* Posts by Ross 7

293 publicly visible posts • joined 18 Jun 2009

Page:

Voting chaos in not-fit-for-purpose electoral system

Ross 7

Misunderstood

FPtP is used because YOU ARE NOT VOTING TO CHOOSE THE GOVERNMENT!!!!!1111!!! People really need to understand that. Ofc you can choose to use your vote as if you were voting for to choose the government, but that's not what is intended and so you don't get the intended effect from your vote.

You vote for YOUR MP to represent your needs in Parliament. The fact that the political party with the most representatives happens to form a government is really a seperate issue. You don't need to worry about such details generally as it really doesn't matter, until that is you're deciding on an electoral system.

PR is about electing a national government. So, you have to decide between someone that will (hopefully) support you and your local area, and some party that will (hopefully) support your country. The problem with PR is that the wannabe MPs don't worry about annoying the locals, whereas an MP elected under FPtP can't afford to ****-off his/her constituents as they'll be out of a job.

I like some aspects of both tbh, and issues with both. You should be aware however that the ppl pushing PR aren't doing so to help you in your daily life. They're doing so to increase their own power base. Same for those pushing to keep FPtP too.

Election 2010: The sillier options

Ross 7

Gonna be a straight up blue win

I've been betting on a straight up blue win :

1) Polls are notoriously poor predictors of election outcomes;

2) Everyone always says "oh I'm fed up with Red/Blue so I'm gonna vote Yellow/Green/random" but in the end they get to the booth and think "well I *really* don't want Red to get in, voting Yellow is a waste of a vote so I'll go Blue" (or vice versa)

3) First past the post favours Red/Blue. Yellow vote is too thinly spread outside of the SW.

I'm sure Yellow will get plenty of actual votes, but seats? Alas not. Why do you think they've been pushing for PR for so long?

Agree that UKIP are crazy - have you seen the party leader on the tele? I don't think he is in possession of all 52 cards... Gotta love the "let's leave the EU!!!11!!" argument - guess he never heard of import tariffs? His main argument for leaving the EU appears to be that he hates Turks and Turkey wants to join. Where's Gordon when you need a good insult?...

Hackers crack Ubisoft always-online DRM controls

Ross 7

Gaming industry slow on the uptake

The games industry is soooo slow on the uptake here. Any IP can be copied and made to work without paying for it, be it a game, app, film, song etc. Tech isn;t the key - changing ppls minds is.

Example - have you noticed how they'd stopped showing those despicable "you look like a thief" ads at the cinema now (well, that's what they feel like to me). I go to the cinema almost every week (sometimes we';ve seen everything except Alvin and the Chipmunks and we have *some* limits). I pay to do that obviously. To then be told that "copying films is naughty - don't do it" having made that payment is bloody galling.

I turned to my lass once and told her it made me want to d/l the thing just because of that ad.

They don't do that anymore 'cause (1) it pisses off ppl that pay, and (2) the pirates just delete that bit from the file before uploading it so the ppl that don't pay don't see it!!!!! Huzzah! They caught on! Now they give you a little "awww, thanks for paying - we lubs joo" which makes me feel fuzzy inside (that could be the blue slush tho)

Games houses need to catch up - telling me they don't trust me and think I'm prolly a thief MAKES ME WANT TO TORRENT IT. Out of spite. Giving me a small benefit (even one that costs them nowt) is going to be far more effective.

NHS blames computer error for transplant fouls

Ross 7

Re: Ottman

I think you misunderstand. Your estate will *always* benefit someone (presuming you have one). The value of it is not destroyed upon your death. Your cadaver however is generally left to rot or burnt providing no benefit to anyone.

The equivalent with your estate is to destroy your house, salt the earth it was built upon, burn all your goods and cash. Note that burning cash is something not permitted by law.

Funny how the law protects cash but not body parts. What he's actually saying is the law should be the same for both. You *have* to give your cash to someone, even if it ends up being el Gov, why shouldn't your organs be subject to the same requirement? No, that's not rhetorical.

High Court: Moderate user comments and you're liable

Ross 7

Holy mother of God

Man reads article shocker! Read all about it....

