* Posts by Charles 9

16605 publicly visible posts • joined 10 Jun 2009

Exposed: Lazy Android mobe makers couldn't care less about security

Charles 9

Re: Brave New World

But almost NONE of the decent smartphones out there today feature user-replaceable batteries: a make-or-break for me as that's the thing I replace most often. Nothing to date compares to my Note 4 which is why I stick with them through thick and thin. Yet because of Verified Boot, Knox, and root-aware apps, I have to stick to stock firmware.

"...and we can't keep up the 'consume today, use it up and throw it away' approach any more..."

Sure you can. It's called "Eat, drink, and be merry, for tomorrow we die."

Charles 9

Re: Any chance?

Sure they do: the embedded and IoT market. ALL the component manufacturers work the same way because it's the only way to survive, meaning they can ALL abandon phones and concentrate on IoT and embeddeds and still turn a profit. IOW, the phone manufacturers need them more than they need the phone manufacturers.

Charles 9

Re: Locked boot loaders

Android Pay/Google Pay was the trailblazer. Many banking apps feel the same way, as does Netflix IIRC (it'll be hidden from the Play Store even in a tainted environment). And I doubt the bulk of these are spyware unless you don't trust B&M banks anymore (in which case, you're already in DTA mode and should've left the Internet already).

Charles 9

Re: Any chance?

As noted, it's not always the manufacturers' faults. If the component manufacturers refuse to play ball, there's little you can do because they can always just walk away.

Charles 9

And no, you can't force component manufacturers to keep making drivers because their competitive environment is cutthroat. They black-box everything because they don't want to Give Information To The Enemy. Basically, if push comes to shove, they'll bail out instead and leave everyone hanging because there's no more profit in it.

Charles 9

Re: Locked boot loaders

Plus what about the increasing number of apps that won't run except in a pristine environment?

Charles 9

Re: No money in it

It's called the Midas Touch. That has little to do with RoI.

Anon biz bloke wins milestone Google Right To Be Forgotten lawsuit

Charles 9

Re: What about the deterrence factor?

Deterrence is questionable at best. For most criminals, they either don't know about the past acts (ignorance) or don't care because they figure it won't happen to them (indifference). Basically, most criminals act on the assumption they'll get away with it, so deterrence doesn't apply to them.

Charles 9

"I didn't think this was in doubt, you have to have spent convictions and the rehabilitation of offenders of the criminal justice system falls down because then you don't have any incentive to not commit further offences. The only other option is to lock all criminals up for life."

Well, the problem is, some people actually deserve this, and betrayals of trust are very difficult things to mend, which is why many places take a very dim view of convicted felons for that very reason. Then there's the whole recidivism thing, which I admit is very complicated because they interrelate.

Charles 9

Re: Does this cover all search engines - or just Google ?

Trouble is, #1 may be impossible to do if copies are stored in countries that do no business with the EU and thus aren't subject to nor afraid of the GDPR.

'Our way or the highway' warranty scams shot down by US watchdog: It's OK to use unofficial parts to repair your gear

Charles 9

Re: Goods in the UK &EULA

"And when has the US ever been concerned with common sense or consumer protection?

In the UK, consumer protection is a big thing, and any government trying to screw it over probably wouldn't be in government for too much longer."

Does The Jungle ring a bell? The US DID care about its citizens once, but times change. Don't think Europe is immune. They just need time to dumb down the populace.

Boffins pull off quantum leap in true random number generation

Charles 9

Re: I call BS

And as for Schroedinger's cat, it's obvious: it's a zombie, dead AND mobile at the same time.

Charles 9

Re: I call BS

That doesn't make sense since it's also possible to toss a coin in a predictable manner, say making it flip only once or twice. By your reasoning, even that kind of flip is unpredictable due to quantum.

Charles 9

Re: Sounds a bit complicated.

I disagree. Randomness can apply to new members of a set (which can be empty OR solitary), describing the likelihood a new member of the set is in any way related to the existing members of a set; a truly random new entry would have NO relation to the existing members of the set.

Charles 9

I think the catch here is that it was the best that could be developed at the time, but it doesn't preclude the possibility of an entity with sufficient resources to be able to replicate/simulate the setup and predict the sparks. The mathematical principles for this machine seem sounder (Bell's theorem, by definition a proven statement) unless someone breaks the whole quantum mechanics system.

Charles 9

Re: Just a random idea

I believe the HAVEGE system runs on similar principles.

This article is reaching for a higher standard: PROVABLY, TRULY random numbers.

Donkey Wrong: Arcade legend Billy Mitchell booted from record books amid MAME row

Charles 9

I'm of a mixed mood about Strider Hiryu. Looks great, but rather short as well.

Charles 9

Re: They don't

I still wouldn't think it would disqualify a score if it came from a revised but still legal machine. Perhaps classify it differently, yes (say, list high scores by game revision), but not disqualify it. It would definitely make sense if official boards (which would still be original in contrast to say a modified or bootlegged board) had revisions during its working life or were re-published at a later date (such as the Ms. Pac-Man/Galaga anniversary combo machine, which BTW had no less than six versions released). And you can't say the earliest version is the authoritative one since earlier versions may have been replaced due to bugs.

Charles 9

I can understand why unofficial emulators are banned, but what about OFFICIAL ones? Nintendo makes a multi-game cab which includes Donkey Kong. Where do machines like that count?

Go away, kid, you bother me: Apple, Google, Microsoft, Mozilla kick W3C nerds to the curb

Charles 9

It's as I feared. Once a cartel gets powerful enough, they can ignore more altruistic standards bodies and dictate their own standards through sheer market power. The next step will probably be for a big one like Facebook to propose an alternative to the Web altogether and start people back into the AOL walled gardens.

Civil war erupts at top of FCC over Sinclair's creepy grasp on US telly

Charles 9

Re: Red tape is socialist

"I don't follow. If you're making the rules, "self-regulating", how do you cheat?"

Put it this way. Say you lay the rules that one gets to cut the cake while the other gets to choose his/her share, you would think that would enforce fairness...until one or the other things outside the box: stealing either the cake so there's nothing to cut or the knife so there's no way to cut it. And once you have enough power, like the big chip leader at the poker table, you can use that power to bully the rest into following your rules instead.

Charles 9

Guess you didn't read the story where ALL (repeat, ALL) Sinclair newsrooms were ordered to read THE SAME commentary piece (and someone proved it was the same piece by stitching different stations in a YouTube clip). At least the big networks compete against each other, but Sinclair's control is, pardon the pun, closer to home.

Charles 9

Re: Red tape is socialist

The problem with self-regulation is that there is incentive to CHEAT. Think Volkswagen.

Charles 9

Re: No news here

One problem. The ones most deserving of the position are too dedicated to their jobs to go into politics. Politics almost requires a sociopathic streak.

Uber hid database hack from FTC while FTC probed Uber for an earlier database hack

Charles 9

But like most things, it's the price of admission. Look how hard it is to get difficult bills past a Senate that's barred pork-barrel spending (which happens to be one of the best if not the ONLY way to get small-constituency senators on board--the ol' "What's in it for me and my constituents?").

Charles 9

Re: Penalties

Thing is, like very rich people, they know plenty of tricks to prevent this...including the threat of moving out, leaving the government a choice: 10% of something or 100% of nothing?

Charles 9

Re: Hold them accountable

I have a feeling anything gofundme could offer the monied interests could top tenfold and not even feel it.

Charles 9

Re: Hold them accountable

But how do you get the laws changed to enforce this?

Airbus plans beds in passenger plane cargo holds

Charles 9

Re: As someone who can't sleep in chairs

"I sleep well lying down but find sleeping in a chair does not work for me and they are funny about you lying down in the aisles for some reason...."

Aviation regulations require the aisles be kept clear because too much happens in them. People move up and down them heading to the lavatories, the carts the flight attendants use in service are JUST narrow enough to pass the aisles, and there's always emergencies, which is why I can't even sit in front of the doors for more than a few seconds unless standing in the lavatory line.

Charles 9

Re: Window view

"That's why on most aircraft they'll ask you to open them before landing/take-off, after that they're quite happy if everyone closes them and goes to sleep to make their lives easier. The Boeing 787 having fancy computer controlled window tint can just do that automatically."

I've only had that happen on one or two flights, and usually not American-based airlines, which is why I didn't see the evacuation angle. Probably because they work on the assumption of poor internal visibility anyway (eg. smoke in the cabin).

Charles 9

Because of that catch word "practically". The most sensitive part of the flight happens to be the ends of it: the takeoff and landing, especially if the weather's uncooperative.

Charles 9

Re: Window view

"So in the case of emergency your eyes can adjust to outside light levels."

Still, it makes you wonder why, if that's such an issue, why the windows have user-adjustable shades, which made me think of claustrophobes for which lack of spatial awareness can trigger panic attacks.

Charles 9

If it was on deck and openable to the front, it could be possible to roll out, perhaps onto a slide setup.

Charles 9

Re: At 6ft8

"If all passengers were transported like cargo, lots of problems would be solved,"

And could introduce others. Some people are sensitive to sedatives, meaning they could go to sleep and never wake up (= wrongful death suits from the families). What if a passenger is incontinent? Can't sedate them since they may not be able to hold themselves in for the whole flight, creating a real mess.

Charles 9

Re: Done before..

"I don't have anything against it, but I doubt it will catch on in these times due to the less revenue for airlines with precious space taken up with beds."

Depends. If you can say replace three seats with three tiers of bunks, it can become a wash capacity-wise.

Charles 9

Re: Window view

Claustrophobes, mostly. They'd be too scared to fly otherwise, and any business would be interested in reducing turnover. I know I prefer to be able to look out on takeoff and landing so as to retain spatial awareness.

Charles 9

Re: Glossing a commercial turd

"The A380neo is like a gun held to the head of the entire aviation industry; if it is built, and it turns up competing on a route you operate with your puny 777s / 787s, you're likely going to lose all your passengers on that route to the A380neo operator."

Not necessarily. You have to be able to accommodate that huge plane, and that requires three considerations: runways, gates, and terminals. Unless you can accommodate them already, or the 380 has the capability to operate within the envelopes of the more-limited jets already in service, especially Re: the runway lengths, then pulling in an A380 is a nontrivial matter, especially since the status quo currently seems to be handling things.

Aw, all grown up: Mozilla moves WebAssembly into sparsely furnished Studio apartment

Charles 9

Re: Sandboxing

Java uses sandboxed, recall? And code's been able to ESCAPE the sandbox. It's like a hypervisor attack. As long as a way to communicate exists, there will likely be a way to exploit it to escape.

Charles 9

Re: Insecure by design

Pretty much everyone acknowledges that there will always be a need for speed. Code efficiency has driven computing technology from its beginnings and will never go away. In a decision between fast and right, fast wins because you can BS a wrong answer but can't BS a missed deadline.

Charles 9

Re: Hypervisor?

"Sending native x86 binaries over the web to execute in a sandbox on the other hand is what Google Chrome did with NaCl. That went over with developers like a lead balloon, and Google pulled the life support on it last year in favour of joining Mozilla in using WebAssembly."

Because Google's strongest platform, Android, runs on ARM, as does Apple's iOS the #2 mobile platform.

Data exfiltrators send info over PCs' power supply cables

Charles 9

Re: Meh

Unless they know the target's going into something like a Faraday cage or a place where all radio emissions are monitored, meaning no radio exfiltration allowed.

Charles 9

Re: More brilliance from BGU ...

Then how do you get data in or out, particularly if it's not in human-readable form?

Google's not-Linux OS documentation cracks box open at last

Charles 9

Re: Why C?

"I'd really like to see is the device drivers open sourced."

Blame the manufacturers for the Black Box trwatment, but their market is SO cutthroat that open-sourcing may as well be Giving Information To The Enemy.

Microsoft's Pelican brief, MAID in Azure* and femtosecond laser glass storage

Charles 9

Holographic crystal storage...

Where have we heard this before?

Oh yeah. Nearly THIRTY YEARS AGO. What'sWhat's been stopping progress thrn, and what's the difference now?

Fear the Reaper: Man hospitalised after eating red hot chilli pepper

Charles 9

Re: Gosh - Not a single mention of Darwin Awards

"I'm surprised nobody has asked if anybody has ever died from eating a chilli, indeed the name Reaper does indicate a certain morbidness."

Because it's exceedingly rare for it to happen and IINM entails some pre-existing condition. Otherwise, it may feel like you want to die, but you'll nearly always survive the ordeal.

Charles 9

Re: Nominative Determinism?

"That makes me think. Has toothpaste got chilli in it? It certainly gave me a Clarkson experience."

You're probably thinking like arthritis creams that use capsaicin as an analgesic. That's why the Dragon's Breath has half its crop earmarked for medical research.

Charles 9

Capsaicin is engineered to be able to be eaten by birds. They don't trigger avian pain receptors. That's so the birds fly away and crap the seeds to spread them (because birds tend to eat the seeds whole). Surprised about the rabbit bit, as they're mammals and should respond to the stuff.

Charles 9

Re: In my youth

To deal with capsaicin, you need either fats or alcohol. It's not water-solubule. Ice cream's a good idea not really for the sugar but for the fat content. The cheese is a good move, too. Cream cheese should hit the spot because it's only semi-solid. A good creamy dip or dressing (like Ranch) should be fatty enough to take the edge off. And using mouthwash is handy for a quick fix in the mouth (because of its alcohol content).

Sorry spooks: Princeton boffins reckon they can hide DNS queries

Charles 9

One, that would be murder on those with data caps, thus why similar stuff like freenet are not recommended for metered connections. Two, the plods could well have chaff-winnowing techniques (based on like timing, remember one complaint is lag) on hand to deal with these kinds of tricks.

Charles 9

Re: Oh Good Grief

"Whilst running a CA remains a profit-motivated business, MITM will continue to be a problem."

Then you can't win. You can't trust private enterprise to do it right because they're corrupt, you can't trust government to do it right because they're corrupt, and you can't trust yourself to do it right for lack of knowledge. IOW, who CAN you trust?