Sign in / up

* Posts by Tom Chiverton 1

1475 publicly visible posts • joined 12 Jun 2009

Page:

Web server secured? Good, now let's talk about e-mail

Tom Chiverton 1

This will be fun when openssl is banned by the UK government because it has working encryption...

3 0

UK SMEs with weak security risk procurement exclusion – survey

Tom Chiverton 1
WTF?

There is no security in the UK any more :

http://news.slashdot.org/story/15/11/03/0256231/internet-firms-to-be-banned-from-offering-unbreakable-encryption-under-new-uk-laws?utm_source=feedburnerNetvibes&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29&utm_content=Netvibes

0 0

In-a-spin Home Sec: 'We won't be rifling through people's web history'

Tom Chiverton 1
Reply Icon

Re: Kite flying

Don't. Go talk to your MP about your concerns. Sign up to the Open Rights Group. Do something !

27 0
Tom Chiverton 1
Stop

Someone mis-read

Because CW reckon the Government wants the GET part kept :

http://www.computerweekly.com/news/4500256476/UK-surveillance-bill-to-give-police-access-to-web-history

Watch out for the fun definition of 'journalist' too. Because they get special treatment.

4 0

Let's Encrypt announces browser integration

Tom Chiverton 1
Reply Icon

Re: Still no DANE?

Tricky with LE. Client is open source Python, your private keys never leave.

0 2

Amazon Echo: We put Jeff Bezos' always-on microphone-speaker in a Reg family home

Tom Chiverton 1
FAIL

Won't this be fun when GCHQ learn of a remote exploit for it and decide to keep everyone unsafe by not revealing it...

#smurf

36 3

On its way: A Google-free, NSA-free IT infrastructure for Europe

Tom Chiverton 1

Umm

"Carrier grade intermediaries will host the private key,"

All together now... man in the middle.

Is there some issue with running SMTP and IMAP over TLS ? It's not exactly hard...

6 0

Amazon Fire HD 8: Mid-spec Nokia Lumi... er, MediaTek slab

Tom Chiverton 1

Got root ?

Did you try any of the custom ROMs on it ?

2 0

Mozilla to boot all plugins from Firefox … except Flash

Tom Chiverton 1

Lights out

It's alright for them to have a years notice, what about all the lights out management boards? Hardware has a much longer refresh cycle than that! Looking at you HP...

1 0

Factory settings FAIL: Data easily recovered from eBayed smartphones, disks

Tom Chiverton 1

"But Android devices, on the other hand, do not use this method and rely upon a user overwriting data "

Umm. Hasn't Android had file system encryption since 4.x ? Or earlier ?

6 0

Top telematics: Black box helps driver swerve speeding fine

Tom Chiverton 1
Reply Icon

Re: I wonder if

That was Bosch. Who pointed out years ago it was a stupid idea, and they wouldn't get away with it. Nice CYA.

5 0
Tom Chiverton 1
Reply Icon

Re: Interesting

You'd rather go to jail for perjury than take a few quid fine (or a free better driver course) ? Really ?

0 4

The UN made privacy a human right – but that's not good enough for Team Snowden

Tom Chiverton 1

KARMA POLICE wasn't "arbitrary" (from a certain point of view). They knew exactly what they were doing.

5 0

Cisco tool IDs malware in the firmware

Tom Chiverton 1
Reply Icon

Hoe do you get the hash off the (compromised) device ? You can't trust anything it runs.

0 0

KARMA POLICE: GCHQ spooks spied on every web user ever

Tom Chiverton 1
Reply Icon

Re: Hello...

Come and help figure out how : http://www.meetup.com/ORG-Manchester/events/225068092/

1 0

Doctor Who storms back in fine form with Season 9 opener The Magician's Apprentice

Tom Chiverton 1

Clara's death ? Please, she and The Master are both wearing Vortex Manipulators remember.

12 0

JetBrains refuses to U-turn on subscriptions (but sweetens the deal)

Tom Chiverton 1
Reply Icon

Re: It's never been easy...