Lower termination rates will bring pricey data

Ross 7

Not quite that simple

"The end users did not choose what the mobile operators paid for their 3G licences. The taxpayer did not choose what the mobile operators paid for their 3G licences"

The operators were free to pay what they wished for 3G spectrum, but they are NOT free to charge what they wish for termination charges. That's the issue they have.

Remember that 3G spectrum is extremely finite, whereas the crap you and I buy in the shops is not. Example - you own an art gallery. If you want people to visit your art gallery and pay for the privilege and thus keep your business afloat you need stuff your customers want. So, you enter into a bidding war for an original van Gogh. You pay what you have to and are free to do that.

So you;ve got your picture, but the Government won't let you charge more than 50p for a ticket to your museum! How do you make ends meet? You had to buy the picture 'cause otherwise nobody would come to your gallery and you'd go bust, but your turnover is artificially limited by the Government so it looks pretty darned difficult either way.

The operators put faith (and a **** load of cash) into a system to help the UK improve its comms and associated businesses. In return they expect some kind of improvement to their own bottom line, seeing as they took the risk and all that. If you don't give them something back, why the hell would they look to take any risk in the future? That means el Gov building the 4G networks at its own expense, rather than making a fat load of cash out of spectrum sale as it did last time around.

So, pay for 4G with your taxes, pay for it through your phone bills or don't have it? Your choice.

PS - yes, the operators paid over the odds for 3G spectrum, but that;s the Governments fault for using a system designed entirely to maximise their revenue. If the operators had met up in a hotel room and said "right lads, you bid £200 on that segment, we'll do the same on the next segment etc..." they would have fallen foul of competition law. They HAD to fight each other and artificially inflate the price or be left out.

Child abuse frame-up backfires on stalker

Ross 7

Re:

You are attached to a device with two buttons - a blue one and a green one. If you don't press one within a day it defaults to green.

Pressing the blue button has a 100% chance of giving you a painful shock. Pressing the green button has an unknown % chance of killing you.

I agree that seperating kids and parents causes a certain degree of harm, the difficulty is balancing the guaranteed small amount of harm caused by that with the probability of serious harm caused by not doing it. Hindsight is a wonderful thing, but the Police and Soc Serv don't have that benefit when making decisions unfortunately.

Remember - whilst investigations are taking place there is a probability of serious harm occurring. How can you assess that risk immediately? If you can't (i.e. it takes time to do it properly) how do you manage the risk whilst investigations are taking place?

So, do you press blue, green or is there a third option?

Ross 7

Innocent until proven guilty remarks

Rock - Police - Hard place

Hindsight ftw eh? ffs...

Do you allow *everyone* that is charged with sex offences free access to their children, or nobody? You're screwed either way of course, as if you let them have access and they subsequently turn out to have abused that access there will rightly be uproar (after all, you knew the risk and you let people face it) or you don't let them and it turns out there was nothing awry.

Mindreaders don't exist, it takes time to *properly* investigate matters so you have a period of time where you must choose between protecting the vulnerable people or protecting the rights of the person being investigated. Both are civil rights issues - how do you balance them?

The safest option is to restrict access - you protect the most vulnerable parties at the smallest expense possible. Welcome to the real world. Yes, it sucks. Ofc if you have a "perfect" alternative that could never be wrong feel free to post it.

Games console 'killer' powers Avatar 3D power package

Ross 7

Ummm, DirectX 10.1 anyone?

Streaming pre-rendered frames is impractical in most markets - certainly here in Blighty. South Korea could prolly manage, but without FTTH it ain't gonna happen. I play my older Win games via remote desktop and even on a LAN it ain't perfect. Streaming CoD etc would be unplayable.

DX10.1 however allows the primitives data etc to be streamed and rendered on the client - I imagine this is where we'll be moving to in a couple of years. The subscription model of WoW etc has proven very successful at generating revenue, so locking the software into the server, providing a "player" for the client and letting them do the grunt work of rendering frames seems an attractive model.

You minimise patch data bandwidth, patching issues, hardware support issues (you only need write for one very specific platform) and if people want to play they have to pay. Whether BT can be coerced into providing halfway affordable FTTH is another matter tho' - I'm sufficiently urban to get a decent copper conn (14Mb/s) but they won't install fibre. In fact I've checked all my mates and family locations and none of them can get BT Infinity. Maybe "a couple of years" was a tad optimistic...

Dodgy BitDefender update bricks systems

Ross 7

It's a bit more difficult than that

Read only memory makes things difficult (how do you dynamically create or modify objects? If you allow write to .data sections you open up buffer overflows again. You can't write protect the ret addr on the stack because you have no way of knowing exactly where it will be, and you'd affect the whole page, likely borking someones temp buffer in the process) and whitelists aren't going to be a great help with current malware.

Whitelists have to be stored somewhere. Bearing in mind plenty of malware is capable of entering ring-0 via various routes to hide its presence, the whitelists are more than capable of being modified and their modification hidden. It will stop the "hey, install me and get free pr0n" types of installations, but the various exploits that do the rounds won't be affected at all.

The only real solution is unfortunately in hardware, but that makes chips more expensive, and requires OS producers to substantially modify their products.

It costs an awful lot of money to design and fab a wafer - you need to make sure you get your money back, and if there's little to no software to run on it how do you intend to make a profit? People will need to buy new software (or possibly run a VM but there's no guarantee the hardware would be sufficiently powerful to do that) so they won't upgrade until they have to (c/f Win 2k/XP, IE6 etc). x86 has been around an awful long time and will be difficult to displace in the home and office sectors.

In other words, we're screwed for a long time yet :( Apples movement to x86 doesn't help matters. The real solution (please don't laugh at this) is improved coding practices. I said don't laugh!

Computer glitch prompts 50 raids on elderly couple's home

Ross 7
FAIL

Test data in live server?!

Ummm, wtf?! So what they're saying is, they've put made up info in a live system? NYs solicitors are presently rubbing their hands with glee I imagine.

Test system is for test data. Live system is for live data. How ****ing hard is it to understand that? If you want to test data in the live system you dup the thing - you don't put garbage in, 'cause we all know what happens if you do.

Given that their system appears to have replicated the data all over the shop and they don't have a clue where it's gone (gotta love outsourcing IT projects and not getting the design docs 'cause hey - you'll never need to know how it works under the hood right?) that simple lesson is going to cost them an awful lot of time and money.

/slowclap

Facebook stands up to UK.gov's cyberbullying

Ross 7

Power grabbing

That's all it is. CEOP want to be seen to be attached to large organisations like Facebook et al so they can grab more power and more budget. End of.

It makes me want to kill ppl. Well, Alan Johnson...

Cybercrime's bulletproof hosting exposed

Ross 7

Wrong ppl with the right skills/resources

Actually taking these things down and keeping them down isn't impossible, the problem is the people with the skills and resources to do it (AV etc) are exactly the people who can't use the techniques required due to the legal position.

Blackholing etc is only ever a temporary measure - as soon as the CC chans are up again the bots will come home to roost. Modyfying the ring-0 code to bluescreen on bootup will force all infected machines to have a clean install, and will only deliver the payload on boot up, so won't damage running boxes. It's still very illegal however and not an option for the people in a position to do it.

There is one *possible* option however - do the above to zombies in foreign lands with no extradition treaties, and where you don't have any plans to work/holiday/transit through. It's still risky, and I don;t see AV co's etc doing it (and I don't blame them either) but using the same weaknesses in the law to take down the botnets that the botherders use to run them has a certain irony to it.

I guess we can but dream...

Study shows gaming can hinder reading, writing progress

Ross 7

Basic parenting

All things in moderation. Nowt wrong with playnig a bit of football, reading a few books, playing computer games, playing guitar etc as long as they're done in moderation. If they are done to extreme and your kid ends up not doing their school work then I'm pretty sure we can all make a decent prediction of the outcome.

There was a "Jo Frost Extreme Parenting" on the other week (apparantly, so I hear...) where some "mother" was whining about her 8 year old playing WoW for 12 hours a day. Obviously that begs the questions how did he end up with a PEGI 12 game in the first place, and who the hell pays his subs?! Turned out he played it for 12 hours a day 'cause he was bored to death as his "mother" did nowt with him. Once he had some time with his ma he forgot about WoW.

Frankly if you let your kid forego their school work for any reason at all it's *your* problem. As stated by other posters - homework *then* play (whatever form that may take).

BT rolls out new, 'competitive' consumer deals

Ross 7

Better deals available

The advertised deal is awful, but they are happy to offer better ones.

Having moved house I phoned BT up to get line rental sorted so I could get Sky inet + calls. When I mentioned that, they offered line rental, evening and weekend calls, and the 10GB a month inet package for £16.xx a month for 18 months (about a quid more than the Sky deal which has the same 10GB a month limit).

The Home Hub seems pretty decent too (to be fair the Sky Netgear is also a decent bit of kit compared to the trash TalkTalk provided).

They're never going to attract customers with the advertised prices tho.

Sony launches 'WiiMote for PS3'

Ross 7

PS3 moves into Wii territory

I s'pose they need to widen their appeal to gain market share. Families with a bit of extra cash may see the new "family friendly" PS3 as a longer term investment than a Wii.

Personally I love my Wii - well, I love Mario Kart. But I do agree about the paucity of must have games. Pity they don't have WoW on it, altho replacing a 102 key kbd with motions might be a tad difficult (not to mention dangerous)

Hmmm, PIEglove....WoW...macros.... I've got an idea....

Botnet takedowns 'don't hurt crooks enough'

Ross 7

What he said

Exactly - the crims (by definition) look for most reward for least effort. There is such a glut of Win installations out there, and a glut of naive/uneducated/carefree users sat in front of them that writing malware for it is easy money.

If we had a glut of penguin installations with a glut of naive/uneducated/carefree users sat in front of them you'd have the same problem, only with better net APIs.

Win can easily be made much more resilient to attacks. Users can be taught to pick a random browser that ain't IE and use that. Routers (and ISPs) can block known low-value/high risk net addrs/subnets. None of this is default though and therein lies the issue.

To be fair it's ppl like el Reg readers that should take it upon themselves to teach ma/pa, the kiddies etc :

1. If you need to install software right-click, Run as...

2. Don't use IE

3. Don't download tat from the web

4. Ignore emails asking for any info at all.

Teach 3 ppl, get them to pass it on...

Crap Scottish weather favours ginger hair

Ross 7

Dominant/recessive

Oddly enough blonde is recessive to red as I recall, even tho you tend to see far more blondes than red heads. It;s the same with eye colour - blue is recessive to green but you hardly ever see people with green eyes.

The vit D argument is a pretty strong one though - skin colour would be a selection factor, with fair being more likely to survive and pass on the genes than dark. Given that red is dominant to blonde you'll see a lot of red heads carrying blonde genes.

Given the new research apparantly showing vit D is necessary to "prime" T cells to fight infection I can accept the argument - makes sense if nothing else.

LibDems score copyright coup

Ross 7

Workarounds

Just because there exist methods to work around a statutory scheme doesn't mean that the scheme is without value or should be binned. The Police have the power to arrest people, however some people work around that by arming themselves, putting on a Hiljab etc. it doesn't mean that arresting people doesn't work, just that it ain't perfect.

Most people in the UK are entirely incapable for searching for, selecting and operating a VPN connection for the simple reason they haven't got a clue what one is or why they would need one. It's therefore a pretty poor argument to say "let's not bother attempting to protect peoples work because some people can work around it, and a minority proportion of those will work around it".

The idea that the entirety of YouTube will disappear due to this legislation is pretty laughable. I don't mean to be mean, but seriously - if you actually use YouTube you'll see that they have a particularly robust copyright infringement policy. It would therefore be extremely unlikely that the legislation and policy would be so at odds that YouTube were blackholed. If you disagree I would welcome any examples that may reasonable come to pass.

(e) is an interesting part, and well lobbied for. It doesn't give you free reign to copy material that is currently unavailable, but the courts will give consideration to the point. As an example, if you download a deleted song that will never be released again for your own personal use you may be able to use (e) as a defence. It's no guarantee, but the courts will give due consideration to it.

On the other hand, if you download a Disney film that is currently unavailable but on their release list for 2015, it is unlikely that (e) would hold as much sway - they fully intend to make the material available at a cost and it is clear to the public when that will be. It's therefore not a panacea for people downloading in-copyright material, but it brings some reasonableness to proceedings.

The 50 letters procedure is presumably intended to please the courts who are busy enough as it is. If 50 letters doesn't make you think twice then you're going to risk incurring the wrath of a County Court judge for wasting his/her time. I personally would consider stopping at around 20 - you're clearly on someones list...

Car thieves making clean getaway with GPS jammers

Ross 7

Re: choppers

Bringing a whole new meaning to the use of stingers to stop stolen vehicles.

iPad and smartphone rootkits demo'd by boffins

Ross 7

Ummm no

Soft off is not hard off. Unless you take the battery out of your phone or hardwire a hard off switch between the battery and phone then off is most definitely not off. It's in standby.

My phone has an annoying habit of lighting up like a Christmas tree for a second or so at midnight and 14:00 when it is turned off.

The GSM standards aren't terribly open so it's more than possible that remote network activation is possible at the request of various governments.

Global warming worst case = Only slight misery increase

Ross 7

So the msg is...

"Even if the worst predictions come true, overall the world's poorest will still be only slightly worse off than they are now"

So if you;re poor, you;re ****ed either way?

Adobe apologizes for festering Flash crash bug

Ross 7

IE7/FP10 weirdness

How odd - tried it with IE7 and nothing appeared to happen. Made sure Flash was running, yup (v10) so was a tad disappointed, then I tried to open new links.... Seems that whilst the IE7 process didn't throw any exceptions it did get in all of a muddle - couldn't get any new pages open in either existing or new tabs - they just sit there spinning, waiting for data.

Haven't got any netmon stuff here at work so don't know if the network code gut munged and it isn;t even trying to connect to remote servers, or it's something else. Interesting anyway.

Safer Internet Day fights online foolhardiness

Ross 7
Flame

Budget clawing

CEOP - great idea in practice (educate the masses, esp. the kids about the dangers out there on the inet) but run by a bunch of retarded budget clawing numpties so not so great in practice.

Their plan is very simple - shout "think of the children" a lot, pressure large, popular organisations into de facto support of what they do and thus gain shed loads of funding which they can 1) spend inappropriately and 2) put on their CV to get a proper job in the future.

It annoys me no end to see a decent idea abused like that. They had a monkey on BBC News this morning radging about Facebook not putting the CEOP button on it, and not so subtly stating that their actions put children at risk. The truth is, any parent or responsible adult letting 5 year olds on the inet unsupervised should be put in nick for a month - it's their job to protect their wards, not Facebooks (or anyone elses).

/rant

IE Windows vuln coughs up local files

Ross 7

Is it 1997 again?!

Sounds like it's dropping a VBscript into the cache, then using some jiggery pokery to run it from there in the local zone. Pretty sure that used to be possible (and was exploited) many moons ago. Still, good work to get it working again on more current OSes. In an educational sense - not as in the "great, another exploit to keep away from" sense.

As for SMB - will someone please just put it out of its misery? It's got more crap sticky taped onto it than....

Regulator sniffs around stonking iPhone game bills

Ross 7

*Sigh*

It's mainly the fault of AdMob (it's their software after all) but Apple have opened themselves up to criticism with the silent change in default behaviour.

I presume (I have no evidence to support this) that Apple received a lot of noise saying "it'd be way better if we didn;t have to continually press OK on confirmation dialogs everytime we press a button" so Apple obliged, wanting to improve the user experience.

Trouble is they didn;t think it through - the correct change would be to add a setting (defaulted to checked) that says "ask for confirmation before allowing apps to dial". That way ppl could choose to disabled confirmation dialogs, but everyone else who didn't have a clue would be nicely protected.

Even after over a decade of such problems from various vendors "default to secure" still isn't being widely adopted :( Any number of horrifically insecure "features" in Win and IE were there to make it easier for the user, but they ended up making their experience a pain when they got pwned. Will ppl ever learn?

Tesco store bans shopping in pyjamas

Ross 7

Pretty common

Oddly enough I've seen it loads of times in a number of Tescos but not in any other supermarkets.

The little Tesco Metro in NE2 on a weekend morning is jam packed with students dressed like Arthur Dent. I've seen it late at night/early hours (like 2am) in the 24 hour Tesco Extra as well.

Personally I don't see the problem. I;ve seen plenty of people dressed far worse in non-nightwear doing their shopping.

SourceForge bars 5 nations from open source downloads

Ross 7
Paris Hilton

Server location irrelevant

Alas the server location is irrelevant. A countries law can apply anywhere on the planet if the government so wishes. Obviously enforcement can be an issue, but that's by the by.

If the USA has a law making it illegal to sell cats anywhere in the world, and you sell a cat in the UK, they can still arrest you on entry to a US territory. If this law is considered to apply anywhere on the planet (i.e. you go to Pakistan, give some dodgy guy some useful code, return to the USA and get nicked) then anyone going to or through any US territory is in the shit (c.f. internet betting).

It sounds like someone "reminded" SF of this and so - having common sense - they obliged. Yes, it's bully boy tactics, but SF aren't there to fight ideological battles about anything other than open source.

No, it's not going to stop anyone with half a brain accessing SF. I imagine most of the "rogue states" have a nice collection of bots around the world, and definitely including in the US. That place has more infections than Paris

DHS 'brainiacs' to commercialise airport liquids-OK scanner

Ross 7

Re:Great

Yup, they generate some pretty impressive magnetic fields. "Accidentally" leave your biometric passport in your bag and you;re set :o)

I have a solution to the queue issue tho' - just rename them back to their original name - NRI. All the tabloid readers will run a mile.

Jumbo-jet laser cannon tested against missile

Ross 7

Yup, you're missing something

The target isn't just a missile sans warhead - it has instruments on board. If you obliterate the instruments you're going to struggle to get much useful data out of the test. It's also going to be a more expensive test, which given the funding cuts isn't a good thing.

Destroying the thing is a piece of piss. Targetting it is rather more difficult, and that was what the test was for.

We'll prolly end up with improved blueray tech out of it rather than nuke defences tbh, but it's US tax payers money so I'm not too fussed. Although at least the yanks get cool (if useless) stuff out of their tax spends - we get broken IT systems :o/

Exploit code for potent IE zero-day bug goes wild

Ross 7

Kinda the point...

"Intranets were developed based on IE6 NOT because the IT bods at the time were incompetent, but because there was no better solution"

No, they were developed for IE6 because it was already built in to Win. That was MS's strategy (it worked!) and it's why the EU got annoyed. IE6 wasn't the best solution, but when your exec says "why do you want me to spend time and money getting another browser approved when there's one already there?" do you argue, or do you just go with the flow? Remember, it's not your neck on the line unless you force through another browser.

Vendor lock in doesn't mean you can't move to another solution, just that it's expensive to do so. IE6 falls into that definition.

As to "why fix something that works" - depends on your definition of works I guess. The solutions do what they say on the tin, but they also leave a gaping hole in your corporate security. Would you say that a corporate webserver that works (i.e. serves pages) but also gives unrestricted access to the coporate network doesn't need fixing?...

Nvidia gets biological with life sciences nerds

Ross 7

What - no Crysis jokes?

"Minimum specs for Tesla PSC.....1200W PSU" - ouch. On the bright side you'd save on heating bills. Although at ~£1k per unit and you needing 3-4 of them the capital costs (as reasonable as they are) probably outweigh any savings you might make.

Still, if I could convince the lass... Stick a PS3 emulator on it and it's a slam dunk.

GoToMyPC (finally) goes to your Mac

Ross 7

Watts?

I've seen the ad on the tele and wondered if it was a connection to a Citrix application server, or actually a connection to your own PC.

Connecting to your own PC is crazy! You'd be looking at £20 a month in 'leccy never mind subs - I hope these people have pretty aggressive green options set on their PCs. Plus Windows tends to need moderately regular reboots (especially if you haven't aggressively pruned the services) so leaving it on 24/7 isn't likely to be easy. I know it has improved of late in that regard, but a dodgy driver or service can still push everything in userland into vmem. Word's a dog at the best of times never mind when it's paging from disk.

Iraqi weapons inspector accused in online sex sting

Ross 7

Metro

I read about this in todays Metro where it stated he was chatting with the "girl" via IM (i.e. no images), he asked for a pic, "she" obliged, he started tossing one off on webcam (note that he was transmitting not rcving), "she" then said she was 15 at which point he said "oh shit" and turned off the webcam.

I know some offences are strict liability, but you can't have strict liability where the "child" is actually an adult who hasn't even posed as a child until the guy has done something that might be illegal if the other party was a child (phew!). If it's not strict liability then he stopped immediately uopn being told the other party was allegedly a child. Can't it both ways I'm afraid.

Just smacks of crushing dissent - it clearly isn't limited to Africa/Russia/China/Zim etc.

HP loses massive DWP contract

Ross 7

Frying pan -> fire

See title

Frustrated bug hunters to expose a flaw a day for a month

Ross 7

Ppl forget

Ppl forget that "responsible disclosure" was originally designed to provide a benefit to the then bug finder elite. They needed a way to monetise their time investment, so they became "consultants", selling themselves to various IT organisations. Trouble was their less famous mates were releasing 0-days on usenet, which was kinda embarrassing and also limited their income.

Responsible disclosure meant doing it the corporate way, and thus generated cash for certain ppl. It also provided a cheap way to bash ppl that didn;t abide by the rules - "oh he's very irresponsible for releasing that without giving it to us for free first!" That kind of thing was likely to put a dent in your CV and prevent you from drinking at the watering hole with the big guys.

The bugs are valuable information, so why should it be given freely to a corporation to benefit from? If you think that's the way it should be then I suggest you also look at the patenting of drugs - knowing how to make Herceptin etc is a very valuable piece of information, and helps lots of ppl. I still don't see it being given away for free...

Why? Because it takes a lot of time and effort to create and test it, and ppl should be recompensed for that otherwise nobody else is going to put that kind of time and effort into discovering things which would be a bad thing.

Plenty of ppl out there stand to benefit from exploits, and they're not the kind of ppl you want benefiting from them. It therefore stands to reason that if you want the "good" guys to know about them first that there's an incentive for ppl to tell them and not the bad guys. If not, don't bother complaining when your mate sends you a PDF and you subsequently need to spend 3 months sorting out your credit score.

Home Office misses Brussels' Phorm deadline

Ross 7

Blocking legal action

The HO intention is very simple - delay the changes to the law so that the infringement can't be said to have occurred under UK law (it was legit when it happened) and the limitation period expires on it so no EU action can be taken.

If it costs a few mil to ensure that aim is met so be it. At least big business won't look at HMG and think "well they hung their last partner out to dry..."

Money eh?

Guinness to hit three quid a pint

Ross 7

Title

You don't know Tony do you? He prefers a Harley to a Jag.

You also seem to have overlooked the supermarket practice of subsidising one area of goods with another. You honestly reckon the supermarkets make a profit on their beer offers? No, they make a loss, but as you're there getting beer you also buy all your other stuff so they make a profit all round. No pub can ever compete with that unless they start selling Andrex, Aquafresh, tins of beans and bread.

I'm all for cheap beer! But if the supermarkets put almost all the pubs out of business where are you going to go out for a drink? And do you honestly think the prices will stay low once competition has been expunged?

Slovakian flies to Dublin with 90 grams of explosive

Ross 7

Attempting to save face?

How the hell do you get from "we accidentally left 90g of RDX in some unsuspecting guys luggage during a security test" to "let's arrest the guy on suspicion of terrorism"?

I know here in Blighty mens rea is an outmoded concept thanks to NuLab and merely looking foreign is enough to get you summarily executed, but surely in Ireland you need some kind of intention to cause terror before they arrest you?

Plus you'd imagine that if he'd intended to blow up a plane he'd at least have got as far as setting his nickers on fire.

Today is not New Year's Eve - or the end of the decade

Ross 7

Forget dates...

Don't bother faffing with dates on the grounds be don't all work on the land anymore - life would be far simpler for us Brits if they dumped that BST nonsense.

As to the birth of JC - the Romans were notorious record keepers, he was supposedly born during or around the time of a large census in the Palestine region, so it shouldn't be too much trouble for a historian to pick a year?

Happy New Year :oP

Lithuania hits off switch on nuclear plant

Ross 7

Baby, bathwater

Errr ok - so the reactor is of an allegedly risky type (i.e. if you turn off the fail safes and see how hot you can get it there's a risk it won't fail safe, duh!) so they're going to dump all the ancillary gear such as heat exchangers, turbines, generators, excitors, grid interfaces, stores, offices etc as well? Makes sense....

Why don't they pull out the old reactor and put a new "safe" one (or gas turbine) in and so not have to rely on Russias whims/political desires to heat the old peoples homes?

MS dismisses IIS zero-day bug reports

Ross 7

Critical? Only of the 'tards that believe this crap

Awww gosh darn it I'm agreeing with MS :/ It's a bug, it's exploitable in specific circumstances and as such demands attention, but "critical"?! Jesus...

Secret code protecting cellphone calls set loose

Ross 7

Re: Not to worry

"Gaming consoles, FFS???"

Aye - "Fat" PS3s make really nice HPC clusters. As you're a fan of Googlin' try "folding@home"...

And 2G ain't anywhere near dead unfortunately. Plenty of people out there using 2G SIM cards and the phone co's have no interest in paying good money to send out a replacement 3G card whilst the 2G one works fine - margins are too slim. You think they care one jot about OTA security?

'CRU cherrypicked Russian climate data', says Russian

Ross 7

Damned brain

My (admittedly not terribly bright) brain read that opening line as "...free-market economist says that the British had CRUD global temperature database"

Attack exploits just-patched Mac security bug

Ross 7

Why weaponise

Controlling the IP is just the start when it comes to exploiting vulns. It's a big start, but it doesn't guarantee arbitrary code execution is possible. Rather than everybody thinking "oh it's just a DoS exploit, no need to scurry to patch just yet" and then some blackhat does the hard work and releases a weaponised exploit this guy is attempting to give everyone a proper heads up ASAP.

If he can quickly prove that arbitrary code execution is possible then the patch gets listed as critical and IT admins perk up and start testing the patch a lot sooner than if it's not critical.

Weaponised doesn't necessarily mean botnet capable etc, just that it has an executable payload such as creating a file, or connecting to a webhost. Ofc that does make it a lot easier to replace the payload with something more sinister.

NHS IT spree faces cutbacks

Ross 7
WTF?

£12b?!?!

I mean seriously, £12b for ERP?! Jesus H ****ing Christ on a bike. It's not like they had to invent distributed databases is it?

For that kind of money we could have had 12 new destroyers armed to the teeth with....oh wait, that was a UKGov managed project too wasn't it?

I'm not a celebrity, but can someone please get me out of here?

Tech-savvy UK kids = (over)confident writers

Ross 7

Oh dear Lord

I looked at the subheading and thought "eh?" Then 2 seconds later figured it out. I didn't mean to!

In response to Ken Hagan (23% of students go from one month to the next without writing *in class*...the questions and answers have been twisted) - the lass is a secondary teacher. Believe me when I say that ain't shocking. It's why they struggle at A-Level, and unis end up spending the first month of term teaching freshers how to take notes because very, very few learnt to do it at school.

I'm not saying the report is an example of perfect research, but 1 in 4 kinds not writing in lessons isn't as far out as you'd think unfortunately. As for the other 3 in 4, having seen what they do actually write you'd think most of them shouldn't have bothered themselves...

Windows 7 soars while Mac OS X trips online

Ross 7

Wait?!

This is the internet God damnit! We don't wait for anything - post now, think later!

Should you lose your religion on your CV?

Ross 7

Re: logic and reason

Ummm, you may wish to bone up on The Employment Equality (Religion or Belief) Regulations 2003 if you're UK based. Your employer will be vicariously liable for that kind of action and is unlikely to take it well when they get hit with a fine.

I would also point out that you are aligning yourself with the ID brigade, which I find rather amusing. Darwin was a Christian and so it would appear you don't think him capable of coming to a reasonable working hypothesis, so evolution must - by your standards - be unreasonable.

Careful with that petard in the future...

Johnson refuses to intervene in McKinnon extradition

Ross 7

lolz

Some guy with an interest in UFOs manages to (allegedly) do all this damage from his bedroom - what the hell you do you think the Chinese/Russian/French must have been doing so easily during that time?! Pure arse-coverage here.

Page: