If so, how does that work? Did IBM file them afterwards?

1
0

'Prodigy' chip moonshot gets hand from Arm CPU guru Prof Steve Furber

Destroy All Monsters
Silver badge

Re: Actually I was thinking of

Too cute a re-ordering and your end users carefully crafted high level numerical algorithm turns to rubbish. Quickly produced rubbish results are still rubbish.

I don't understand this. There are people "carefully crafting" memory access operations implied by FORTRAN loops?

Are they completely nuts. Do the compilers actually DO anything?

0
0

Nah, it won't install: The return of the ad-blocker-blocker

Destroy All Monsters
Silver badge
Trollface

I have a T-Shirt that says "Aperture Science"

Did someone mention Tommy Hilfifif(n)gerer?

Have some William Gibson:

She's gone to Harvey Nichols and gotten sick.

Should have known better.

How she responds to labels.

Down into menswear, unrealistically hoping that if anyone might have a Buzz Rickson's it would be Harvey Nichols, their ornate Victorian pile rising like a coral reef opposite Knightsbridge station. Somewhere on the ground floor, in cosmetics, they even have Helena Stonestreet's cucumber mask, Bernard having explained to her how he'd demonstrated his considerable powers of suasion on the HN buyers.

But down here, next to a display of Tommy Hilfiger, it's all started to go sideways on her, the trademark thing.

Less warning aura than usual. Some people ingest a single peanut and their head swells like a basketball.

When it happens to Cayce, it's her psyche.

Tommy Hilfiger does it every time, though she'd thought she was safe now. They'd said he'd peaked, in New York. Like Benetton, the name would be around, but the real poison, for her, would have been drawn. It's something to do with context, here, with not expecting it in London. When it starts, it's pure reaction, like biting down hard on a piece of foil.

A glance to the right and the avalanche lets go. A mountainside of Tommy coming down in her head.

My God, don't they know? This stuff is simulacra of simulacra of simulacra. A diluted tincture of Ralph

Lauren, who had himself diluted the glory days of Brooks Brothers, who themselves had stepped on the product of Jermyn Street and Savile Row, flavoring their ready−to−wear with liberal lashings of polo knit and regimental stripes. But Tommy surely is the null point, the black hole. There must be some Tommy Hil−figer event horizon, beyond which it is impossible to be more derivative, more removed from the source, more devoid of soul. Or so she hopes, and doesn't know, but suspects in her heart that this in fact is what accounts for his long ubiquity.

She needs out of this logo−maze, desperately. But the escalator to the street exit will dump her back into Knightsbridge, seeming somehow now more of the same, and she remembers that the street runs down, and always her energy with it, to Sloane Square, another nexus of whatever she suffers these reactions to. Laura Ashley, down there, and that can get ugly.

Remembering the fifth floor, here: a sort of Californian market, Dean & Deluca lite, with a restaurant, a

separate and weirdly modular robotic sushi operation humming oddly in its midst, and a bar where they served excellent coffee.

9
0

Microsoft celebrates a bumper financial year ... by making stuff pricier

Destroy All Monsters
Silver badge
Windows

Microsoft is getting less releveant for "workstation" use

Maintaining a Microsoft Winstallation in a company is a horror trip as it hits the "Problem Spot" of high maintenace, high exposure to security problems, high fragility and utter loss of control over price and future evolution, like exactly a woman you *don't* want to marry. (And then you get high with a "license audit". Great stuff.)

Office people need a dumb, easily managed, easily wiped and reinstalled stateless station on which they can admire their useless and bug-ridden Excel sheet, browse YouTube and sometimes read "rally the troops" e-mail from the inner boss sanctum. Sounds like something Google could offer.

Hey Google, make yourself useful for once. Pseudo-intellectual mendacious arseholes, you.

5
6

Forums

Biting the hand that feeds IT © 1998–2018