Google are moving away from Java to native code. Because lawyers.

0 0

Reg readers show Blitz spirit at Computer Museum lecture

Tom Chiverton 1

Is it so hard to provide a straight download link so I can transfer to my phone for the commune ?

0 0

Google's Chrome to gag noisy tabs until you click on them

Tom Chiverton 1

Good

18 0

Směrť Špionam! BAN Windows 10, it SPIES too much, exclaim Russians

Tom Chiverton 1

Isn't this just that the Russians require their user data to be stored in their country (so it's accessible via their police) ? If so, won't MS just do a Blackberry and give in, and provide local servers ?

Won't that be fun* when you take a non-Russian laptop to Russia...

4 0

Trend publishes analysis of yet another Android media handling bug

Tom Chiverton 1
Reply Icon

"That's much harder on mobile devices as you usually boot a signed image. Only your hardware vendor can sign that image."

No reason that image has to be anything more than signed binary diffs, for instance, along with some signed startup scripts to install the vendor crapware blobs.

0 0

Sony PC owners to get Windows 10 upgrade as early Christmas present

Tom Chiverton 1
Reply Icon

Re: Looks like Sony hasn't learnt a thing

So's mine. Rooted Sony phones are deliberately blocked from getting the 5.x update via the Sony update app.

0 0

UK.gov wants to stop teenagers looking at tits online. No, really

Tom Chiverton 1

"freetard collective"

Calling ORG "freetard collective" is a bit harsh. That's the Pirate Party... ORG wanted sensible polices like the freedom to copy stuff you had for your own use.

4 0

Let kids delete their online rants, demand campaigners

Tom Chiverton 1

I thought only terrorists had something to hide ?

3 0

Rise of the swimming machines: US sub launches and recovers a drone

Tom Chiverton 1
Reply Icon

Re: Question

Encrypted sonar. Fibre optic ("wire guided"). Free-water laser. Possibilities are endless.

2 0

Snowden to the IETF: Please make an internet for users, not the spies

Tom Chiverton 1

"having identifiable "long lasting" hardware addresses was "extremely dangerous," "

That's IPv6 dead then, as the MAC forms the last part of the address, and I'm apperently meant to place all my IPv6 devices directly on the internet rather than behind NAT like how the IPv4 world works.

3 2

The roots go deep: Kill Adobe Flash, kill it everywhere, bod says

Tom Chiverton 1

Mozilla announced no such thing.

Also, why no Java bashing articles? Did you see the recent Oracle CPU?

7 8

Apple and Samsung are plotting to KILL OFF the SIM CARD - report

Tom Chiverton 1
Reply Icon

Re: And the carriers smile

" which can always be turned off "

Oh no it can't. See Windows Tablets.

10 0

Number 5 is alive! VirtualBox the fifth debuts

Tom Chiverton 1
Reply Icon

Re: VirtualBox RPMs have the version number in the package name field

That's intentional isn't it, to prevent unexpected major version updates.

5 0

Supreme Court ignores Google's whinging in Java copyright suit

Tom Chiverton 1
Reply Icon

Why do you think you can't use Eclipse as your Android IDE any more ? Direct-to-native compiling is the thing. They've built the eco system and don't need the 'its Java you know' crutch any more.

2 0

VPNs are so insecure you might as well wear a KICK ME sign

Tom Chiverton 1

IPv4 VPN in failing to work with IPv6 shock. This isn't a red top paper.

1 15

Bitcoin, schmitcoin. Let's play piggyback on the blockchain

Tom Chiverton 1
Reply Icon

Re: Vague memories of a sci-fi story

Err no. That's about something else.

0 0

GCHQ: Security software? We'll soon see about THAT

Tom Chiverton 1
Reply Icon

" I don't even know my bank passwords"

Go directly to jail. Until you can tell the judge your password.

5 0

Docker unfurls software-defined networking, plugin blueprints

Tom Chiverton 1

First post !

0 0

Buy with your head, drive with your heart: Alfa Romeo 4C Coupe

Tom Chiverton 1

Umm

"At £51,500 ... a sub-£50,000 car."

It's not just my maths being off is it ?

2 0

At last, switching between rubbish broadband providers now easier

Tom Chiverton 1
Reply Icon

Re: THe MAC (And PAC) were there for a reason...

Yup. So called slamming is common in the utilities door-to-door trade.

0 0

Why are there so many Windows Server 2003 stragglers?

Tom Chiverton 1
Reply Icon

Re: Not as urgent as an issue as MS would like

Because they are one hop from your sales teams Outlook to root on your AD domain. Game over man, game over.

0 0

LastPass got hacked: Change your master password NOW

Tom Chiverton 1
Reply Icon

"I'd of said the weakness was the managers......."

Well, if you used something like PasswordSafe, you can just keep the database in a private Seafile bucket. Much smaller targets than Dropbox or LastPass.

Just sayin'.

0 0

AWS adds bring your own key crypto to its cloudy S3 storage

Tom Chiverton 1

Hang on...

I send them my plain text, *and my key* and they promise to encrypt it and store it for me ? Yeah. Right. One secret court order later and their storing plain text.

I'll just encrypt stuff first, tyvm

3 0

BlackBerry ponders putting Android on future mobes

Tom Chiverton 1

Crikey

5 0

Indie review of UK surveillance laws: As you were, GCHQ

Tom Chiverton 1

Kinda a so-so report then... why not join http://openrightsgroup.org and keep them on their toes, eh ?

Because unless this shit is got under the control of a judge, with a warrant, for limited scope and time, it's bad for everyone. It'd be debatable we'd even be living in a democracy if we don't have secret thoughts...

14 0

Time to face the Apple Music: Spotify looks worried, and rightly so

Tom Chiverton 1

"Apple can also automatically install its app on all its users' phones when they upgrade "

Isn't that abuse of market power ?

3 3

Top Eurocop: People are OK with us snooping on their phone calls

Tom Chiverton 1
Reply Icon

Re: He seems to have forgotten to include

"anything else is surely a violation of our human rights? oh wait, our leader wants that revoked..."

They still apply even if he scrapes the EU version.

0 0

Obama issues HTTPS-only order to US Federal sysadmins

Tom Chiverton 1
Reply Icon

Re: For the want of another IP ...

" millions of XP/IE8 taxpayers "

Get them off that virus attracting shit. Post them a Linux CD :-)

2 1

Lonely Pirate cheers on Big Copyright-bashing EU commissars

Tom Chiverton 1
Reply Icon

Re: It's pretty obvious

So ? Sky (still) get your money, you get (I assume) a better mix of programming for you.

Win win.

1 1

Security sleuths, sniff out the stupid from your Oracle DBs

Tom Chiverton 1

Nice advert.

Can we have some real stuff now ?

0 1

New Firefox, Chrome SRI script whip to foil man-in-the-middle diddle

Tom Chiverton 1

Where are the hashes

If the hashes are on the including page, any MITM will just modify that to remove them ?

If they are on a 3rd party webservice, that's massive overhead, and the MITM will just block access ?

0 0
Tom Chiverton 1
Reply Icon

Snap.

What will actually happen though is a bug will be found, fixed, and then *the entire site* will crash to a halt when the .js fails to load.

There will then be several hours of panic before anyone remembers this 'feature' and updates wherever the hashes are.

4 0
Tom Chiverton 1

Lots of developers are used to live editing files on the server to fix bugs. Are they screwed now?

2 0

Secure web? That'll cost you, thanks to Mozilla's HTTPS plan

Tom Chiverton 1
Reply Icon

"I know that XP and earlier can't access SSL enabled sites using host headers to differentiate between sites. I have no idea what the situation is for other OSs."

It's fine. SNI was only causing a problem while XP was breathing.

0 0

Page: